Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2819936s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    22/12/2023, 03:36

General

  • Target

    superuser.apk

  • Size

    191KB

  • MD5

    4ec9e96986478cb000f9d58f374f39f5

  • SHA1

    7479e11f4df198c743bd430ef54f94999690c73b

  • SHA256

    df3c4cbe2b41398bf8e1e807f5ca1b8a6ca2ebe3f1686f95bc36ea83bbea694e

  • SHA512

    66014107235633919b12ec22437d95651b9f00ea6a0eee5e90ee957b6a4e12b05cecd6a217d4b92e206d8e38442a9e10a754c4275a50fcf19c984b41edaf32f9

  • SSDEEP

    3072:ysF8CMXMGIIFzrdQ5023X9phSTt6rUKaJ/O4OroXB2Nda6B5Hpb2/:dFsXoIxrdQ502JUpNTOsxgBpc/

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

Processes

  • com.noshufou.android.su
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:4917

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.noshufou.android.su/databases/permissions.sqlite

    Filesize

    28KB

    MD5

    2c5de1093c6b1ede9259a6902ef44d49

    SHA1

    538e890a39a4497afb7ee68868ee51371aaf7034

    SHA256

    0dca9e16f080f58a9158fbbcd9a47b88e258fa8a3107e0204419f0e648873116

    SHA512

    a93e471b8921cc590b21a6c6f091fcb70743c484e1affdaedd9910503bf772d9340b319259e0259dfff8f1be861f89fcd5b3d02df66ab644971c58b83e2f0dc2

  • /data/data/com.noshufou.android.su/databases/permissions.sqlite-journal

    Filesize

    512B

    MD5

    4adcf28ce72cffe4b9beed1b16cb4e33

    SHA1

    d248f69dfaf4651b9b28ac4e9d48317cf3372d50

    SHA256

    a6ac2245ef09cb96cbde705c3ae7b2eb2a88390932634f956b1105c00ff92aaf

    SHA512

    5a74ca2f8bde7fd29c2d822ff3b8c90535af068cea5884935c0fe74135bde1081438bcec4903b1864ca439df2c253dde3203a84195bb7bb820ff5f1074228567

  • /data/data/com.noshufou.android.su/databases/permissions.sqlite-journal

    Filesize

    8KB

    MD5

    3b204c9c579126ab4dd7c2c8dff9190a

    SHA1

    a1456caed914d09e7aebe045f942b1d41dc03d05

    SHA256

    4b35f4438a1ff5c97ea9466aa28abaa01ab3cd5914992da5b106c3be5af1ce9c

    SHA512

    13a2950f308ea7f3fea426e880a4ea1570f4cd520a5e108119d6ba10666cf38faaf545ffbc199ccc6bbe8055187491fb5c68ce461a3817a59ff24e40fbf09613

  • /data/data/com.noshufou.android.su/databases/permissions.sqlite-journal

    Filesize

    8KB

    MD5

    65aa3a3d5029f619810aa5e72fb0f3bf

    SHA1

    9881ce4aa6f5635975045eac1ec746804ae5aa24

    SHA256

    e221559292feae0f188fb59e9641715663c587423b7a08ac54fd6ee81aaae7ce

    SHA512

    c95034653c7e10f877723f07204f1e2f2aca0f9de9f09d29cb631e4f9b177edd36a5967e31c7680caa4dbd17674a230162d1f99795bcb959003edbaf8a0ad334