Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2456750s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 04:39

General

  • Target

    84963383e86df7ec8d6f6a5ef96ec3e40d9523a0325b1a3bbef6577f103771e6.apk

  • Size

    24.4MB

  • MD5

    7728800bbfcc7b5686206018b7a5d298

  • SHA1

    e4fd7246a68f11275f0e3d7bc1ea2bd34a615659

  • SHA256

    84963383e86df7ec8d6f6a5ef96ec3e40d9523a0325b1a3bbef6577f103771e6

  • SHA512

    b54791a21471f0c5a236b905c68f75745998f83872b7fa7892013c765e646989b3a981d4b3cb85994e9830062ab79466381206dbf41acc77330456a30311f4b9

  • SSDEEP

    786432:eCiF6MWRbtZeHCMJ0K1V2RG1B7unCioJpXXk5oAYUC:pI+bxA32RWqnCTXXyfq

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • cn.com.pansky.sxzgyl
    1⤵
    • Loads dropped Dex/Jar
    PID:4222
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4254
      • sh -c getprop ro.yunos.version
        2⤵
          PID:4265
        • getprop ro.board.platform
          2⤵
            PID:4254
          • getprop ro.yunos.version
            2⤵
              PID:4265

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/cn.com.pansky.sxzgyl/databases/bugly_db_legu

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/cn.com.pansky.sxzgyl/databases/bugly_db_legu-journal

            Filesize

            512B

            MD5

            a6ea9fa59beceda934fe049568add1ad

            SHA1

            bbc155267873216f8bc8c610ec452e9a55c0d565

            SHA256

            e71a99e2ee765d98f40254bb502883bbf39735f2ec0d3e37b2caedba9dd127f4

            SHA512

            cb8069c98848985022c5b8ae34da34c5afb534725d98bdd42c862d6e9351ef2c9022a02ae1d0a1877ac03026d0ffec82d1efa9fba5870ac46e1be53052ded056

          • /data/data/cn.com.pansky.sxzgyl/databases/bugly_db_legu-wal

            Filesize

            76KB

            MD5

            d73190db84932138a35a1463fc58253a

            SHA1

            0e4216348d0a1a726c6dcffdac387f6baa540f22

            SHA256

            15d764b069ae10f7e68cd3a9319f2a33cddee06c8ffeb1ca4690f6c6c9500e95

            SHA512

            01188098d53612802a7f59a6a49beca6f9f3eb2189710eda261a89084a11721ff3e8d85bf0fa5c164020a1ec5f3752f4cc1467d5ba32ba50d87ed34045e71609

          • /data/data/cn.com.pansky.sxzgyl/mix.dex

            Filesize

            292B

            MD5

            63f77f99bd2c2b772a479923bde11974

            SHA1

            c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

            SHA256

            4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

            SHA512

            3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c