Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2492239s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 06:50

General

  • Target

    8d07b60943290ee0ba251a20c1751f543fc52f55078d5d393ff266fcfbffa233.apk

  • Size

    15.8MB

  • MD5

    daacc42911326ec2c8d9069997954d6a

  • SHA1

    063c8373483f6beb65587f26e4c00d7a42ad617d

  • SHA256

    8d07b60943290ee0ba251a20c1751f543fc52f55078d5d393ff266fcfbffa233

  • SHA512

    67b3fb5b6381c3eb7ac9c628582ceb892f5208f59731d5a5a451e99ce2208b7259d910c0b36e5cdd43c0762606a0dd5bca7590a428b055d29310e83fc1306393

  • SSDEEP

    393216:cNj+qGSVogsKGigFCZ1rQRdnoRnnYuI8WQNtD95PKG:CvBVo+lgYZ9MtYNhP

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.tc5251099.sl
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4270
  • com.tc5251099.sl:pushcore
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tc5251099.sl/app_crashrecord/1004

    Filesize

    223B

    MD5

    5f08a852e1412c67827339631ada9d15

    SHA1

    4000a2b1087dba4a035a5eab727e9c4e1b989d0f

    SHA256

    4fb4774e54f54994e54a5d55bcf8a99e68c4ff11e7ecaed2e58dca6d6198cf2d

    SHA512

    93a4e929d7b1899af4515e2a36567401854746c7ff6cc0fbe475702b983f1c52f1b9ad11d30179142a35c78d008095492932e37e58758451e127e5536fd8128c

  • /data/data/com.tc5251099.sl/app_crashrecord/1004

    Filesize

    299B

    MD5

    5ae37d1fc8b364193933e6dbbd4a6081

    SHA1

    aa23942b73970f164c14cfcb56b62c55d73722f6

    SHA256

    9bedee2086c6b8a9dd4a48fcda5c46c0cd82541bc08d6c9fce975afbcd6b2966

    SHA512

    2bef5f821472c7292e51d252ce9c274611fc1438367c09c438c118fc2ffe1f9b76cb4fd776df6e1459107c4cf9ca11ead7d299e2f4ce80e939fb13997d7359f1

  • /data/data/com.tc5251099.sl/app_crashrecord/1004

    Filesize

    57B

    MD5

    44e451c165f6d853dcb45081be5aeed8

    SHA1

    d285328190600cc4c150c29e312ef2e400783bea

    SHA256

    981313c00f019246f9c31094ff03f4f0dc6b9177687de6736b019e910ef5ed65

    SHA512

    3d29e907b8344c8ca97f8876bede6b4313814d1befaab92927194d36dbf9933e293fb2463af7ef220c9d3897a48449295dd50344f2d62094a2684210d8f32b09

  • /data/data/com.tc5251099.sl/app_crashrecord/1004

    Filesize

    58B

    MD5

    ff4dff3b63e9499af00a322306526b73

    SHA1

    5a42e7cf4d853c05683d7f093548c89ae0ec15dc

    SHA256

    e3aef515ebeed2c7a73cb9b5b37ffc51302d2f4c98b464da0c1e110fd29291f0

    SHA512

    d82458eb041fed8905190fb498dbdd34e1bffdcd5d9537e4851bdfcb6781be19bd26a3b8825714a54c1a4ea4e557e64a77514ac13be52e50a470ff062146aa39

  • /data/data/com.tc5251099.sl/app_crashrecord/1004

    Filesize

    232B

    MD5

    c86b7caa0756897ee380d40d96f4a345

    SHA1

    47bf672426ab262b34df9d23367ad5bc56a1e88c

    SHA256

    de4c30d70e19bd6cc32c949b9ee5619a97f13977983e55d06831ab3554909f96

    SHA512

    17f1b0a170045cebd81d4e41ebfccafa00a714f9238c8af32204a78758e77feb28fa3c62a79c50c01a252033bf7a878fa271fbb91110ea6c1563bb0290936f74

  • /data/data/com.tc5251099.sl/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tc5251099.sl/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    3a58b4e80450a3fa3f1fc5063fe65e7b

    SHA1

    f5b000c9bd471b8afe213b7913412521984da7f8

    SHA256

    7a22d9fb08cabb405b15d1caf78cd6e650daeca0cd00daff34739f0d9a7414c8

    SHA512

    68e625c6adc8efe2dda67f2eabca0ef8b19847bc17aca462801463dac524d5209970db0a5d450d9c55c1b4498116ba4a0f701172ad16c1948c8f9fdbb95a44ed

  • /data/data/com.tc5251099.sl/databases/bugly_db_-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.tc5251099.sl/databases/bugly_db_-wal

    Filesize

    16KB

    MD5

    61817853ba3d110893bc3b8ecd80522c

    SHA1

    fbf010d3ff2b6fd00cc10d0466a1aec7e548eb7d

    SHA256

    19d686973b81f2672aee64fe36fba3d00905c66e6deb3ef321da7105d5d8f7d2

    SHA512

    a0b1381c1d79871909817cb02ce309a19c7651c0a4a204db3f83ccda6e2d4be291575afe32fc7e2b327f9184238231ff9fe0eb35a4194e26ea8ea90e4eaeff16

  • /data/data/com.tc5251099.sl/databases/bugly_db_-wal

    Filesize

    72KB

    MD5

    bb0eb1b187665a8a637c475580020172

    SHA1

    263c2b55ec37eb7be6f6044bb2da309d48860255

    SHA256

    b44bcbcb62b649795a622fbd64c460303ecf1ab407afccbbdcb5eff0494702a7

    SHA512

    d73f1841f88078c698705f7654f334801ce6f6792b006da3018bb4e9b7fe8b64ef888bfd858a87acd19d630244c19e9ebf5dcea8662cc1336bf8962c7f81fe61

  • /data/data/com.tc5251099.sl/databases/ua.db

    Filesize

    36KB

    MD5

    0adda9c85a5e4808f5b1b74c0a8591a5

    SHA1

    5048107883ab1e345af9cf2e6849ce46e0e612bf

    SHA256

    1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

    SHA512

    646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

  • /data/data/com.tc5251099.sl/databases/ua.db-journal

    Filesize

    512B

    MD5

    426663dd0d57d90680d13cdad280f866

    SHA1

    be1e71f04b42840f1549b1f6cec935e84cfed370

    SHA256

    cd3a894c1189d3afeb23b9482cc47074116f0173c173413759f9ff30a818b664

    SHA512

    f7becd37f16e0b6722285f89c04ef71fd99dad1e11be77a67b34c0ebce7075bf904725f31fd2377fe63a0811c188b11e1ae1c73d8ea6904a5ef1a4042b487b70

  • /data/data/com.tc5251099.sl/databases/ua.db-wal

    Filesize

    48KB

    MD5

    90964e7212b38cfd841f0d438d4730a8

    SHA1

    34f4d50a56f21f957a2544a61461a6f8fca23d38

    SHA256

    eb0bc0e3fda60bef12c8b144755982efea5cf7b83c081c338ffdaf3880458b3c

    SHA512

    54c61ac718852ec073fb166444b703bc4958a22835e1e8752f80f14d04b7576e7e53c60f7c9abfc899aa795eaec4d8816f8f0fce3fde7091ac4efb39e0293c67

  • /data/data/com.tc5251099.sl/lib-main/dso_deps

    Filesize

    140B

    MD5

    65df1b1c42db16c362d544aa8ac9a593

    SHA1

    6f8b68462276ed135a9c42ec1c13c3bf59eee733

    SHA256

    22263174c69a6b5796bfc92b678f5085a8bfca1b9580317721529ac30da3552a

    SHA512

    0bdc1e82812745d558a4a043e3a1bc6412bfb9360acf9c8190dfec0ddd9c2d62ad56a89735ef0779004a62ca269f71e40139d3898829e860e1ca47d2424a075d

  • /data/data/com.tc5251099.sl/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/data/com.tc5251099.sl/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/data/com.tc5251099.sl/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

  • /storage/emulated/0/JXCP/aff/com.tc5251099.sl

    Filesize

    5B

    MD5

    733a861e3d2dcb5d88a38820fe8cd4b2

    SHA1

    06bc0a08751611e9ce489aa524e1575502d13b42

    SHA256

    1275cfeca612a1bf8fa785d5ab01aec77a93f1668008147dab556fc1ef0f170e

    SHA512

    d483dcf0b10b6594a00dcb7c6636d9ed002d7e3dea353bf4f8dd7022477c324bbc55785c2d42a685ade35f67a64288955a585dc67c2a488b1f52dc260f1ae6a2