Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2501619s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 11:20

General

  • Target

    a9f524a92e57a7262e64eae5605f195b9981d6a447f04956ed3a1e40393b4167.apk

  • Size

    6.8MB

  • MD5

    04b4acbe244e6e0a60b585a11d901b7a

  • SHA1

    7850c2f2bf8744903a17e3f0b78fa361593fb56a

  • SHA256

    a9f524a92e57a7262e64eae5605f195b9981d6a447f04956ed3a1e40393b4167

  • SHA512

    29883dd0e454e4e91cf6714f01a219b2d129d4553397c5416e9c385eef1bc7e334b794c1d5fbe044bc5c034c33f5216ed9423de3340e0f0aea388cba9ad99a2e

  • SSDEEP

    196608:kmYtr50khgN6ieHTD5d9f083zsw3h80i7q/hp0oi4M8vY/YaIlrL7:7YtNFEKXpnV3h8pacoi4Zsk

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.pangpangzhu.p2papp
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4620
  • com.pangpangzhu.p2papp:push
    1⤵
      PID:4695

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db

      Filesize

      28KB

      MD5

      10f8ef8c6cd206127ddc67b48854a613

      SHA1

      8624b3791b3a4129f33cb5990d343b40c8a3c32c

      SHA256

      dedc5a592efd506995d3d076f80943561b24d5657ac1563ac78206137a25de84

      SHA512

      e0a74999bab1c92110af7ee84733c620679fe55c2dc8bd0d154f28886221b3c64bef1a5738f29bea3f07ac163dc3c7133037a0ab1252efd7155788c3b0dda143

    • /data/user/0/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db-journal

      Filesize

      512B

      MD5

      ca2a9f551ff608361349053205df9af1

      SHA1

      d2a9c5f3f533559cdf50a4478c0589ba7070586b

      SHA256

      ddad2ac79af63f25ad96efd3619f0b94e4965fa72e517c05af255f77041d98ee

      SHA512

      a9f723aedd13f5456036a8036ebc37f2b67698e263a469083b71176cd6506376bed80babc0f6b43457af75419a78a69417453b5eadc888aadb168b97d4f172a6

    • /data/user/0/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      de0878f7efdf4d6ea95d837774d6c356

      SHA1

      ff331912dbdd50dd69bc92e41b09602c6d284ef1

      SHA256

      1dc7e35c9b7724d0f53d7ca41863ff16db778b4500b343843ef07dd0b0f8a76b

      SHA512

      45ba79073928a5ddd71dd82b635a01da041d192c3b0c42b0f6add197284312257a2eb6f0796408504909fed2b47d02227c859ae514475f02836fdf969768cfe5

    • /data/user/0/com.pangpangzhu.p2papp/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      3973ce5aab0a94e1257840ff79b2a4ee

      SHA1

      d4a47abf6fb89a950867daf502494921baaca2c8

      SHA256

      80906986c5e2bc75b5c118d1138bd2dcfbc8d77d18eb483477c8fc968fde2fc1

      SHA512

      0c948438c6da5e1021e05dfcc95eae101141f7b885190b546ab921f85e201f91755687516f20f2f5b0ae65f16d0dd7ec3955309fd5a0318b099d42ca9e5d9941

    • /data/user/0/com.pangpangzhu.p2papp/databases/xUtils.db

      Filesize

      20KB

      MD5

      03ee9c36540d2b3fd9b1b5d40ad125e2

      SHA1

      ac7082b4df8f15d5a827b33a92772acaf38e98ce

      SHA256

      fe4924b3b0bd36f46f2d79c6ab960d20845fe2c2a8261d98c1f9b54a1b3fb423

      SHA512

      d17ad252c411098c60bbdaccf00e2b275ec7af8acb929b5d4c08a3479b3f48a2187fe74febd31adae0241bac73f0b08f8646873544cc59a58b78b0ee720646ab

    • /data/user/0/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      512B

      MD5

      18a27f1baab9f2fc638955db158ba5f3

      SHA1

      085ac15eef3718b226bc177e692ec0211c4fa5d4

      SHA256

      bd951f2992b0f5fdd9e77a5e88cacc1e9e4a2cbb1a9d2ed8c9f9284b0c1f6463

      SHA512

      3068618d64f415af20bcefee1855ada75a6a514296f7655e76a0b53a6826bf9589dcd829f48b13adfdc6c4b0cde70d50c39f76fe9f3212d871dc790dd5f46207

    • /data/user/0/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      8KB

      MD5

      ea79d00b429da40e6112dc93af48af1e

      SHA1

      078cba2a56f3693498aad89a4c2cf845b7a5ca78

      SHA256

      e6d9e1629c12506e6e979f96d77bbac1cbc4ed9739832383c0d58cf4564761f4

      SHA512

      fdba4766df8182f14b2be88b67442b8923529ae922d94ecdadb2978d9bba9e43f167b4aa367f32608f6a91792e6d2110707b5aa33c4f56f2c844561712df6b8e

    • /data/user/0/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      4KB

      MD5

      f4419028b649b741f8dd2620f3bcac2d

      SHA1

      607b1996528fa2371f4355ead0d79d3ecb916631

      SHA256

      ec3f498af82472cff4b40b73eb172e5d174537e21cf6c9d2b00ac8333a88e49f

      SHA512

      e8a314b28aad09164bebd42e1bb11b9863ad9dbb4e902c492dfb75d916208014b22314c91175134330dc366230a5c2b60f865a4d5467bcb51a67d800ab206a83

    • /data/user/0/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      8KB

      MD5

      21bf21bd3a02060c5ee2f89ee7ceaf53

      SHA1

      d07693a46b4856159220c93c88647e1fc5da82e1

      SHA256

      a8219d79d6e652730d47230d6c64ecd56fa3c4133ca28a5cb631a783cebd0119

      SHA512

      877a19ca1bf41b2d124dd48e1cec53d6a3865486cab0a3b0408016819bc2f078e0ce4bd645ab781ba85de5a24e04c9f546e65396cdcb638da70aba5081546bbe

    • /data/user/0/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      12KB

      MD5

      9e6829a493f3dcea97b377d72d9c839c

      SHA1

      b3b48d7f39ec8786edd2f44aa4e882a0672f19b7

      SHA256

      8dc2f77052d23c7b31b3137c3ab11b65874eb66c0648e2a0dccd16547af26f1d

      SHA512

      bc2d03b3391ac4857a476b641d3c53c4f16a2ff2cd809dafd2ab2e1d11a84cab3b6f5994ff28e4dde472c93adce11c089dc81776b6f2f1d1474d68f74f02ae15

    • /data/user/0/com.pangpangzhu.p2papp/databases/xUtils.db-journal

      Filesize

      12KB

      MD5

      e686f41db313159fdf82b0aecc08b4ad

      SHA1

      266fd08f86a4c4729132a5df0f68c193e917cde5

      SHA256

      27992f24768538d48f2bfef41c377e1597a1f4953589f20103138019febbbd3b

      SHA512

      d9849d8b8744fbb82a6a248b161f84fa5e7b0d05e7cef507bd00845d42454831543dacb9c28bdf795f246b5bc14ca3afed47d4f5b5bb0a2103a79973165de221

    • /data/user/0/com.pangpangzhu.p2papp/files/.imprint

      Filesize

      829B

      MD5

      bf79a0da2cb08461eff569a866fc1da6

      SHA1

      a43872e43fe3b6096aa2ad9fb1636b40627fcba4

      SHA256

      470aef12a4576b87fae29ff23c9dfad5a9468554307f2036bdbc7344ba491f83

      SHA512

      9ed131d28f0e9a1f5195533623f38c39a80aff2a80684115fa160caa171ae9453a93c9bf994550c3ceedd740a7ba9bb98f18c52f9cf8471e29fabdbb924aba7b

    • /data/user/0/com.pangpangzhu.p2papp/files/umeng_it.cache

      Filesize

      328B

      MD5

      60ba31b263d58acc027b31ad30d841cd

      SHA1

      5c0b4b37ec3526c1b53ff64105138cd09ca95da9

      SHA256

      cb7d59fb60bad0dbdab68200cfc15e127061c5e23dca3a7efa8db31a9b1062c6

      SHA512

      2c6875e0ee0a7296e0b50406f7a2d23e82233ec6453b0577d1a00a00a7247fcb07c3cdfbfb136db3fb9053432628dfdf12372503118fd8fbc559220e4a08718a

    • /data/user/0/com.pangpangzhu.p2papp/files/umeng_it.cache

      Filesize

      167B

      MD5

      f7bf7cffe043e0bfbff7ee3ee357cca2

      SHA1

      bbb67319b1b111074540e69c14dd62e87215b094

      SHA256

      6f02f605b7a9687b808efa8adfb72491867d95387ae3f4938b8100a726cfc3f6

      SHA512

      3aa1072d66919ee1961e0ad316fdf5510ee8b073f60ba319fe3280eebbb14747b694a9d9ed94aa0f40025d49c32324e08944d167aff50a1e09e6be4022efde8c

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      6b13d9310a38dd83d458df3ace45649a

      SHA1

      b323fba60279ce0bdf78b2de2ba6ba486487b4ad

      SHA256

      9087e496e9e86996c40374f8123766cd3d7877cd48b66e5563de47b62d6ed70c

      SHA512

      f844c26afda51b8bcb47ae0eb4b6249e77d1d4b28fe68ca958a8eabe6b619f6cbf36a6363bf7c317e10b4fbddd83c1bbd319e8df4eb0c82c55e6bd80432815bd

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      8KB

      MD5

      5ecf64c937212928d8b16afca4c34a9f

      SHA1

      10a3e1d47aba11c35141eaae7fe6e417fea75b85

      SHA256

      1bcc47b742515c0e654548ccec5f6cc62d0b16c5771e649228b84ab5fff13abc

      SHA512

      dac5bfaa1d29da75bd95265925c98f62ac75dc73004a52d064f43088cdec1461af10657f33f63fd46546f734e1fc42bbf9d4694c8be2c127af9b0d9b7440a914

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      512B

      MD5

      0961e47b573db6d23a5ed836d672a1d5

      SHA1

      d44138872c43b5495bcd89ab2585877da53ac62f

      SHA256

      836ec20c99e4d6dce7338f41d0b9095dc53de17b96c0b3d116682a140dc509b3

      SHA512

      e46ecbb9f2df75b21e669dca069a3e7d5caf6393fe606c67bdd27c3dba2ae401ec7c06db6e376cf97e53a665392f2e64adb5f61ecede43d2ac711252623e052b

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      1760998b57b7d4459f8354f9685a5a68

      SHA1

      22dc983926e738df679a9bcca01fd0308ab20e05

      SHA256

      cbfd056e8baa204bf1d67e70eb626c6e78965123126bcb50f97c64600e068a30

      SHA512

      a2099e27417c40c9c2b08821a57945452e83b7c79c8cb97879fd926d5cbb5037e665a2bc0a8c897b57a86f3e8c12a643ecb7b57de1c295d5a89fb04edcf230e6

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      408B

      MD5

      7da1162f37987cd5ac45a591d1e86e1e

      SHA1

      7b1689e65ed5cb9f1da589b0003d7b36cee93ee5

      SHA256

      5ee72aba41db13fe40f6e85b3603b420a140f81f15e580692ccf2927091756d0

      SHA512

      863f4a91e6684d41a318083f23e77b25d6a8989905b4289baa9db69122f578a71a707db6c51895b0c7376bd024b1f30070691bf50a29c8f36ef12b4ae6b7e872

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      4KB

      MD5

      fb833e642c2269275388cd8811b855f2

      SHA1

      db057c1b9a7bf9598659805844afcee4471eaa4b

      SHA256

      c962633bde1bf1419ed446b82b9739b89a85e255d982b90b5e466f4853d69589

      SHA512

      17f3a43c2fedb33aad80b06b769600aaf328bee5375036ee8c10350cc37308c6d53411870f42f8d3ab8354179a439dd56fae5b17468357ca603ca8b80bac2ccc

    • /storage/emulated/0/umeng_cache/EB7AE9BD79375DDACBF26B349BAA6DAA

      Filesize

      12KB

      MD5

      8ff6cd70f1dfc8011228feff335a3af5

      SHA1

      4de1f98848f9c797404d202b8e6663493f23c039

      SHA256

      eb436fcdc4bfdc44e47ac66b36fc47cdb8789ec71d5ad751225e3a3f3c5e0163

      SHA512

      3f576b7f71fe8b3390bfaca132cf3d2835c28ceddaffae44b2560563fc518e5e1de6a2ac217c83d1316708b4cc6776fd1f2b7d3e21908a07e4c8ef9b93f306ce