Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2582005s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 16:57

General

  • Target

    50ce33a7bef319eea213d3b4d8d21e88c282cbc5e57a660de7423d96c41a396e.apk

  • Size

    27.6MB

  • MD5

    445bcb2a7a43e9c3ea45261a944a4500

  • SHA1

    d6b3413a3de264d80920836ea4d8c324cf4f186c

  • SHA256

    50ce33a7bef319eea213d3b4d8d21e88c282cbc5e57a660de7423d96c41a396e

  • SHA512

    4d5479a954dde802e52669ed4df4bcbf41e1072abefa049a7f179c6f1a660956085ec40db9208012b93712d9bd2acf13ff75ab9cfc14c3efe6542c3076f34db1

  • SSDEEP

    786432:0NEItF7cJQVSa/UHE4INRE+kfkOVmZSmkLM1kt9L0Un:0NEG7cJQVV/UHZIALsOVmZSM1kP

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cn.hztywl.ddyshz.cunt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4261
    • /system/bin/sh -c getprop
      2⤵
        PID:4305
      • getprop
        2⤵
          PID:4305

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/cn.hztywl.ddyshz.cunt/app_crashrecord/1002

        Filesize

        233B

        MD5

        dbea7fa7c40edc46883b2561f4e985fd

        SHA1

        7d2e4f44dbfcfb5ce0829595688d75861e9dc6f8

        SHA256

        6b5d448d86edf871f3992834dfe08d6c16197f351141028018bb3b1431e4d4c9

        SHA512

        557da9e0261d9f483917293df814f1d3b85f4718bbb9705eea04f0201e2dd4238d70baf1ac5e7040569d7fb129b354a2cacd2055948de7bac954b34b6f0268f9

      • /data/data/cn.hztywl.ddyshz.cunt/app_crashrecord/1004

        Filesize

        233B

        MD5

        adb4954c91a5c510530aec73a8d52997

        SHA1

        e2d32ccf6c0051ae27c422ccd6b5844f483aedc5

        SHA256

        b21c1b392d63eaeca46d2140f32e2c0bf385d30bce1ced21dab2f43dd6a1d775

        SHA512

        3c40966c227d908c9f1113faf0626d0e7efd9f463493a6eba86b89c176ee08ffa8a5232bd2cc7a820dd52b92774ce63f363c26efb50e20449b893c48a6404700

      • /data/data/cn.hztywl.ddyshz.cunt/app_crashrecord/1004

        Filesize

        58B

        MD5

        0d210bfb2a0e1f1b4c082a6a0f79de07

        SHA1

        bb8ed9e364db79d1d9f2fcde3f15091893222faa

        SHA256

        988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

        SHA512

        536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

      • /data/data/cn.hztywl.ddyshz.cunt/databases/bugly_db_

        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/cn.hztywl.ddyshz.cunt/databases/bugly_db_-journal

        Filesize

        512B

        MD5

        b298ac2f037fddfc9ffdc50146e6748c

        SHA1

        d4fb49f91395a820c384d743a5013e5916f78bc5

        SHA256

        669b897174a9e646ddf6c019ddd70ae81be5e5caa30ecb63d2b77e6690ac41cc

        SHA512

        a9ebc56b8cbbf76a6b3fa4cc67127af4b94c1e530c9aa7b1452c7dbd1fa7d86db5c84581310724e48e477063307a675f70a3121f54f3d699a85ff1b3d3303714

      • /data/data/cn.hztywl.ddyshz.cunt/databases/bugly_db_-shm

        Filesize

        28KB

        MD5

        cf845a781c107ec1346e849c9dd1b7e8

        SHA1

        b44ccc7f7d519352422e59ee8b0bdbac881768a7

        SHA256

        18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

        SHA512

        4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      • /data/data/cn.hztywl.ddyshz.cunt/databases/bugly_db_-wal

        Filesize

        68KB

        MD5

        d1736c8ccb9ab1b060f8645c17d1ac2a

        SHA1

        e4d61c6be259ab04ceaad99ca2747cd7cef3b0dc

        SHA256

        bec21767dc32c34bab9ae05942d5736bd07fbd455e7eca7988da8c0fcb654896

        SHA512

        64772214b0ec167e5a3e6145a8069bea9eee8474bc3ac5148d5831dcac80a60f8507b8d3ccce66fe817a3daf299fc2ca74f59451280059a0f5095f450ced18cc

      • /data/data/cn.hztywl.ddyshz.cunt/databases/cc/cc.db

        Filesize

        36KB

        MD5

        ce6135aa1b1fe4f2c2db2a546d2a5558

        SHA1

        79b59582154017aadab783dc266fcb158c252940

        SHA256

        7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

        SHA512

        2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

      • /data/data/cn.hztywl.ddyshz.cunt/databases/cc/cc.db-journal

        Filesize

        512B

        MD5

        a0ac93b2c619581694c38acc2c7ab9ed

        SHA1

        331e650cececd2768efed4a1b27c0e40f8c10226

        SHA256

        ded739bb3572887f443da5c426da84de6de00518c67ba55cc5f0853f16fd2f84

        SHA512

        45af74ee4541c34eaba51c694619075e310436ebb715e53889d81397b0b3c1114d382dbdf30ab9c57e0b9160012cef35a02544cfed2b0db34e781dc88ef03212

      • /data/data/cn.hztywl.ddyshz.cunt/databases/cc/cc.db-wal

        Filesize

        48KB

        MD5

        d437f7f9af2921f47f56d131641087ef

        SHA1

        028e0a3acffba9365b03d438ef3005b45d1b8e64

        SHA256

        bedb3ca72c5dfc14279457d3d6c24c59cf1e80237c4661d46a4061f87e3322e3

        SHA512

        c5c6f9f566530ffc13f490338aac9428c12717dd75ad4ca8135c149f71e24cbf4f11d4150cd85b3680fc999c56968f2ae8c229ff68fec600650f25af6e528d58

      • /data/data/cn.hztywl.ddyshz.cunt/databases/cc/cc.db-wal

        Filesize

        16KB

        MD5

        90b81d469f07fae63cd0cd07aa379beb

        SHA1

        6ad930c57acfa891608ba53261aabba13c84fbc0

        SHA256

        3737c65f7401f636eb7257ec350ebb7a68207cd5549debaf69c8069e31881628

        SHA512

        de8c3b1e2fe92eab006d08340aa168f35a6518c0cd9626f4d0bf7ff4bf6767d5e86666f76e51045631f7c68be6fd12da0444ba1bb071543fd855669d2d66f336

      • /data/data/cn.hztywl.ddyshz.cunt/databases/ua.db

        Filesize

        32KB

        MD5

        ba30611e3b9fcc9ac2c2b7d3a7df8ea9

        SHA1

        9540b1adb9cc8610ea933c523d4d429cd10fea37

        SHA256

        3c36617ca997005f55f862f297002373510e02e336a947e1ed1d2046f38ba5d0

        SHA512

        d70d91d2e6beaa27645b3f0666e6b38ed9c90d68b4b6bdfd8037123edba52d8226b7ef0a8d826ae491a53e733cead62d967914a24479acc6a0f65d19bbe52316

      • /data/data/cn.hztywl.ddyshz.cunt/databases/ua.db

        Filesize

        16KB

        MD5

        cbb32949f57ffab75a0bee3e89fb05ef

        SHA1

        3173e2a184c2712931732a311ee1a7d9cc70244f

        SHA256

        61a2a3beb23a4ccfe2c4210570d90a2f551f7df2b13ef512f040967ce32bd44f

        SHA512

        48730c371154c24204903f582d15d063edd3985fe5515b1e578522a954f0d1f4eda46039f63ba35f843991c103551baea1b2cf328a55e4cd7976f94f4946ef6c

      • /data/data/cn.hztywl.ddyshz.cunt/databases/ua.db

        Filesize

        32KB

        MD5

        d604a3bf1f8d992cc320ea5b1f7609bd

        SHA1

        247f88df0b55c7d523ea5398637711a0e4a483a4

        SHA256

        329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

        SHA512

        67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

      • /data/data/cn.hztywl.ddyshz.cunt/databases/ua.db-journal

        Filesize

        512B

        MD5

        ba9bf7845f4e5d18c643ee5824756fd8

        SHA1

        c73c90bde3a399c8ea6df67778ca363c20199a5a

        SHA256

        1ab44b59a75b8bd73662d7afe1624ee458805edf97848e0bb8c6a96320a2378d

        SHA512

        ff6c8f3b3fa1ead170b060a98cf24171165a58cbf821810cf7b3e93174e5817a2e0c6bee54d03bdbd9dd4228b86befd450339b8911840724fa0929c6ca6082f0

      • /data/data/cn.hztywl.ddyshz.cunt/databases/ua.db-wal

        Filesize

        56KB

        MD5

        1d7572da5ff7ed682df57b784cb4232e

        SHA1

        56b041e2694e34c81ea9c3b45c5f7e1949843414

        SHA256

        1f48e097401758119d8a618d5274cefea729afe3918126d24da867c7911a009b

        SHA512

        d468257777b80a49e0fbacc5e02cd3b010ecbb5cd61d5983171be9fa23dc0bae90a1235271c04f7f4353edffc80c7cd4d0cdd54f5ee0847f3f2ca95c42b8eb0f

      • /data/data/cn.hztywl.ddyshz.cunt/databases/ua.db-wal

        Filesize

        4KB

        MD5

        1d373942564ffe5e6feababac5553c15

        SHA1

        ad3dfeaeef8a08e92129be893aac3b13242975aa

        SHA256

        2245b8b3e63cf68150a30cc7262fa338fb4b8fdda0c81fbe9095916539cb23b3

        SHA512

        e4ceee47d9dea7248b69c226d648df66775a4ec8fdde763d5e5d2505cbbdbe544a754b11bf032c0193b1b2b27c518de46c76a033881ffc3975eb4f3f5c672235

      • /data/data/cn.hztywl.ddyshz.cunt/databases/ua.db-wal

        Filesize

        8KB

        MD5

        1a983c7d806200060296cc0be3c95e3c

        SHA1

        47b08f6b48b808dfa0a45aa2aaba1cda87c687f8

        SHA256

        dbe45409a3d98ba7c9d4b7c08793232c6c2732d8566200a6b34b08ce2ab8bdba

        SHA512

        70a07e996d3dc06a77358d154a6e9a7f3dbc3cf1d98197c447bbe6040941bf4f96562c7aa8dc948364f05c10c119d080a8a5be77dd4313ea0ebcfcca9384d791

      • /data/data/cn.hztywl.ddyshz.cunt/files/.imprint

        Filesize

        1006B

        MD5

        1d0942012e2634cfe171fc58cae8e0a2

        SHA1

        ab12869ba4d069b3751f7ef23a13095693cdbd2e

        SHA256

        ffb74f9c67499e3f62e7257ba2088167093f310ce5b85608af925084bda46031

        SHA512

        85e2d71c1e12c8e7eaf732d4764965adc727052ef43d6fd3501d0cfa15df0f29385d892fe996cad05cbf498b63318756208feb1c014f2b11e704b08a628bc34e

      • /data/data/cn.hztywl.ddyshz.cunt/files/.umeng/exchangeIdentity.json

        Filesize

        162B

        MD5

        75823ae2f3518f1a7704501eafdfa770

        SHA1

        8de121f30870311f93053b73b977bf0a3eac6e6a

        SHA256

        0a6300e9f555aa29d93cad17766b815b4af2e245b347ed18ddee7fa2b798ec4e

        SHA512

        d274a32e4ad4381939e3a22c82606acd24ba594ae79f777f6a2b5b72507cb665a6a858d1f369ba14157d1156f7c95c237209db1a6b939d1b053e2ab05105f6ce

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/a/ResPack.rs

        Filesize

        525KB

        MD5

        0357e8edde36315c0e0a4f5385de625f

        SHA1

        2e6c6f15010e88dac5078f34e31a8ddf5e032f2f

        SHA256

        44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d

        SHA512

        497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/a/mapstyle.sty

        Filesize

        248KB

        MD5

        46a9f9a5221dbe4ff71bfcd2ee045c5c

        SHA1

        915cb3bc2f0096dede38afc1cd7f09c8782360a9

        SHA256

        ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

        SHA512

        185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/a/satellitestyle.sty

        Filesize

        166KB

        MD5

        3f1348cd6165c9a66a9892565c917ca1

        SHA1

        96f0c939438c494cf3fd89246d458e92c0c7203b

        SHA256

        5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

        SHA512

        405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/a/trafficstyle.sty

        Filesize

        4KB

        MD5

        6a86f30539dfc9332cd235fc48fcb62c

        SHA1

        5c202003f6346edb85175b8df7c460793f5512c6

        SHA256

        34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

        SHA512

        f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/h/DVDirectory.cfg

        Filesize

        69KB

        MD5

        4e9eab735928758b860e48b2f9befd7b

        SHA1

        7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569

        SHA256

        1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4

        SHA512

        c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/h/DVHotMap.cfg

        Filesize

        10KB

        MD5

        c16f5ca1517683c46e02a6b71aab3c00

        SHA1

        2d09a048d1b8d556d89d4d723947e9e234b5e59b

        SHA256

        13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

        SHA512

        a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/h/DVHotcity.cfg

        Filesize

        1KB

        MD5

        883c30365d5d377966125dd0c079debd

        SHA1

        d296ec1e3f4badb6e3e6166c1473fb55d4265761

        SHA256

        50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa

        SHA512

        00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/h/DVVersion.cfg

        Filesize

        86B

        MD5

        298924848d2517a508f43ff0cc51bd3b

        SHA1

        b9fcde7b86653ead6deb57280a6049cf87745710

        SHA256

        0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

        SHA512

        63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/l/DVDirectory.cfg

        Filesize

        69KB

        MD5

        65685a117c72fe8fbf5a92b07073c99e

        SHA1

        b115b527f74e4c291edcaab19b316a446aca8f5b

        SHA256

        19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

        SHA512

        e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/l/DVHotMap.cfg

        Filesize

        10KB

        MD5

        cc3fad9057e0940ad4d4c7ad27922023

        SHA1

        403cbbcd7b819733b5caf49ed2a58d654441e99d

        SHA256

        f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

        SHA512

        ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/l/DVHotcity.cfg

        Filesize

        1KB

        MD5

        1c6abcbbd253448057930ad1cc59ac75

        SHA1

        a5845d1c4bc87b8b4785b456d76edcb8309eda4e

        SHA256

        a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

        SHA512

        71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

      • /data/data/cn.hztywl.ddyshz.cunt/files/cfg/l/DVVersion.cfg

        Filesize

        127B

        MD5

        d54b7b380a5ff46c78283013a07d8e0f

        SHA1

        f697c5f7028ba2679a96d6bc5291c38ff96d7982

        SHA256

        c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

        SHA512

        ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

      • /data/data/cn.hztywl.ddyshz.cunt/files/exid.dat

        Filesize

        57B

        MD5

        6e79247703671767da49c8eef740315b

        SHA1

        3958abc83b6cffa13ca5b33ab007be0ebaede5db

        SHA256

        738edc28ea4bdaf48ee57f4a9d9eee2afe40d6f54005fe21476e0c928dfa2140

        SHA512

        a7862f09deb2770fee75b2997da65abcfe9789463a151f5111ae112dac31c2db047d108e8ba7b84f93c9487c82acfa0171c2f396b97ac12137c874478f99a862

      • /data/data/cn.hztywl.ddyshz.cunt/files/umeng_it.cache

        Filesize

        413B

        MD5

        6ec169bd44984233f1850ddd27916cd2

        SHA1

        def3af4439557ed7efc13c13258a7e30db963cd1

        SHA256

        e77e4ae501f907b2d8137b5a884ea5f479bacdd6ed8b4937108d11f20a3a8a56

        SHA512

        356a085d135ac3d4fc7457fbd54b6667baa4d0bf08a2ad08cd0ae53581a9cb7aff2ae41095c860a7a41c727f9f42378d42c46f0c02bcd5da68cc6db06563f0fe

      • /data/data/cn.hztywl.ddyshz.cunt/files/umeng_it.cache

        Filesize

        210B

        MD5

        16e3fa3c6df2fd278317b331f29c255b

        SHA1

        8dab60342fc3f5187a77c471dd7b1490e95b1ada

        SHA256

        2d2a0a9083cb7e6bca77f71a39a2baf95cc0650ca204dc270df1e21a1d85656a

        SHA512

        345999a1ff9ed8028e6629a566759a301f01f97fc818d92c12fd895deae34c857406397a2976753c360edd072bbf5a63bf1b6aee5f659e23a344a948fa81449f

      • /data/data/cn.hztywl.ddyshz.cunt/files/ver.dat

        Filesize

        6B

        MD5

        8e31aa8d6b61e8b044ac3346e87098d6

        SHA1

        70e4050667039f00eb5231bd731b9f3cb5daf00b

        SHA256

        d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

        SHA512

        2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

      • /storage/emulated/0/baidu/.cuid

        Filesize

        89B

        MD5

        3146f4268b3b108efb6ee3ef3f9b6f86

        SHA1

        ff980193b81496ea05e1924d225f904355d11ffd

        SHA256

        d21c9c52814f44adf379b056021c082ddf982055209ebead4ce2ce0f8b7920bf

        SHA512

        d8af2f9bef608c0092663253cc3ba0e22aff3ad362d325a5f29aacc8bc207492946a5f7c7d8a0a3509be6b2048976a1e02ff0d0f12ece4ffb6c9aae42c26d646