Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2422059s
  • max time network
    146s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 02:55

General

  • Target

    7f3cf85d3563cfa112a73b971c6fa5d2abd767ffb5add5e5dec8dc4c99140c11.apk

  • Size

    6.8MB

  • MD5

    84060d51ae8ea2a732976d3587138f20

  • SHA1

    1b4307c93c7d248e3048f1dc1abb56e2047f5531

  • SHA256

    7f3cf85d3563cfa112a73b971c6fa5d2abd767ffb5add5e5dec8dc4c99140c11

  • SHA512

    88188fccb965322264c6348f35b3c56e343e579a4dfe5165ec7a85f332fc2d1670008b0a524574b0fcfbfc70f4ad2bec2c30c07fc08ca67036dc2d5eab8873e3

  • SSDEEP

    196608:G16u+//k1atvaHSDEBt29x2cSbkMdzH+RX/Jp:cv4VtvGSDEBt2v2QMdz+RXxp

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.nf.health.app
    1⤵
      PID:4250

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.nf.health.app/databases/rep.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.nf.health.app/databases/rep.db-journal

      Filesize

      512B

      MD5

      eb481a94f23499df5312ed72edef5d1b

      SHA1

      f24b0fb9b8a4efd766a23570065e61b41f1252d9

      SHA256

      198a99b424b8cec06ef0b1248fbf05088de9e6dc9bd5f4c0b83c1944b6c28f43

      SHA512

      5e4ec9fdaffb72cfcbbc153eafd23c4e568fd8f0764ec3dd33069249aeb2c3e9d5b4fb210751ba930a6ce13f3a76a84320a44e6eb7cff7f6c26b84edb999d0f9

    • /data/data/com.nf.health.app/databases/rep.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.nf.health.app/databases/rep.db-wal

      Filesize

      36KB

      MD5

      422c88569b80a64175472192c80c9536

      SHA1

      e4aaa4f49ed7913db52974d54c11c8c182a31924

      SHA256

      009e9372f1267767f192129cf5e793e2a0f34d77b3f9614eda00fa9b86559627

      SHA512

      3d39bb056b472c286fdcd41741f1008bd931f16df0877c4cbe62d77a323b7e43dde803bf7c05451ece82ea0f29113889aff70d460e57178c72c6fe3c6854bf6b

    • /data/data/com.nf.health.app/files/jpush_stat_cache.json

      Filesize

      143B

      MD5

      944a7d961925ec366c729d75e27face0

      SHA1

      3727ef6c8eb9c7fb1fd677d002ac8d688af493f9

      SHA256

      362b1abccf6547e6316e482c2547b89219067de6e6a0eff94d4c326f70afb4de

      SHA512

      874ca944b6a8220971906910c41df48e4ce3bb8ae4918fb0d0c202ccbec08ca147da2cc7ffa1442e1b1a45fcc309082bdd7d3b7a91a2e0733f86755b831430ab