Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2875173s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:12

General

  • Target

    3a5458a37dcb52e2184ce116d1f6dd4f2ee800cb2d804a7c7aa75883ad74903c.apk

  • Size

    3.8MB

  • MD5

    b3ba1a6ce905c9a978902600e2f8633b

  • SHA1

    ecb8b41f936aea27e897caea30af7a99c862171c

  • SHA256

    3a5458a37dcb52e2184ce116d1f6dd4f2ee800cb2d804a7c7aa75883ad74903c

  • SHA512

    cab4cd4d494b6461acbe885b83924a1ea19ae2fd22c465e25c8fcee5edef2317458d1673aff3f7ac84dc19dfba4727deff92fca4817a65d54aa9c0110933b1fc

  • SSDEEP

    98304:kwAJQ9zdf7micV3qOmd83vSIXz1y9hKeO9q:kwAWx7ovmq39j1yTKB9q

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.cmcm.lite
    1⤵
      PID:4221
    • com.cmcm.lite:service
      1⤵
      • Checks Android system properties for emulator presence.
      PID:4252
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        2⤵
          PID:4342

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.cmcm.lite/bspatch

        Filesize

        32KB

        MD5

        c842f8bd9a002603e61ecafe222364e3

        SHA1

        501f0ef01f6cb4661c9ead0a0755639fedb8e536

        SHA256

        524ee4bd69df7df75300bec9ca339c40e7782a85ef73d1db7a9ec2d9ca2d5e0f

        SHA512

        53296be43742496db03c52f7f60fb9b8e43db80715c41e9a9269eea95e7e043e2c38330657a94df65c05caa650c9938861d76a1ad7a9ec06eca86a8da01324b0

      • /data/data/com.cmcm.lite/databases/google_analytics_v4.db

        Filesize

        34KB

        MD5

        867a14d0f86fa72250116b1b7060bd33

        SHA1

        f5df37947279f5c3d972f96611afa5469a87db33

        SHA256

        b36eb9abe4d82e43b2fc56237a2a987807fbaef3ab6d18e460357feedb6d750e

        SHA512

        2d936df28d0aaff18b73a349049346e681a9f32bff2f94ca9c5241e116ff5dee982b6dc6404f664cee6edda10be080dc7711a7523d661e01b2c78b993a9439fa

      • /data/data/com.cmcm.lite/databases/google_analytics_v4.db-journal

        Filesize

        192KB

        MD5

        f36e882ab131fe7f7c545a00dc086706

        SHA1

        7d8e1592f234a7dc6dff8c899be662f9aedd8b7f

        SHA256

        13b25634507a4065d6e3ec80756399a71e51e6a00cca642a8bbd90c03a55230b

        SHA512

        d1dc8333f42111e7f95d6c1a520d7fa2a64807dfc5301a8ce4047ed7a52e01baa9c5fdf77d0acc9cf89876f23ce040ce645691ac57c29f8b83cc9217d502f5e5

      • /data/data/com.cmcm.lite/databases/google_analytics_v4.db-shm

        Filesize

        28KB

        MD5

        b55f5466ec602d7bd4e51ac96409c062

        SHA1

        d773403c1922194b7af19efc9e8297f450302d02

        SHA256

        099d756c7e8e28bcc0687b76665101b74d50a2bc2e8d2bea95a3269bab46f4fc

        SHA512

        41b6a94214097fae5abf49eb27bf8855b15f7fe611ac86fd2498dceaeb5615c9a584c943c21ba6d768919c74913cacb87f49a841c77c61c3d03dc5467b291580

      • /data/data/com.cmcm.lite/databases/google_analytics_v4.db-wal

        Filesize

        52KB

        MD5

        dcdd886fa741708f0638b9d86b5e33fe

        SHA1

        f337fa611e225151bb0f101591cfaac0b7ffd823

        SHA256

        2163138f7c275372082421202bbe9f4b358d5367d54ed97b71763ae9269f4c2b

        SHA512

        f2b41a1fb6f405fabcd49ccad0d3a2679c9d078e723a228358a64aa0fb97bed8381689832575c808aa5f3ed49c609ee93c20901dfc2b8929fdbad50f323196d2

      • /data/data/com.cmcm.lite/files/AppEventsLogger.persistedsessioninfo

        Filesize

        32KB

        MD5

        7112d9c2fc3881bb200ec9177bc2337a

        SHA1

        82f9531d298d232d636438bb5bc32394a32f8fa9

        SHA256

        c5f8ca04c8757d3bd7120fd9a8f235f6b4d79ce2bb7bea628e6ab5c8a158d110

        SHA512

        5e1e9ebe85076eda8bd5ca6bb646070b3acd8ddc3978d19ce3286247b91ece29257753d22f5fa71b28cacebe32ff5df4cd56e519e47e4d7ec09f99d59bf9a2ce

      • /data/data/com.cmcm.lite/files/clearpath_other_5.9.6.db.bak

        Filesize

        192KB

        MD5

        88dc337fcd53ce20f2acc70e202a2071

        SHA1

        8f3708f1b891c192b95890effa159ed89d98d4b3

        SHA256

        0c52fb778dc46f2df0275b53fd9df1425999fc8454b290bf67fe9f16533564f3

        SHA512

        6b36eac12f65e3a7fb5154bd86aa3c68a847bc74e849a42a0630f17a3b426908f5b177f9da4233cf0942b20bfd612e57b565e615b55f1cdf627aa454da482969

      • /data/data/com.cmcm.lite/files/clearpath_other_5.9.6.db.lzma.bak

        Filesize

        34KB

        MD5

        f473ce10810d7e98f8d97f2d87a41de0

        SHA1

        5e32d7946a6372f04be2d4ea6e1ad3e0f746ff60

        SHA256

        33d6f636aef28e0df6f5abbacb8cfd735acad9785d6e0b4986b37e0b5e34a185

        SHA512

        9ccab1a2ebf0cab05b5152fa06b13691000211e65cd39886040a05782f9cc9548739508283ac1f7dca2a0920c2274af232e18be33242534a3fcac9e1d76710f0

      • /data/data/com.cmcm.lite/files/clearprocess_en_5.10.1.filter.bak

        Filesize

        12KB

        MD5

        9a432cbcd4aa60106edc3dbd01030e3c

        SHA1

        8263dbdb5327849b4b7a0ff7e4029da06555d45a

        SHA256

        a8c6200c52b120a9e75516bb960526930760fd3d54bd2afc9cd98dfbb4b684c6

        SHA512

        d4ea70fa73d5f2d58e50d4a03249131a02780ad10804b3565bb46f0c97c246aecbe8d22a9a7044eb3b26d7e024883fe80ed681c4592698b5ad52c9aeded340d1

      • /data/data/com.cmcm.lite/files/gaClientId

        Filesize

        5KB

        MD5

        57c2d2f02032635f1dc3462a5b1c00dc

        SHA1

        b8feed5d18bd4d57ead5887c0f4fb834b8fa2c18

        SHA256

        c801440828da8f52934a58ef7bde09db8b103107742751d655d7474129a37720

        SHA512

        760b9b38ee5fb2aecf936bf9a72777b34de987212ca4a6c0d5d88805423fea81d5fa0f78d96e02332097f6d1e6c0ec8c3d4c9b688aae371c6177bebc33f41324

      • /data/data/com.cmcm.lite/files/gaClientIdData

        Filesize

        244B

        MD5

        31d2e7338d851df7ced90098b9c5e1d2

        SHA1

        03bf6d8fc94c9b791560394def7790f06ab7a64d

        SHA256

        e570bded16f7ce03119c8dca5f95305e02df6e09ff219ad71a2f002a26950d4f

        SHA512

        7a2b70b95a37bf6025ca844ef5d0d4e90aead4f54779d7534d105361da018fb9729c30b904db648f5ca6bd217d96c67609f18633c32b373e58b1512a515e4036

      • /data/data/com.cmcm.lite/files/infoc_force_1/cleanmasterlite_act_active_1703682092236.ich

        Filesize

        12KB

        MD5

        bb70c8c305343aa20d99732ab0b01577

        SHA1

        02b79e94ed884bff754b90d1611b64bc440cdfa9

        SHA256

        856e5efc654edf29d1b4d03bc04155da7b2205c13a61bf7422a61bc0d5164483

        SHA512

        82fc28eee0ed1d2a2b819badd499db9c752d5c5b91b058ed66437f4341b75b0e7190a18e8bc6a20c256918e395c4ac608a260fd2dabd8edd142faded3531bdc0

      • /data/data/com.cmcm.lite/files/kctrl.dat

        Filesize

        244B

        MD5

        e223b061a0b5ba773634e38de4ac2f37

        SHA1

        e47b076079f7fa843641a48217f7789203eee2d1

        SHA256

        f14512d0ba61d1da4d7195ff7963352eb466fa386831e81e09be7e8e3b7a9587

        SHA512

        e013fd094077c86f12f7897525bc069af516412e481c819eaa9966377a9343807dc3b9a86d0f58b6578b3dbfe2642cf3915b60b27a5bed8e6cc789f4ef1b85e1

      • /data/data/com.cmcm.lite/files/pkgcache_hf_en_mini_1.1.3.db.bak

        Filesize

        436KB

        MD5

        6eccdbb6a8603770e79d79db068015de

        SHA1

        4eceab0e1e39a7beeb4da66afc860ca4f2c46ffd

        SHA256

        8542b8ad26f4890579b9de2d5da1dc7cac9bd7a2cf500d0be8081f744961fcca

        SHA512

        81155e90bb4459a6a185ce99700171727ce7a27dd94714a230f83817b45baa63eb708c09eea36ed57f097959f1f6d081573e8a5354f05137889be00d219c4a6f

      • /data/data/com.cmcm.lite/files/pkgcache_hf_en_mini_1.1.3.db.lzma.bak

        Filesize

        136KB

        MD5

        be50df19520890ad2f09f3e5975d782e

        SHA1

        2b218712e92fddb66eee4893171e1591080a8cbf

        SHA256

        436c68ef17b76b00dd42998bb2d2cd2db83d6835f8e377238072bd3dcc794ee7

        SHA512

        5234f288afcf3a97b7e0330188200d6031c3bfb7aa621567d70dc04eba2fc827991faf29267a58dc7d385a1cf1512a3a0949cc79b1662b431a2b6f5395f1de2a

      • /data/data/com.cmcm.lite/files/pkgquery_hf_en_mini_1.1.3.db.bak

        Filesize

        486KB

        MD5

        0cae7f3cc867227e69806330f43cb382

        SHA1

        d7ad3e48e79a707338d76e2fcf4922da1c140b2d

        SHA256

        7c93683f6a9a2b9c4383f2dc96ece2183b20afe43a667f10f18ee1aa9b31d42b

        SHA512

        e3d18c35693e7d8923d423a5bc0acc8f84c6d96f3bb3db5c45b420486f857ca6bc2312040a3bcc76b6634069f8206ab981ff1979df17435d3bd09b46288f73b4

      • /data/data/com.cmcm.lite/files/pkgquery_hf_en_mini_1.1.3.db.lzma.bak

        Filesize

        203KB

        MD5

        10b81e788a430e92409d2c5fb2d42f8c

        SHA1

        cf7a25fcfe2fcd8b61481e21dd5b4162ce291fc3

        SHA256

        9bc8e304203f30b678fd462a81d88ce39f45bf1402a483822fa7e2f8324da0d8

        SHA512

        0f6a2a1c2cb78af32a3cdb57cade56c6ef4d4d71ed01347800c553c756202a31519d7e3982650f03ddd1da91b87e2bf4f9f018e5d21d081ba3a1552bcd27ad3e