Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2325794s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 01:53

General

  • Target

    7b98c4d43cfd2e3ff90fa76342e6d67d7b5c16667a6c876ac2d763cdc1ee4f56.apk

  • Size

    5.7MB

  • MD5

    d7cab8ab77ed07f9faf56113f9cd7295

  • SHA1

    5f6216fb33598d41a7511d3cfe93bce8cdb6a06b

  • SHA256

    7b98c4d43cfd2e3ff90fa76342e6d67d7b5c16667a6c876ac2d763cdc1ee4f56

  • SHA512

    1c0f9469611ec3d5fc3d27963d1c9d1e9b92b0ddde865201c935fdb881399496a5a05c1fe7d01b537b75b0cb222b91e03642262363ea73746de705d39169d00d

  • SSDEEP

    98304:gPAGciQrfStW+Ug2mXfsmGIBd5AHXeQdBTKMjkiYEXNusOB9MaoQxRu:yAEQOPXfsmGIBd5AHXeQdJKSkiY+usOy

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Reads the content of SMS inbox messages. 1 IoCs

Processes

  • net.dayugame.seek.baba.two.k4399
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Reads the content of SMS inbox messages.
    PID:4251

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/TDGAtcagentgame.db

    Filesize

    28KB

    MD5

    311ac0b6c0fd605525ff8b64657f2be4

    SHA1

    2d42c13f3b61ecc02e796b4a0baa40ca6e3b30e8

    SHA256

    86235e1adabf8b1c90b26b9149da56d69c58a87d01a38906c889aaa60ec2cc43

    SHA512

    cd9a750d644f936ee324e822e5c45ad25aecf9377f75a467e347bbd9604ce6f70a3d6ecc210728feb6eb4fdc81b7a591115f46537fab68a36a5570716e6f6d19

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/TDGAtcagentgame.db

    Filesize

    20KB

    MD5

    9793e2f2e3fcae5626c67a97d3a9e993

    SHA1

    63176a8b290f09c463a9aec82c7f63c26fbd93ad

    SHA256

    82f049fe80efaefd5b8046704d870dd6ea7b38bb8ffd10be9b1603627c026e72

    SHA512

    fa68670eac0af402648d52cc7aa3e15313f322ce556728cde926d1a580814dae8c421794457b12da17a81c1ece0d120741ccd01aaab52efb5175148919c2cec1

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/TDGAtcagentgame.db

    Filesize

    24KB

    MD5

    4a40488ee541b2d1965ba47a33500a2a

    SHA1

    0a4d983871ba68fc578cdc9889e85361895d1297

    SHA256

    a643fd0df13e68fb0595cbb6da70dda3ff299c379372651759518461edaa938c

    SHA512

    da72f77c893c1f9b1026d84de445771e4227f89938497f4c6f99bbe6246fb492b4fea4721728a04d4d1a6778ab645820d400fa881a13cc4df0e296709608486e

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/TDGAtcagentgame.db-journal

    Filesize

    512B

    MD5

    fb9d7ce05ac997c9b9c3e81f2d210ec4

    SHA1

    6fe2e01ee16c55b5d38b0b8df0d88200f95f0682

    SHA256

    a491212519403fecb649376350ee63cad6968a5d75a960da8c464f9e9a662ba6

    SHA512

    4242d5bb4b3b732ec8c028f216c96b66b414b13c56ce608c40c04f7397f3e0b30033c57e6abf00e038509a850b8b2347345724efe126ae0b64d28cca7406e359

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/TDGAtcagentgame.db-wal

    Filesize

    8KB

    MD5

    eb462257368013510eb54f7c22047291

    SHA1

    258119d28e07b3f5590b09b05c46c1310b175bf5

    SHA256

    5567e00724243aafb81b71bcb573b566e50a6a0b17fc6d28d696f826823a8a45

    SHA512

    3a8b51ac0ffc9efeb8cc7abc8086f87b1351d371986485d235c0fbfcfc7d46ba8c31beac67035855d0ee43c055ff9078d5ddafbb8e9a5925203d2966f3c3daba

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/TDGAtcagentgame.db-wal

    Filesize

    44KB

    MD5

    943ae6ba30e684e2ef13204d492346de

    SHA1

    b5b7e8c184b664c51aea4bb94b0456f10710984c

    SHA256

    9ac8c513d3fd2c1ee5144a6e76778f631f12fd64d98488509765060deeb72efc

    SHA512

    0b7e50336be909e6f25ca7a6edfd4dca36be0c71b7c84e66519ac8c1dcb60c028759e8040361b8dfd6f7bcc3b56c01ffbf6979ccaf29a689019754708cdf1aff

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/TDGAtcagentgame.db-wal

    Filesize

    20KB

    MD5

    d456df036c9081cc36b6d77b0773f200

    SHA1

    003b342d0c800f13cfd398ddf65e94ddcd24aa0c

    SHA256

    ed68c868455d6540bc08e922ab30733ccfff3ae4de0feb6956b3b0b53bfe94b3

    SHA512

    aa03be483da4398a8bbebca723a42a391fc7bf8d73f0666d321545feff338e20d1ca7b729c0a79a0bee0cc1a36e3f1723ce227d52b459148b9a0943c6733b102

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/adsdb.db-journal

    Filesize

    512B

    MD5

    1b71f366714d2385de86245292066588

    SHA1

    4ffb37ca7720dfdaed926bbd8aa7e076cbefb154

    SHA256

    bda5e96de02308801418fd9eb6eaf50eb1f2809db1e0ed5799fa8c83e4c9143f

    SHA512

    4d268779ab9dd3b28859ad8cedcc893092d0c2f3483e3e8f6da8e5c74ed5e748b2bcb7ec47389b8efb57545a0762f6119c66613b0a8a14c53c99c45aa3806f1e

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/adsdb.db-wal

    Filesize

    32KB

    MD5

    64b0f372ce8d916045cd0e2965dfe1ac

    SHA1

    612f4316943e701e27c9faf713d033332eeb761a

    SHA256

    2318676e6f44d4c61bc97c2863318e87b5a96a3c6763bb57cf8699d0d0ba55a4

    SHA512

    52071901949668eccb212a3b4b33a7b1b606a194ce80fb3b03edbe205146334f38b741f7f70decdf0b2020f5c04fbc2db36be372d51630d1b9995de222a1b1ef

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/lepeng.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/lepeng.db-journal

    Filesize

    512B

    MD5

    90adb619173834f78bbad71b183d52d5

    SHA1

    ae4302c4af4832426cde5f19d140974ceaec7529

    SHA256

    025547912c3a38da9a517d7a33bed99289f2caace9f6437518c02e49a2a16659

    SHA512

    cb9c5fa2dfd1faaa85897f5c6ae0922fe0b0a637a7286b3919adc2fbcac48915bfffc96f255980a64a06118bc35c0a914cc4e296c6a78275c0a7353036dbafde

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/lepeng.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/net.dayugame.seek.baba.two.k4399/databases/lepeng.db-wal

    Filesize

    44KB

    MD5

    02cf23b715e6ecb68d5d88ffdd8ae9f2

    SHA1

    33360a98ed31b36980a0b191cf21d1d18a4cd267

    SHA256

    345ceac0648fb518e3f33a161759495335e7232090b9e457d18b54ef74b44e01

    SHA512

    309ecda908d32a292a328b9dee6809e5b73e5ce1649c2911c3a004c1968957300b36388c7fba5ebddc461c721e58e9bd6b077608e3b711cad8c44c392e8b1e47