Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2870284s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 12:21

General

  • Target

    1029a99df53ffc0c269204a8a3d643dad948d4d491e067a1b949cb948eaadaa2.apk

  • Size

    22.8MB

  • MD5

    5569b0ab80827500a646d9b38cc707ec

  • SHA1

    537bc6ceb7f2a480ed3d077bdb8d73ef0f22767d

  • SHA256

    1029a99df53ffc0c269204a8a3d643dad948d4d491e067a1b949cb948eaadaa2

  • SHA512

    2d8f7790b1b2db67b94635c1099532ecbbdece5a37f5ee144f69fd547b495d65af6d0d48d5d31d2170466967dc53fb4b4dd83d17e2be0448c551129b077d5660

  • SSDEEP

    393216:FyXSUwfh5sccB7lRvm6DLxPTSxvFObargnpHc0+oqNhZGXDop:FyXSUZcM7lhmoxPT7aURc0+oyGXu

Score
6/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.great_mall.u4
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4614

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.great_mall.u4/databases/cc/cc.db

    Filesize

    36KB

    MD5

    4cfe777c9f6e7859f5efe2197401d8e5

    SHA1

    bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a

    SHA256

    c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231

    SHA512

    6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de

  • /data/data/com.great_mall.u4/databases/cc/cc.db

    Filesize

    36KB

    MD5

    86752a4be6564d8370f2f0e403995003

    SHA1

    29f7d50675f6e59f3b808eb6dcc8619384412115

    SHA256

    50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

    SHA512

    79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

  • /data/data/com.great_mall.u4/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    066b540290d0f1112fcf51d2c3a6d894

    SHA1

    45440bf25943a77ffa4ca4d81412b49fc57c07b1

    SHA256

    9092fabde40510d30244b03248197700d0e082242e983a78b708fa4e605e7824

    SHA512

    606a99d0d8a5b02bb1016df6181f9fe1e58168684fd14b41f09e995fce0459256e389eea1d0f83365fb673264f5836706fd306cc42952dd888465e71f0774a0f

  • /data/data/com.great_mall.u4/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    a13d3e1fb55e94a13da8129fc9c36eac

    SHA1

    b6a4ea1fae976ecf5f84d8392fcaa978de4c0c4f

    SHA256

    48795936c625edfa7a08b6d14247a8f8ab3b26c89c1e419be70cf8d425aa79af

    SHA512

    033b2e0d938e6972797ef700418e41e06ea7b33e033c235ae7a18d3693ac8850318edd6334059ba12884c26a57a7e3697ed70ac3f79792ea2158a0d6541b47c4

  • /data/data/com.great_mall.u4/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    ad1e2af4ea583d9a4a580d4789f0814e

    SHA1

    988215e62b3d7db1b38eb0de17a64b7a9aebdb1f

    SHA256

    d380292875b77a58eabd1877ad3263ac0cfc006b0490caea19071ad2a2a7d83a

    SHA512

    d0a043499e2bdf76337abfa4c04b3767f0f0e34131bb9b74a8efb0ef1d7bfb6c8dba65ff2f1b42ceab0f0bdd5d7e655538bc1df3dd2a0fed5f17418e5c899927

  • /data/data/com.great_mall.u4/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    e9cc7f0512701fb96bf7f7b6ba0fb5b1

    SHA1

    7b35c389a32fc34ed99f0a55d4de8975e5251b59

    SHA256

    be1da02efd2f69b6c1ac4263f1f9f8886ac8f2e09de1468b133a24825a41a58f

    SHA512

    b77527bf063939d1dfefec25c6a23f1c35f701b959df43c58770f60187a1830e7380ddd79727b24f5d8e716d74919768c61ea721b29f5b5a8a4f0cf73e437711

  • /data/data/com.great_mall.u4/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    1f37115d8de8d242a019e8767c1dd049

    SHA1

    612347a75ce0f9d7104feaee955b58ffd63dcaf4

    SHA256

    f7e877d547ab916e8379e70dc4c772c08723a0bc694d13f3c6b5f3e28054f378

    SHA512

    534dfc60f5619ce618289a42749aecc8b92bafac1f4a4d49f3f8a6b3344cae7b674e0cf59c3c2e5da0ab9767d252519d29f4c8b8507eca13d6255165ce6c3c90

  • /data/data/com.great_mall.u4/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    cb7ef7e2f25dcc40f12f0a4f937b3cdd

    SHA1

    717d8dc6ac8716aa66780fedfd40024a4855d27d

    SHA256

    09d782ba8b66bf5f2b2beabeacf4ff85b6ec431a6b424a552338be533643efb8

    SHA512

    db6de1041f07135948f5f9bae5ebc7a47ed0e88ace25b230609c98fcbcde368b77219861a7931e40c2a5ef670d7a424bbbed0941e846f515f5ade57e5af4fd28

  • /data/data/com.great_mall.u4/shared_prefs_ext/test_app

    Filesize

    29B

    MD5

    8ecd57ba628f988155bd4ac6033a8ef9

    SHA1

    50a3025ac144f552e5dab2c131c00a8147a0e002

    SHA256

    2ac17bdd8a9fa7366c4a2ef9a931cf3eddee0fe427cda67b6e88ede65d4eb9f9

    SHA512

    990a295fd6526b74e404d2fad3a31abd5623b903b4f3d8434118c00ed4a13e5df5b58c6646bda8975bf9ad8cbafdda73200e936abb0be1cb2a615688c102395a

  • /data/user/0/com.great_mall.u4/cache/jsb.version

    Filesize

    1B

    MD5

    c4ca4238a0b923820dcc509a6f75849b

    SHA1

    356a192b7913b04c54574d18c28d46e6395428ab

    SHA256

    6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    SHA512

    4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

  • /data/user/0/com.great_mall.u4/cache/libweexjsb.so

    Filesize

    6KB

    MD5

    7daa126a59a44091b737186c77697355

    SHA1

    3d0edde6aad106a18b3c5e139bc5b17872544920

    SHA256

    075f5431397263562da0a61835f543ff13c708f4b5c4a4588a93f5ef08254c5a

    SHA512

    1dff58d4598278d53a4f571152142de312c2b1494b0c9f6a908e281845a041bfd4c864726fec0ece1c6d3994f13622ac7310aef479bca71e42a071f8d2307cfe

  • /data/user/0/com.great_mall.u4/files/.imprint

    Filesize

    929B

    MD5

    65d14640dda0eadf2cbce3124db3c8fa

    SHA1

    ecb234d6a1b0b09aa6d345b70f3604dff16d31c0

    SHA256

    afbe772de11e963e769be0eca585c5e6d373bf07f1bcede487a0be9b759d5d0e

    SHA512

    66977ae95bfd2da5fea3c2d7a82f7cf923b35bc9b7c3019d406d0b542ad91068797d660b333da01461ee6050c63fe4b5d358ed24d5c8f87278deb75139add0f8

  • /data/user/0/com.great_mall.u4/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    58a5fc8cc0b8a6e9bf7387e584a4c42e

    SHA1

    ee8dfe6e314668aebf9ec19853201a5baa6ca946

    SHA256

    653f4ad73a4c5df040388082fbaea94cd13be09e777951049cad30cd3a40cf06

    SHA512

    91db69f058820d27c75d6decd2ee4f1e5c135288f347ec17a5237769f4200f4eac08d8844bb3d6ee6b21ec69b8243d0dd3aa4d2ab9641c07083a92c48cf4befb

  • /data/user/0/com.great_mall.u4/files/cnc3ejE6/eje3cnc

    Filesize

    39B

    MD5

    7769d4507985f59116153463f09235a2

    SHA1

    b081e84d14300ac7a7947aade9c025fa83bc17fb

    SHA256

    5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf

    SHA512

    ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

  • /data/user/0/com.great_mall.u4/files/umeng_it.cache

    Filesize

    435B

    MD5

    7270cc74757f394f06f50377e61dbfe5

    SHA1

    e1a49bba05b959af88c4d4bb1f4d9719d9ee940f

    SHA256

    2eea7a2bac23383935eab012dbd5d0ee089dcbe0772240369d52b7cebe32dcba

    SHA512

    4c024b2a8e7b2a60d55f4e97e9fe511a4293f3ef982b2c68cc846e49070c091aa8b835b5cfdc208e935b9eda5f04aacd69377ef466b4141204cac56bb067b336

  • /data/user/0/com.great_mall.u4/files/umeng_it.cache

    Filesize

    221B

    MD5

    763293f3e5e1c558073021e7b209fd12

    SHA1

    ec062caa478423f2457191cdc4fa786b60ff33e4

    SHA256

    2f3e3c103252777bc13ac3a5dc077e0324db2b3ec5da347ce416dfd9ac183ce9

    SHA512

    4af8a751aa02f0a162ae009b573944e76f55ab77b8159bdb41e680c1efbf60e91416eea00f026a15b32876c3a3cf0048053c99d9d4617d0f9b6dcd568e774ede

  • /data/user/0/com.great_mall.u4/lib-main/dso_deps

    Filesize

    392B

    MD5

    01f7be41709b7f59341cd7a44dcc1afa

    SHA1

    b981fbd3b36153bb5b7d7e72514922f4074b8afb

    SHA256

    a1859cd50b7ec327fd36c4690a807eeb1f6441922a4c31b69b2026f916818948

    SHA512

    90ee1ba5ab6556092591326bfbdf2d1cf6f420f6b548f47df73bda2c1acacb59ac3028b4e98a5991dc092eb5a6f358adccacba94e929432b30a8b0233ada1777

  • /data/user/0/com.great_mall.u4/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/user/0/com.great_mall.u4/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/user/0/com.great_mall.u4/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    7db0951e0e9935eccbc8e7da79af5b7f

    SHA1

    08d0c5dd4d4efe8d33108012d2f6b20c80328f6c

    SHA256

    68ee2241d4da018c56d2462a645e5d66643fb37e598bf298e80b80f3fbb518da

    SHA512

    8a9e40242a305c495f479af1c25dc51b78126e9113277101fd75721937753724b7b8c5b44ce2f25890d157477153c12ca917c6648dc32f830f1952181c8bae0b

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    19d8116f51ee5c783d4dabff6a22b451

    SHA1

    11a16621f249f21060b7d2420612fabeebfb49d2

    SHA256

    94ea7ebd7a5d0ee379d4afc6a18dbe94eb9fc1ca2510b9d6237abb40363f3f33

    SHA512

    d087bd4bcdedf64b71064b74e0a6ae647ba4421eb2e79b32126a7d726a91b5c70cfa6fd5e7736e7cff7f606c9062361aebe1a83d1c9189d8c6d3a98e6616fde2

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    408B

    MD5

    56cfd043f600ee1fabf4f327edd57d24

    SHA1

    abe005f494a1612f336ffd0fc153646b647b2491

    SHA256

    bec11c7cafe14092d093a3aeee28580065b0b56f989df0554e24df36566eeba4

    SHA512

    1028aa8e214df4de5f62f808263c6a00a0f7537ad5e1b20b3247b462450a26483186908141021647b9d72d55eb1d24ed9e3674dd0d81ecd23e8a7ed2843527c7

  • /storage/emulated/0/.imei.txt

    Filesize

    32B

    MD5

    8089accfe2a466c90e3bee55199a903d

    SHA1

    e19f7cfe900b59fa990b4208096c957173711ecd

    SHA256

    95944f5240bd74aa517e472286327c0a3c6fbd424434ac16e853cdf143625dae

    SHA512

    22f6ce28b7dcc166c6ac216e51f4932edfcbaf23024b38646e080ca79542ec49ac7db3aca5a7e6d7623cefd6480ccd566bd46a7657cbc9564e825a11323a95a0

  • /storage/emulated/0/Android/data/com.great_mall.u4/apps/__UNI__892619A/temp/1703677283089 (deleted)

    Filesize

    906KB

    MD5

    b0705626cd9d369325ee90ab73f99e43

    SHA1

    4cd0e78886004e8d0fb16c22b5f03e1ffb00df83

    SHA256

    9eda45e9236894034ddf72a19f588cc8f002e94fe146f034adffa7d55470a964

    SHA512

    93dc05275be976e7624d062f7594c11cd449a80530b71d2828865df88bdd8ecce81704d03e8c2c1a7ff41fbc3e3f3fe0efd3481588a1f5f9e3e34b2028120b43