Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2534779s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 13:27

General

  • Target

    PandaHome2.apk

  • Size

    8.5MB

  • MD5

    503bec78394bf6e9b598ad7fef78b023

  • SHA1

    78f7a5c53244e48291c73b0160b8d5e2cdaac7e5

  • SHA256

    d4ae8ee3c3a79bb7b6468ffe173316042d541ffb91fcbc8f4f75261cfab5904a

  • SHA512

    2664811c0338dc151a0198ca129ee971d01bf6608989e0075fe97ab4a42b320990111562deede729040dd1e5acda9c2f15f8daf4fd2a79a6a220d7275d7636d1

  • SSDEEP

    196608:3dk2gFao0cSaTrwHTYoIMMfy2gdeO8Q1hOn4bbyr3yQ+45:tpczTrwHU6CgR8Q1hrybz

Score
5/10

Malware Config

Signatures

  • Changes the wallpaper (common with ransomware activity). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.nd.android.pandahome2
    1⤵
    • Changes the wallpaper (common with ransomware activity).
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4918
  • com.nd.android.pandahome2:hilauncherex_myphone
    1⤵
      PID:5008

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db

      Filesize

      36KB

      MD5

      cde6e7139a5b90a98f69c6305b947d8f

      SHA1

      8eefdf3800ff566de77ded2c4f74d476e9582b39

      SHA256

      e106ecc43ba5f871271e2136ec2d3e55b62374069a941af2ee5a335f9f324ee9

      SHA512

      222ee5ef4da3b8592dc1c7fb78862b61a50c96ccccd867cb7d312069e5539cc68a1c9a697fb7dfba53210d7a515ecb569e039716520da9c8f516c01b049549a3

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db

      Filesize

      12KB

      MD5

      4d6c62c1bb0338082f40a5875ef35f83

      SHA1

      186cf104f89acc4a0d5bf131f67e4f5586701f14

      SHA256

      6c849bbb1270eb4fb26ad2b73496996853521f2ca6002ec1db4f64a421c4202b

      SHA512

      1f03522f8f003538e64ea74367866e0bb6489a204ebaa974d720964b44f836218a58f818c680542bf0144bfedd23a5e06cfb8eab01043a664fe1178d6487c12a

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-journal

      Filesize

      12KB

      MD5

      7fd06012796cf64083d52e9637376362

      SHA1

      69c3ba22890ff25ef5f5551f305240607b932de4

      SHA256

      05146763b389be2c099d90f64bed2ff9dba17f35fc1c8fb977c001a0d3886c6a

      SHA512

      30810c1a2f5151d7dcde6f3dba98109632c879a9214621cb5933a782399d180de94e910ce0b459f7c57fc30d3f62c5fa1694086cab86630c22566b9e82427c50

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-journal

      Filesize

      512B

      MD5

      f64687ec2b19ec557657e1b270de37b6

      SHA1

      0b8301cd3c619d220a7218b460b9a28ab127ad37

      SHA256

      c3c4edd5e536af00d86780cfc7a6aab8dfa7480d330393fe47ac104e64c0001e

      SHA512

      48804834418dd98527234283fcba99398b23772266c653f561cf0bf7b41bdc6b9fa15e532d5e1b16fac7c5c8182ce42501565e69e0b78e6b33da5b603fca0f17

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-journal

      Filesize

      8KB

      MD5

      a58c44401f65f63c0190095eb01e5d8a

      SHA1

      845798935d57ad922ceb9d3fef59b300693782dd

      SHA256

      d6ef46d75822597c28ada40afce8102b6152f9fe5ff4e1497647ab3643ba7f6d

      SHA512

      54320e61a54d919e836bfb4fc6a2289d106b948002d564f8246f4aa5604380ecf6e7e03747e15066f93aec4897ef16704adaacdc2ad1e72cb1555d95022d3f92

    • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-journal

      Filesize

      8KB

      MD5

      5817875b88d08a44e8ace80d215807a5

      SHA1

      253704e57c02822001fcfdc112ea1c0a74ccbcdb

      SHA256

      d2b772527c57149651bd26ceb0c7f02d061ed57cb3d794ed427f1d4aa7b5c762

      SHA512

      d3ad0c3a953dc4358bb78b41df9c0d045c1edcad8c4930522b11ae34cf6280cce06ddeb2c9f943e29a115dccb5e1377eda582242c74fa753f793b569801e9533

    • /data/data/com.nd.android.pandahome2/databases/app.db

      Filesize

      12KB

      MD5

      ea628e04765adaf4238a5dcdff4bbd51

      SHA1

      a801947619ea8c368efe9c006a324dc6339ac60b

      SHA256

      885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

      SHA512

      c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

    • /data/data/com.nd.android.pandahome2/databases/app.db

      Filesize

      16KB

      MD5

      4aed1b94ce11cdf55ba6c00b8d5dc3cc

      SHA1

      2640c0a961b9e68b3a99d6486c1159e859591ece

      SHA256

      ea2818bfdccbef879b11c0008cadde84136dcdfbe4218685f8aa09f73d0226eb

      SHA512

      c2379c5333abe2296852d22b0cb82e449f4464104864861b80a8a2b6d67286beb50d44bb1446d0e9b561cce4fb2ff1df1a972326b5eeec1e8ef61d644760c3bd

    • /data/data/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      8KB

      MD5

      6ed74daefe8f597c4de91ee37c9fc0da

      SHA1

      f9b66fd9cf96b6e2612751670bc09fd4a8ac5389

      SHA256

      f6a39a6e3e305da394ae8d78c71a3d960cd431cd85170582a51e39eb2e03a328

      SHA512

      4b52b064def04576406e8785a7311c6a3f472955b01e804013b1db0cdab06178000ad392e7bcb7ae988cd6fc7e6e8233bceae36f5b0801aa0b092d3f3d1da221

    • /data/data/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      512B

      MD5

      671e2ded683ea71dc19720d1986d1dba

      SHA1

      f2b8218e4eced8e74e54c2a6aacf64aa5279cb84

      SHA256

      9e36d52bcfc0680f1c357dc7b98e74a7d489813dc75939a486e87c2fc7d0ab5d

      SHA512

      4c68428007632a06f4456eabdd538d33ee1765ae32b88a1f86075517b90bb82c49a95a2b712c868ed66b74ad1666b5daa3e00a9894c54cdf08bf59ae8cacc072

    • /data/data/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      8KB

      MD5

      ffbeb714438416645bdb3b53909508c6

      SHA1

      0a48050b5fd7f7578228be43f8a113b729d1dbd6

      SHA256

      f1c4c2f4b3f0fd667da9f34e4ecb760bcbd5c02eb9985de054d053f9e836fc98

      SHA512

      95a3537fc39a6a675715998df9adbe04df62b8543025e015a714039e1a89bdd4972f4f779a4661176d913c974fc3604706faaef5cd8d9c98b885b1722112f0d1

    • /data/data/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      8KB

      MD5

      d853defe4aea302f023146904151fb1b

      SHA1

      9b289f67839e33414c863d73735962902005b82d

      SHA256

      738985ae35489e1be416de692c62e4a270745aa4099bd0e9dba5ecec3dce4d39

      SHA512

      391a701992945b86254f22ad93eb6a44d865812bd555ec23c7a7588705045c68265dc47cb656153ee010725ea1c031bdfd99bdec2d7a85f58ed347ebe42f5d9b

    • /data/data/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      8KB

      MD5

      077bf176b56b45847ab8a175b289fc7f

      SHA1

      e283a436505c3ad22e1103016e7ebf4acd5a4bd0

      SHA256

      d95e846cf31b4df60ce142e54313fc2e2666f74b80ad7e80b9841cf0d3264214

      SHA512

      dde42e60af3eb2ea0c4292e3bf7c0590c669cefc297d4d8f7cb98ac242adac31b38d87706ca0b72196a779c420a55cf2df551dd501a62f94d176cfd0a4c7cb06

    • /data/data/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      8KB

      MD5

      1e9c0eb3a5e0af67c25f5f641859bdfd

      SHA1

      86a90df2b1e4e2cb5fb98d909c2dc0951370f9a5

      SHA256

      c357ec3694951d2b55db88a41400c3dba00a8b1a343163ef4b823a408205a953

      SHA512

      3fab109ab952089dbe8227af920ffc70cc702042d9630e4469974b447210d92a3ef961ff4a69e60fd5cc31bced651069124468d78f8aac7625326fd7a751ab41

    • /data/data/com.nd.android.pandahome2/databases/config.db

      Filesize

      12KB

      MD5

      163b0e3f017becbc89b9d7f330b78f09

      SHA1

      1ef9cd8ac8655190468d0ccece0a4738634ab0f9

      SHA256

      cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

      SHA512

      6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

    • /data/data/com.nd.android.pandahome2/databases/config.db

      Filesize

      20KB

      MD5

      e9be9360f3f6d0e84e2f7f00fb07b4d1

      SHA1

      7e3dd46a3873561bce49876e16468e252018f086

      SHA256

      c446fcebcad3321df3f71dadda70d51e8c9db40c0f72cead1061bb66462494ab

      SHA512

      3f7706a60ef91a5cdbc8f1fe6056e697bf13383e4f14365eae85c02ec4737204c396da5f4a1dead499f4dcb097fa0b7c272488ef06ceddbc1a052e1d7215290a

    • /data/data/com.nd.android.pandahome2/databases/config.db-journal

      Filesize

      512B

      MD5

      116840ea6ad569f6cec9f506c84b04bb

      SHA1

      aead3101b3f91204f2d25efa32dfc8fb682f497a

      SHA256

      91b0a41ce0297b3a109ac783bec98cdc3647d8bbf3a913b408741071cdcf1fc6

      SHA512

      83480aa0fde94c3398c55baafe75204002ea8160682167ef3dad64569ad6f8eb2eef855b793198f6ecbc8b2baaef0bbed8bfabbe0f5512cbb997d4ab06481f98

    • /data/data/com.nd.android.pandahome2/databases/config.db-journal

      Filesize

      8KB

      MD5

      a96b19e6de15bf75e89483ff52fcffd1

      SHA1

      0f4e86744d596ea4a8d682cdac60bea15cc3ba61

      SHA256

      8c9dc17f63d0f1649425868889ca37b2f88100d4f0ba5002dcfba66028d39151

      SHA512

      2df7122216aa08c5b2e4f3a2437c8f2799c68089e03eca8cdb71bf31e64f7cffc285df6e62c5ee7d02c276635f4f4916190e6a0f0a00a6c497b9870f3c50a23e

    • /data/data/com.nd.android.pandahome2/databases/config.db-journal

      Filesize

      8KB

      MD5

      f70b6ad2dc55710247038eb914c8e176

      SHA1

      bfa3c56c7fd7ae281f2b0025070d5e05ec2588ca

      SHA256

      0a97ab79a3045b22d3a7006489c535d425b2e8c22d7be090b04763626a8d5194

      SHA512

      d9b77c0ac7152227906c521ed7a8d3feca07aa776dadf1b7919d0d848cd553c5bb7a248774b3ba4f7ac4bdb495ae895f9ed14d48603c32c79bd6a28496380737

    • /data/data/com.nd.android.pandahome2/databases/config.db-journal

      Filesize

      12KB

      MD5

      6e84a1bd6bd1f6a587108596e655506d

      SHA1

      6d201d17a2b5c3b23547ddee9d857202bd259533

      SHA256

      176557ce2831cb0156746c1065c10614c27503c1c7243a593cde0b08764d319b

      SHA512

      3b03bedcf92a5ff704ddbaa807a2a0b0dbda43f110eebb48e16b1d77c5d575502c4b75c36becd3dd5ec10da4484d85ad42193d2a67bedda4ede40728cadf030b

    • /data/data/com.nd.android.pandahome2/databases/data_center.db-journal

      Filesize

      512B

      MD5

      c86076338df62e46c5c70de96a44e72d

      SHA1

      507c54913a127c1c28387e4ac9fb9f8b73d37e5a

      SHA256

      4227ed76b948e0ac1674e35a0fafd2605d5b803a2d27fd3138924628cf691599

      SHA512

      1579a8ddc7c8a7d93ec4b14b0686f8f6ba50074797272042bec754f18d70a99b12c35490eefd1222d4b7aa48c24bef25bc7547b73782c897d8b9d45c2afa30ea

    • /data/data/com.nd.android.pandahome2/databases/data_center.db-journal

      Filesize

      8KB

      MD5

      334812a352961d9ae71caa84ef02d741

      SHA1

      80237e2b8836b68959b989353b8c9a3370e5d160

      SHA256

      ef566a0e39dc806d890ae26490eb424084271c5bbfe265e2c85418195968649e

      SHA512

      786fabe8e051298b90e7a373f9a53d7abfdf013f86f2e7df61250b208c64bb83bc18b7b94d0eed4c66ec8becf507a35447be20a6f41462c55b2aae520a313587

    • /data/data/com.nd.android.pandahome2/databases/launcher.db-journal

      Filesize

      8KB

      MD5

      339bebb02a6afdda1b8135ae94799735

      SHA1

      24a10a3e23b69abf3a6ee9259ab2e8bddbd5bc2a

      SHA256

      8d997d6711fd5ab211e848032e43750faeeb854993342a9aae95b22b6bdf936b

      SHA512

      12b09401fc6a527a286256e0860a8ba8d1e6e001f6ec76b8c0255fd9fc5e557492b5eedae57eac905ee98024f11a38707c41e1a7820b497f66d8ecb061862903

    • /data/data/com.nd.android.pandahome2/files/channel.ini

      Filesize

      44B

      MD5

      9fb21b9c77645725bd6f0b127749d10a

      SHA1

      7609b0a0ba81cbe34878f1dc80173a4d60b04538

      SHA256

      c47e297412a8e9d713bd584a898367a6f439d14de5f5492c35f31dbefb42e8e0

      SHA512

      badd749bcd2a3137387ae37871b55d5eb08549c097a6ea1ab31caf40c5a2b275018447509d61df621d4b29a38c0624624bb79a7489dd3bf90106c6b720a8d0f6

    • /storage/emulated/0/PandaHome2/crash/crash-2023-12-23-14-30-03-1703341803460.log

      Filesize

      3KB

      MD5

      e4207ad4ef3aad98fc381ef0220dea59

      SHA1

      ac1ac7a0c932ee61624c44ccc57c2fb1826ae58d

      SHA256

      3f49862ba340e38295ef9f4957f1f5cc66e11709ce61a0700e97a14f5810a458

      SHA512

      425868f41e128b498ac1b36f9a7151b4507894563feff28282e88116361da4bc7a0113046d27c9e9b30a7e6ec4fa5b06ac90c414e5af1c946fae47c5e97fd2e9