Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2509242s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 10:58

General

  • Target

    a722bc53ac44254284c992493bf12fe3ef4d8a61daf62a286682e5d14fc52043.apk

  • Size

    12.9MB

  • MD5

    b76cad8fb89f4544b0b33392c95962f9

  • SHA1

    286c01a7ba6c4aa208734343f3079151e4ad7c70

  • SHA256

    a722bc53ac44254284c992493bf12fe3ef4d8a61daf62a286682e5d14fc52043

  • SHA512

    b1de55fadce9c0193350ff2a6af4c2b73cff6f865c6154f51f8967a197b2b9209896f09136ee9945d938c884f0fd928cd90ce37955e31669b710788d15a24d93

  • SSDEEP

    393216:zDUeysFLEkrGJRQMSZWp3BvnWSCYcyruhCpsM/AsPJmf:zDUeyJUbdixZNiQeb

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.lht.creationspace
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.lht.creationspace/databases/.ua/ua.db

    Filesize

    32KB

    MD5

    36d7728dcd45b611ac3454ea90991343

    SHA1

    02f38b8ddb7d8f9a460bab76192c8620e1a9d76f

    SHA256

    949c594ac28e39bd7c1592cb87625acdf8672a415da1728e79280ad0cb6c4b33

    SHA512

    1231fe3a8ef026aa7080fb9739c1c92618fd3915b8ca63a47df890ce25f5dd9367d3b82bf8970d695c5d13e3771cdd1bf2fc27903c0e8565d70d354e38bc986f

  • /data/data/com.lht.creationspace/databases/.ua/ua.db

    Filesize

    8KB

    MD5

    f580f2982b65f111a2756d9dc7ede0ca

    SHA1

    8ab4be5ffdc89a40a2c12a9a006b1649b8f7ef1a

    SHA256

    8ec55e187e46cffe0ab1b3fa391a77922c29da49078d96b419cb8b407757461e

    SHA512

    0a113a778530e68ed622df7aee6a58d8b5277cc827532695587408a93c1acef75d373dd1e60da0f9479ca345a6d5227fba57808f4cd47853e04b6342f6f9802a

  • /data/data/com.lht.creationspace/databases/.ua/ua.db-journal

    Filesize

    512B

    MD5

    be4d532dd63a5c4c4036894e1e4ff712

    SHA1

    355e8dd5051b0904322cf4b5d2a1d1a2bbaa1701

    SHA256

    85bef580d1a934d0bbd445623a8ffa97452a4c2d7802c568c29348b4ec4061e5

    SHA512

    d62805526a87b4ffa9b36ae53d12bc2e2798fbcce110ecf35ec84b1d3695940705f99a79cf793367951584645a13dbbfbc6e800b669935a34fcb9dffddc36487

  • /data/data/com.lht.creationspace/databases/cc/cc.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/data/com.lht.creationspace/databases/cc/cc.db

    Filesize

    36KB

    MD5

    86752a4be6564d8370f2f0e403995003

    SHA1

    29f7d50675f6e59f3b808eb6dcc8619384412115

    SHA256

    50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

    SHA512

    79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

  • /data/data/com.lht.creationspace/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    4ee7471c5e4cd9d4e105279e5753c047

    SHA1

    76b664df9e4d9b0cfb4f6838f6a8c05d36d849f7

    SHA256

    15ac5339efaf870aed6c430703f708f4e95340c99ec0da5eed4c9d7819839348

    SHA512

    2b0e77b51ea2d07b308cf2bdfcc737a7b481a40e94d2ec04b903c9555dbc5db0864f02b3f47a08ffc4a88ab40e2b7928d79a2d90dd15952d8bc590969c1c8078

  • /data/data/com.lht.creationspace/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    f24b2190849154dab157a072d9042281

    SHA1

    bb6fc26ffdd7f601aa3bfd3f1a6c56a24c10ad3a

    SHA256

    049f12e20772dc7bec58cc069f2b263643456d66294309f912ad3ab6a27a364d

    SHA512

    e237f269e891e38b43e460b72ddee90c8de4aceaf575a9cbc425abbc0eb6d332f9fc41d5f379bf3f0455da2cfaf7ecd1a50cd3aa5462c09f58d6a18614d9f999

  • /data/data/com.lht.creationspace/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    18b503abde13bcd61db01c05aaadcf6c

    SHA1

    75c4092bbb501b270f0d616ac61a469155819ddd

    SHA256

    2364e4b1509dc363e50fd9f723912ae51b9be4788051cd78bb1c833b623c24c3

    SHA512

    2ae757276fe48e3b553b70a574c0bf5dd07230497b3e35c56d5fa27ead770969df0607df71088a57d7a87c81473b98f32962f59c8ae859312d3970707ffb1f32

  • /data/data/com.lht.creationspace/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    618dfb4b21259856d8437880af31c8a6

    SHA1

    da0579270fe6458b5816ea2dabdf7d0c427cf437

    SHA256

    3aa6882d7c376dca02c0a34c2f68b4b947a756a1be732c3d46c0dd0d987ee8bf

    SHA512

    1fb69035043db08ea1209017f16a4d78944435a8049c08d142905de7a2c2da4090db8e362ea081a5e602daef896c866e39a46c13b85a2ea45c0c06c3f4b2aee5

  • /data/data/com.lht.creationspace/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    ea99a7d4af19759c6bfc1626e8b8128c

    SHA1

    781c5af42a129443d2f852999e4f6493c20ea00b

    SHA256

    be9a4c3ccf03be2a5157ca6117b34c5352dae32c8a66e936606a16c1c395850e

    SHA512

    46adbbb8af6876a40fbb5d3210e4ba0c2285e459e3e92b54e503f9fb55b821a80d247e3ca8ac85a44c32fa45ce56a88f4060666263c2edb64636932c8ba1f4c6

  • /data/data/com.lht.creationspace/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    f1c10e621e9a4107044d510c7186fe67

    SHA1

    1617c2bbc1cabd20a58866b7406e6fe4edb9ce88

    SHA256

    23ba274e00b6e3e6847726154de33769fc53fdf6ee3c518e62573cec3c6d29e0

    SHA512

    a0ab7c6ba17c27b7b25f33dc24e32ec11b9e4e3c203b0e6ba07f1556ecb8a8afa34f21896be58a578beb23f6bd89f080850f20493b9415329e365fda4a686b6b

  • /data/user/0/com.lht.creationspace/files/.imprint

    Filesize

    933B

    MD5

    6d1bd742ec485c1183802009a5af77a7

    SHA1

    e870f92b243a6faae393fab41bc2c04c7640fac6

    SHA256

    80c5db8b575ff2e283bed9a1920f5d7f4047eaeeb09864b49d6ec2e60ee5eeb4

    SHA512

    0bf23568aae8be63de5e2cab78ef3cf3857e4fd6c68515fd41362ac4b1a591e7eede85b7e45050f3f6f2d320cfd367279d9f9977bac31f1bbda9bf456a0f387c

  • /data/user/0/com.lht.creationspace/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    cdaa3ff5066c4c7e19535f65cf882e31

    SHA1

    f98b8d3eb73e50845a0d07960dea7aef4c6e2736

    SHA256

    7e70eb4012b3087ecbda3e81ddeb58960a6c7c19e5476afa0728874b3679f72a

    SHA512

    cc16cfa06867f2bbe4fae1972ddffe54db82d1f37745325a12b65c6d616404c24b02b88881d32c46554d19728e510f56ae6e9dfa2801bd8eb052d0c514e8537b

  • /data/user/0/com.lht.creationspace/files/exid.dat

    Filesize

    57B

    MD5

    05d8549c4d3577fae2c2a7dee35bcb75

    SHA1

    9b7e3eabe44ca3749999f023cabd6f8ec2241c14

    SHA256

    339e4367ba69f862d99d750f844790cc6eed5c48a6bcccbc3e50cfd78acc069b

    SHA512

    f09888ed58b2040b82c6dd30288c2b946e399ac41fd0ad3c5938d5bd29a11a00204121f473545c20e76ad56a556a1c04cc2fb451fecf71be0faf226e0533d30d

  • /data/user/0/com.lht.creationspace/files/umeng_it.cache

    Filesize

    178B

    MD5

    f95d84265070f22c51223e679003ae0d

    SHA1

    a2fe55f23662c8ad7ca47b7e158bb9e088b815f2

    SHA256

    befe36e3958b69fd046b4ca9f1d53c5f913270f2b5fd807a8dba4c8aea3b1b72

    SHA512

    401ac89d3a55409ef53c9fc1f82e3c81a35d6a857244feb2675f87a7a6c9d4e9aaea4de7516a552d5ab44e5da2925cfa9040b55d92fa52bad70ad6cdc5460bf4