Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

6

5a443c6131...ea.apk

android-9-x86

8

5a443c6131...ea.apk

android-13-x64

Analysis

  • max time kernel
    2596995s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 17:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5a443c61317bd8afc22ab7bb0d3b7dfd88c5b3748ba260691f197721eb0e73ea.apk

  • Size

    7.6MB

  • MD5

    5e56043946c6e1407cf80d730edb0d85

  • SHA1

    c4aad108d405a7cd5d1f71c3f202b0df7f1c3eee

  • SHA256

    5a443c61317bd8afc22ab7bb0d3b7dfd88c5b3748ba260691f197721eb0e73ea

  • SHA512

    74ef7bdc5249e0e773105487971c840af565f06938a8b4446401c11cae988d4db3781ae3838d483006efd87177cfec29e719d5ce681c2ddc640caf7b189baaa5

  • SSDEEP

    196608:j/b3rbSvxnaXLjiARx4EswTsYixq12WOhcAu:jjrbsxnwjp74Gw7xXh6

Score
8/10
banker

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
    banker
  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.longyun.chaoyouhui
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Requests cell location
    PID:4259
  • com.longyun.chaoyouhui:pushservice
    1⤵
    • Acquires the wake lock
    PID:4310

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.longyun.chaoyouhui/databases/pushsdk.db-shm
    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    Download Submit

  • /data/data/com.longyun.chaoyouhui/databases/pushsdk.db-wal
    Filesize

    60KB

    MD5

    e2e7d437af2950ea90f218880b3c4d21

    SHA1

    acfd0edaf73cd20b2673c3f069d6652969906fe0

    SHA256

    d009d37632441296bd7a324131fcef4f6df4a9c242c907417b4d65bc15e2c532

    SHA512

    32ddbe0b5b373c9ba4e76c90cffc5140d4f1be31cf2faafeb08fc7fe92ad6681377e7b5da936a7165e589ad9ffa176f8490b90aec7067b6ab003c05be2e3b4f5

    Download Submit

  • /data/data/com.longyun.chaoyouhui/files/.um/um_cache_1703403965228.env
    Filesize

    32KB

    MD5

    a34874bd87f08e673e78289be32178a0

    SHA1

    a79f6ab1c53b475b4be2431879b1887e69dd41fb

    SHA256

    a9e2b84f37c65f8e1861d6265536cc64c332e6417517dab0d971ba1ae9e8b86d

    SHA512

    fe42ace4a0f644ebc7b389e1b71baad70beeb35047e3daf7518eab7c242724378f81e3ed022bd6eb458fdab06a6680d29ffd7199f2737da1ee641799cbcc7d78

    Download Submit

  • /data/data/com.longyun.chaoyouhui/files/umeng_it.cache
    Filesize

    512B

    MD5

    923f75eee16d2724becf418e12f1335c

    SHA1

    88e20ae8b13ed51c9b29d83e766748a4a01bbdbc

    SHA256

    66dda73f0713a526f362880e0e483da6d120189c7fe31347c887f54ee4693788

    SHA512

    d1548952c87618556eedae18d61bf6f7052782187234f9ae035b2636e2bd009016baafced15b30671dbc9aadd16232ac63fb01f7f554e2726ffb0edad888b215

    Download Submit

  • /storage/emulated/0/iapppay/statistics/com.longyun.chaoyouhui/statistics.log
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit