Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2815157s
  • max time network
    153s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:47

General

  • Target

    25898633f030376e497acce5fde7fdb8cb1e36f38f42b9f08a9cf1623b1c1ab7.apk

  • Size

    9.7MB

  • MD5

    16152158e02b414bb10d31f1c71d360a

  • SHA1

    3df1947deff3cb90a1a0ab74778837c4b0c38fe3

  • SHA256

    25898633f030376e497acce5fde7fdb8cb1e36f38f42b9f08a9cf1623b1c1ab7

  • SHA512

    0cfaf91351d3b1192e1a43f5ef503dbe1781b94722baa3c26e788eae47019aba00a4a76691bc7475bf3a902bdca954937a8acb32558b91e8aa7f40f69f04e331

  • SSDEEP

    196608:wd39U6WWRYH4JWuLN22mkUGyuT4GnuNs9HzEohCoUXgfw+gQIIV9l4:gK6W5HcWQdyuTz1oHoLfwkxx4

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.shenxingtaibao.logistics.driver
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4239
    • cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
      2⤵
        PID:4309
    • com.shenxingtaibao.logistics.driver:uexjpush
      1⤵
        PID:4336
      • com.shenxingtaibao.logistics.driver:push
        1⤵
        • Acquires the wake lock
        PID:4427

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.shenxingtaibao.logistics.driver/databases/wbpalmstar.db

        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/com.shenxingtaibao.logistics.driver/databases/wbpalmstar.db-journal

        Filesize

        512B

        MD5

        2296bbd235dcc23bea475d010b38b498

        SHA1

        4b0cb482a858b9df1561b0715f9defb6c291056e

        SHA256

        1d63d84e548fc367dc7c9eef58b4fbc46a9835fdde6a78228b5a57e0eae0614a

        SHA512

        06d852e88d1aa3a9831a3100ec4c456bcadbe0729933c588d7beec96b9c55cb37f2351e139d3a2e0ae226a1a76fd797f3c54a95de4ea003abc9f4641dfbd5f00

      • /data/data/com.shenxingtaibao.logistics.driver/databases/wbpalmstar.db-wal

        Filesize

        16KB

        MD5

        922f23166942f903f2577d1558d7d96e

        SHA1

        f9520cf1611d68fd5026610aab1f272a7ff7ca91

        SHA256

        4f53212d695df3d7c49a9382791b8fd45333253040d6d6df25244330d45fab9c

        SHA512

        d4c0f7776ccbb7bf0cf67a3ac668850db70ff8b009f729650f71c77fcb67c4704d290e727ee6aa81713613c37c33b41ba4da8fbb7e28f3beaccb5ef3608ffe0a

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/OrderDetail.html

        Filesize

        6KB

        MD5

        4e906d9054e8d41ec339e1b348455c1f

        SHA1

        2282f7167f6b208df62da4b0492da91ee89ee618

        SHA256

        dd372b0643ec769e8b0965585560454d46cb8c36ac945e71793fb7393928d330

        SHA512

        9cd6eef5ce5edc562e785fef626722be5ddb58a923266488c0a0ca15eb6f2c1fa666dcc9d659658d658781a90b84c914af1ed876e3c077169a963de08779797f

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/OrderDetail_content.html

        Filesize

        17KB

        MD5

        da22c87f71d189bb12d906c33349d093

        SHA1

        d749f8c645c1dfe086aab54bbf36f3b223c970f3

        SHA256

        bf77b5c2b11b83c69fd1bdd3a4461d05cb66ed305b2f0af01a66b37b67a709b8

        SHA512

        32af2269a5d6a0b948325e6d9926f88dc50b26bde2dacb49983b146d36ba52c39960bf3ac3d85e072cf9691d8a1b16858cfbeb3535824f8f2a83206cb1b2d1cc

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/README.md

        Filesize

        50B

        MD5

        b21792f5b39666516d040ee35d9b935c

        SHA1

        38af5845ef7b74403c95e7c73e42b221b699fbab

        SHA256

        892e0320021d44a2b7db4a47998bbc254b2bf1ffe4223f42be5418b8f86be4ee

        SHA512

        75fe49b9a51b669728ff6f67ac3c48a656fe371cf7b30738d25fe6e24cfd98ccc7b67b3767ea10601e87ce4df31f60f9cbadc9dbf7043ae9971d9e1c9e6cc61a

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs.html

        Filesize

        2KB

        MD5

        1d8d1d1d34855af5f706f3e4352ba1ea

        SHA1

        7403e5c69f5702f25f867acea5908aa972a9945b

        SHA256

        d5a0e68a0ebb13cdfb7217a75a4d0b1b014686b6e040463a7675c7a48f711454

        SHA512

        70e9bf50cd3efc1d3ffdb12c20e41f23a2d7131a5194874e7f217d50b0f6e31b20bc06c894b50abe8194dccc4221ff9eb7c24fba8eb10c9a0554f0c3b354815a

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content.html

        Filesize

        3KB

        MD5

        68fba91275efedb977dd43db05cb3ab2

        SHA1

        933f041ffce4b5cbf062dcba3e48ef6502277884

        SHA256

        f3c30e4669c68ec5cac9be0843836caa85b6dce47c067199c0342166ce603a16

        SHA512

        6dffdecdca98b0e7e3daca974a7d8964c5bd461693fbde2c252fe4947ac345f4b822ce7978caaf1ea7fd670a1d47bc1b8fe4e480645147168cf5dfecafbf512a

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content/css/images/logo.png

        Filesize

        7KB

        MD5

        52f2d4b40155c5810d99b68eef488f75

        SHA1

        0c47d101df9874ad5de03c6b34eb8aa41610e81e

        SHA256

        e1c8fdb20c292f2c7ef530009166d0af848a87497ca1bda78aba74e081dd34cd

        SHA512

        0d0520321f45fc5813e8bdc09e0af9826bf00343ba833b248003f2cbcc41a5d70d03c3fa7205389f871c8b1ff9daaf0605ea19095a635ce19cdd5b7724337ea8

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content/css/images/slider.png

        Filesize

        63KB

        MD5

        3be4602ab29bb01298c5078f508af3a6

        SHA1

        1ab797c0d774338c6216aa5f26e8aa1294877696

        SHA256

        132983bccbf7a2af8ba66c074d6d2a27435941596cf7f0e1bd743a7d3f7a14a1

        SHA512

        14d50a25e98b54b304ee1765bf838dbe6a3bcf8fe8d4a35203bffe91c67218e9961c65592629e50c686606d58f68d00d110002d075560f86c618e3350a784227

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content/css/main.css

        Filesize

        703B

        MD5

        913b787b1517fccad890ff35b640dd74

        SHA1

        01ad222d0a652b57e798a367287c29843747e6bb

        SHA256

        15547db822089b7743ebe08dd306fc9b473afb39c82e2cac987a68e2e56f601e

        SHA512

        f42157e3171f29bb946df1a7b3a6448cb22ace880d079ab8ddb330031dde012a41ab75cfcef812fcecdfa482be8aa57bb0c7b5cb3a86c89ab7489a5495189520

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/agreements.html

        Filesize

        2KB

        MD5

        9d2b907c9f5210f9348b619060b311ce

        SHA1

        b6384760f48f67272095d20e93ca9507ed6b73cd

        SHA256

        1691249bc145842d5e0b23390c4dbcaafadb04890f43a964d07f3f752f458f64

        SHA512

        5f176ec3b762c5a2446d3c7f0469778170dd21d08b877c35a2f3df2fba23f93de46643dbf85fa834772a1182174ff3d74c6283fc7ddac64e00d3982ad5373c92

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/agreements_content.html

        Filesize

        13KB

        MD5

        967c5a35684df82f4bc4b10e98a00449

        SHA1

        771a89ef17603821a5c791ae2d336003ba9449f3

        SHA256

        5d5c5098fbc035c57ce2a7258b6d1e2eb2a3564c51d9ac39bb11b218e31c61df

        SHA512

        3865e9ede502a6edee119144397a13bf44817c589b4f582cafed1e6a097d71989e0f66af1132550a12e7468309feb5c5cf2430b34ba4bf6e58363ee0b082756e

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/agreements_content/css/main.css

        Filesize

        404B

        MD5

        9922c5f4b3d50291ee71df4101d40419

        SHA1

        cdad55481c4e983bd15bbfb110ced82d16f0ca94

        SHA256

        3b9c03277c80066ebe54901744f66759cd77d29cc80ef58725d4c08a316733ca

        SHA512

        58b3b5fbb59143ae1451ed122a3c1bdfe16b573634a5d0056ce0979c2b53d5eaf3c69947b03b0aca522eac7f02e190af65f9aa028a4e4532466ce72d15865d66

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/config.xml

        Filesize

        1KB

        MD5

        0c7618ea11ac855d6c5cac631def353d

        SHA1

        de4ab9600e4462e5f46eb952690f10f9161d1c3d

        SHA256

        2145c696117269fa6188b041b0ab7180e2dd61416a7ace13e057361ebbbb3935

        SHA512

        548b8a74c27114de15c280b71054cf9c06321d43f138122e1e22d156f19766d4713caadc83d9ca09298252e8ad5d1f718559bc8be3a47cd61b56ef49a0bfc15f

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/css/appcan.control.css

        Filesize

        6KB

        MD5

        574aacd06bb9e1e093fdb71e1deb72c2

        SHA1

        68ed481587a55d2ee170babbe6b71be7f90067a7

        SHA256

        0447cdff3916fe00d43b56dc2b77297041bf04331ce3bfe476a1acae6b05f5e2

        SHA512

        5b35ee51a62ae7ec2d420b01cc9f50e48c049dd8b7c261718f53bd8cd5be51d7f18c6cb6b59740983a206121b2fe6ce1c34d8ffbddb002beb72ce897e512e10b

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/css/appcan.icon.css

        Filesize

        4KB

        MD5

        0557ac02fd5e0cd20269940e71f70ef7

        SHA1

        17a89b6fb0349de128b6a3d88889931fa9b097c2

        SHA256

        cfd0bf13c2de23ddd05feedb0637a0b22b9caee0fb88c3d024392ec475603276

        SHA512

        30660ef2cde752e9b26b98e8020624c29a22be2940e3042578fe74a5f6f4fde3f0a420644e482cf912207275d739e3d7625deedcfdda3f15c7c673207122a287

      • /data/data/com.shenxingtaibao.logistics.driver/files/widget/css/fonts/font-awesome.min.css

        Filesize

        11KB

        MD5

        ed58a1e225c3be5521130e6e1e10344e

        SHA1

        f8d4434c064179bb5fdcb5350f58d46e45aba4ee

        SHA256

        ee94bf0771f20c79e61a1024f774277bc7d0c907fc26a6245241aa90b61bc3e8

        SHA512

        42f2266f53f9ee1786185d0058f451d18314801844179baf8f3d39600b09c0f6a723727d25797663a61d469932ae0c735f0638b5460714843a5c9c90aed64234

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        17KB

        MD5

        74c4fb9edeb53e00c6cca19429cc4996

        SHA1

        a9f02d00137516e48755c6483dbfdebc3be75fb6

        SHA256

        ded0756d082b0045b4c7274c17e81225f14f5838f299ab2f272554c82830d8cf

        SHA512

        eda893ce4205ad114497e011848e329e6372ea301285ee95c0c7d5d460df5a3ed74e8ec05ada19a11d0a1411641de56b99be2a4bd17f1ec5132d0790ca59b39b

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        55B

        MD5

        62a6ac4dc43ba41fe28e7265ab25cf15

        SHA1

        af22f5ca72e9fe39bbce4b26fdb49b10a0ddbe59

        SHA256

        9936c020d4bd80f027e852f6289a776c3e679cb205cb7f2e7a381876030607d6

        SHA512

        88228539c9ae184c99cc3913b707f70705ddf9f75f4bac90bfab7aa02127886c39b86eb4444f25b471fe7dafb8c478ee266e468ec1250d68537c2ba1ffbaea96

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        2KB

        MD5

        dd3311e174f346feaacec5fcacf0984a

        SHA1

        cc2ee9f3144fe57f8f5a39a13b482aa9288aafac

        SHA256

        2e90202d12ccf3efc6e0e6dbf5698528204726874c9e4c119dd94d9cc4ba38ab

        SHA512

        02684fc82fd680d14e9272a28e1142c45de71e1d2570ac934f7a80f918c1f042f1fb084932d9b07b6fec2bd79d73403679fe8861b47a943910948eb602544a7b

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        7KB

        MD5

        b6dcf2ac3d6bfef6e962608a9f0b961c

        SHA1

        d2867d7ae2dde3076ea3fe766e8c37a7113841fe

        SHA256

        f5521e176d9562250aa732641083ab345756f69619fd3aa029620454c4c534fb

        SHA512

        4094f0a10effdf5758cc3e083a0f38f92b03e28b1b6d0544938274d3316fa184a5401b05aa7840d496c5ff9a9eb9ce2cf860195c5d7e886efc1bdd1bc0be9a3a

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        63KB

        MD5

        d79df046a6544e6b077b34a59552da2d

        SHA1

        97bfe4a9cf3f3187a721229e95ef4e0832d3e6a4

        SHA256

        dd0f1cd64d4c7d7ac50c927bd96e6b8beb60ef4580070a50172233a475d33fea

        SHA512

        7847af44ebe4c09e2d7c626152eb92fbbc18811037419e3926a6e1effe43d409cceb15207dc578fb1b3924a2116f056ae85bb128bb7bedf5e47dd8f4cbf46964