Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2453715s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 04:29

General

  • Target

    84386c927f23c278b9f02117936d480bcfe2c03abf53aa7405bbcef62226651b.apk

  • Size

    6.4MB

  • MD5

    342be7f9a7c381ab9327c976370795e9

  • SHA1

    1f6c530ecaa506110a44230bfc571aba94e950c9

  • SHA256

    84386c927f23c278b9f02117936d480bcfe2c03abf53aa7405bbcef62226651b

  • SHA512

    41cd8afe043782832609b0cfbc763080bb37ed03081c3c78c84fa98fd0f2b9856d215ba8ace049fff9801e30036ddb5faec2448825d16e04eb9f11e2d428aa86

  • SSDEEP

    98304:UIl7U5HUQ3+5Jlz8xFnaf5UJZxPL7iOMEDOcCFqszNAwfOMzdsf0oRT01k:U522naULLCwMft47Rom

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.mogujie
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4236
  • com.mogujie.pushservice
    1⤵
    • Acquires the wake lock
    PID:4285

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mogujie/databases/LocalCart.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.mogujie/databases/LocalCart.db-journal

    Filesize

    512B

    MD5

    324ba15a4ab56fca94ec489907d54567

    SHA1

    25847f911491562e9faa27655b0954b847f8f297

    SHA256

    47812232ea7c473fc5c56d481477656aa68dcf0eaca6bc7da4b6adc1ecd146e4

    SHA512

    153d384e1f81e4f0667f894dcc4f7b0bbc05d925fe6d6c79170144e3299dded788dae7f63d07532d02abc839b6ebe141195c06a3acc66cea5fc8ec253f4cd48e

  • /data/data/com.mogujie/databases/LocalCart.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.mogujie/databases/LocalCart.db-wal

    Filesize

    40KB

    MD5

    95ee18a0226d51e59d429cc8693749e8

    SHA1

    8859e09552a39aa8fb4ac318c5c3019eb64c507a

    SHA256

    e6146a332df4d6275319d06dda2c74b90b1f5fb47df1fd6586af3e82680ee128

    SHA512

    0759f92f05f2476f628dd359a02526675930067c85c85eca0228a8e6433586008f0d35e87236b49a554f889785cf3d362d1c94bb60189cc13ff3e49940183c39

  • /data/data/com.mogujie/databases/download.db

    Filesize

    4KB

    MD5

    aa7b9da078d2674b9e67029dadbcc517

    SHA1

    970e7b5b6ab35c8aa8939f28ee2e3192c7e4593b

    SHA256

    e1ca66bb0273c2f6978ac9661c4271aa891fa486de89845f2f4c888d9e843e69

    SHA512

    3a39f604a9ea5057d64fc358988dcf8d73caf252045c40fdea31fbb458206b67fc9a22bb51b8839d23aff8276b79ea3431c9db55bfc359302ef123e433b4a1e8

  • /data/data/com.mogujie/databases/download.db-journal

    Filesize

    512B

    MD5

    bed41a3428dae3f9b4bbe6c8947a6982

    SHA1

    beb2f22270fb96689fad67ca18a95120ca8b9537

    SHA256

    77636895f6359174e30d579ee39ac48dfd8f4fb008b2eb01fc44f85aad1030cc

    SHA512

    fd32f64bd5c50205466098b6f42801104b8d0b6e4f75ce1b368f7354e990af8e1098ef4a21b55e3924c443ad7bfbd0d18137a3cb592288d747e8d8268b65dbfc

  • /data/data/com.mogujie/databases/download.db-shm

    Filesize

    28KB

    MD5

    5fe3cf079d7e305048716ac731b71c33

    SHA1

    6371a98c68ef73e8b29305575e9d17f1f40eadd5

    SHA256

    7eef6304cbaeb2875ae96924f5cbe75c17bc6dad297b1c7e178b732c5b7d1631

    SHA512

    fbba3a3c1949fbcef6cd398cf5d7665b1c48ccf686f933ba775711cbfd38c1b84affa9d4bd31a7c6708f14cf128882e3183e08720f40bda01e229922cbfff8c0

  • /data/data/com.mogujie/databases/download.db-wal

    Filesize

    32KB

    MD5

    6bc183aa175a8e807c4d4f2d06083d1e

    SHA1

    d845b59cb8470fb61f1f7a1b64fb19b3d16ec1ff

    SHA256

    58d66238ebae8b5dd2c03aa65c2c8a28c206f80d6ca4ac5af3b5e9f87ed82c23

    SHA512

    d5afabe65940e23cfeef13ff17ab0c15add285cca111999e6dba6355fcfffe5d1065b897f7e5111c3de90b5a57c10c1a1a92b5a054285f304f939ced29155d03

  • /data/data/com.mogujie/databases/gxdbapp.db-journal

    Filesize

    512B

    MD5

    6fa10884a46196cdd17eb12c0e0fd5ce

    SHA1

    b8a8dc42ae244eeb615d33a0e17d2fdc41cf74ff

    SHA256

    ee9b2ffad8a7d2492848054ab3bb29a1f76d3a57e316508c35f0aee7f82bb2c0

    SHA512

    080407a6cda582fb0eefeb4eb198ca3abe57bb71934f89ed017ee7209e5e1b3d4b853156a3a4b119bbd6a578571ddb1a8340b00defa43c0b38a8a58ff30b3a6d

  • /data/data/com.mogujie/databases/gxdbapp.db-shm

    Filesize

    28KB

    MD5

    64fe17e5a864652d20f78f5cf189c911

    SHA1

    befceeeaef02ba4d78b54886a60c7cfdb07fefae

    SHA256

    fe089b7db752f0864f9e868f5154ce5cd22cbdc0c2f7b206576cdf351724a2c4

    SHA512

    e7d910e9bf362ea722b0ddcec586565d9fb0cc1d10eeab470badad207ee067e3b8993afe7cc65e93096c0ebe83b14bff9201c5f8b8da53b268edde8faa12e1d0

  • /data/data/com.mogujie/databases/gxdbapp.db-wal

    Filesize

    60KB

    MD5

    2d11009229833ec489dffa98879ae904

    SHA1

    8f968664a1128cadd93d45c6e4a8aa1a21e5296a

    SHA256

    8803400bb17c5bb5aa562d81b33d03a27392eacaebc2687694faf115094f5356

    SHA512

    0ac3c04982443e0df449fc8b4161250fe8c71c9198aaf05270aba2ef5e549c83acb9cc1915cbbd0f65575fe17779d7ceb73fffd02ce840e36d1fec586a722f24

  • /data/data/com.mogujie/databases/gxsdkdb.db-journal

    Filesize

    512B

    MD5

    4eab78f96d923c685f2d48634628a6aa

    SHA1

    4c13b0c0364887d86326c8b366302da805e43424

    SHA256

    4899bf564db9c8da3d1f20fa2613f0e3ae870d736403b7aa83f91bb03ab99864

    SHA512

    e495ee9871ab15989fd5b8102bf9c5460b082f4d493fa377e3de0b316d9b61e7ed7bb59367c38100785684fb8859cbc58f38718b9127f0da714c55f431ad3a9e

  • /data/data/com.mogujie/databases/gxsdkdb.db-shm

    Filesize

    28KB

    MD5

    17b135768e5aea46bd7e5e1ae952d63b

    SHA1

    03eb9cf1befc8fb72bc612791bed70cb164d5a68

    SHA256

    aee3107762bbff463026a775b905a5fa0c610b44f5c41d44941dca99e45cece5

    SHA512

    31e6c820078489773cbd16502870cc373fb602c5345ef7e95e68bdb5437b123d67cbe6d12090eb6440e983bc74ddade66c0cd2ea1f4b30d588033ce8895d42fb

  • /data/data/com.mogujie/databases/gxsdkdb.db-wal

    Filesize

    84KB

    MD5

    fe336cd18c6d0ddd3120cedc2a0d4376

    SHA1

    728c783cbbc14362bc7aece68b4431ebf283513a

    SHA256

    efcb22265dcbedae4ddf4229a1050f632a7e55b1f01cc16eba4c4951c81e997f

    SHA512

    c52f7cde077dba6583d79a40e09a5ea74dcda3e62a2f12a7994e725d2e7d3a5913ce5175e469078621f4e61a1238dd7b634061f6ef79d0b3cdc66b277368bc2b

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9EBeginSession.cls_temp

    Filesize

    78B

    MD5

    e3c2d99e37977ab44380d3f5ba1358a0

    SHA1

    0306d914581f19fb1e546a80b4d0f96d6cb129e7

    SHA256

    517676d6bb817f81a8a3d41b7489fcfc3328443e80d4a5cf188443ac4949fb9e

    SHA512

    0efeb68a1b84359cebd917200882c4398902f00eb386d5cf91aeb8c3d3a67ea071f1ae626f13962f72027a01b0b9fac51f873f4a711a4891783484f165745c77

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9ESessionApp.cls_temp

    Filesize

    110B

    MD5

    31b67b733955f331352170628cee6b81

    SHA1

    4a3c09623e0dc72d99eb954ca7c8ec0f57fb7b26

    SHA256

    065d145b4144fac68bc98acc7ef290e52372564ee8504f317fb1e5f104ad1414

    SHA512

    2e4fcc70cec3b686555ecb2f9002aaa1c8298e642b2d6bcce78d782318076d84ebb015a9d7676099bca2a7c1bdf174344f3e564726100ab0572106660a25f9ca

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9ESessionDevice.cls_temp

    Filesize

    101B

    MD5

    da19d71a7a98d7d978b9dfb7e3d6aa1c

    SHA1

    1ddcf21eb0c927bb0594f90352aeaacbf41338a6

    SHA256

    e8b46d9724545f3e6621bbfac03dba256f265153edcaee52981a3436b170f1f5

    SHA512

    3a6fbd3dbb2db9bedd16e3ebb1202885b2c6709367dde35881a26d2965f86c62949ce5a0e6fb7e17cdbcbca54ee7f0090f6d0456c796de4b865ad93250b602f9

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9ESessionOS.cls_temp

    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap

    Filesize

    765B

    MD5

    c2c84a1a66c006d28439df08da557219

    SHA1

    445fd12f3161e3a62ad5d749cdf4bccfce646cf8

    SHA256

    4e2ab74f6ea653d07ae31a7aad5006baea8a1b123146ce18f6b6b66cdc26466e

    SHA512

    64b6eefa99049febaff4a4c3088577fb901e8a30adcc2a99bc3c6ff326245db4799f210c225baecd7889ea216a44b5b28be85498423e6ea8288b20d77a383348

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap

    Filesize

    349B

    MD5

    16e2a0ecd88612c01ff6afa8bc3cbc15

    SHA1

    010502869ec250ac0a2424887c6c179b44d71857

    SHA256

    2e830b8b50028313b77014d95769eb6e3930c55f02056f56e9aebb0ccc4f8b26

    SHA512

    5465a8d57647098ccd43527701c1a551f7ad861d5617c0338adcd5ace441a82eaa9c097b0d598ce18a2ab8f437e656abce09a11eeddabea3861539b8731b1bce

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics_to_send/sa_76cdee2c-cde7-43c1-beea-52c01ce041e7_1703260630926.tap

    Filesize

    291B

    MD5

    e4a1e74f52a7bd01cb7d8d2fc150779d

    SHA1

    0e68c2e4ef0a8036c40f92521765647adcb19fb8

    SHA256

    21f7f342b25b83b78b096194217f593818fc5c93cef8483af6c4db5a739f2b8f

    SHA512

    bd33df3289f62cc7e2f0a416dd8b185b75c2307cfed90b49b0eefa0e274828f68b8d944dde4d071984cf22e1a2af7ed3e61955576479c29cb397e33e18a314d8

  • /data/data/com.mogujie/files/lotuseed.s

    Filesize

    469B

    MD5

    247c3dd6bd038c167d3db6e6de7a18a5

    SHA1

    ba011070158cad1cac357ecd9366c5a4a4602c6a

    SHA256

    d58035089a3b367fb3edba8d36140ec68eb1ac1d4793b427cb2c6d56fa0d62f6

    SHA512

    cf6879aaf31f9271467b077dea49f4a17cd81532ab0ea4b4efa9697b75fe4b6395958b6965d7b0f45ccc0b55bbcd31593247af1a7e4aed3f9844d712d6f72752

  • /data/data/com.mogujie/files/lotuseed.s

    Filesize

    162B

    MD5

    da9e1031eddd28d5b76f78c2d1eaece6

    SHA1

    d1ab36fe4df52957773c22c2811530452547ffb6

    SHA256

    80328842cd37d28f7448916eb12a623d15cded166c95fef0c17749c1ca86c463

    SHA512

    f0ee8e08016dd57f31e2e5b3b8df961c49044262fe959212f299731e4e04018d124d59f849b5296cb04fb63a8b1c7635bfcb6b464255878b49100df2192ba244

  • /storage/emulated/0/.system/lotuseed.devid

    Filesize

    85B

    MD5

    b05a29e0f25e9cca01cac1e515b05aa0

    SHA1

    d2c7f5849bc2aea0b2fd3e2122bb325a812721be

    SHA256

    4837f4149280be591dff83660ce6918f3360379b08d88d1052e7e310abb806b0

    SHA512

    7fb53ee8b96eb10a84e8b0d9a5bcd69adeda3087c55a4515f6986bb6c73bd703dc3f535e505c66470d7548dcb34d56d83194614a26a5f77fcbf4eff26f4a10c9