Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2289148s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 01:32

General

  • Target

    78f9577fb67c8277f3aabf05e35fc121d3653ac51e2db38b6deef885ad99794c.apk

  • Size

    7.7MB

  • MD5

    7f815ca67e62293a14a024ed5a766d21

  • SHA1

    8a63afb6a5e279a07526f28bd6bcdbbe05427d8b

  • SHA256

    78f9577fb67c8277f3aabf05e35fc121d3653ac51e2db38b6deef885ad99794c

  • SHA512

    72303b5c9926212fda16080c0d835240434727d7be518daf65cf356e053cd90107df8f3e7448a51b14ed8d85643f05ff28c33171617642e2d74be3ac163d2330

  • SSDEEP

    196608:3482RaCnTqnfRgxO6WJq/69jrVHVWdqciRViQuYFmeaGwXS:ERauwyEQ699ciRVijYYeaGD

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • me.javayhu.poetry
    1⤵
    • Loads dropped Dex/Jar
    PID:4914

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/me.javayhu.poetry/app_bugly/rqd_record.eup

    Filesize

    345B

    MD5

    cfe29329621b1558b598630217653e6c

    SHA1

    f831405d2da382dd6126b5e4aef810b83b9ffd2e

    SHA256

    b90efefcd5826dd4b86a8b5c9a5bca039aff086c51f0594bf3edf4e00ddae88d

    SHA512

    c9348860fea19f57587808f5101ca7eeb2513d52a9dc479a124a0327561a1ec24cbd69d028800245ca4185bd424db26d3a50509a01f14a0db33c08f245e8e068

  • /data/data/me.javayhu.poetry/app_bugly/rqd_record.eup

    Filesize

    1KB

    MD5

    5f354b5d5fd862ded753f685aa9a3bf9

    SHA1

    03b177221b357d4415d8e1f798a4a5c525d5389d

    SHA256

    b01c09a0173e62f7425ea090f9c2ecb3461483ff0fe0f9e069f4fbcf29f739d4

    SHA512

    927b2ebbd316eaddccf8c66163790cb69e6eb80af8d7491ad6c1ef714e95fc95938597885cc98f8b1201fa77366abc6626e877168444914bee56ff0d1038ee49

  • /data/data/me.javayhu.poetry/app_bugly/tomb_1703096192214.txt

    Filesize

    56B

    MD5

    bd0f8f8f3ad93fa07623422ec6e72003

    SHA1

    c3589295e7a4ddcf35bcd7a2c13bfd381783821a

    SHA256

    7fe875398dea7537a57a77c5275cbc8647aaf63ab6fd9148443b65df2e1d0647

    SHA512

    2ec3e073321262b667afbf98fe4e9f51e4c0c58baaad506b120239031f10699d699b94470bef13007bd6199df3d3b03f1eaf147c0cba5178aee7e267072b1c0b

  • /data/data/me.javayhu.poetry/databases/bugly_db_legu

    Filesize

    60KB

    MD5

    48d6ae68dc96326f43a5709f1861dbeb

    SHA1

    4e00cb7e8371e9c7dec396b3d01f7898029995eb

    SHA256

    7382186f33ae7258a19cc924563a049c5ca1ce8490ac929188525031fa1bc809

    SHA512

    7bb5e2fc0d111eeeea048acb41b105f2a285a3afc48ab6c01ce90097605dd46bf187c1c7e962b16e1f23cb04f19bf936782f083fef44ed2978757c93f59662ac

  • /data/data/me.javayhu.poetry/databases/bugly_db_legu-journal

    Filesize

    12KB

    MD5

    91ac23d8c904c490085cbd472ba417b1

    SHA1

    b6223360036c81154e420e4b909802ab637d268c

    SHA256

    d70a828a186bbb7b727dd1477172cd3164826b431b7fbd79cc291c52bc079896

    SHA512

    2ed1aceadde7499277c55772f5fe2c6f383b5420e8e3bad4599b33e5bde1488235fae04b21eb8f06de916807bd2a70cc55e3aa5b3c7991e20110f73673b78d36

  • /data/data/me.javayhu.poetry/databases/bugly_db_legu-journal

    Filesize

    512B

    MD5

    d01b752c12f43e791cdd6beada2264af

    SHA1

    68430b6ba9a8f230aee763cc49f016f673b3506b

    SHA256

    cf6ad057b494b37d2d0798413c9e02597de9cb52f96de4ebefb31f57f3c2ed73

    SHA512

    5475b991bcf9e344e124ca86255f96d2d4b03763367eef3f4df0ddfac282b724b89e98a8f38cd5ef955c2adfc296333761cd9f5bad34e7d553545df770f75f6f

  • /data/data/me.javayhu.poetry/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    947be8d93415fbc013c5cd03be81feb1

    SHA1

    4cdb84464f520cc5080c4205f449c9cce1e0c21f

    SHA256

    ef701411f4b51a01cd94ae321e6813a38c152538eeb099ae7ffde735428abcd4

    SHA512

    fecb05fba4f8c65da2eb4821f69349e308d05cf637bdfcd9fe5b6ed1921bacf4b50816a054585f5feb1e4bb5dd4c43b46ab1787b3b23b11303e41d761009b46a

  • /data/data/me.javayhu.poetry/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    3c3312088b97243387f133057212ff3a

    SHA1

    9f2b46b192823b2e232233f6413fc085f635293f

    SHA256

    08558c0c645786fe0f45e9a052cb275f3c6e9825f8ad6d7091a0cdf583ef6f5b

    SHA512

    86a4c701538c0594bedb9e1705b54c0874de12c8dced1fd9002ab8f956f4a5d3cde9b0e74a3d24be7f586dac44b14b024cc67d284dfec54024b1e8c91116e052

  • /data/data/me.javayhu.poetry/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    e5d10b9806d55d4d4af7c5c583ab905c

    SHA1

    a5913836c8480cc8f9135197bf5f2975b2ca6aac

    SHA256

    368cbfd7f44fde083fa7c6c34c35b67bc824dc7974083d7d99d85d9bcd4f337f

    SHA512

    37ab803dbf4728ecd56fe6e8f886e1d4af9cb68bc413a8895dc2145ad5fa0b4c60d139441fe47261c066feb0a1721e770f25da5cf7172a712437987286cbcb40

  • /data/data/me.javayhu.poetry/databases/bugly_db_legu-journal

    Filesize

    12KB

    MD5

    19bc6812e664ca8bf5d87fa2a9c0d989

    SHA1

    7901b88fe3f20275d6e46eecb3a1e2efdc8db255

    SHA256

    489285e3eed7369cc78a4af5c1a8427d4b5518d380e24b72180db121e60f6bee

    SHA512

    eff8045ee4a277e32396a201e585644c245415bd7afd0f08c2016dec69dd8c2eb7f68c71cb6cc68932414babb431f1921bf670a27e3e422e0382a4535b4cdb36

  • /data/data/me.javayhu.poetry/mix.dex

    Filesize

    292B

    MD5

    63f77f99bd2c2b772a479923bde11974

    SHA1

    c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

    SHA256

    4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

    SHA512

    3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c