Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2801632s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:27

General

  • Target

    PandaHome2.apk

  • Size

    8.5MB

  • MD5

    503bec78394bf6e9b598ad7fef78b023

  • SHA1

    78f7a5c53244e48291c73b0160b8d5e2cdaac7e5

  • SHA256

    d4ae8ee3c3a79bb7b6468ffe173316042d541ffb91fcbc8f4f75261cfab5904a

  • SHA512

    2664811c0338dc151a0198ca129ee971d01bf6608989e0075fe97ab4a42b320990111562deede729040dd1e5acda9c2f15f8daf4fd2a79a6a220d7275d7636d1

  • SSDEEP

    196608:3dk2gFao0cSaTrwHTYoIMMfy2gdeO8Q1hOn4bbyr3yQ+45:tpczTrwHU6CgR8Q1hrybz

Score
5/10

Malware Config

Signatures

  • Changes the wallpaper (common with ransomware activity). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.nd.android.pandahome2
    1⤵
    • Changes the wallpaper (common with ransomware activity).
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4252
  • com.nd.android.pandahome2:hilauncherex_myphone
    1⤵
      PID:4304

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-journal

      Filesize

      512B

      MD5

      43501299097ddbf6653a226eabedd298

      SHA1

      d7832dc43f6ed4ebbfd74c470372ea957e2e8610

      SHA256

      163609d51bf3ce9580ddcce6e8af656c7358443c5f09291b3ae7170af075c6e2

      SHA512

      911469a0d9041f3e9aa94b8c8c476e4fc1c8a2c60b5b6312e1a96d7d3945095848de14aa59d84ffe4c1cf86a0d6e6d17f7411e60ab2aa7eb257b287549502803

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-shm

      Filesize

      28KB

      MD5

      ac3fa2093b905e4beb3ebe96038a6ef9

      SHA1

      c46f5de8a2f2fe858890abe53acb7b44547220a2

      SHA256

      389adc2e706adf9662a63511bd82e06b506dfb1cc7db11502400acc1778351f7

      SHA512

      a91e358b77e51c513928b87e4fab607672b0cdc891ee3b959cd3805637a542bf3eb5bb94cc83fca0dff7a4241313cc90ac976232d46a293a4cde532745cef4f9

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-wal

      Filesize

      48KB

      MD5

      4bd3bad1f847ab42fe8f95e56feb0cec

      SHA1

      03cd26b7524c240bde5195b977e63f388855cf04

      SHA256

      863b9b9730c17b9b3374d2ac36bc6adb0ba22141f778a59c952c8f169f2d8533

      SHA512

      d3e15bc9f93507e7757ccca31b84f2bd05f757f703d18195a2a184864017b29bf30b56d234458dc6531b6cf32556ec5cba77bd3c054559939ec8c1052d483af5

    • /data/data/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      512B

      MD5

      230823f25262b970f174962b4f32f8e9

      SHA1

      c49b107e9fefa8f4aeab8010e25e235488dd1317

      SHA256

      f8d575f5f8963ed079333a2f04eaf13c58ccc79333dc3f6b06a164c2714fa102

      SHA512

      917b314f1dc4d65bb1ce0b58b6d4a0f2139057959924246798674c32130e8f0126358fbca0db5969aa51c55632b466773ff1b6ae4bc511d873c4f89016340121

    • /data/data/com.nd.android.pandahome2/databases/app.db-wal

      Filesize

      4KB

      MD5

      1c7424964a4015605906856d12f5ecbe

      SHA1

      7b578191fc97c1db6f5f86d4c4c652660a0f96b6

      SHA256

      83a658a552ac5b860008305b5562e559abbfc8fc8e8bb2235c4045ae3d758f5b

      SHA512

      6efff4edf8af4677f03d23e0f4fb7c7d5486d59a1cb67f8544586e6052bb7ece9ee7af2e8de47e6d560aac8a081dabbf12190cc11af4f4f81c3937a60e63ddbe

    • /data/data/com.nd.android.pandahome2/databases/app.db-wal

      Filesize

      56KB

      MD5

      39cd6d888bc36db7e215a43d035b18e1

      SHA1

      67fb566684a348fc1255ab74500d35f8c45813dc

      SHA256

      ce7baca2eec3f88943f9aa28df590e51ecc91de2fc0881f4e80a4fda25350988

      SHA512

      e65dd9025c23f5ddb1bd64ac6cfa3e1619de40ee6d542ba37152849b0bc594b6e3356c1da3d63c3ba808f6bcdaedbd2e953ef11528c324ec8daee2b45f5ec789

    • /data/data/com.nd.android.pandahome2/databases/config.db

      Filesize

      20KB

      MD5

      24a8304035b7a361c98493053616e563

      SHA1

      308fea28046fa1964a119b0733729770b9b459fa

      SHA256

      df3357de9e60fa640e523804e87151a940fb4eae66fc3ec6947c5c99834f3964

      SHA512

      c574180b36362270aa14e6f683a759aaed3552c3b79b7771beea11c95c985a41d4149136a421f33759b1b06c5bda528d86b8a53353bf106d77616e6c3da3a9c6

    • /data/data/com.nd.android.pandahome2/databases/config.db-journal

      Filesize

      512B

      MD5

      e82fa278719b488b3f9e5dda73b3451a

      SHA1

      c1e22a4241797bf198a6d72d4776d6d45fc563d2

      SHA256

      0127ca0a1ebcf639bd3e051a022e7780495cbcd8ccd171fd961e035a3186ed61

      SHA512

      68372a6f8aa5c694d909dbe522123ce5684ec355323a688c282107fade3fdd4e7b8bc33b9559485f0dde190ee0885c413bc2916fa9fc3a1276c93363a2d2952d

    • /data/data/com.nd.android.pandahome2/databases/config.db-wal

      Filesize

      16KB

      MD5

      047cdfd899b2562aae14f0c62a2720dc

      SHA1

      a5d58412ff76bf8f3ee6112622f0cec9b4240ddc

      SHA256

      0a39da8a6caaaebde89b2f52d2d109b6fb94314a9dfbe765cb31d00bb33b66e4

      SHA512

      532a000a5c7a2b9ea90f6f2f81b1ee54ca72ec24dcc76d8e70d1e49a1eb9fa09241476e83581af84afc70307274d29011c23bcfab53f1ce7f54de99e7b0046ca

    • /data/data/com.nd.android.pandahome2/databases/config.db-wal

      Filesize

      8KB

      MD5

      93f584679ffdc9327f3c5c47a5ce6825

      SHA1

      981fe978734cc3c71bf791c0555d01dbf831b8fd

      SHA256

      75e86b1fd86f787dac94bfd0dc909335650f014929060d6d588bd732ef2729ea

      SHA512

      5a7e523d4679f3aee312d094780634dd4369a16441263b82e8f55c06a348f18cc98368c425992b39ed0fbfc9525e0f6aaead07251410a2219b7315db50ca9306

    • /data/data/com.nd.android.pandahome2/databases/data_center.db-journal

      Filesize

      512B

      MD5

      60eef3b5a4e553871247265751859290

      SHA1

      f05c3acd37ebb0307e6caa36b7d61419a6139476

      SHA256

      94f8a9d3adf95349f5d6886be515cb553b88ce6ee060f10330923f913a5538c7

      SHA512

      1a7373de3d641dd4a821313da38d8f0b181a9888c33a193d94d5e4d050fed92f962418036854b4c901ff4a59d5ec1205527ed2dae637138963197e139db3bf96

    • /data/data/com.nd.android.pandahome2/databases/data_center.db-wal

      Filesize

      16KB

      MD5

      b38f50f06fd12e9c87b8d1dff77c574b

      SHA1

      e12c651b9c4aebb30dc261cba24fd11cae393bd4

      SHA256

      f7861b34cbc44641af60427078276ea2dbcbfafed0ae22f3f5c40e3e19c922df

      SHA512

      52bb43c293eab75edb7ba632884f99a415f55951454721d4e231594d4486865d3dc03ab2934971a06f969857b34e7dd52994b0e92e0a7f50787be1504780d75f

    • /data/data/com.nd.android.pandahome2/databases/launcher.db-journal

      Filesize

      512B

      MD5

      ecaabfc793c3460acba07b35fca03487

      SHA1

      5f210b3073cee81c97107eb99f13576bad0b06bf

      SHA256

      f322f7643980f34cedc9cb16b6c44a2c023602a9e24a94640165f78e0e365914

      SHA512

      1ec4cb92b101c063d9ab6aa9380adac720da1a0d6b4283c59895aa1f71bd3474a64efb31edf1648d06c57b95e40dce0bc269fdebaaac343759de5ebe241d27a8

    • /data/data/com.nd.android.pandahome2/databases/launcher.db-wal

      Filesize

      36KB

      MD5

      4e3e6f9cfe904ee3506f06bd50d3c29a

      SHA1

      4906155742caaf863c133846a08e8761771ebf6c

      SHA256

      8abf8673d8dc262b07bc7da8f1dbb2f62716ebb7f38cfef41a4d95555f733087

      SHA512

      cdbad12cb77f69ce0c72e143c6a49ac77faf5f94cf14e496b2796639ca8541b24efa0177883be131858c4e95ef757ae126dc59b7674e8c71d81a323aa5b38062

    • /data/data/com.nd.android.pandahome2/databases/privatezone.db

      Filesize

      40KB

      MD5

      944ef9bdcd845f1f069a4b755271bf7b

      SHA1

      19dd7b060b8826760fde1425c51ad84b7f637c9c

      SHA256

      64b2d397e442de69195ed4e3739e8d5a6ed24bfbf77577baac23a0d9ed26df8f

      SHA512

      09d0f437e5b89e207860ed4f8901c7a9e6f8e6ccac090b2cbf77f5cc3ecca77286105b73b8f0c309b2de629df3e8df77eaf2c6838c9e88dbae47faf255ed44b8

    • /data/data/com.nd.android.pandahome2/databases/privatezone.db-journal

      Filesize

      512B

      MD5

      9ca0d436f6b0f658fa53cc55350dcb04

      SHA1

      af6e5fe50900a2fa23d07c3e5ce6afb2a6c0e457

      SHA256

      d0b8ac6b70f34ef64255f24a6ce8aa9de537f033c25385790b3fce58cbd461a3

      SHA512

      6f512a4544bc5b7e7b3b54bc4e45fc2e25cdedc7368fc48c0669e018640fd4b9bd4386ccf86d204f21177fcdf7f6b487b7c9c2f90e5fa8b619f47afce2fe26e7

    • /data/data/com.nd.android.pandahome2/databases/privatezone.db-wal

      Filesize

      52KB

      MD5

      0dec29a1e3e6579bce4c952d22c595c4

      SHA1

      2cf8203cc3c58b8b46f5031f06eb00811002de20

      SHA256

      3de265f1d90ff7389a56cedf6302a82014bbe892f2ed2bbcc0e7ad1114123e88

      SHA512

      6b4eda1acbd0da0cf8036a8c19cab03b5522b66764e2968223d10b83249d8da96c59be26469e9f5105e67a73323686e6c4f92866bba499602c8ecd1fe2eb3c70

    • /data/data/com.nd.android.pandahome2/files/channel.ini

      Filesize

      44B

      MD5

      9fb21b9c77645725bd6f0b127749d10a

      SHA1

      7609b0a0ba81cbe34878f1dc80173a4d60b04538

      SHA256

      c47e297412a8e9d713bd584a898367a6f439d14de5f5492c35f31dbefb42e8e0

      SHA512

      badd749bcd2a3137387ae37871b55d5eb08549c097a6ea1ab31caf40c5a2b275018447509d61df621d4b29a38c0624624bb79a7489dd3bf90106c6b720a8d0f6

    • /data/system/users/0/wallpaper_orig

      Filesize

      53KB

      MD5

      53c324a10af9d18bddd8da209fec4bc6

      SHA1

      5866b9497fb931dd808d2f39256cc8efaee7e704

      SHA256

      45bad7f36362b62071722d7747695d8c16cb5b85be1c9051761ebc152c4da1f0

      SHA512

      fa06754d575d7638770d5ad5904525cbdf7ef5d0110dc2ce47e3b6d2c10a759d333b1d8300269cd0843da879eda80e8dcb2f0fb337d8256b3f289d9ae334347e

    • /storage/emulated/0/PandaHome2/crash/crash-2023-12-26-16-37-57-1703608677441.log

      Filesize

      3KB

      MD5

      d3a98a040125a001c84f236729e4f87e

      SHA1

      f122732b04ced0519c674c6625ee1a515891ae03

      SHA256

      3132c58bb675be498190616551838a24c3c8fda7d8d4f855a9a48c482b6dc757

      SHA512

      eb2a4bfee12f685d09752c5f178182222adaafb9c56de66e65c20d60afff805b24143b557a0c3f1b825c6fcb4916c8219cac808dc7fb76c7495887d30ee4701b