Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2544663s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 16:20

General

  • Target

    486b38aed8100ec0296e9883aa1b48c7c13273b46a32bdeef5aeb64cb51e4450.apk

  • Size

    22.7MB

  • MD5

    b07e063055465c5f07484336b625af41

  • SHA1

    8c8c0bc628bdd40ce1f53661a48308f0210af400

  • SHA256

    486b38aed8100ec0296e9883aa1b48c7c13273b46a32bdeef5aeb64cb51e4450

  • SHA512

    422b57a3a3c468289baceeabcc917419713d2d6915fcde55f4ca0692fdb52f8f9713fe931276850cb6068ea460f83b6cd4b0b61e6ee7e0bb2e8e9716827b2334

  • SSDEEP

    393216:4mvVIKfq043mXw2O+gHVO3Iop+QHbmitPpA1BrdTikiWqroVoTmh:4mvV9h436Ot7ZWtu1B5iki0MQ

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • net.eagin.software.android.dejaloYa
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4261

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/net.eagin.software.android.dejaloYa/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_analytics_v4.db-journal

    Filesize

    512B

    MD5

    04a97cb71ea9391cc258e184a734b119

    SHA1

    1acd6be414dfc7619e48b9c98a639c2bd9946ba7

    SHA256

    6c9a4f174bdfc9ed0f43b39f8d1886d6a8e215d8e0b98cd31cd7c80f46b58fa0

    SHA512

    0f2751f4439e9ea4facf83251f8fe151f008c137cd7aeb6ac69810c1785c8ae123731defffd4386d357acf8662f0687d38a6fa6c5549d28cf7c93370803739ec

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_analytics_v4.db-wal

    Filesize

    52KB

    MD5

    8185184f788efc06ff6e532aea3fdaae

    SHA1

    bcdc37bd55bda56742d3a1ec309a221f01764372

    SHA256

    ae067c7ec8ea86c4ac64f6fb47a9a2537e139c53320d970616e11793c40036b8

    SHA512

    87c882fc67569718ace5d56d5f30590798bd0cce927579f4b059c9f7c3acf58e005f6ac0f3bd74a70efb81ec09a77793e9b1aaac35fde21990858e34e6d94341

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    fba468798cefa5756dc4a44a7b12dc2a

    SHA1

    096f06b827e74290e75878d92bbb11fd8145c5c9

    SHA256

    fa7e0bf3ad2637ac787c135b0d88d7225749748f0a4f76bb65cc71d7091e2c02

    SHA512

    50ffccee630959708fa13668f73102ec3a4230bdbc132e362bc31188d7dc472aa686f5b7b4d845f48aaf473041b9c45e66b5bb4dbab151a8eea2667337ea6ee4

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1bc430004a8e5df5b48efff982c8fc0a

    SHA1

    675af2b1a0552ba336b887366774a6ef12da5638

    SHA256

    d73c2b770d98529ad816c0d05270c8d36f637547ab12ae31cfd10861c927733d

    SHA512

    e6ffddb517e8bde7207cb996406d63faabfa4c684a2cf3d0e30cfeb00085ddd8466104d5964fb1f5cdd8d168f71fe388d7940df31eacdb88f1a201100484809b

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a0ffab0d54d25c283d555d2438116851

    SHA1

    1bcad59999281494969c069751ec5181cf181984

    SHA256

    0ea8aaa3b198d75b484384d93ebbed24e0d5c71c61009fc6a055627137700662

    SHA512

    26179de708976ff53f0dc141211eed2fb9a8d8f1a4f5ae5bf0ffab89f909efd57c962437f4049004e44e964b50d953d150224dda469ec08fd5fa494ea29c2285

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3f5df6451137080608cbcdf721ff8a62

    SHA1

    8839c2cae7c8d4d523d19f27aae60401ce374132

    SHA256

    0a7b0d35588cb30336c64eaa7afda05878fcab8d4a074642913c3c95dcd9097d

    SHA512

    49d4a1e3a44be0fb4e016d636f88f5b8867b8774b30a71a84faabf6ffb775973589b96c7896c533051b5466cac6c63037175f32cf16c13493efd09ba796da039

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    680b29d24c1db7d3914c81761a2cda44

    SHA1

    f7d8fa5dbb123d49b3aa7ede4b38963181889e6d

    SHA256

    1953fb36ffa3f0c4965ee5bac567adf679bdd5b05100278ea7aae6cbc952659b

    SHA512

    5fcfe0772e4c9a0454c559202b982b753bc0b69cf6c454cf4e26fd58e9a75a5274eb672a05582912dbc1428fd9779f2d008e9bf20940d19a2088eba1d2df5edb

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    0b87a4d12048640d89956326baf04e8c

    SHA1

    b0ba65ea1a2ad208f2abf5be87bce6b39a576352

    SHA256

    f8dc86f7583bd2f0e77d667f51a214c6ce6ac81ee201568a4ce294d947dd4aa5

    SHA512

    fd269c7df67889e53b5bb4324c0a677609f987e570e85513b7d0f8d4bd6b11c1d43eaa340520addb003f1aff02ff671982253abe7eaaac7a7f2f3e9f1d598816

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    30ec462531359f9168bfc87016ad89a6

    SHA1

    10237f2349cc009113f5c5d07f0e8da1a182c22b

    SHA256

    6dfcf6b71f912823a6815b818bb0c970a8e14bc63ce52e2e2e90be43c7b8192f

    SHA512

    10b7d429f229bb1eb75eb821d6c69de1be5936c36ddf07754d7f9600fe828240bf186bc53452e0a80d195db727cc648a213bd5a055e9691f9206dab032400901

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    650ab9e705b0e4e3a1cd120ed6ee4b77

    SHA1

    851ced81ca6e382fbb1398b66c76facbc7838163

    SHA256

    5c0041f533776c505de72753f105efd83c677fa6bb2f5ab439e6fa45532ecc6f

    SHA512

    634928383b001dab65149a965093c35b86e634cb965e203f59eb2927fd943f46f5ba2d376cf91da4b2ca230f2ab1521fae8b8ad5a84aff06d0b85e94b56808d9

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    2c69c398e55ac516c0b3cb99146bb71e

    SHA1

    e44f8c466a2c2b44b4c764534925247803190a11

    SHA256

    ec686dcc7797df40433152d7d537ea2a65671000ac88d2b29210e09d941cd51f

    SHA512

    497ad1339f7d11828f811777811a1484cf5196b52ffd4d9c84ba252e9162af26cca78b2f4421918c9be51b3bd26919911c3cd304de97f4ca6d47072d7be22d1c

  • /data/data/net.eagin.software.android.dejaloYa/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    68a2801b49e56d36c84569804f564b26

    SHA1

    a44d07d9b4e08323cf88c62daf9584b5e91fae6f

    SHA256

    3e29524aa6b99b1b4416abbac4c50a16071eb7e81aa316956eb13ae7ea860f86

    SHA512

    6b19ec64bb0968fb4ea2900451c80572f5352c589b68ebdd14e3064dc775d3f5a2324c07bc878300ff5ec912417aa4057015db05fcec368f5eea8f68275df4af

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7BeginSession.cls_temp

    Filesize

    77B

    MD5

    7cd0b65dd8cd6b2243cb536d8745b0ae

    SHA1

    c4fa8f50f49b8f8cca784bec04d45d5599b1a491

    SHA256

    211e6b119e7af87937c958a59dd052d41602e4d7753f0bff6aeda7a1b026a2a9

    SHA512

    f9ba9d4ab51b81605aaa4a73051e65b88e5a471e09078e43e0ae0b60576ada6a5d48f1aeeffad386ebc243bea0a8c640aed03cfe0043e0d3069c39ab15b13d1d

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7BeginSession.json

    Filesize

    132B

    MD5

    433fafde29b94db363067d59b637e839

    SHA1

    9f55959015db241d704d29ec4f81807555805125

    SHA256

    b82b983fa8337eda1bcdb9b197ed9bad44e126a57f27fa1fcff3e7bac57287ea

    SHA512

    8810de150c6567fe1ec9e3a2cdc99f48da0027f4e9dd8d7a565347e8c03952e6406789a51a050cc1ed82a7ede199e63882033f0ccd6ac0cdfa23ffe87af742e5

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7SessionApp.cls_temp

    Filesize

    138B

    MD5

    61fc7450602831ef9d31819c01d01824

    SHA1

    e104dc69aca5db14eddb7722984fb1761134a6df

    SHA256

    c00f818ac4eb801e39f83bcbdbf44129f97e32f8bf93d80693c9cd5c6d7dd11e

    SHA512

    9709478e343563b15d07468671b4f9017f90b7e300df5cb85149966542ac2461e1db3879c4f3ffaafb79fceb1d46f28ddab253ad0bc69946aab896aa2d020780

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7SessionApp.json

    Filesize

    251B

    MD5

    37c8b5a812c3b51e7e14f5f3a8dc5cd3

    SHA1

    bc3a5249c3b7ee72a226e9b6d3d2995a5a08ff88

    SHA256

    be222f70c6cfed79b0337b590ca2d10a00b56c8f6561c23ddf748d4af80bff5a

    SHA512

    6cb6f4e6145374dea34ff30b1e106f4af17e9739ed0df06bffd6ffe3feee1368c8120fc85629f8bd9aaade1f4af59f766149ad77a46ff73a3c8e4e764756a893

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7SessionDevice.cls_temp

    Filesize

    48B

    MD5

    630aaf4621d940e95530e8a8b0d39283

    SHA1

    d06c5d18de58b6abb5890a83b6fb3c3aa4a2139e

    SHA256

    2f752007f6c33aaba282800edfe3d52da2ea954e3eceddf08efb0bfdc989cb93

    SHA512

    98c301f0188ced6036a863ba790e03ba22f88ec55a884fdf808711147228e97ee0571abad094ad68d758b2482db6ee3f2950d43d56c875bfeda7f0a58cd1a86a

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7SessionDevice.json

    Filesize

    202B

    MD5

    8c1412ceb8c8543650bed0f85dcf4c99

    SHA1

    e2ea16a5e4f49d8f4fc661f127bc8ce6f5d2e485

    SHA256

    b33eddddb3bd84b5d5975b074dd2fccb335c715b8506862cfaf451ec1f8398bc

    SHA512

    8d067a69ce521a0e004215bf6b746279e4c32e0bb8ba90de9e3e7e519e421997aafe1a3b8d636cdd4da578ee3c538cb1b84fa60c368c0dac9307d4064fd33687

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7SessionOS.cls_temp

    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6587151A02AB-0001-10A5-87C86DED0EE7SessionOS.json

    Filesize

    54B

    MD5

    93023624eb8dff5c20050da136aaae0a

    SHA1

    acfd1ffed752c28fb135ba83c0c6345ddf2f6995

    SHA256

    968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

    SHA512

    bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    454B

    MD5

    8ab1786b7ac9c0b6c19fd84411e34206

    SHA1

    0a253215ca8ee44645acfa6c52255feba6aeb5eb

    SHA256

    c378a78499a194b78b42a064c608ac11f746acfa1739ae547b0b2ace35ef511d

    SHA512

    be345f64e79f2e8daea7049c24654bc9cd4ccc6a08c3cc126ac97b7b081bd15dd9259835b9f9ebf7a4caf075f74ecf33ef46652c31a18222d357d428722730fc

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    2KB

    MD5

    9e91e7645fc55e997387b2adba0a0a29

    SHA1

    f2f047ad8bbdafd6454734563efc5091807a9a33

    SHA256

    b0a0531f4cca3bd2b8d7b0bfff0039c5baf340e551e1801875d63216aa1db139

    SHA512

    0be953c22471aefea1a87f56f4d41d9608f8daff6be2e098ced7baab3cd00e0a3375a975dbd7ebbf35374949cc5a9354dbc5a3a6112408838c82eb755c65729e

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/net.eagin.software.android.dejaloYa/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_0187fad6-511f-4cb6-842e-72ee5bbe2646_1703351583819.tap

    Filesize

    361B

    MD5

    1980c1662b8e48a680a19fc728fdbe4e

    SHA1

    1978f812e2d64248659e39b8ee94ee7aee7f583e

    SHA256

    86a0ce119d57433deacc641078eea8d8653e06c207dfdcb44c4bc504d96c3a26

    SHA512

    ead67af16813e1a140fb1988488a7671e9536ca0e63866804ab9801f0ab2d0a8f0a05408a67d53c6f3314b7eadbcd17468546c36695d04e66fea8bf0bca0e829

  • /data/data/net.eagin.software.android.dejaloYa/files/AppEventsLogger.persistedevents

    Filesize

    821B

    MD5

    b9f737f66702685b2c8380b700960ed1

    SHA1

    010ff9a971b109feb3e1ede312a70d5fe5e82548

    SHA256

    a0cb935a926998e44e3dad2da3ae8db496208fed2f698b05d9877bb35522aedc

    SHA512

    83e5c0be12ff776c2242316cff52ac74d1b0e55bc741e56b2ab1a09f651145525395d824b61f727e94f16c9579a9890203442cf2a6db20e7b7cb9d238c75a8f0

  • /data/data/net.eagin.software.android.dejaloYa/files/gaClientId

    Filesize

    36B

    MD5

    d4c442c83a8271744a2addf7bfa3bfce

    SHA1

    cb2aa8548c06ed659af1f4fce160f92b50840b56

    SHA256

    e16291c50a41878aadf22b35475540910633db9d9b5d093c8345cf19b8b6329f

    SHA512

    26fb5b6f194896fcb2cd539c4e459339d804ca1da54341de2f469a2e5d2387b933a0a7b4956a118ccff6e608d079ea4f7655e11fc4ef8241912c98a114f994b8

  • /data/data/net.eagin.software.android.dejaloYa/files/gaClientIdData

    Filesize

    32B

    MD5

    72ce6123404929e8cce127eb2cdb3bad

    SHA1

    8c13d79f5276529e42837b76f096e17e5acc9062

    SHA256

    b62016d8cb8b8b248e2a0bc7b9141e413a682d05927f568d17d46c874da11265

    SHA512

    73c0e68450426bf42f2dee1f2a6aa7140eaaa6c91fa388396d9ac215623a47645292c1bbf77db23660f19ecd4e66412f492a6ca0c77f1f11ddfaeb886bc6853b

  • /data/data/net.eagin.software.android.dejaloYa/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    12b6636d0a1f2b59d2083307e4e80bb6

    SHA1

    22aaaa063d52b67cdb34d60841006f8bd78118fd

    SHA256

    6367c217a8b77dc7f9d1551713726cb5d2dd54513728e61fd0e3a6d15a5f926b

    SHA512

    6ebbdb9fb79ec39cda730e89588b3bdbf3ff6faa4c1bab6c16e791090ad4f366814c008f42bd89b4be02cefae4fde4c3f0c55a74718d8b8a14b62e22a0ebbda8

  • Anonymous-DexFile@0xd0ae6000-0xd0d1e904

    Filesize

    2.2MB

    MD5

    3c2b50d5e757a23a7bbaf25f366793e6

    SHA1

    dc2b637697596b4c812d2dba629d89c5d9984947

    SHA256

    cb4fa2085445849b0830572cd77fd7472cae1bca0f7af6ea37c46c4730b46923

    SHA512

    f790b52cabb7e711b0928ad01eb65627ab600255fdbdbe95902e39fdfd3449637896ff330deee53e66d7a2ce457ce2d79d8b7fa526127201a0b1a71473b2d000