Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2819940s
  • max time network
    137s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    22/12/2023, 03:36

General

  • Target

    superuser.apk

  • Size

    191KB

  • MD5

    4ec9e96986478cb000f9d58f374f39f5

  • SHA1

    7479e11f4df198c743bd430ef54f94999690c73b

  • SHA256

    df3c4cbe2b41398bf8e1e807f5ca1b8a6ca2ebe3f1686f95bc36ea83bbea694e

  • SHA512

    66014107235633919b12ec22437d95651b9f00ea6a0eee5e90ee957b6a4e12b05cecd6a217d4b92e206d8e38442a9e10a754c4275a50fcf19c984b41edaf32f9

  • SSDEEP

    3072:ysF8CMXMGIIFzrdQ5023X9phSTt6rUKaJ/O4OroXB2Nda6B5Hpb2/:dFsXoIxrdQ502JUpNTOsxgBpc/

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

Processes

  • com.noshufou.android.su
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:4516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.noshufou.android.su/databases/permissions.sqlite

    Filesize

    28KB

    MD5

    ed3642dc02e32ee0717b198e0155d9de

    SHA1

    7f6d15ed68cf23926d9a1f58c28acb2f67a51708

    SHA256

    fd30dac074612220ba2e9634167116c2cc10471f951d1d6ffa0a7981c5dcd028

    SHA512

    12335e2d587a8b553b9bcac6e72d6b1c44bcba74b7dc50371cd96ea6f96a14ddb5df02d819821d82af682ac48d6226bc4c337a91c58980d341dd7dd87e091c41

  • /data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

    Filesize

    512B

    MD5

    86f0cdbeee254e58acbc46cb87925bb3

    SHA1

    9da9fc7afe7ac8d9c32e202716959a9f7dcc85bf

    SHA256

    d0ace0ea49706a38a63e7f93866226bc4f12729fc998ea33a36cabd40e73101f

    SHA512

    5cb419762315ae8846cedae54934be80c810d7db6207679c5ddbac70e93e70c645985868ca444545228d4144a4a4063643a6034e07c6b90d7c9268d9fec08048

  • /data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

    Filesize

    8KB

    MD5

    5c649e29e5c6f71fde595756d777a24a

    SHA1

    64565ad6583f0a51fc7367a3069daa13d26a4c4c

    SHA256

    3586aed0cc6b987e8159c0f83a8773bbdc4ef6a1d5df80c04cd50a8d717de45e

    SHA512

    9c3e9db9f2c588e6fce2d732175f96662e02c1848674341ab80851611d6cab439424a0a7f5225094a08d83845bbd27668309fc75504edd0ef5e56dd785d02b69

  • /data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

    Filesize

    8KB

    MD5

    e710cfcd4b361779f2252a0c7ed66c33

    SHA1

    80c33558185ebe0e5ea71e19b08107e1f832ff3f

    SHA256

    820c8352087f3e92aa8c1c91f7d201dc26f8859d698bb7098e998cbea73a154e

    SHA512

    883022614acf0a4483482ab85f2a253ffcfee7694a7a27152c026ed73b6a8075040094d56de45e47dbe6fb90efc7ac74de26479349cc5e1a57e37cbd945a5c21