Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2491329s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 10:16

General

  • Target

    a0cc03b1b052055c1e78cbc508241bfb4e0d5f6750e883eec874ce9a3372f975.apk

  • Size

    11.5MB

  • MD5

    03446fef12fa08ad7ab113d76e3bbe58

  • SHA1

    b5e0ad191324bca919d6b4f6e153c10cddd18c59

  • SHA256

    a0cc03b1b052055c1e78cbc508241bfb4e0d5f6750e883eec874ce9a3372f975

  • SHA512

    72b5db55a93f3f3937f77b4950e307322f8e50e6421cbe06739863c5fc1dd4b4261de4a2ea9693c654a55310225a437de3108cd52f1ab81aa2c7142c8199cd5d

  • SSDEEP

    196608:EH0FvPGuEj+fJzNrCUODDm5MTkGfkQG0RpsmsYz4qGOWYFvlFI+wG/:XvPGHafJzICeY/Q/psmRcSv737/

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.haln.anquankaoshi
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4961

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.haln.anquankaoshi/databases/bugly_db_legu

    Filesize

    10KB

    MD5

    bd6b95887ae0381785dbbd20e64b2c02

    SHA1

    d9e32d04673c606d4d44cffd5575725bcbc424d4

    SHA256

    056bb45aecd42042eeecb375a8e98b0e3e7bf77744f3a70eb2fc5cc15229c09e

    SHA512

    cfa500f242a20d7203046cbac69c048295c2897a12608f44dcd9b5533d0493924b6c92f551d195435ca2a992272bba4375d430521a772e752e132b301567cf20

  • /data/data/com.haln.anquankaoshi/databases/bugly_db_legu-journal

    Filesize

    512B

    MD5

    2ce472b3d58902c7774ee0c8073a419c

    SHA1

    9e0609e52ca82f92cda375428304e9e20b322f95

    SHA256

    8959538a8329eaf284e8fbac5123847db858d107d690219d3094bd64aa8a600d

    SHA512

    a249858217b3327246201e90879c482880b5a19a1cef1c5782de766adcbf21cdd19bd37ca977328082d4a81b9b1f28f5f0bc7c4707e52d67476ef84b9d3ae410

  • /data/data/com.haln.anquankaoshi/mix.dex

    Filesize

    292B

    MD5

    63f77f99bd2c2b772a479923bde11974

    SHA1

    c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

    SHA256

    4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

    SHA512

    3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c