Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2470725s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 09:15

General

  • Target

    9ae8d2ed34ae8d3e342542c9f36a3595f65519e4697cbe8554afc7b6d06e00d9.apk

  • Size

    1.6MB

  • MD5

    007dde0ae412b8c9c8216ffaeb970706

  • SHA1

    786a6e9838c7d9fef51440db761cbe41f8b87288

  • SHA256

    9ae8d2ed34ae8d3e342542c9f36a3595f65519e4697cbe8554afc7b6d06e00d9

  • SHA512

    25ddc841af0b02d01b7c3b9101d63c8f94d4da0da50d134a6ab223f537016d6ecb813bcf33d825d5dbf6853896a232ea1ed10adb1f2e3211f66e27c6bcde075f

  • SSDEEP

    49152:48xbEVfOVhr2Yq4RFygZcfpkDmiLCLtm1m:48JGfOVksRFygSkktSm

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.vidfake.scarymo
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:5082

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.vidfake.scarymo/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    15d5b92dcbda7ef7f9ca327a903e46e4

    SHA1

    ca153b66028a58d90346ff8abadbdf01b95c37b1

    SHA256

    e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

    SHA512

    2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

  • /data/data/com.vidfake.scarymo/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    a0862ea811da6d41ec9d672943df1274

    SHA1

    6c93c16b8c158682a9042242f8f73203a664b141

    SHA256

    c4b8781ec0e0d33125ae96f2344f3c146a0c629ac40f21f8389784da696b9648

    SHA512

    126b88a6f4874348fc64194e192049dce8efc3a6ece0e7677ce80a0f3f7c4f51e05d105889af7df5afa01f3bd1946945c635cb888dd3b69494acfe0edcc22c4f

  • /data/data/com.vidfake.scarymo/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    6b5b4d008077ad61c2c8ad3c2cc69b15

    SHA1

    2cd7ba9e5a25fa7e60475722996c2a573cf7cdee

    SHA256

    6f370274f532453e0e00683d0c4de1f3ca379d945c5c9c2c003b2a68bb64c5a2

    SHA512

    32f728aaf4b3c5b916dbe915f986b944466e1a8e2f0b0a9afd975d14bc3a16d16cf20e8c1ba790a58174cb29f3087b0753d6cfbbd91d941dd720bbdf9a2132bd

  • /data/data/com.vidfake.scarymo/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    ed9beb27903cd2ba4a69f31fb9d2936c

    SHA1

    62a301f5392377b2930ac69111712e1b6d5a4bee

    SHA256

    29107230424d653371fc8cf056d5b73060f65725cf5966970ed26c117dc3e748

    SHA512

    838251b885b505492c803e91ac2749af5e571028fc9f9657e2b24c1d6e386c6b19d74fbd4f49baabbdcf833358de8fbaa7ceb5ac3b77a484ea669bcf988b856e

  • /data/data/com.vidfake.scarymo/files/16054ae9.dex

    Filesize

    261KB

    MD5

    6ac963d4fc99006391f0e3323f85b09b

    SHA1

    6281a10c7f2e6ec3d6b8968e086e2dd9f2e1c104

    SHA256

    353c5ba6a8d9cb57b242108a68aa9d0ff28ed8e34b204c555a511b2b52721f39

    SHA512

    e7905248e859c45473af1b53ebb623f0366d2e5b63e96c6eb47e25d4850f87da1f33b9e2b73a18de66f18015c21f67fafd1657aab3b9dd459e4958c7b6ce6a6d

  • /data/data/com.vidfake.scarymo/files/BGEaUZrY

    Filesize

    499B

    MD5

    9a575e27666105e47bca49b1522b9672

    SHA1

    01253fb8f93b5136d665a89d55e139d1b83fad8f

    SHA256

    ab9d3ec72bc987ef1c1bf89596c4e5a16454863139b752e9e867243e593a0e5e

    SHA512

    16d3aa850e08e2b6c9cd9792d700fd11225d5ee639b37e865740b454cb705fb600ec4262e642e3b7ff0139d51fb5bcc11db9417cc5f6f71e8f9dcf25d0c4ec3b

  • /data/data/com.vidfake.scarymo/files/PersistedInstallation487842025906543750tmp

    Filesize

    90B

    MD5

    a933bde4af7725ae8672c9541fd7b88f

    SHA1

    47aaaf4656c1b3dbd6f0aff4a738f76c43b59cce

    SHA256

    bfde7ea0a549632a182a4af0236a7d393108aecf16fba1706763b0e7a536aca2

    SHA512

    5690b8731dec844a6a235029b6c4066dd36a4f4c0e31b94dbcf4313a15530c97f9757455cec8da12ddc4fc34938ac3bd5b22f6de823af5b058c3119029ef7ce2

  • /data/data/com.vidfake.scarymo/files/TrPJFdsN

    Filesize

    336B

    MD5

    473ecd45dad54e805c512180acaaec22

    SHA1

    1e6e1cb55c29f2c37bb393c7d22a755a013addcb

    SHA256

    18b9693ff27ee6bd85d78696b34dc440d93b67adc3b7ea6882a4d46d4953deed

    SHA512

    83ae9b94488a9335bbb88317049729a2d5963779f225fd89723d51d57487a690189db2eacef39af2057262c03b64709c0551b664d56736f50b175d35713913b1

  • /data/data/com.vidfake.scarymo/files/TrPJFdsN

    Filesize

    336B

    MD5

    51f94a5e5cd2b19e4b8a1fff67e03727

    SHA1

    f51ce413319b53042c4da5eef1c4dfaa363cd39e

    SHA256

    145eb90446675b3b6e384b773b1107a2029d001d2666ba09fa19459acc56ae4c

    SHA512

    34f823e87ed3fb2548a746314a3e4c50b2c6ba329bc712218b1006d6df2c2639b32729aa123e9598783ffa5084cd8130aa1913a819439286a7bae6b9b4cc817a

  • /data/user/0/com.vidfake.scarymo/files/16054ae9.dex

    Filesize

    613KB

    MD5

    d25ee7cbbeb25b791e9e05db0d093195

    SHA1

    89f86f55d86cbe0f4cb8002733f8ddc113a795bf

    SHA256

    d26ed2971d16d3eeec6e0fcad6afa8b7e2c58f0f9e9cb5829ff72db03532f1ae

    SHA512

    953dfaa0301d129350dff61d7e53d9b4eaa0e36a753bea29c296ad854b2e71f439b41e58d5d94a83617e859d44da074e4f54717acb6cd55c7efe4f0a7cd44d9d