Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2470736s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 09:15

General

  • Target

    9ae8d2ed34ae8d3e342542c9f36a3595f65519e4697cbe8554afc7b6d06e00d9.apk

  • Size

    1.6MB

  • MD5

    007dde0ae412b8c9c8216ffaeb970706

  • SHA1

    786a6e9838c7d9fef51440db761cbe41f8b87288

  • SHA256

    9ae8d2ed34ae8d3e342542c9f36a3595f65519e4697cbe8554afc7b6d06e00d9

  • SHA512

    25ddc841af0b02d01b7c3b9101d63c8f94d4da0da50d134a6ab223f537016d6ecb813bcf33d825d5dbf6853896a232ea1ed10adb1f2e3211f66e27c6bcde075f

  • SSDEEP

    49152:48xbEVfOVhr2Yq4RFygZcfpkDmiLCLtm1m:48JGfOVksRFygSkktSm

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.vidfake.scarymo
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4698

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.vidfake.scarymo/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    1cf3f63c021d755a21623e6d0e86dbc6

    SHA1

    e40e0f1faa61abcca7ba3394c54c92ff7334b49b

    SHA256

    100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

    SHA512

    38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

  • /data/user/0/com.vidfake.scarymo/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    dcf1e0cd717fdee12be607245e077d78

    SHA1

    0e7ab53cf22abc30e63b94edd67a316ac634f81c

    SHA256

    d76163ac7360c605bd155bdd69ebec0d0aa20464b647cc3391992abf895a233d

    SHA512

    76245b472383db2648482f0479115010bc6920f43ed3285dcd1c5afc41a8a5bd6c3bda50c24046610dde955af6a81ed398e54e0f17c6aadea35a9f13e2cc223a

  • /data/user/0/com.vidfake.scarymo/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    950eea4ce7eea07a91dbb488cac679c2

    SHA1

    2fba06ccbb9984f78c5b8713399d0c0064e936c0

    SHA256

    6a5db83d74196ff822ab81fab8c217b2139ac100f06714882b4c70280fbc0fc2

    SHA512

    991a6f0e72aa5bebb874dcd80e6ef360979c8af5ddcb9ce218cb315c16382b88d6941b6b61707eb522d92f2ac3cd053402c43dd59e87572ef7c4ff5b098550d3

  • /data/user/0/com.vidfake.scarymo/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    e0ede1c78c248c2952b6c70de9c925b2

    SHA1

    f12c9d2373db2add8401793619b702af8a2b164b

    SHA256

    6c71636656db4f2df09df23838096a090beea3507135c107b9af0f2465584925

    SHA512

    9f6578b8739ec9512e5b260741eaaab0732731665b1b45059131dc0fdbfa03f550e8e5b2fa83b242b8e0805e81504db5f2f95a4be0773c8787c8edda82d8920e

  • /data/user/0/com.vidfake.scarymo/files/16054ae9.dex

    Filesize

    261KB

    MD5

    6ac963d4fc99006391f0e3323f85b09b

    SHA1

    6281a10c7f2e6ec3d6b8968e086e2dd9f2e1c104

    SHA256

    353c5ba6a8d9cb57b242108a68aa9d0ff28ed8e34b204c555a511b2b52721f39

    SHA512

    e7905248e859c45473af1b53ebb623f0366d2e5b63e96c6eb47e25d4850f87da1f33b9e2b73a18de66f18015c21f67fafd1657aab3b9dd459e4958c7b6ce6a6d

  • /data/user/0/com.vidfake.scarymo/files/16054ae9.dex

    Filesize

    613KB

    MD5

    d25ee7cbbeb25b791e9e05db0d093195

    SHA1

    89f86f55d86cbe0f4cb8002733f8ddc113a795bf

    SHA256

    d26ed2971d16d3eeec6e0fcad6afa8b7e2c58f0f9e9cb5829ff72db03532f1ae

    SHA512

    953dfaa0301d129350dff61d7e53d9b4eaa0e36a753bea29c296ad854b2e71f439b41e58d5d94a83617e859d44da074e4f54717acb6cd55c7efe4f0a7cd44d9d

  • /data/user/0/com.vidfake.scarymo/files/BGEaUZrY

    Filesize

    499B

    MD5

    099b60f0eadd0947708de62888f8b893

    SHA1

    46a3b31fb41f7e74d14a32da59c25c54ffe5f232

    SHA256

    dedff0afc11849b94817f49def3c8df0e65410b603ab539f297429d9a17d34e7

    SHA512

    8e2e11abb88db387248df679a4530f6fdb9d593f29c988d7afccc091fa4bb332e6dcc0e214dbf08c0362389a3ad57625105ace8db6d7b1574e905931a4c13235

  • /data/user/0/com.vidfake.scarymo/files/PersistedInstallation1189843367119707865tmp

    Filesize

    566B

    MD5

    a13a40312f9164ccfd2dfbddb101375e

    SHA1

    5850326390fda1fc4bea1edadee832ceafd6caa3

    SHA256

    ce98fc0c031bd072c1035ed42d13ecefb3e2e541fa51358ecbcca76257ec37bd

    SHA512

    f5fffafe6d3ded695e6e102fc68efb2109c6dad4b7877fbc54d76cab19181b3009cd0fcaf327c04a4ab10d0a057764974c5e2423b8bb9f0dc7d5368360620976

  • /data/user/0/com.vidfake.scarymo/files/PersistedInstallation2751026504723489481tmp

    Filesize

    90B

    MD5

    0dff0d636e6194ffdac6b59a1d49f686

    SHA1

    3303c221aad2b55c6e514e192f0d8aa6b7f9fe39

    SHA256

    d3482c3c8b8c9303ee5c7c6886e48c10ea55ca4cbebcc88908c734a9ff9f1650

    SHA512

    7ba4647c425898a558226130f199b69bec4aeabc2a42cb3a516e5be56f947455dfbccb02140eb943eb90c6cc75b759c0fb054f73db4f7017117e8ca9460eea12

  • /data/user/0/com.vidfake.scarymo/files/TrPJFdsN

    Filesize

    336B

    MD5

    5c48a5e4c7d330fae98dccd88956a518

    SHA1

    95d7585e7bc31813159d305495754c83c903dfb3

    SHA256

    8c95352fca03b23b48be9c1a6b3e47220463ee5e6ba710e0e7b031a58f2a5919

    SHA512

    2719f2e0dc911d18d8f828597fadd4e94d3b15249e2214accb28bd888586cad3fc097d37e52ae72cc97fb48cb702fcc838b5e2e0abfd3e04fd69f5bf5ad01de7

  • /data/user/0/com.vidfake.scarymo/files/TrPJFdsN

    Filesize

    336B

    MD5

    547073820355296848f1ab75a31fc593

    SHA1

    50097f4a3bb36f1d71c4615faffaaa21b91596f9

    SHA256

    b88be28eb2eb0354776da1048b2a71d9be290b608fa6b5372fedf2cc6ff66663

    SHA512

    f53b6c5c18a53a6459025e378709fe8708686ce41f88fca923d50a08e06462db8d3c9c891c029659197a7fd8260b54f994d655733ab9c4831e0dcf6c0890ff98