Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2453715s -
max time network
157s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
20/12/2023, 04:29
Static task
static1
Behavioral task
behavioral1
Sample
84386c927f23c278b9f02117936d480bcfe2c03abf53aa7405bbcef62226651b.apk
Resource
android-x86-arm-20231215-en
General
-
Target
84386c927f23c278b9f02117936d480bcfe2c03abf53aa7405bbcef62226651b.apk
-
Size
6.4MB
-
MD5
342be7f9a7c381ab9327c976370795e9
-
SHA1
1f6c530ecaa506110a44230bfc571aba94e950c9
-
SHA256
84386c927f23c278b9f02117936d480bcfe2c03abf53aa7405bbcef62226651b
-
SHA512
41cd8afe043782832609b0cfbc763080bb37ed03081c3c78c84fa98fd0f2b9856d215ba8ace049fff9801e30036ddb5faec2448825d16e04eb9f11e2d428aa86
-
SSDEEP
98304:UIl7U5HUQ3+5Jlz8xFnaf5UJZxPL7iOMEDOcCFqszNAwfOMzdsf0oRT01k:U522naULLCwMft47Rom
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.mogujie -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.mogujie.pushservice -
Reads information about phone network operator.
-
Checks the presence of a debugger
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.mogujie
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5324ba15a4ab56fca94ec489907d54567
SHA125847f911491562e9faa27655b0954b847f8f297
SHA25647812232ea7c473fc5c56d481477656aa68dcf0eaca6bc7da4b6adc1ecd146e4
SHA512153d384e1f81e4f0667f894dcc4f7b0bbc05d925fe6d6c79170144e3299dded788dae7f63d07532d02abc839b6ebe141195c06a3acc66cea5fc8ec253f4cd48e
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
40KB
MD595ee18a0226d51e59d429cc8693749e8
SHA18859e09552a39aa8fb4ac318c5c3019eb64c507a
SHA256e6146a332df4d6275319d06dda2c74b90b1f5fb47df1fd6586af3e82680ee128
SHA5120759f92f05f2476f628dd359a02526675930067c85c85eca0228a8e6433586008f0d35e87236b49a554f889785cf3d362d1c94bb60189cc13ff3e49940183c39
-
Filesize
4KB
MD5aa7b9da078d2674b9e67029dadbcc517
SHA1970e7b5b6ab35c8aa8939f28ee2e3192c7e4593b
SHA256e1ca66bb0273c2f6978ac9661c4271aa891fa486de89845f2f4c888d9e843e69
SHA5123a39f604a9ea5057d64fc358988dcf8d73caf252045c40fdea31fbb458206b67fc9a22bb51b8839d23aff8276b79ea3431c9db55bfc359302ef123e433b4a1e8
-
Filesize
512B
MD5bed41a3428dae3f9b4bbe6c8947a6982
SHA1beb2f22270fb96689fad67ca18a95120ca8b9537
SHA25677636895f6359174e30d579ee39ac48dfd8f4fb008b2eb01fc44f85aad1030cc
SHA512fd32f64bd5c50205466098b6f42801104b8d0b6e4f75ce1b368f7354e990af8e1098ef4a21b55e3924c443ad7bfbd0d18137a3cb592288d747e8d8268b65dbfc
-
Filesize
28KB
MD55fe3cf079d7e305048716ac731b71c33
SHA16371a98c68ef73e8b29305575e9d17f1f40eadd5
SHA2567eef6304cbaeb2875ae96924f5cbe75c17bc6dad297b1c7e178b732c5b7d1631
SHA512fbba3a3c1949fbcef6cd398cf5d7665b1c48ccf686f933ba775711cbfd38c1b84affa9d4bd31a7c6708f14cf128882e3183e08720f40bda01e229922cbfff8c0
-
Filesize
32KB
MD56bc183aa175a8e807c4d4f2d06083d1e
SHA1d845b59cb8470fb61f1f7a1b64fb19b3d16ec1ff
SHA25658d66238ebae8b5dd2c03aa65c2c8a28c206f80d6ca4ac5af3b5e9f87ed82c23
SHA512d5afabe65940e23cfeef13ff17ab0c15add285cca111999e6dba6355fcfffe5d1065b897f7e5111c3de90b5a57c10c1a1a92b5a054285f304f939ced29155d03
-
Filesize
512B
MD56fa10884a46196cdd17eb12c0e0fd5ce
SHA1b8a8dc42ae244eeb615d33a0e17d2fdc41cf74ff
SHA256ee9b2ffad8a7d2492848054ab3bb29a1f76d3a57e316508c35f0aee7f82bb2c0
SHA512080407a6cda582fb0eefeb4eb198ca3abe57bb71934f89ed017ee7209e5e1b3d4b853156a3a4b119bbd6a578571ddb1a8340b00defa43c0b38a8a58ff30b3a6d
-
Filesize
28KB
MD564fe17e5a864652d20f78f5cf189c911
SHA1befceeeaef02ba4d78b54886a60c7cfdb07fefae
SHA256fe089b7db752f0864f9e868f5154ce5cd22cbdc0c2f7b206576cdf351724a2c4
SHA512e7d910e9bf362ea722b0ddcec586565d9fb0cc1d10eeab470badad207ee067e3b8993afe7cc65e93096c0ebe83b14bff9201c5f8b8da53b268edde8faa12e1d0
-
Filesize
60KB
MD52d11009229833ec489dffa98879ae904
SHA18f968664a1128cadd93d45c6e4a8aa1a21e5296a
SHA2568803400bb17c5bb5aa562d81b33d03a27392eacaebc2687694faf115094f5356
SHA5120ac3c04982443e0df449fc8b4161250fe8c71c9198aaf05270aba2ef5e549c83acb9cc1915cbbd0f65575fe17779d7ceb73fffd02ce840e36d1fec586a722f24
-
Filesize
512B
MD54eab78f96d923c685f2d48634628a6aa
SHA14c13b0c0364887d86326c8b366302da805e43424
SHA2564899bf564db9c8da3d1f20fa2613f0e3ae870d736403b7aa83f91bb03ab99864
SHA512e495ee9871ab15989fd5b8102bf9c5460b082f4d493fa377e3de0b316d9b61e7ed7bb59367c38100785684fb8859cbc58f38718b9127f0da714c55f431ad3a9e
-
Filesize
28KB
MD517b135768e5aea46bd7e5e1ae952d63b
SHA103eb9cf1befc8fb72bc612791bed70cb164d5a68
SHA256aee3107762bbff463026a775b905a5fa0c610b44f5c41d44941dca99e45cece5
SHA51231e6c820078489773cbd16502870cc373fb602c5345ef7e95e68bdb5437b123d67cbe6d12090eb6440e983bc74ddade66c0cd2ea1f4b30d588033ce8895d42fb
-
Filesize
84KB
MD5fe336cd18c6d0ddd3120cedc2a0d4376
SHA1728c783cbbc14362bc7aece68b4431ebf283513a
SHA256efcb22265dcbedae4ddf4229a1050f632a7e55b1f01cc16eba4c4951c81e997f
SHA512c52f7cde077dba6583d79a40e09a5ea74dcda3e62a2f12a7994e725d2e7d3a5913ce5175e469078621f4e61a1238dd7b634061f6ef79d0b3cdc66b277368bc2b
-
/data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9EBeginSession.cls_temp
Filesize78B
MD5e3c2d99e37977ab44380d3f5ba1358a0
SHA10306d914581f19fb1e546a80b4d0f96d6cb129e7
SHA256517676d6bb817f81a8a3d41b7489fcfc3328443e80d4a5cf188443ac4949fb9e
SHA5120efeb68a1b84359cebd917200882c4398902f00eb386d5cf91aeb8c3d3a67ea071f1ae626f13962f72027a01b0b9fac51f873f4a711a4891783484f165745c77
-
/data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9ESessionApp.cls_temp
Filesize110B
MD531b67b733955f331352170628cee6b81
SHA14a3c09623e0dc72d99eb954ca7c8ec0f57fb7b26
SHA256065d145b4144fac68bc98acc7ef290e52372564ee8504f317fb1e5f104ad1414
SHA5122e4fcc70cec3b686555ecb2f9002aaa1c8298e642b2d6bcce78d782318076d84ebb015a9d7676099bca2a7c1bdf174344f3e564726100ab0572106660a25f9ca
-
/data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9ESessionDevice.cls_temp
Filesize101B
MD5da19d71a7a98d7d978b9dfb7e3d6aa1c
SHA11ddcf21eb0c927bb0594f90352aeaacbf41338a6
SHA256e8b46d9724545f3e6621bbfac03dba256f265153edcaee52981a3436b170f1f5
SHA5123a6fbd3dbb2db9bedd16e3ebb1202885b2c6709367dde35881a26d2965f86c62949ce5a0e6fb7e17cdbcbca54ee7f0090f6d0456c796de4b865ad93250b602f9
-
/data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/6585B1D60343-0001-108C-E7211F08EF9ESessionOS.cls_temp
Filesize14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
Filesize
765B
MD5c2c84a1a66c006d28439df08da557219
SHA1445fd12f3161e3a62ad5d749cdf4bccfce646cf8
SHA2564e2ab74f6ea653d07ae31a7aad5006baea8a1b123146ce18f6b6b66cdc26466e
SHA51264b6eefa99049febaff4a4c3088577fb901e8a30adcc2a99bc3c6ff326245db4799f210c225baecd7889ea216a44b5b28be85498423e6ea8288b20d77a383348
-
Filesize
349B
MD516e2a0ecd88612c01ff6afa8bc3cbc15
SHA1010502869ec250ac0a2424887c6c179b44d71857
SHA2562e830b8b50028313b77014d95769eb6e3930c55f02056f56e9aebb0ccc4f8b26
SHA5125465a8d57647098ccd43527701c1a551f7ad861d5617c0338adcd5ace441a82eaa9c097b0d598ce18a2ab8f437e656abce09a11eeddabea3861539b8731b1bce
-
Filesize
16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.mogujie/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics_to_send/sa_76cdee2c-cde7-43c1-beea-52c01ce041e7_1703260630926.tap
Filesize291B
MD5e4a1e74f52a7bd01cb7d8d2fc150779d
SHA10e68c2e4ef0a8036c40f92521765647adcb19fb8
SHA25621f7f342b25b83b78b096194217f593818fc5c93cef8483af6c4db5a739f2b8f
SHA512bd33df3289f62cc7e2f0a416dd8b185b75c2307cfed90b49b0eefa0e274828f68b8d944dde4d071984cf22e1a2af7ed3e61955576479c29cb397e33e18a314d8
-
Filesize
469B
MD5247c3dd6bd038c167d3db6e6de7a18a5
SHA1ba011070158cad1cac357ecd9366c5a4a4602c6a
SHA256d58035089a3b367fb3edba8d36140ec68eb1ac1d4793b427cb2c6d56fa0d62f6
SHA512cf6879aaf31f9271467b077dea49f4a17cd81532ab0ea4b4efa9697b75fe4b6395958b6965d7b0f45ccc0b55bbcd31593247af1a7e4aed3f9844d712d6f72752
-
Filesize
162B
MD5da9e1031eddd28d5b76f78c2d1eaece6
SHA1d1ab36fe4df52957773c22c2811530452547ffb6
SHA25680328842cd37d28f7448916eb12a623d15cded166c95fef0c17749c1ca86c463
SHA512f0ee8e08016dd57f31e2e5b3b8df961c49044262fe959212f299731e4e04018d124d59f849b5296cb04fb63a8b1c7635bfcb6b464255878b49100df2192ba244
-
Filesize
85B
MD5b05a29e0f25e9cca01cac1e515b05aa0
SHA1d2c7f5849bc2aea0b2fd3e2122bb325a812721be
SHA2564837f4149280be591dff83660ce6918f3360379b08d88d1052e7e310abb806b0
SHA5127fb53ee8b96eb10a84e8b0d9a5bcd69adeda3087c55a4515f6986bb6c73bd703dc3f535e505c66470d7548dcb34d56d83194614a26a5f77fcbf4eff26f4a10c9