Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2850463s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 14:34

General

  • Target

    31865d5fbc2114653c611898ebd52b8857627e4e275234b7d0cf0cf75c8fed34.apk

  • Size

    25.5MB

  • MD5

    4b590043e27327d1c89c88e4e592ab8f

  • SHA1

    865a3696e4279422dd4b8674ab4a2cd7f9d47647

  • SHA256

    31865d5fbc2114653c611898ebd52b8857627e4e275234b7d0cf0cf75c8fed34

  • SHA512

    af4c966ff798cde0520334e40ce6767d8f10eb66136cac0964a86bae734069d95b2a24438e07beb926cab25eacf36a332fba30a96072800707c92ee83dd2366b

  • SSDEEP

    393216:V339DGfhhW3Dmlmk9VIhz16ZWr0g91uLCOzzl9Jb5AsyHPsHxmPA8fnz:N9GDoGBZWQa1gCwl7b5AsyA2fz

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.qp333.car
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4246
    • chmod 755 /data/data/com.qp333.car/.jiagu/libjiagu.so
      2⤵
        PID:4272
      • chmod 755 /data/data/com.qp333.car/.jiagu/libjiagu.so
        2⤵
          PID:4321
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.qp333.car/.jiagu/classes.dex --dex-file=/data/data/com.qp333.car/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.qp333.car/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.qp333.car/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4343

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.qp333.car/.jiagu/classes.dex

          Filesize

          6.9MB

          MD5

          be2be0a59c0ddbc57ac9cee28e2216e4

          SHA1

          05592c856586ee8bee57e72574c4a066dd0f5c9c

          SHA256

          660733a5c590492db7ef9c269c5fe959fe75dc934cabe0310565ddb5d365ca9e

          SHA512

          9812036bf4e0084d156b6237f68b6b702f3d30a7e05ddc1d038d673b464023eaf1a14dff85c83301f4e696b476915a541dafdf9406d99d2565e945143ac58c85

        • /data/data/com.qp333.car/.jiagu/libjiagu.so

          Filesize

          382KB

          MD5

          d44f82b16e45a099a9ce6821b85f91bb

          SHA1

          90ce0ed3ea5cadd3c51df92e6d8baa943f9e7e65

          SHA256

          0b516318fa4823985eb298eebbd0889b540494eecf5c28028590e33b1d182a95

          SHA512

          98c76a388e53b8b48db0663d3cf65581a0cc76bf7b3469b64367419429c67a29d5e0287e43fc29dfe90624c3b2c431191982db3e8ff62f918e9bf685a4fdc1b9