Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2534985s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 13:27

General

  • Target

    PandaHome2.apk

  • Size

    8.5MB

  • MD5

    503bec78394bf6e9b598ad7fef78b023

  • SHA1

    78f7a5c53244e48291c73b0160b8d5e2cdaac7e5

  • SHA256

    d4ae8ee3c3a79bb7b6468ffe173316042d541ffb91fcbc8f4f75261cfab5904a

  • SHA512

    2664811c0338dc151a0198ca129ee971d01bf6608989e0075fe97ab4a42b320990111562deede729040dd1e5acda9c2f15f8daf4fd2a79a6a220d7275d7636d1

  • SSDEEP

    196608:3dk2gFao0cSaTrwHTYoIMMfy2gdeO8Q1hOn4bbyr3yQ+45:tpczTrwHU6CgR8Q1hrybz

Score
5/10

Malware Config

Signatures

  • Changes the wallpaper (common with ransomware activity). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.nd.android.pandahome2
    1⤵
    • Changes the wallpaper (common with ransomware activity).
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4475
  • com.nd.android.pandahome2:hilauncherex_myphone
    1⤵
      PID:4533

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/system/users/0/wallpaper_orig

      Filesize

      53KB

      MD5

      53c324a10af9d18bddd8da209fec4bc6

      SHA1

      5866b9497fb931dd808d2f39256cc8efaee7e704

      SHA256

      45bad7f36362b62071722d7747695d8c16cb5b85be1c9051761ebc152c4da1f0

      SHA512

      fa06754d575d7638770d5ad5904525cbdf7ef5d0110dc2ce47e3b6d2c10a759d333b1d8300269cd0843da879eda80e8dcb2f0fb337d8256b3f289d9ae334347e

    • /data/user/0/com.nd.android.pandahome2/databases/91analytics_v2.db-journal

      Filesize

      7KB

      MD5

      d0d1d34fc0d8ffe0cd7ba02ae695ee09

      SHA1

      6937ebdbfe51796183ba0af405ce8634daf0b72f

      SHA256

      c57be7beef3de6b62660d7c7d24347fa46de45d5d5d451992f751f88bc138e4d

      SHA512

      5c205018978cd8ad7b67d56fe0c60c1ce998368b73f05da56440591a11e425152408d4f970a6e6130264989e6b50e925b9613e95edc3df5c9b737af2b91bfb18

    • /data/user/0/com.nd.android.pandahome2/databases/app.db

      Filesize

      16KB

      MD5

      ec6a9a5de4fb4ae01e1c001d12789d6f

      SHA1

      4ee3e01d9a9c91060b3f0cb4cc9dbc3d0c6d3ab8

      SHA256

      698e6254799a5fcb69c57f46d3571f6a2ec9b45ff4b5a7470a925e551e6ea7c7

      SHA512

      8f955e60b5954e3b25623a6753efb442cb1b6e8ddc440dd4c53a8147b73b37fd8432a10e9e346972b7bc2bc416d0589c051817e9acd083aacf52a91d87f1e3fb

    • /data/user/0/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      8KB

      MD5

      604c4841b5cd256d9391d2ba0adf6ab0

      SHA1

      d5d0e20279b7e1db0a09f306de8af419f0f4ea3f

      SHA256

      d30ee3a9e13c8af3ec0a2c17912ab75065fd52a916a7014baeda178ed3ecc443

      SHA512

      be92f6d8cc223f7b67f5796cebeb6e26a202ed8627451dcfe14497f448a3e8ba6b159c9e8b044d0361975ce2e0146f047fb23fbf6848506261dd809fcb93bf9e

    • /data/user/0/com.nd.android.pandahome2/databases/app.db-journal

      Filesize

      8KB

      MD5

      abbb6dca8f53317b539b371df6e812b4

      SHA1

      8a1f6286a88cbcfa9d02c7279674ed940123b8f4

      SHA256

      7f591e5d365c18303381fd17a06641f7c6afee3bbbe40dd76f67aa01c6925916

      SHA512

      c4abd5d7e039160ce75d0328414759fa60ddf8008583a6861adf8c494b595dab02419ce5138365f3407ce5c225f65ecddd10ec29b6c70c28f387d2b0fc73b523

    • /data/user/0/com.nd.android.pandahome2/databases/config.db

      Filesize

      20KB

      MD5

      a2fc944cfe348fc6bef7ecdc415e4d24

      SHA1

      5b6eb44a4cb44d1913cfaa6760c067711772dabb

      SHA256

      82dee63b8f47ac54fa13df91a8275adb5f5bb71ed5ee3b52edaefe9c64c436ae

      SHA512

      a9fe0df593f84ca356f5b5dc3a32cd96080c6d96bc2ab798eb0c0615ee0ea72de8b504e74b628e3f49d68f7cd98d8635339e0112ae43b7b0c89cd4efeb46f1c3

    • /data/user/0/com.nd.android.pandahome2/databases/config.db-journal

      Filesize

      12KB

      MD5

      94eabb19295bd75aee5104b6e87dc73f

      SHA1

      c0d1a0fd3ab36bcc45096b512c6e4ebd1269a85e

      SHA256

      c7de6f12ff46535382a324cd64d1fa4dd54da640624da44c8f00eb36d8c3adb0

      SHA512

      a528d212f04d9b11d1c70a10a930b3b8429ea8cb38501e4626be12102b7514949811469eea873b458bd9baf6274947e7a2c6b18b5c13ce3a32009b93f17ca366

    • /data/user/0/com.nd.android.pandahome2/databases/data_center.db

      Filesize

      12KB

      MD5

      171aedf968e17a2744d2585715606cb9

      SHA1

      bbeddeb3b89fcf809619c35b4a318a80e7d5b029

      SHA256

      d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

      SHA512

      78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

    • /data/user/0/com.nd.android.pandahome2/databases/data_center.db-journal

      Filesize

      512B

      MD5

      6c83232406c3181954d5ba66521dc99a

      SHA1

      77773f7dc2869b3ae3628ad3f57a15126636997f

      SHA256

      b89ed223788ad1d09b6e63fb43235457f00baaaca674329c9b6a752160f4bc9f

      SHA512

      aa01079399ddf5069509a38561d471321c39b3ab01ff9bef07f0760aca7d96ec3283195db8673b34bc81135f1cde1ea42b9fed593911df9010abc0dac9af3874

    • /data/user/0/com.nd.android.pandahome2/databases/data_center.db-journal

      Filesize

      8KB

      MD5

      364edbdcd9ac92b1bbd0de2266bd6dca

      SHA1

      a3100f9ce368e2c12f7aade63972b28c190c711d

      SHA256

      d297868cb955ed3f798719b9eca1eaeb0bec0d38eb5845963e118a36a32e8435

      SHA512

      199d04d83aad522f035ac07719df5112a39fee23e91bf22c0b8ea6301b9f3e49c06f21663046adb5c20da402b78ceb325813530f19d1ffef7fd8f55611190f2c

    • /data/user/0/com.nd.android.pandahome2/databases/launcher.db-journal

      Filesize

      8KB

      MD5

      8c31eee4a9394e9f7be0c8332e920219

      SHA1

      69bcd052b6f61f69ff941a08633234be7940c713

      SHA256

      c3d4a5bc70fc7f663c4ef62bf83ded3dead7362d18f4905cf1e828998b7ef2f6

      SHA512

      2e19a77c64a0805d99638f424700e5f93056385b7b250e79bb215784daa16986fbb1d09233598723b7cd8382a4e0df655d2d053b0b3ac1804e01f29a4b8d8d9b

    • /data/user/0/com.nd.android.pandahome2/databases/mode_db

      Filesize

      12KB

      MD5

      f41f531c07d4141546a531ff9caffdcd

      SHA1

      9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

      SHA256

      bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

      SHA512

      e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

    • /data/user/0/com.nd.android.pandahome2/databases/mode_db-journal

      Filesize

      512B

      MD5

      56a0fe18cc7890226f5f59679272714d

      SHA1

      55fb9b8f102a188a9952b34166267bf8c87643f7

      SHA256

      b08ee896f0d073bcb8f2ebf1525d566f0bd4898ec49c28a0905563ed306b7c13

      SHA512

      618416ae0b7e77a77bfc5854039c07e36acb13e0c78282dca4f53e17820a8fa77cbd93edadec4df84dd82868b204b88c58d8ed65cd49b8bce9673b2cf3b0261a

    • /data/user/0/com.nd.android.pandahome2/databases/mode_db-journal

      Filesize

      8KB

      MD5

      df52cd2d448c99584283421fc10e41e9

      SHA1

      d11ce458c31d31785ff97889ee056cb243eb32d6

      SHA256

      9c8bd3136c925c4deadf65c0ae5de1f822132508266a511b431ca2de73faeaea

      SHA512

      c90111941bb6ea69b29806546da185ca87df132e9a9e19befeca2e58c4a1df4e7521f2657d88ca1eee08b277f65bf5721ee6d87cbe8acd7398e6d29b49fbc6fa

    • /data/user/0/com.nd.android.pandahome2/databases/mode_db-journal

      Filesize

      8KB

      MD5

      ca2e5cd88db5291d6111e74e115141fc

      SHA1

      eee4b880365da1f26ab82140b8b2553da0c88f50

      SHA256

      17c50116f63aa5631f492f0e0e9c0074eb4c2ef6205143a874b8e5025f8c0ad5

      SHA512

      885bed86a6094395d9e69885a8ca0fa9107af5d5d50d683428ad13cbce04f9b7b4175f9d3307fa4229d3edf1660aac0e6ebdfeed80d7a43e67f0036d753f22a8

    • /data/user/0/com.nd.android.pandahome2/databases/privatezone.db

      Filesize

      40KB

      MD5

      80e7b27a83207733b12ddd1ef50d9991

      SHA1

      c274e4fc04f9952067a738d5587a1c273558c36a

      SHA256

      40241ec33b8ef0df1c93e7ddeffb23f84c7d75e22c3174c5744472ebb949dbe4

      SHA512

      a676e1e04d0f760973fb656349ae01e06b98a7e382e689207090a2afd9d8eb66a4553682f6d98f872d4ee502213910150f12d6bb80abf274f11c859576188bb3

    • /data/user/0/com.nd.android.pandahome2/databases/privatezone.db-journal

      Filesize

      512B

      MD5

      ea47f94cbfc06780666a7b013539eb2c

      SHA1

      d2b15e20fce8e3ac767076a183e9cc8f64babe30

      SHA256

      987c80bcb8249a8a68ec9f4bde316907389e2c74e894287aba1aeaf055a53453

      SHA512

      738ebc6f1d0d635fa979b948c10f9069a9cce658497efe62ecf4de9286ad78772f90da79d340628ac30c463d62890ae2671894584f1e6ed7b9a96cc47e38d497

    • /data/user/0/com.nd.android.pandahome2/databases/privatezone.db-journal

      Filesize

      8KB

      MD5

      a5a9cc7ddf9b89d538259059f7b0672c

      SHA1

      92250331544070e8e611de0513f2dff3423e3311

      SHA256

      0eb2c14b3303bcd1639fd936d8cd57c431c51457aa485a692c561afc0241c17f

      SHA512

      0f7ef5bbff7cea007df1fa252df0adb4f7be388ed09605a9fc1c20b7cc2f261df36856ae57b33af56d17a65d4ed0fdf8abcaa96d2eb63d8cdd625bb65ae90e28

    • /data/user/0/com.nd.android.pandahome2/databases/privatezone.db-journal

      Filesize

      8KB

      MD5

      77213eec0376507d76b8d4a1b00aabe4

      SHA1

      2d9f493fcddc7cd29cbaae4d09e633e89b528ee6

      SHA256

      e95bb4b8d9aea41a41e6b7488886ed0c751f277d9530a0d46637cd70eb972d2a

      SHA512

      36130da1e6cd9d6a01455e9e4196a5d3ac48015125c6753151caa49a09ad497a987f20cf1dec87cfea6f56bfb68b62536191ca2e98bd63cf05d0553d49c3ad6d

    • /data/user/0/com.nd.android.pandahome2/files/channel.ini

      Filesize

      44B

      MD5

      9fb21b9c77645725bd6f0b127749d10a

      SHA1

      7609b0a0ba81cbe34878f1dc80173a4d60b04538

      SHA256

      c47e297412a8e9d713bd584a898367a6f439d14de5f5492c35f31dbefb42e8e0

      SHA512

      badd749bcd2a3137387ae37871b55d5eb08549c097a6ea1ab31caf40c5a2b275018447509d61df621d4b29a38c0624624bb79a7489dd3bf90106c6b720a8d0f6

    • /storage/emulated/0/PandaHome2/crash/crash-2023-12-23-14-31-56-1703341916231.log

      Filesize

      44KB

      MD5

      ad212bf2a10902fcace6006c1a92d37c

      SHA1

      eb7c90ef64c84cf0680099407b083249371adf11

      SHA256

      7d8738ef8210b0b79549dc28c0be105f62009bea17d3082863f7126c27977abd

      SHA512

      9ae5bb8fdb393b061a3615bc3652618086bb83ea6e805ffacc1bf7e7b77909898cbed889254ee13e9e06b21c6a9a0bd54fc5a7f7fe06456f3d25e721187f2575