Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2439426s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 08:13

General

  • Target

    936f7d873f358b3306defa175397906d3e908e63d02a6dbfa326feac8cead6b4.apk

  • Size

    2.9MB

  • MD5

    de2f512251d00413144464dddeb18b03

  • SHA1

    7125091970d8c76dc24a8986eb9d29c4449447e5

  • SHA256

    936f7d873f358b3306defa175397906d3e908e63d02a6dbfa326feac8cead6b4

  • SHA512

    eeefa55110a92b77114ff6c43c586f952bb63a7969a6f8abe8365bd89e9a61d0d29f90a0a4451e1f45b70a9bc595979ad5d39ab3231a32baf5f6a19aa19e8b14

  • SSDEEP

    49152:AOGQalvGmIe0rDflmjpwrWt+xgIgGPoH1YKWo/ykdszJYo0:AOyvGmI7rDflmlw6t+hoVYtRwsz6v

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xiaofang
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4475
  • com.xiaofang:push
    1⤵
      PID:4539

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.xiaofang/databases/UmengLocalNotificationStore.db

      Filesize

      28KB

      MD5

      10f8ef8c6cd206127ddc67b48854a613

      SHA1

      8624b3791b3a4129f33cb5990d343b40c8a3c32c

      SHA256

      dedc5a592efd506995d3d076f80943561b24d5657ac1563ac78206137a25de84

      SHA512

      e0a74999bab1c92110af7ee84733c620679fe55c2dc8bd0d154f28886221b3c64bef1a5738f29bea3f07ac163dc3c7133037a0ab1252efd7155788c3b0dda143

    • /data/user/0/com.xiaofang/databases/UmengLocalNotificationStore.db-journal

      Filesize

      512B

      MD5

      f72390acf3662ea1fdada4d93f746186

      SHA1

      17073ad2262b79280c4aa3e7884460a8680f9ca7

      SHA256

      223dfb06564a8097658a1096c440f8b46e9f54c2db120ed7127081060052812f

      SHA512

      85f5f63df03fd92bd3ab5c9d711ace0fd78901181f4d2f952912b46ff88241f0f2a4876a68152eee6945b70eff44cec8e5ffeb7167a8b0b001dfd6ce0351ece7

    • /data/user/0/com.xiaofang/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      93da20f4d4cf1fe0af95f670fe0ddb40

      SHA1

      d069a5e052eb3ce61c7708971faf5ec7a6f4370c

      SHA256

      3fe7f8a8bb9a18d9eba2d5546f7dc293f14fff72eadd6abb5723fd4bfb062a88

      SHA512

      7539d95e0f01ae87310b3bf505b7e3e3d2bcff341834fd8b9886f5c832c0b7d6b6f35aa1e2e3396fcc4b47452429d87b099ecfc9db22774164ddf78c4529af98

    • /data/user/0/com.xiaofang/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      98dd62aa39d4429164dde4cbd7c5cf61

      SHA1

      99d7350d7bfe5eedaf8b039416ac67d7e021af3d

      SHA256

      c17a372d754ee97d740c418e90ee7e49d70b60e4ef47a8fb26f5e917af193dfe

      SHA512

      630b8110998c6c3dd731e80a330b67c2f386f7435698cbf50305fbe674cf2e6ee89bd164e31242b9819fe586abd4b72982facfb7d4731be950d0a88cc3ec30ea

    • /data/user/0/com.xiaofang/databases/xUtils_http_cookie.db

      Filesize

      12KB

      MD5

      2e8d2b7e3b1a8758ee427d301314b7ef

      SHA1

      32bcf7c03fd4934e1224feaf2114df2ae56d0551

      SHA256

      67b1e827a498e60301f0b57d15e0e342027c49266e8be14c7441dc7f774c299d

      SHA512

      2a7acd5dff858b159ad5ddd05f8392dda9a0d2185dd5b2b4b20ab660d8946bd3686cdaaaeff7317d717a23a2da1d86e5e42e0221e20e55cc020a2d9a16b0869f

    • /data/user/0/com.xiaofang/databases/xUtils_http_cookie.db-journal

      Filesize

      512B

      MD5

      f4da54d989844ad87bf58113c2143b36

      SHA1

      c4289824550fc0f50f8cc847d35c4a7fca843a00

      SHA256

      5ad2c55c4fe25b5b7585d0474fbb5def4c15009c38e17ea5680a4f1f87d556ea

      SHA512

      e5a03201fb4398b28166e1f2a04d8376ecfee3f35c85fc429707126fe6e2793d5e6f1939daf85baf7c7d73fa93814069634ae5871a8f023c9021e7c0f1135b44

    • /data/user/0/com.xiaofang/databases/xUtils_http_cookie.db-journal

      Filesize

      8KB

      MD5

      80f19016c0025e0bc6e09e7172218699

      SHA1

      301e561a644d6a5bb548206ce9a7568e6af2a3b8

      SHA256

      83da03576a28f1f65e6c0542e40230f9b2493397fac9b7321170de4c1c954261

      SHA512

      2c8155e6669fcf2a780455d1a5288a15d082a5eb74cb1d1c1c83023ae50ea693209a7df02ea0048b1398d326d6b017bc0b56472c093c144865be3a4ce49abcf1

    • /data/user/0/com.xiaofang/databases/xUtils_http_cookie.db-journal

      Filesize

      4KB

      MD5

      195defbec8581de4d236ac1371f11802

      SHA1

      4e037580ba6bb0a4658403a89b4d6efa1375bcd9

      SHA256

      555a83d78a99dc4b308716fee5fb12356806a3d6a7ea605a29db1ebb0764bb5a

      SHA512

      1f4fd857bf9fc43bf0e94d20467c6abc11974edcec38a8314474e2f7781272bc8275d8364649bde64347bda92ba55911cfc4cf1f0c8b47260f0b17fad50d0347

    • /data/user/0/com.xiaofang/files/.um/um_cache_1703246475698.env

      Filesize

      661B

      MD5

      4c10814c8af7434ba74f8de64a357d10

      SHA1

      438cba167652a1f09f54ba4c68abd4b24cc17c97

      SHA256

      b50acd2736cc59b6b6d5dae86053c6ea3d88c32fd9d4aed72a28556628aafb13

      SHA512

      a264099e07611de0733dcc2661ae48e9ce1e33b81601c0108f3d370b31fabcba2a660de16c59add75c91f835da2074465ff4d271038bc37b70703378c294b418

    • /data/user/0/com.xiaofang/files/.umeng/exchangeIdentity.json

      Filesize

      162B

      MD5

      e0ad878d723172ac85e2a6e89612c1ce

      SHA1

      8369444f947ac10a5e4415cfa38c425e64f73c53

      SHA256

      c2e73ce6877ce6e44acdc2dceea51554cfde8c92a90afa6d3b5903d99415d11e

      SHA512

      884fa72bce4adb389fc75cb9e10ed01316c270ac7f9f9005ce5cfc31a32a81084ac50cb2083ac2dde8bab769a1cd2dcb967ecd17eb791e94c23d41496a5f9488

    • /data/user/0/com.xiaofang/files/umeng_it.cache

      Filesize

      328B

      MD5

      544fc6e23e4c03f0b1493bb7332bbf1d

      SHA1

      19bd94ce6787d13cca8144a2bb04a18054dad836

      SHA256

      9e0a94887cdba8f3470dd6aacc4e28d31e59b832ae5238d08bf426c5c99bc896

      SHA512

      d03c34b20eb637d981d40f6802bc3db990acaa71516b85c719564430fa40cfe4c615a2e0c65ef2ff4bcf846a82eeeb61262008ff0a85ab0810c8cfecbc193106

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      c0356e6de395b0e1b1174cbb2a9bb23f

      SHA1

      7edd9ca43f3ed9d3d1847fed1f18cec0f8d7139b

      SHA256

      e9b06434d3668cbf79ce9a78139c141395adeecc7fdcb446144eb12f93c685b7

      SHA512

      bdf7d75166f532603c9079f48be2cd350f8a32f88552a1ca46ac8e072933aab524550d06d5de11cea53c1035b0c0657b315ab2c3c12781114db39e2ecc4ccafb

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      ac35fd8900f8923b2a5f4f56cd96492b

      SHA1

      a14552d27d410e6895c5a82cb3bff78b948626a0

      SHA256

      0645ae193c9b1a0120c140545cdce7f93e73d191c3ef5dc7153e25274bf95f2c

      SHA512

      09f48eb6c081c400f5b7e6e24e291b80f259ad7e7418bf188bff26fddb6d022d7993c9ac360c607801bffba7b5af069b3985e009580127bea5bbbcb12e0c26c1

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      407B

      MD5

      a07a0d3e14288ba5445ddd5bf1a706ce

      SHA1

      cd436ab9f05b4de077e73303be07c8f853e2cecb

      SHA256

      ac47874fd9e5c5104fb2798fa929e7131a7e807d769242acd9fe82443376bd03

      SHA512

      56d4717463b4cf472cd343d82509eafef7e83dc7a41cd35362604a325a80f1c7f6abda51dc3fde6e382b46e4e379946ae50ac19a2ceedc0ab551e5864b89eaa1