Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2327113s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 03:46

General

  • Target

    81f437dcb6e3a68ad3badd2cc79ca95361f57bc690ddf4592a50596f4fa44b0e.apk

  • Size

    1.6MB

  • MD5

    0346504bc015c70d3ef8a3b5274f1295

  • SHA1

    5a226ffe700292cc9877e345ba5c544df502c05e

  • SHA256

    81f437dcb6e3a68ad3badd2cc79ca95361f57bc690ddf4592a50596f4fa44b0e

  • SHA512

    2d09f2fa751ef28385d30a6b6d380a2ec94272ada8f91f72c028377ba74ffaa7bdc8673bb6654a73920e11c5d7ff7c2abcdc63ad82de64f5eaedcc8c994e3ccb

  • SSDEEP

    49152:yzVLm0XZUM3OZakjZSDZIfkoB5hkmiLCLtm8S:yo0XmlgNIf1jiktrS

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.level9.oiltrain.transporter.eurotrain.driving.sim.subway
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4795

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    25024bd71a961da8a36d4ce5e2d0fd2d

    SHA1

    a0b6871205b34d15bcb663d63497954304ec6d08

    SHA256

    9466342d8aa3c0d077cf9b207301909311caed8b5f00204a6515eaba804c0bba

    SHA512

    480fec1a9d15e951fa9a5a8dcddac19d5af03c801c44829a0ff7a45b8723b079772b82ea269df7c3cfd710c43aa7a9283430fd02dbd0ef321a24bc0f37013d13

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    8e17f4374a67219c96681a10e14ed0ea

    SHA1

    e0ddcf41914e58f789b53eface09c26432ee5a36

    SHA256

    33f87443c298719734e4824c5732e58e8f3546bf83824448bd342bb48c02e9ef

    SHA512

    2f4bb11b1ce34740237b0e03901bcfcae6553ce5d17a634ad4d7677479be2451f5308ac52d2408c63a03d7fdcf2ec932b21cc6a28a3231075b1db8390c5e35e8

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    69c43cc62b447f24ba2c34d9a305c281

    SHA1

    f929618d79685435edd8260b05e7f55a0f20cc2a

    SHA256

    10d0c6acb1392fba554e9cac5a04b610840a73c862616110a0742a7eaa66f271

    SHA512

    fc135f8f2a88a0ed136f2889ebf86613826769f3d713bec756377ba3cd8abd72ed1ed772d50b1a4cf8a4c8ba7b80eedc2f9e52c4e8cec2b41507d438aa975629

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/93b3fe6d.dex

    Filesize

    261KB

    MD5

    5448fade2fc7aa579b2f32cea470d4a5

    SHA1

    11150277806996f22733209a79b54d5bcca80665

    SHA256

    7816dc7d3f88748d5f0ab9219f0b10f3a30f534e66a2b2aa8f58753d9aa2b7e9

    SHA512

    486f76101c962af221dd47dd2fa160776b6d4ec14ee2f38710cfbe8426bc837a2d978fb16f46e82181e92056dbc4dabbcd7b1c55f245ef1a947b2820a8e9d185

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/93b3fe6d.dex

    Filesize

    613KB

    MD5

    829a78d6a6571604b7f7f49e577719e9

    SHA1

    6ef60487216abdeae20ba43c291ac93c7b1dd631

    SHA256

    5d72c4d14c8b256e195c360e2262ada4032fa2d2c5ce4528404da408fe2dce98

    SHA512

    5471b1b9b9714e3ceca5a30e26362416c17335fa0869caf7cebd0afb96125646727c6473bf91f48f46ed3e8fe95d72f602f3043a8c3a09365b442f822c73c531

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/BGEaUZrY

    Filesize

    504B

    MD5

    0463c9fc0243e513b7ea80b2dbc012fb

    SHA1

    3e388393b7f4bf7d2f535f6c23edc8abbddb5ec0

    SHA256

    29a62a8e2372969e514bd93cfd777a6ac315e68e139c20833f9c6a3cf2eddd61

    SHA512

    1b236d92b8025c42b0f6fad4e1a255a836755f8c085ae125953d0c10cbdd78148112098c48426625b3a4f7cd6b4320f8e07d40010de4b0c923b2d887a1f45e06

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/BGEaUZrY

    Filesize

    740B

    MD5

    ee88514c087dcc97e3bfef9bb9af0f4f

    SHA1

    16007a82b94c9f09b128d30998751a979e8e2b92

    SHA256

    462a82443c1b58a9d0c0eee3cea2814543418cdcb8afbf7f1d8b938d6cc51396

    SHA512

    75481f1a1f55ff18fe9030c7cf87bf5bcc2c381059e21749c522ec742d8fae7ee06dcad19fbc6cebffcde44036f5269374737461fe3581fd5fdb0a5430650873

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/PersistedInstallation3850922995561682533tmp

    Filesize

    567B

    MD5

    053b24989d703c8d24155032c26507f5

    SHA1

    83e45991c20005f128baca311d0810d62f87d2a0

    SHA256

    68ea1e1cfc06061e3290bf6c2c7ca2e413e79cfd03bd40a9cb614ca17e5c6193

    SHA512

    6bd8267080160ad140c73adefea0cfaf25a1e80706cfb036a2863bcbca76b2a6d7e6a469efbbf8d59d22d852d66205ac8b4809a5a1b638e5049ec8969075439f

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/PersistedInstallation8900971747981514563tmp

    Filesize

    90B

    MD5

    5f679bc9fa22a30250c1fc7e786a4a52

    SHA1

    f8c30ffe41daffaef485f148c55b4e285100374e

    SHA256

    b2abe565a789d9e89f5c7cc7ac97c0973881e5b76c068cd99497f717e357a9d6

    SHA512

    acc97a5b83137159788d93de6c0daf62cc844411f13e8293c1df11e3277ada68f8ec237c8b467e5320a5d3f992f0b5c1eb5e3503654734f4739cc4e0d1812c2a

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/TrPJFdsN

    Filesize

    336B

    MD5

    50973e3096975a47e3973832b1f522bf

    SHA1

    6caf1decd01996988e30567c5e20196ac0ac8058

    SHA256

    59c08b67cbe0ddfa6c501c6a724f3cd9f4ab1457935a31a1f107f05d8b6f32b6

    SHA512

    abddec8eb6c6f41d3bc24541ea972154b7656735269ee0f716d03b622e2e286756097c1fa2c9e61b4d94b89e901af63febbee11959fca78370a253cfaa8c88a5

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/TrPJFdsN

    Filesize

    336B

    MD5

    2c8ff061616c6c94712f70139c2c7882

    SHA1

    e4119721e5615c3a13dcc4fb904f34c12723c88e

    SHA256

    9f8cc404b86679a0f4725873d373fecfc9e84454cd757c48675a7c7c220af750

    SHA512

    6d0a3c52490dbf5fb81073726f1853e16608175f86bfb149f8e1b53f6775ea36d5eb8c850541cd5a6e4de321734e154066ab27aa8430e3f9edd7af1df05d5fbe

  • /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/TrPJFdsN

    Filesize

    336B

    MD5

    2471c2b55f02b8034d4011e133ba9caa

    SHA1

    caf91ca7a83fa01beb187645f84cf87e28fdfd76

    SHA256

    6bc12795bc11c3c1ea29ce002ab1e6cbc6bd202d15af3d3403fa1b4a3bdbdba4

    SHA512

    22d00705a204227ac4610a2ffd25db6f78dab9ad311ebfbedcf1daeaabc5cedc182ffc9eecabecec24ae97eed391f1df67cd036786721e07d53c0469db2a437a