Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2501598s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 11:20

General

  • Target

    a9f524a92e57a7262e64eae5605f195b9981d6a447f04956ed3a1e40393b4167.apk

  • Size

    6.8MB

  • MD5

    04b4acbe244e6e0a60b585a11d901b7a

  • SHA1

    7850c2f2bf8744903a17e3f0b78fa361593fb56a

  • SHA256

    a9f524a92e57a7262e64eae5605f195b9981d6a447f04956ed3a1e40393b4167

  • SHA512

    29883dd0e454e4e91cf6714f01a219b2d129d4553397c5416e9c385eef1bc7e334b794c1d5fbe044bc5c034c33f5216ed9423de3340e0f0aea388cba9ad99a2e

  • SSDEEP

    196608:kmYtr50khgN6ieHTD5d9f083zsw3h80i7q/hp0oi4M8vY/YaIlrL7:7YtNFEKXpnV3h8pacoi4Zsk

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.pangpangzhu.p2papp
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4963
  • com.pangpangzhu.p2papp:push
    1⤵
      PID:5030

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db

      Filesize

      28KB

      MD5

      000875e1a2106f82b0f0ead4e052747e

      SHA1

      5cf90b842489c3e12c9faef7ddbdf20d009a4291

      SHA256

      f338cd34759dc56064be9758b8f028b0013f70bb2e14baa81de9b1085842062c

      SHA512

      1dfdd9f99426e7592ba7958b5f37cd95c2cecd45bbcfd8823506718e5a48b73f691f5f5755618994d8fbe7118caf6c45fadecdac26763530b405be6fc39d4eba

    • /data/data/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db-journal

      Filesize

      512B

      MD5

      ce8f7eadda6209139c3a1fbc2e0a5896

      SHA1

      966f7e7e8e38df4d2dc3aec7e09d46747adc9f6b

      SHA256

      026a59f8389ae8474966da372a1552fc3890d704c9c949648691af56cef14835

      SHA512

      c8e8d2d09a1ea5f245970cb4b021d99236802b575ea18b412ff0d4e3617d59f552c4b6fc1b3820e9c7b85306a174b3e7ca31417978c96787b51ae53b8b9bcf70

    • /data/data/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      3f49bc5103c0d6ac1d8f6dbfd2a51506

      SHA1

      f9cddadee8571082acf77497d54088222ea77a6f

      SHA256

      aada950c3674af5ad5ddbddc9822e42cc58aaff6ddc204daec8b3913b8411ab1

      SHA512

      effc4f6c286f64826e8f6514f9fcf4ea27132fd8f401bfb7b5a5c45f7f468ed14ce58cb74900eee083cf4845eee1cc80fe0f74d022ed06a844ebbd085b985081

    • /data/data/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      06248a6eaecfb6d90151645049530ae9

      SHA1

      22db79b8b5838553023a47a3bbe2ba78e646c988

      SHA256

      afce69675d8a604b95076263ffa58d9769025f30b0b056ac48b43377f606b471

      SHA512

      3b32cf8574d87a55816f4466edb6c7fc09907f3654409de40ee85321239a0a2e4aa190b9d5016c0fc895e2483eb01fa25285e76d5becdcf5204cff205d87afb6

    • /data/data/com.pangpangzhu.p2papp/databases/xUtils.db

      Filesize

      20KB

      MD5

      0193cb990e376b5617592052c3d00a48

      SHA1

      0d682a977a67e15c860b30d66c607a928ea1fcfb

      SHA256

      53f294f47476bdc89a61da3aec3ca7faff20bc4d6c58e8054ae087e0cacead9a

      SHA512

      3fc7dd68cb741259fe046f71ef270986a2bbf4f3ee6b197cee0ed50639ebf44d581ae71c1b8de92d168973343183a6b809c52972ceb2008272bb7fe3d113f460

    • /data/data/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      512B

      MD5

      9093a7ab788ea189b2b5fa4e2bceb3a1

      SHA1

      1f75706e5548b4d31577cfb2d56860436fc02656

      SHA256

      567440dc2811c435b3c4aed895a735239082d39d6a22d0fc5444bd443bde9680

      SHA512

      05a92b34917040180389bbb06c5bff3e32a4440e38a93544ceda32317545ea9d637e8b9acc5ddca1a3fdb7d8befd42021e0644edfa268f8d7326433858004270

    • /data/data/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      8KB

      MD5

      ec93234171ce5aaa1ebdd2112186f3df

      SHA1

      fc7ab4ef06b8ac613f958f0a75922faeaf1b7dde

      SHA256

      dd7cea1370b211a34003da240619a11c4ac794b04f255b460c5d7b98bc3adf3d

      SHA512

      f2cea62379bf72bec5636e7fe588180bd72331f1dcb1fc328bbf1ad91186f8e55f6886ddd2261f39c92ed9b1e88cd65e391b0038657b2ff8c19faed0ccb7fb61

    • /data/data/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      4KB

      MD5

      fbe42bd8c2512c6e702eb0dc714cfb9c

      SHA1

      967a7fabbeb6a243f488a0d00ccdff264da22478

      SHA256

      d1d0b592a17cf77fb8fce934e6e56f6c06c8e59b38d1bf126e2ab2234128fd9a

      SHA512

      827867f3da7862bb9620e34de4f7f54572a6870f9b7ab8a13be5d2acab77c2d621d0ab1cc33fe922be767fb1471eea7826d298cfe919e3dd3aa2879c8e48240a

    • /data/data/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      8KB

      MD5

      80cf0e7a9a6ecfee3dff2867411a3707

      SHA1

      9e5043b04b21724f78df1e8125ad93d555ef384c

      SHA256

      26dfc7055027b4f07547cb3c5163359b0a1721fa83e5daa4b77a0ce9fe190b1d

      SHA512

      3e0bbc779d71f6069a69f8f53df50847fcdb4d5e926ad92f70d59fc3d8cdee4791a115139f1213f6f52b34f3f28eb843f574ef59907a4224ebb07d8e2c5fdd17

    • /data/data/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      12KB

      MD5

      2f36e7c664975029f5eaaafb5614f402

      SHA1

      c81debdd643769a440c00ccde76333167ac001b7

      SHA256

      09b746e0eef2f8f98bd91b248318320af74f2e19bb9cd5938040e863f90eda60

      SHA512

      72e96a9fbb80d1ca5039c920596d6e32318264c43e332a424d79ddb10bac75d4b08aee426336190355670bdce4cc9d1c21a0ddbf2b951baaee04e2476d485bdf

    • /data/data/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      12KB

      MD5

      ebbeb43876916097542bcf7d8b84b927

      SHA1

      fa5fc8abb906fe783ab31c4db776bd7b04649c6e

      SHA256

      a2af7717c2d0f1f065d4ac96e7b0448b4df2a3fb4441810800003fea037a744d

      SHA512

      6bca4b7fcdd6a0da04a9388b66efbc9cefcd4d98a99941711b44ecbc21c9a2848b4f4b1030d3794b1b395719dcf5529e5b3b033af5ac09d572f94258c4305148

    • /data/data/com.pangpangzhu.p2papp/files/.um/um_cache_1703308590938.env

      Filesize

      592B

      MD5

      b5e1382e8a87c03c6b91c7fd36a242dc

      SHA1

      419f7e09bc6ea74f21739ca3e166c16b994c7e7d

      SHA256

      437e3d204f0e9c713d8cfdecd38087df102f21db7c2a3117fdb5c0e0a05a8419

      SHA512

      bdb7a51bcb4d921caf75fd0f59c8de6404b3fb6be0f4a9d7ba813cc3d28c5a483e39d88997727a5871a7f8285638e97249b8b20436058cda156e29a953e7f358

    • /data/data/com.pangpangzhu.p2papp/files/umeng_it.cache

      Filesize

      328B

      MD5

      24c97fbddb942f3ac20c62386be379ab

      SHA1

      f2e3eff268194b47e4535d2478485ce552121a87

      SHA256

      f0bf585a47a241f2f7b16eb70b0f5de40578c8824a997f9538f48e30439d705f

      SHA512

      a6526dbbf55339e7b7e0d789631ad372dcd94b16832c27249caf940fb99563cabf64ef4387a3d101eb24a4ce5c911b5ff31ec73e138bcd8fa4228512a72ce402

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      a8f0623d07c55461d9ef6174a82883ae

      SHA1

      d2356d12132e75f630e66860d3edd7daf09f277b

      SHA256

      5657f6cf3c67353b11299fbaac26ef230b05a0fc9640c69cb3b9fead3fa00528

      SHA512

      4bfbae5947151723514379196aeef384a307a8c7e982c3d67e7de03aa3900a06f21e1fbd7eb4688d2fb1bcc0446b72acfa316a516c44a6005f55c64c0fe6c4e3

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      512B

      MD5

      fd332bf6b6e991ba6f5262d1d0edfb7f

      SHA1

      c2a8a7d4b282df0ca79e7274da884aa1d4627ce9

      SHA256

      f909c497e056401f07a8b757fdbe5b096192579211fddd2d54ce06d99e0c582d

      SHA512

      76331fbb05b19466188163638082d9acab496d04f918d92c0719b8edfce7a0a21507de4034108d7e6d2d65ddf44c16dabeb490dffcffa370fb231f913341d39d

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      20KB

      MD5

      95a6db69be06e3b7a2f6466e8b6467e2

      SHA1

      81e96d89157fbf5db2d220e88bf799ea2c332f52

      SHA256

      426a5bf22131a36475de26d41fce4c759702e97f7cd230ab88e7334d924416b0

      SHA512

      8a213ef4f768a9d171280de9b76c79d1c030c992d94d5b9d37006f17e7255f26049af42e6f292861606b4f8d7997000e932604eb69693226cf63b5de0c6b55e1

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      c71a254cb7e44753bfa2794e6a8c13be

      SHA1

      2e4b110618c373bef347b4f937ddcb44e9678d77

      SHA256

      4da842163f87a74a9ccbe6b56140cbe70db00613de814eead001d64a846053c1

      SHA512

      8136fc19b45fd6924687dc4a6c8db15c31489b87920e958d49813b2a9960308514e91031c23eecaefd44e65b345dcb0ea39741f6762dcb26b768b7bbc6cc5094

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      407B

      MD5

      4827cd2fd786326581dcea155147648a

      SHA1

      a67add542b465d3647a656faed1381aabb1d1b6c

      SHA256

      d63ee62f54c6d27e264344005e801ed7979e41b5246abb2a200b1ef799bcd4d5

      SHA512

      5569994974ee7960a4a96a2e4e34d1f85a0f22d6e253c09baf139486f2b5316cf57b2bee7a8a06e8d2a5d725bc016aa9e75cb4157e9e50020690ec30b9fbb316

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      8KB

      MD5

      ac8f62ec78cad3c9cc9e5f3a5168dfd2

      SHA1

      656e12e494b7ebaeab3f1e0df586600074075a5a

      SHA256

      39ee6436019db6d17e222c0ec356867c76b94ce3a89a43d59e543a668e522a88

      SHA512

      88c3ee5c1fcdf6fe121b22234518c6afb8fa74ec793551e25d5e3e3e3e3a202e0d1faefe2cd2781ff701ab887e86ef673f4a3695e393f18cfc206aeee9edb763

    • /storage/emulated/0/umeng_cache/8BD6B4D4B4129B16E1695A2CCC29F891

      Filesize

      12KB

      MD5

      8ff6cd70f1dfc8011228feff335a3af5

      SHA1

      4de1f98848f9c797404d202b8e6663493f23c039

      SHA256

      eb436fcdc4bfdc44e47ac66b36fc47cdb8789ec71d5ad751225e3a3f3c5e0163

      SHA512

      3f576b7f71fe8b3390bfaca132cf3d2835c28ceddaffae44b2560563fc518e5e1de6a2ac217c83d1316708b4cc6776fd1f2b7d3e21908a07e4c8ef9b93f306ce