Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2872346s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:10

General

  • Target

    3a0e9f08008ee86dfa19dccf84fb465f03b1006a06921dd8fcc7891056305827.apk

  • Size

    13.2MB

  • MD5

    653fe96292cc7e6075bbfaacd3455a95

  • SHA1

    830b32d0a61c33fc166074b4be987f33eb7f22bb

  • SHA256

    3a0e9f08008ee86dfa19dccf84fb465f03b1006a06921dd8fcc7891056305827

  • SHA512

    67a1e7eab2e0e3c7cbb61922dac6abb47794621199924945e87282b4b089727686b00a1f46a15f7bf6bdf587cfec532061787fd8bb98f4784ece822488ee2eec

  • SSDEEP

    196608:B06oQ4gEyTby6I/n6WLTJvlvUUBdW0VQv4qBxyh8lyFSxKBU6AhA9INKitVoIrMC:B7L1EU3I6WHPsJBx+83s2vcIA044F

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

Processes

  • com.mobiletool.appstore
    1⤵
    • Requests cell location
    PID:4245
    • chmod 777 /data/user/0/com.mobiletool.appstore/cache
      2⤵
        PID:4275
      • chmod 777 /data/user/0/com.mobiletool.appstore/cache
        2⤵
          PID:4324
      • com.mobiletool.appstore:channel
        1⤵
        • Requests cell location
        PID:4628
        • chmod 777 /data/user/0/com.mobiletool.appstore/cache
          2⤵
            PID:4655
          • chmod 777 /data/user/0/com.mobiletool.appstore/cache
            2⤵
              PID:4681

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.mobiletool.appstore/app_crashrecord/1004

            Filesize

            235B

            MD5

            34a3671fe6d95bc49f64165369c4ff1f

            SHA1

            83fcf4d201493b313f7df2d73397f49d41d72e21

            SHA256

            b00e5c794f019085fb5257099e77cafa8953bc8738a476df8b4fb82dc2b80447

            SHA512

            093289624d292c0e202c08e2e244a0f3208092e04fca672f44222eb8b0ed8136d8e5e7af8842350ac4a512ef73d5b5a26746f92da728c17f70c3fb53855fea72

          • /data/data/com.mobiletool.appstore/app_crashrecord/1004

            Filesize

            58B

            MD5

            0d210bfb2a0e1f1b4c082a6a0f79de07

            SHA1

            bb8ed9e364db79d1d9f2fcde3f15091893222faa

            SHA256

            988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

            SHA512

            536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

          • /data/data/com.mobiletool.appstore/app_crashrecord/1004

            Filesize

            28KB

            MD5

            b354a3798d70ae0a36c4359aac6a5a58

            SHA1

            591bf4d73a4ea2ede29f25db14d53f0a63b0323d

            SHA256

            9e3ca451e62c6db03da38f24710d89f83aaa89b5278cecaee6931edb367c249f

            SHA512

            96a1831defe9bf18c8a1b5b22e7c102da6f63c2e42b30ddc9a428fde7a986d877f0fa848ba8d860946007557146c7d94a87ca9e967dde46e53574b56318eea96

          • /data/data/com.mobiletool.appstore/app_crashrecord/1004

            Filesize

            4KB

            MD5

            960636a8c8d5a7dab17abc34ee4dd2d0

            SHA1

            5ff1900dcc6f3daa7e82f9d24d0d5009e6b4d1f5

            SHA256

            c1a1f9dfb87ad2c2b7780da0b3f1179c15a5e30f4b0f981b27e32bb2e700a038

            SHA512

            f0be71c329f1e6a9388ad90138aabfa3fd6935867a393b3a970e31096743686cde0c9d219c145cd52c8f6febae5d656be2a4286b73e6988834bd5fb94433db02

          • /data/data/com.mobiletool.appstore/app_crashrecord/1004

            Filesize

            68KB

            MD5

            07e4e744061e24bddac26050422dee55

            SHA1

            33fa1de6e93d94e9bb687a4a1fdd75f4890b3f3a

            SHA256

            a286c5bd1e975b6126ef3d45ce1608142927fd2ed2a5e9c411a97a71f2f4ad2d

            SHA512

            e8f16979426c06066a345f4e394c17e448a3bd6eccb081d2264f8c4186eaab6aea9c9846769c330c6671012151149e4d464fd0c307c7825544a5b76422e06f4a

          • /data/data/com.mobiletool.appstore/databases/MessageStore.db

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.mobiletool.appstore/databases/MessageStore.db-journal

            Filesize

            512B

            MD5

            b5c7ee44d942aea5c1f32ab24c130676

            SHA1

            9c960729bcecd75ebcbef3cd1d438e8dd06a6f95

            SHA256

            12f57db3f545de4844d7725c8e7dc126929985bcaf407b391b9f9f2451d3dd58

            SHA512

            6d519501408811feed823b6cbf350ca65f6f4dd863c46e94bae8750f56b34c6b565287dc901292b0e37a85917aaf16b22a71ca44dc90806decd18e6e59320a9f

          • /data/data/com.mobiletool.appstore/databases/MessageStore.db-wal

            Filesize

            16KB

            MD5

            b7efa934761ed2068002e443abbd69e7

            SHA1

            5a3e39ee60cf67b24511659ebbbefff7656f91b9

            SHA256

            62c68b6742797baff86b78f09f975aa5e03cd798375d0071f378f30190b9b44f

            SHA512

            bc5ff560e589d6042b3066ef3a0c9f83ba8c09a34c4b5a0f66859d239ec00e3bc390223aa67c662055a463691b1affb09a5a6fa706132111b768d0b18501ce7f

          • /data/data/com.mobiletool.appstore/databases/bugly_db_-journal

            Filesize

            512B

            MD5

            26eaa26dd38d927630238b0676e7596d

            SHA1

            5853449d0711c63bc148101fe60e0c03c005f113

            SHA256

            caf929a7f094f392a5fc2773c83ec40e07a9dfd26454239d2d19e91a2cfa80ed

            SHA512

            69073ce6636524a039d1596eda55a70a5e169197e337386a6143432f7420551b4d3f80361cba74233434de33b9df0483a5178b891f367c0775918eb2f747edcb

          • /data/data/com.mobiletool.appstore/databases/bugly_db_-wal

            Filesize

            16KB

            MD5

            2168dbed58a5d90d681189faef7178da

            SHA1

            9d6b0153adf75eee6fda8cef04479fee6b31e9a8

            SHA256

            797066fcdcce663028a0cf79dc0e66d9678862b05fe2c7a437bc0085eb7f7614

            SHA512

            bce54565de61ee03f39ff44f2acd41724416eb8b8f6631675ac652db6b17f8d178b166dea9d0d365b1a83ba2826b571f3353cc476feb817495ef014c76ef1824

          • /data/data/com.mobiletool.appstore/databases/bugly_db_-wal

            Filesize

            124KB

            MD5

            3a507e320d6aecb067d3ceaac535efe5

            SHA1

            d0d598c5f24f4aa1da489180eeb73ca1c263b18c

            SHA256

            ba74f6e3f6fac95eb4cd1666ff9993d0c84149af6123ed81f1ede3c49670a523

            SHA512

            bec2e8ad90a39a3d01ed88609ddb0f9d1f723a9cb0d878b573eecff01167b99c439415fbf5fbee74b7faf20f1fa838cb02d6aa137de8d64d65815edcf2eecd56

          • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

            Filesize

            28KB

            MD5

            a2f1053ebe56bb023c333e56b2ee9732

            SHA1

            50c350acb0cac74de2a98520f71eeed5cbedb698

            SHA256

            5d7cac6253f4cd068ecf32803bae4dc72c35b027dc3d0290c727806db6ae7716

            SHA512

            4eb18fce6db61271dd02e571ebdcc2f833e4f6a7d2ce8406e40bbc363fa3b3a36738a5de0ec5c44993979f0178e44ab01e5751ce9e92e896a7829f0a1ccac386