Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2642535s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 18:35

General

  • Target

    69df8f63d087fbe702b92140b9ff7fb0d64f4916759c059e2d4aaba79d1b22c9.apk

  • Size

    5.0MB

  • MD5

    faa906868e8b40094a5ff34087834da0

  • SHA1

    9a20f9edd524627be6c9ca848be4411c66aad7ee

  • SHA256

    69df8f63d087fbe702b92140b9ff7fb0d64f4916759c059e2d4aaba79d1b22c9

  • SHA512

    8907feae42cd6c730e2a3e4047687c0cd06034ec8446ecf5aa8b3425b2df3cc2fc698c1480fbe7122518bc524b07fe8698a96090329c30836536b154ef9071b4

  • SSDEEP

    98304:96C+Lo0Xy3Noj7LV16hU1UyFD7JDSht2rzIMBFUt8eHnXDiL+3YkjP6YXyR3kRj:96CCo0WOx0dq7YhwrNF28knnXL6YXy6

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.sljh.qpbrowser
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4251
    • /system/bin/sh -c type su
      2⤵
        PID:4304
      • logcat -d -v threadtime
        2⤵
          PID:4329
        • logcat -d -v threadtime
          2⤵
            PID:4342
          • /system/bin/sh -c getprop ro.miui.ui.version.name
            2⤵
              PID:4369
            • getprop ro.miui.ui.version.name
              2⤵
                PID:4369
              • /system/bin/sh -c getprop ro.build.version.emui
                2⤵
                  PID:4397
                • getprop ro.build.version.emui
                  2⤵
                    PID:4397
                  • /system/bin/sh -c getprop ro.lenovo.series
                    2⤵
                      PID:4422
                    • getprop ro.lenovo.series
                      2⤵
                        PID:4422
                      • /system/bin/sh -c getprop ro.build.nubia.rom.name
                        2⤵
                          PID:4447
                        • getprop ro.build.nubia.rom.name
                          2⤵
                            PID:4447
                          • /system/bin/sh -c getprop ro.meizu.product.model
                            2⤵
                              PID:4472
                            • getprop ro.meizu.product.model
                              2⤵
                                PID:4472
                              • /system/bin/sh -c getprop ro.build.version.opporom
                                2⤵
                                  PID:4497
                                • getprop ro.build.version.opporom
                                  2⤵
                                    PID:4497
                                  • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                    2⤵
                                      PID:4524
                                    • getprop ro.vivo.os.build.display.id
                                      2⤵
                                        PID:4524
                                      • /system/bin/sh -c getprop ro.aa.romver
                                        2⤵
                                          PID:4548
                                        • getprop ro.aa.romver
                                          2⤵
                                            PID:4548
                                          • /system/bin/sh -c getprop ro.lewa.version
                                            2⤵
                                              PID:4572
                                            • getprop ro.lewa.version
                                              2⤵
                                                PID:4572
                                              • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                2⤵
                                                  PID:4596
                                                • getprop ro.gn.gnromvernumber
                                                  2⤵
                                                    PID:4596
                                                  • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                    2⤵
                                                      PID:4625
                                                    • getprop ro.build.tyd.kbstyle_version
                                                      2⤵
                                                        PID:4625
                                                      • /system/bin/sh -c getprop ro.build.fingerprint
                                                        2⤵
                                                          PID:4652
                                                        • getprop ro.build.fingerprint
                                                          2⤵
                                                            PID:4652
                                                          • /system/bin/sh -c getprop ro.build.rom.id
                                                            2⤵
                                                              PID:4677
                                                            • getprop ro.build.rom.id
                                                              2⤵
                                                                PID:4677

                                                            Network

                                                            MITRE ATT&CK Matrix

                                                            Replay Monitor

                                                            Loading Replay Monitor...

                                                            Downloads

                                                            • /data/data/com.sljh.qpbrowser/databases/bugly_db_legu

                                                              Filesize

                                                              4KB

                                                              MD5

                                                              f2b4b0190b9f384ca885f0c8c9b14700

                                                              SHA1

                                                              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                              SHA256

                                                              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                              SHA512

                                                              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                            • /data/data/com.sljh.qpbrowser/databases/bugly_db_legu-journal

                                                              Filesize

                                                              512B

                                                              MD5

                                                              2e41efc4d631911d498e93eba6c0ccde

                                                              SHA1

                                                              4e76a511157480f04fb46fbee44901331d60c339

                                                              SHA256

                                                              b9782b724c3047abe981de22c435993ab5c2ee7c8e12532c3fec0325fa5a058a

                                                              SHA512

                                                              5f4e9b0c7479934893b9db417c1eb339294a27d225d392500e4f2496792d02b201ed954517f875ff9e87d3bd619e54183abdb252e466c212e8d2a182033a4e5f

                                                            • /data/data/com.sljh.qpbrowser/databases/bugly_db_legu-wal

                                                              Filesize

                                                              16KB

                                                              MD5

                                                              2c068c8b2b95f1226e24d3c1d203e3ae

                                                              SHA1

                                                              338e4eb3d338cdc580085bced851dae33f652a17

                                                              SHA256

                                                              d9ea71347bd4c32418857596616a24fe7829174b26c33b665e236d6f5c46b476

                                                              SHA512

                                                              de0238ccb6ea10fc7db9759f3a51b37ffdefa711260c3247cd7da69d0431553a122c49f0118e258dc132a5d75a66b8305fce54894c693fd4d01c3ae53b89607a