Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2472618s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    20/12/2023, 10:10

General

  • Target

    a05a8916f989bfc24398481c3f749e535dddf222b8b549c9ff44f67358e43e68.apk

  • Size

    16.5MB

  • MD5

    f21364bf70a70351e6dfabb9cc65cdd3

  • SHA1

    61e2eaa9b1e3dfa6c3ace6101a9ac5d55ca2f51a

  • SHA256

    a05a8916f989bfc24398481c3f749e535dddf222b8b549c9ff44f67358e43e68

  • SHA512

    0363e222017b5b7d44ab7ca12f852f67ea5f3ead0f57eaf6d9d6f9a87736d7257341a420f7d68df1fc1bb37db219a22af0b4dc896ff44cba9160f64027059f23

  • SSDEEP

    393216:INuiRQ3ni2PJ4pGyXcfrFz+nLcgIPgw100YH3jnek:wRaZqVXcTF6nMUxHTnd

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.birdspeaker.lj
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4287
  • com.birdspeaker.lj:bdservice_v1
    1⤵
      PID:4399

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.birdspeaker.lj/database/pushinfo.db

      Filesize

      20KB

      MD5

      6b4f75616c8b8a3f24dd7b13da07ab5a

      SHA1

      7727e57c7df465345107abe662baf7dbf7dcfafc

      SHA256

      3f12489544b803b0212353b0d282c8d1466f2fe9ca0bd8f49b43c50d038b5b4b

      SHA512

      adeb17e4727c61124bb5d058a37a538d9173f9d300f42dca98191f6bf70bd75a8ad270e5aa6ccf6c56b4850caf5abc51dfb3feb29f3610ec4370c1ae8eaf17ec

    • /data/data/com.birdspeaker.lj/database/pushinfo.db

      Filesize

      16KB

      MD5

      49575d6cfa8be0985a245ad33d27648f

      SHA1

      15bcaf1a0d08b18700a39124e575d4f62887db27

      SHA256

      460214d43421d79763276df07aee35a23d709f855c2534f0726e9c94bd61649f

      SHA512

      c5706438d230ecb61e28aec1bf1c5572658ddc263671691672fd1d2cbdb8728a7bb282b1a8f2fadf2725f7eb4a6d0f3cc21edbc4708833bb9a0d7d330480c285

    • /data/data/com.birdspeaker.lj/database/pushinfo.db

      Filesize

      20KB

      MD5

      608a971ee67568105bb1341f1207f97a

      SHA1

      94bb5d86d370f0c71cd43d53d2c4dd23489ceeca

      SHA256

      19db065e4527e55946f6cbbab9cdf5f36d641212cd81cfd7347a3a374a2afcc8

      SHA512

      7c7331390af8c17206da40e999f51088ddbfa76ec27bdb48c3f8fa1e1e8ab9c5b2d83424d7a350ec6263869faf4569ca538a1fc7ac02fe84003ec2819041b19b

    • /data/data/com.birdspeaker.lj/database/pushinfo.db

      Filesize

      16KB

      MD5

      a324cb6193afc49ec0706fa53aac59a0

      SHA1

      688093e61a41345f1e2457f9ce5bd7b88294c500

      SHA256

      56766eabfb7c89d90ae96f68f6f5aaf5ddd5a0bcfd9512f95cdfc642d74006bc

      SHA512

      2738666946c6976ce5dd532acbfa878edca6b99a1aaf78aa1b479f91fe4ad31efbe8dbd91c59d4236c787afc77a57982529d049a8e2fb2ab07be29fd85b4e5b3

    • /data/data/com.birdspeaker.lj/database/pushinfo.db-journal

      Filesize

      512B

      MD5

      f8c25e0265c918507126e049752d889e

      SHA1

      2676b890d54a3280ced8d38e942121ac939dbf9e

      SHA256

      3abd265d6374269d6b917606d7482f1ce5253505173d58019f27d36d7a100d4d

      SHA512

      fd720ca18dfca03782da9bf7643a52765b909382463d64487120e0fb6146ad739976e63c514fcacc3b40364c08b89712a64ea0db94c627382e633ca8e6e2f1ff

    • /data/data/com.birdspeaker.lj/database/pushinfo.db-journal

      Filesize

      8KB

      MD5

      f3aaaf0dd1ff6a18544ffc1d5f124ad6

      SHA1

      362354f88c4b5eaf26dd1d894a1dc6ae01f7d298

      SHA256

      d115901468234bb6e33d31fed7f9c056d475bec6535bef4afdcc02eaec0a665b

      SHA512

      5abef573c3205b0cce311002f13688c55069fbd2031e16f9822530e3bdb45319c74c5e2c2cc546c05672c3b36a17804df03d89bffad884abd5f1bf14d9d3acac

    • /data/data/com.birdspeaker.lj/database/pushinfo.db-journal

      Filesize

      8KB

      MD5

      4d74573f9938c3df53f039dbe0df7498

      SHA1

      81c53e3d50013b9b0ae1c1efb00ae725bfbbaf25

      SHA256

      ecdc70252943f09cd96d1a778850c383338686a56c654d528e6ff88f57035931

      SHA512

      a590bd6e8b11ccfe36e891407c6294cbb01a5e3f4785d7d91c6c3bf6e4fb0865df72ee2757851174bfc21a543fba56dc7629350fc4e35fce643080b245645194

    • /data/data/com.birdspeaker.lj/database/pushinfo.db-journal

      Filesize

      8KB

      MD5

      0394e5602152d04f30c80ab02838881f

      SHA1

      43d42abdae30f52732b75301f9d5922f5049edb9

      SHA256

      548c4b4ee0605b6bb9506b98915c7226e6546b76d5723df819952acdc59c9efd

      SHA512

      a101e9f133a0b4deaad4bdcbf64a49bd35b2b128fc3cfafb4d454f41dc44f2043524b19b3545b3904d23076895975bada8aa3b8ce381a2c3a71c405ad2e28ce5

    • /data/data/com.birdspeaker.lj/database/pushinfo.db-journal

      Filesize

      12KB

      MD5

      7870939bdf4097de530caf1d81ee8a69

      SHA1

      291d03eaf08caaab8dff69a0efd5a5b58f32906a

      SHA256

      9afe75fa2f85083462e08eb22a6360122b52dca5b4f035b9c34d3079b561ce92

      SHA512

      9bd1c25a215454cd48e89d5984333b6850d58879b5f55ce3f9a01c80c169d242a9cff1a6f8b97a22108be8072020ad7bad8ebb176eb2be00d1738fd3038695da

    • /data/data/com.birdspeaker.lj/database/pushinfo.db-journal

      Filesize

      8KB

      MD5

      3190a5960b7a74c20f0f8232f15e94be

      SHA1

      88f3836f84b05ea6ac1b8e45d0f1455eab9b9cb7

      SHA256

      79fdb8b468a82c6c130e4316b8e4b31286d10f778b9efb3d6a8b58141d5d75ba

      SHA512

      62c5d4d57a1ad3b7651189a1cd975909182a962d0a69c43dd2073a5d042dfa77d72fdb35daf733aff27b51bb4b78c897075cbffe916dbaa7864d30007dc7bf0c

    • /data/user/0/com.birdspeaker.lj/databases/pushstat_5.2.0.db

      Filesize

      12KB

      MD5

      edb655088d1ed9f33f9d0d499b7a3ef5

      SHA1

      565c4f4e43179dbfc285cd6331dc8ac75a901af8

      SHA256

      bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9

      SHA512

      98cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599

    • /data/user/0/com.birdspeaker.lj/databases/pushstat_5.2.0.db-journal

      Filesize

      512B

      MD5

      04cf42a05fc186c0d0d28bd1908c8656

      SHA1

      86832993f307c7c8597bb23e52305a304b33c3ec

      SHA256

      efebc8a8f9bbf9ab86b4aff983e43d7b5f8b1ea34fa99ea34bbbc929ae39c1f8

      SHA512

      729410108d1e6c5e9df4259240d43cc8d67fcc785d56dc4c7991ecce712e0f0b80dfd05456185946946a1041712f477626229379596ce1c740e39753c9f33509

    • /data/user/0/com.birdspeaker.lj/databases/pushstat_5.2.0.db-journal

      Filesize

      8KB

      MD5

      ff8da2399b553f308bf689557cc6b7dd

      SHA1

      4451cf63e580f33224019c83500c5cb108bf965a

      SHA256

      15d6d8a4b98da6de089a581bf8c84fef7e9be0952ce774f50adc3da0c9d608bb

      SHA512

      1ed510adadb34d5cf92270a73e3564f474113058b92193220550dbc34bd4612e019cf9fa3389fed848bbee8927df070d10721dae04113fad518be50569bcbc88

    • /data/user/0/com.birdspeaker.lj/databases/pushstat_5.2.0.db-journal

      Filesize

      8KB

      MD5

      0bd60a0cb25f69003d6069cae0f92726

      SHA1

      7e647dad5e8ac52af863dde45e65ce8eaedfa490

      SHA256

      a4b69813b4a9312ae2a85f584ad5261884eb55f0016ba25785e786a04e69c71c

      SHA512

      10af0daf98db9d7f1d7d1629598afd7232bd035c8c605d9f782c155697bd1047b71db1c731096467724014b129bbfba4f89caeac802398ce0b83bc56b2c2aaf3

    • /data/user/0/com.birdspeaker.lj/files/libcuid.so

      Filesize

      109B

      MD5

      85daced297120ac3371f88e0738917fe

      SHA1

      a42b1c2b94047637040d9d1b8691e773d569974d

      SHA256

      0b68761b944659f9386977e9c65ce18c6e644ad5a6e8d842df7028bb00f94fa3

      SHA512

      385d4735d72bcdaec2e21d704e6eff7371b026b3c9b35268af2c6a9b7e3ad51609de6d66ca9c31722a9f7adcb0216fcb5e8bf654bbd7f5940f062cf7d2391b2f