Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2420862s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 08:09

General

  • Target

    933cb2789c9641fee735216b38944e9a1ce5623db4b860849dc0d48674e47b77.apk

  • Size

    18.3MB

  • MD5

    c357bddafbbb67fa3212355c297b279a

  • SHA1

    7c084634cf21f831dc75d5efa889ac60e9605d8d

  • SHA256

    933cb2789c9641fee735216b38944e9a1ce5623db4b860849dc0d48674e47b77

  • SHA512

    7e6671c5230d184ce47a2a0d9027459215e9436787b589bfc5d9b8c6930cf24e90ca4fd6bc614a35a970ccd7b2e21c3beb7e20c3a7813198f7e4a4f47853a30a

  • SSDEEP

    393216:zrdgXaZpvn4Dc8dCI0nqvMUaHSDj9bT+RYEWNiE8dFv9cuRgLjiuw:3dgXaZ9n4MRZRyP9+RqX8v9BR+jiuw

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.peijihu.ouppu.mwxs
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4631
  • com.peijihu.ouppu.mwxs:pushcore
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4675

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.peijihu.ouppu.mwxs/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    92d3f81209af8b5a53f7647b4bba0c2a

    SHA1

    f97cc56ec126637f3f3f0ac73de22654ece29a79

    SHA256

    33ace3e56e5162613cc8b055998dbf3ee052f05ad8d85aa16a7154dadd8c722b

    SHA512

    bc933e3b8c1898f225317d10bdc60608feb0d1ed285f9bf40a34d50024976d54b0a46b3e6d33807e43f1e6b7276b2da3eb7d506a16e9191e93a19e25ea53a189

  • /data/data/com.peijihu.ouppu.mwxs/files/.jglogs/.jg.di

    Filesize

    348B

    MD5

    ba68233be3c32f7efb3e072e1058cc52

    SHA1

    20812627f56429dbd9eea1693233daa0908096d3

    SHA256

    380625a5eea75818ac89186b1daaa8fb075815f22b2827367fe5dc71a467f32d

    SHA512

    0ff6a607cf271991455c5a8873d277b634fecac4fe6efb38de29371af76072cc848c5670529fa503f73e8639f45c717ffbf7d6449b6f15d002c3de0cf13ede1f

  • /data/data/com.peijihu.ouppu.mwxs/files/.jglogs/.jg.di

    Filesize

    348B

    MD5

    78f1e3ea7ab7e2b0cbb8ae697a6ef01c

    SHA1

    315c3e2e333f82ef693ee38d29ab16b41fd571fa

    SHA256

    9b0d7cdc1d65cd0c082afe9c86bd97de72779b13367f2e7ecb8114013c4cec8d

    SHA512

    8478269a76c89de49c1038ee1a110c8eb02ae7f04aae5b6b06863ac0119b73031d182833f0d651e33d84cfe3e88c0d2a3c42273402825f2e35f286a75e02df0f

  • /data/data/com.peijihu.ouppu.mwxs/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    7241f2608045e1a34e9e40566a1faf89

    SHA1

    86f12b731bc4477a323ae4b2c466d474f9a6878a

    SHA256

    f7db6985c51194ed6a2a62a0af9d762da575b1fc25ef9fe5b379299dbb1ecfbe

    SHA512

    8dbbcb5c3b8abfef34c328a907b49ce4a1edf7241c8c306b588d336659b0ee6c508e638156c35072c743606e0a45485569af33ede2b77bcd19055cb526f06fed

  • /data/data/com.peijihu.ouppu.mwxs/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    e43400d61e8b137c116aac47bf996022

    SHA1

    ab6c5d32d12690a79d82d3df429bcb7adb81ac0a

    SHA256

    44b3522e43f36d83addf460ac8efc1e956cf6b7ea9c02a982f3dc6d9767d44d7

    SHA512

    0a7fc5909f6b9f9d1a300d611cfd705d654816c7a5b23bbd4aa75dedc320c66ee34218677a2c1391cb4d1e6d36c3dd5b59ee736af11954946e4553f659f8b3f3

  • /data/data/com.peijihu.ouppu.mwxs/files/.jglogs/.si/6fe9423b330557f4

    Filesize

    32B

    MD5

    c5c902aa298da02b22c5e9da64ff81db

    SHA1

    b1e14f4089f4235b968b39cc0aed01bcc38b3adf

    SHA256

    c1615c667b313dccf81fe42158a6cb34b36c803eb400502c7523a500089020fe

    SHA512

    8c29cc1114dd81595d52443b7b908cdeb73791c17db974034cc25dcd9af2546dd67dc667e893a05659a8fa72af57178aed6b999933fe7e4eaeab4f0e13c424d0

  • /data/data/com.peijihu.ouppu.mwxs/files/.jglogs/.si/6fe9423b330557f4

    Filesize

    113B

    MD5

    fe4dd7cf6620413079e4dbbf33a6a619

    SHA1

    f03a45e7b6d907d659ed5475c1f893580f2cfd6f

    SHA256

    f94f48cd24bc8129ffb6936bc39289d24c707b50b01f3de29005ed6bc2c4842c

    SHA512

    c08a195ce26a0a55a933cf66738af3e2f2522e533f035bf0d9cfdfdafc544264d5e30bc390ab426e8c8df526e3de3b32158fd1484819038cae5584a50238d927

  • /data/data/com.peijihu.ouppu.mwxs/files/.jiagu.lock

    Filesize

    27B

    MD5

    ddaefdc9df38273067ba4bd0d6ffa47b

    SHA1

    375dc1251ee96c2e34cab6ee90df89998778205a

    SHA256

    0f96f1b250eec83245432da4e23db1c9245e2e9b3a5033c79186f6e20a892796

    SHA512

    dbdcfb62b98bff8dbfc91913c2a473456fe83ee796ec42f42a530568856426517d22a307b82b5e8908a726b6561e32884a6ac5f17d6002bd558dc7ddafc2572f

  • /data/user/0/com.peijihu.ouppu.mwxs/app_zq/z.so

    Filesize

    17KB

    MD5

    55acabef61c918aae3cae7a315823d78

    SHA1

    365811a7e77c4d23846c40cb1886fd11c3aadaa8

    SHA256

    0c324fc008adcdf3ad65eccc85a4e42b51d97adc7ad2ae1a22225ffa21352e3e

    SHA512

    e9619de32b3916329046b7d9a79e3a5a5b3b673aae68afeef6a4d6b0647a9c587680d07f6593736cbf9fddc5dbf9f30696cc17917e653ab94c179433ddcbe5c4

  • /data/user/0/com.peijihu.ouppu.mwxs/databases/okgo.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.peijihu.ouppu.mwxs/databases/okgo.db-journal

    Filesize

    512B

    MD5

    486c809a303369107dfced86246d4e1b

    SHA1

    25b99c77af973c1621665d15920735f9350ed2a7

    SHA256

    eb6b107171e2e521b6ab44b2729f65c1af57833ec44a36501708b751ef840640

    SHA512

    bf99e95bda3f09a537d334eeadf9395ed8c15adb9718ef67d595aa92bff7f09aceea041651df6bc995b6884486c46115c8e69efd94fe04cd34ed23d752b12eff

  • /data/user/0/com.peijihu.ouppu.mwxs/databases/okgo.db-journal

    Filesize

    8KB

    MD5

    4f95b6a8994376d0efef83d65b2e77c4

    SHA1

    ba44de0693732046c698ca6a5c37ede39709ad21

    SHA256

    42a61e031909212bfc9d9cf0bd73529f002a0972c0da75ad33a9afb3cbcee54e

    SHA512

    f77a9a75ef848d77a64d1eb74e029303efccb30c755c981b3983b3d5870c6a6d72014cd2d85b820c7994629312ee9b133add568ca5a4cb0f471d17669816ab5a

  • /data/user/0/com.peijihu.ouppu.mwxs/databases/okgo.db-journal

    Filesize

    8KB

    MD5

    3a77546c8694e1a2ce70ebd5b850f57f

    SHA1

    6d664acf5e4044d652982b81e85f268b158fc087

    SHA256

    d137ceba3bd1184c54dc7fccf363da199fca867bc109439aaa386ccd48fa2840

    SHA512

    23da818b311ba79cc9222dde7178f5bce44df22d36b70f66c60cc7ebecdbf61b6d414329a565f8f15f7d0d5f0f10df6609dd47abf3fe67102294fe57e62745b6

  • /data/user/0/com.peijihu.ouppu.mwxs/files/jpush_stat_cache_history.json

    Filesize

    338B

    MD5

    aeaa03a3c34ad8ce83de489532f8eca9

    SHA1

    96d374e5da00d3f307ac0dc09998e85f7170c0ba

    SHA256

    6286cd0d9fad834cd9c509a802cbd6e5c8def37aaeb1b864769d69e6bc97c530

    SHA512

    d7d60faf631905c801c23c5e92a33226ac3ad716a3d5227b4e80772a948bcda4373e8f40f0bd2ca3f6dc698dd1dd4cb72836e9b46bb0a3e6b03566473b9f449f

  • /data/user/0/com.peijihu.ouppu.mwxs/files/jpush_stat_cache_history.json

    Filesize

    174B

    MD5

    3797aa4a323285da39c4e20a89d800d4

    SHA1

    7f724aae459e84deb165cfe31e03f2acf49bd5eb

    SHA256

    a1f1152382069524b39fe91e42c6d1c0edb1b674711fe81ab2c4a3436d0f1ece

    SHA512

    77c418247a965d2c03a163a953a6e17c3b07558a22afd9175d30b30a6642caba7612c308a9ea510ddd7b8e51c3f4be0325ca960b25c64354ea5979b4827ce9c2

  • /data/user/0/com.peijihu.ouppu.mwxs/files/jpush_stat_cache_history.json

    Filesize

    17KB

    MD5

    f82dccc00de392a8bc0c197911ca1180

    SHA1

    8bdbdb4e34a2adb3b6d94d9c65e5b90b5ee07e4a

    SHA256

    5a2765366f1a9e256dd955f0151a2328fa20b5ad7ecf79f724016bcd9b961796

    SHA512

    14093f922fa25dc9ff7b71f977383730dc947e8c55f8b97fb1e33c5741e17642a64a9d112ed3eda0416007aad04d11e98be679ae21a41db88aaaaad8119b355b

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    d9eb6ea4977ff55984a2f35ba79d27ef

    SHA1

    81279b8d0057fba64eb2994295d076c260588caa

    SHA256

    e90a2798769afad931e00c05e80181a3b82dc60a758a859a88b0012ace6c3b71

    SHA512

    e06e636df9f2f2b19816fa869ad090bdea364185dffc93b184745a7493beeb43a2d7aafaeb1340f326daf482e6ac5ba313cb2c094fb099b0b95ea2e2bb1284b1

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    314B

    MD5

    faafc0ec817123c630a031818bc3ec86

    SHA1

    b7096c39ea4211bacd963bb8be91d508b613d17d

    SHA256

    8c0f0a0b939a812c4449c95260ff5023032fee53ad07b44c277711a96d5ded4f

    SHA512

    d5f64d809a97814b972c3047b00e1a1c9b5dbaa50e3d365dc89d500d718662289ed2bac7d6432ce614a7a93cc0d154ea274c4247230a2a0abbebd4ea0ed69488

  • /storage/emulated/0/data/.push_deviceid

    Filesize

    32B

    MD5

    a606cb98ee047bf3d91aa5bd4b1c4a4c

    SHA1

    c6c613affd5090c83a71ad025a93d37b9abc55ea

    SHA256

    f749e069ca191c74f9f01373391545f4a51b3066a4bd74cb167f21e92b8d1461

    SHA512

    32d9fe659ea98d8db4d4afdf9994ffe67689f51d7d652306817bdea0a904b39153ecbc19089fe2c89323a2c8e6108f2e166058af712b53e9d82d193d99a9f16c