Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2897944s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 13:12

General

  • Target

    1c77682c0d5f3fd542887ad29c67f47c3b81052b843e1f0da98f9af342fca057.apk

  • Size

    13.8MB

  • MD5

    1bdc29fb20290fa1a2cf50fab8140062

  • SHA1

    6446fd4d2493f6d0ef9060f97d3e44ecbd7de4fb

  • SHA256

    1c77682c0d5f3fd542887ad29c67f47c3b81052b843e1f0da98f9af342fca057

  • SHA512

    35e923eb73a6886a793fff58cf0607631f3fc4167575ccda65af500a8db1e4c9bed0d15e6d39e395c77ac898882f348c54293959f76ae817768d7f975f7468c5

  • SSDEEP

    393216:pBQOwD20j1Sh1N8VCwnC7Uc7uG5Dni9K9p4TMS+KSWQB:pBb7eg1whCz7ucMKn4Tx+x3

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.wh.aolunda
    1⤵
    • Loads dropped Dex/Jar
    PID:4592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.wh.aolunda/[email protected]

    Filesize

    6.8MB

    MD5

    9196bbd0117ae9406c15e4a23d998793

    SHA1

    cfb2c63710348cc3475ded31c916bcaa1cde645c

    SHA256

    a61c9155c82658c9756b01b0bafc02fda837f09f25bd384bcb98b9d50df9d2ea

    SHA512

    f62195ab9175d4deec0f7035b0ac2ea0f9758469ff475cccfb353c5307a7be16bd38b5cca309c0b6d03a8c5388b722afef4ac2001450e26e553e76c38626668d

  • /data/user/0/com.wh.aolunda/[email protected]!classes2.dex

    Filesize

    4.7MB

    MD5

    783f46f634d73364bc97e97cc4fd4111

    SHA1

    7f7ffed2ff805b3f370d93566f0b7e8292f2a998

    SHA256

    b1989fab84be9429f9d59d9f8dfc8857b2e486e80216402f8d85fb607cc98dae

    SHA512

    e0c98572f403c31e39cdbb9557e314faac9d72ce5adc6852587a735ca3346a22dbff2eca936e651b2792ed93a3130bc23604ada0e1867bfc322b05179e1688a4

  • /data/user/0/com.wh.aolunda/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    6058c8901fcf55c43901b8cc714c668c

    SHA1

    db2a2ca98aa3939609d9e371dda340df723aca7e

    SHA256

    f40e5f03d759eae047ad092a8dfd9ae42b3204f846b057db0ceb6ed2ec57bc8c

    SHA512

    a1a33f163942e6dd6cdfc1206dfb01fa8a8becfaebea416d0bcfbcceaf93c493dd7758e2b60139659748441532d28bf65482e96340bfd1be543db17996577d74

  • /data/user/0/com.wh.aolunda/files/.jiagu.lock

    Filesize

    27B

    MD5

    971d0c0b7be62767530cdccf76ff89a9

    SHA1

    93a9b4d07b1539e4d3553cef7c17acc9910fbf71

    SHA256

    f1423bc90d7cb876e31106315a3d17858ba947b3ece63f7b033c47c6642ea076

    SHA512

    26cdc00c96601c6dbe16880a2b6b12a3b1dbe296bbaafaa11be8939b0cf6aacd4b9650792787c97d838f27bbbfaf401aae96b632ad45ce96e69971c75fb09602