Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2614770s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 19:19

General

  • Target

    7647012c889e7d8527de2cea3bb088b4ba29d46e681b95bad1ef7d67c9871752.apk

  • Size

    11.3MB

  • MD5

    e16b15708cd117d47ff9def52013afed

  • SHA1

    3091e4c3e3192f5eb9fe237dd1d200493bed404e

  • SHA256

    7647012c889e7d8527de2cea3bb088b4ba29d46e681b95bad1ef7d67c9871752

  • SHA512

    ead7df1f943bb41f6c21ff1aa95b7cd068808d5fdecad7069842ca0e3a3b45ac00b16b9f9ae842b75857049f5595c659a42877fdf7a8b947b4fa589646861b54

  • SSDEEP

    196608:BQB28VDWNd3yPDuiaw1FLUqZnVsm3adJc010stMQPWG3P5tUfpVagIwqGxc:BrwQdoDK6gqZVsm3Gcy7heG3P5yfpQg8

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xingjiabi.shengsheng
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4662
  • com.xingjiabi.shengsheng:pushservice
    1⤵
    • Acquires the wake lock
    PID:4714

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xingjiabi.shengsheng/databases/pushsdk.db

    Filesize

    44KB

    MD5

    e0ee5aa7421630a33de23c92abc4d3be

    SHA1

    281e849ebeee3ac5259971d05594a8dc4160c888

    SHA256

    e51e1f22e6984a84da4bfc7a936bef49c2b2c63ccb64c216e2d722950b2805b3

    SHA512

    2b1b54ed4eec5032c696ce897bd3f26a41404cc7d09d0608b307d3acc16db68983679a1ef335c82c0f19df7d104eb30c452d0b904fc8eaa020a5e416f67e5526

  • /data/user/0/com.xingjiabi.shengsheng/databases/pushsdk.db-journal

    Filesize

    512B

    MD5

    69c68cca0bb02d5369905f42dc4e9f73

    SHA1

    a187d14dad168e12ed19134af39b30259c078a38

    SHA256

    82847d55077b62d56e7508a54be305ae95fc019ce8f069cb6a5f16cce7aec206

    SHA512

    36e20174e2d2fa1e8ad7fd7834fc2ab8e328f52eda6945f98b4488f3c7770fc4b9b7dd9262f2344a23cfef764fc986866cf294d5943fada3f75e8f78edb022a0

  • /data/user/0/com.xingjiabi.shengsheng/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    a8ade2371efc3b6f32d32495d28cebbc

    SHA1

    ba8b59d1525c05a909b697dc70bcadafc1f7813e

    SHA256

    abcf70bbdaede1637137599dcb0cbb970ee658d2d1c53cbfba7934e67684bb57

    SHA512

    4ed5b571b38c169179c090166f0ad292bbb7ddf38bee4538a794f5472a147c4a77ab66971825236d72da0b8e34190658316afd90387f3a25b1337117f374aa35

  • /data/user/0/com.xingjiabi.shengsheng/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    9410126349e68593ac60a6a242f191f5

    SHA1

    728b1ab51d1702622ce3b7f8e73c7a85a187a18a

    SHA256

    47b39b3f090d85b6e53a5a2a10b1de5cf433331ee4854b931b80bd25553bcc7d

    SHA512

    2398ebd98b101b5eaa5a39ca623b663cbcbe230bec126a7531252cb02c39792d549e6a53a35c46c98bbf0f2074551e025164292e919bab6bf51143fd941e8922

  • /data/user/0/com.xingjiabi.shengsheng/databases/pushsdk.db-journal

    Filesize

    12KB

    MD5

    1de3f8cbf433edc83be733c6c67414c8

    SHA1

    f02b7a1cd27f253541c16e96f79311445225dd85

    SHA256

    38b0edc0a3523a92ef3394fdf2b90a3d4cfc15e617486c175c38cd3563fc9091

    SHA512

    441ce624049e9a6b95b1f04c7fa76119d4ccf6b03ea2588aa02b5bcf62cf0f8b580d30e178843f606e1905f3f69120042f373f4e5aacb3f1ad5e0d426d3cd7b4

  • /data/user/0/com.xingjiabi.shengsheng/databases/pushsdk.db-journal

    Filesize

    144KB

    MD5

    b578901a822649119ab2e9d2f9c3fbf6

    SHA1

    8e812beb56db8bd20c432fba4ee42f8139a09ada

    SHA256

    77a0e361688849d1cb3a301f9610579c6d562deb2f7ddc18facbd1d973691188

    SHA512

    2fbfd901c01e088aba55fd8d8e89887d6a5beb12555b82db9359217b434a9c49a5718e23324da8f19f0277dcb2a5913d5e548b3fb5b413a2bedf5f1d172b33e0

  • /data/user/0/com.xingjiabi.shengsheng/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    e0dcf9f360e1515aad514dbe2317df03

    SHA1

    31206567717093c96d5a00675b7ddaa49b23d9c7

    SHA256

    bc3877d849d1830f4160a8d98bb521eae3590dc632eb78dfc535b004849a9f8a

    SHA512

    d8bcc6a43898aade2d1e18084c9cc2c4fcea4427882e4c3769f5b133af3b89b78e3133e0f1cb06898cb07706b4808be713f07f2c0b2a134c00b728adb3ba67c0

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbregion.db

    Filesize

    144KB

    MD5

    3d9c598f457aceee545fb8e71736a38b

    SHA1

    c1d723781fd63666313fc9adf8c8ffa4be97cd8c

    SHA256

    36dd3246ebc74d6be72ad3396e77bfa4a91091fd70829caf2b4fb9cd9f732938

    SHA512

    2674cd9698f5760ef6b10b8475de8204ba7e3a0064df0260b276c778080dbc35e339bfa6db117e72877589997bd588110049a60e534d9b0716af4d4877a02af7

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbregion.db

    Filesize

    5KB

    MD5

    4436d98016608607576dc2dfa6ab0f82

    SHA1

    d2255219817ac20a782cacdb357bae363946421e

    SHA256

    8d7effec2ed9891d445a4347090630684d677ea624773d66b1a1b4400fb77d64

    SHA512

    fac0eaba3bfbfdcae97787183b234bfc023be89ee308d566917118488c21a3aeef8f1c79cdb95d5664052e68cede169f21c0ee3a4deca64e0e573eba826e620b

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbregion.db-journal

    Filesize

    2KB

    MD5

    97b25906872cabcb99c3dd5500cc6dac

    SHA1

    199c09a16d78e9888bb1c066352c856ec7879f43

    SHA256

    be27d1f193325765c542e1125e6e5070e17a1785af2da99c5992ec83aca6f302

    SHA512

    adfaf17a422a9c78a0f7c8d6547282e87e6ee97af366d233063acbc0e9ce88841377e8cfd6c74c8ac877f5af31c283c237992ccff1d04121f79f2b68b908b350

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbregion.db-journal

    Filesize

    2KB

    MD5

    b6cd32461b5619cd1b7e834dc844aff2

    SHA1

    a1135210e6a55d517597d8932a7b325befffed49

    SHA256

    ddd51b9e6919dc101d0a629b1ecc2f5dd6389845a075090f359ba5f4e70d8806

    SHA512

    f5ff545ba1289513df64a9c66129f5fbe1ae92d488ed9bce54c3bd6467416c7056d79fba0859b58bd9b29a7b4ff9f78445b5b5f8eed50f114e85d74724c5a32f

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstartad.db

    Filesize

    20KB

    MD5

    ce09b7a37f3f047286a1d94cae563d2c

    SHA1

    d17ab968b73edfe46d140b50ef73aeb59ad063f6

    SHA256

    ff179fd277d41ed844e057861261c1878291a7ebbf7b3dc40ab585fc28765bda

    SHA512

    aec1f0278558e81ba2e759da014f066cd217ddd2ac5c929391069864372d0139f1e6762e82afa2c9560eaf04fb59f6a89c25fdd3285fb969e75b2a6b96d8739b

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstartad.db-journal

    Filesize

    512B

    MD5

    23ebc36f492f60874a75a0014ccfe611

    SHA1

    218b5e2d395d9f789cbd271079f3e2cb804b4346

    SHA256

    90be9edb5197008a089667027cdd3caaed7fe56beb5f92c74a327f189a0f0f0d

    SHA512

    52a358f0f4a5383f9d66ad7722f1e5f8485aca900e5c8fd311a9009fa691343fe20a420f9ea9538789a064fac2d7196d74918eba90211e5f2c2e08cd287483db

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstartad.db-journal

    Filesize

    8KB

    MD5

    a2c1e95ed4185bec7e4a6f8de689df61

    SHA1

    eb5166f8709ce898d208537bf725cb8103e7b24a

    SHA256

    c8e26801afe13b048a03f139f4824c3030377495cc4353fdfa781f3c1da73ee8

    SHA512

    9ca5f36836f51e1f21417fb7f5824d18de33470b08573433cbc08f13534fc94d35ca50f84cd6b4400c4b420085147e506db7b3e750ea043fea35d7914ff109a0

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstartad.db-journal

    Filesize

    8KB

    MD5

    ce2c038d24a7799d85e5d29d510101da

    SHA1

    01259d6110312ae1075fb28c6ecd433fe8a35814

    SHA256

    347548946920cff2a0c591b7e05b64b4b9819582b660ad6f0f6fad450aee4a36

    SHA512

    6884031c728f81b1d7e8e6de683c6e09264f2375999fcfdc1c419bfe08d60d839284c53d8d27bf544b2044853bbde3b0739d7c42cc61f139c7a4e2ec398482f0

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstatcube.db

    Filesize

    12KB

    MD5

    f41f531c07d4141546a531ff9caffdcd

    SHA1

    9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

    SHA256

    bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

    SHA512

    e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstatcube.db-journal

    Filesize

    12KB

    MD5

    f7a0c44f832dcfabac4caf2198fe2cd9

    SHA1

    3e9b92857d952f95db857507f826f6461e4753b9

    SHA256

    e465e58ba0336b65258a2d78334db3836ddb0c54e153f919444766121db9e8ed

    SHA512

    ca15570df5c66d14be49cc365bb7f36fb27de24cb3d38cc748646fc69b233194f4e31d0a4cd333542d15535063fd7013d6316c13b6ff6ada2f5de7b45ab4e28c

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstatcube.db-journal

    Filesize

    12KB

    MD5

    9d8506fe48a74e567100a90ee3d50ff2

    SHA1

    bcb4b0eae1dff3ff7c7abed60e1e26c3699d7123

    SHA256

    5b6bca0de1a0cf2cc5e887294cd8f0e8ec226bcccf17a6cff17a535dd94e81fe

    SHA512

    3a6afcc1ecf66fccf1decb2b2da2a81b071ecfe70ee2f3919ae079f7893e804c8cb27caa11d28bc54d22824fd4f2b8b8e7d178962b57cfd5f7dd2f6152a9c864

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstatcube.db-journal

    Filesize

    512B

    MD5

    9b4670865c028abab5b2922f75db5e7a

    SHA1

    7dd74f41856097d214b04837f54c32cded2da5c2

    SHA256

    28d5a3885a83079d43ea193561592bd570a6c6110142e6e390849383789e1ab1

    SHA512

    8340a5ee1fe69d381b28e08367dae3287914f3d1fa08e3ca2525e34e4a3e213fd0a6d7fb8e56fce0e67dc1260d12d6be27ed504204897a8fcb373e931af5edc7

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstatcube.db-journal

    Filesize

    8KB

    MD5

    37319c3591f348045f31d222b264f7cc

    SHA1

    2108715e490c2cb9fe631889270b4cb61331a2b4

    SHA256

    ef49953fbaaaf285e3365281be7ad1f4f89dc2421bd461f802667005a38e7fcc

    SHA512

    35c88030d27dab8520ee80302ea9ace4497cd18d3556d826982d69dce1a84f73ae800fb05e489946d76a67e1d83c683a51463e808abed2f6355e701b68f6e2cb

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstatcube.db-journal

    Filesize

    8KB

    MD5

    4f24dca4bae7fcee738ef8d3b62271bc

    SHA1

    46dba83c5d20fe1321e0cb64a4c35f14321e73f7

    SHA256

    8514c848f560f831f138ae136a7e35048092e394368c9b3a576cd3e9035a58be

    SHA512

    4a833dd417fcdca8a41190c65a5cbba6b2bfbe761e2f3d5b3fdfb3dde727e712df52bef960266d1c279171406c6332af8d40b592c1c48e54f70818f779a89542

  • /data/user/0/com.xingjiabi.shengsheng/databases/xjbstatcube.db-journal

    Filesize

    12KB

    MD5

    d58abefa79d558e734730e24f426341c

    SHA1

    52662d6bb3581ae5a0105ea32b0b119e50859517

    SHA256

    4297e7d2694d6c1e63c2af2c2ff51e1a38ecb0da0fad62eae7b0322f585ee3b6

    SHA512

    9a484a9c240acf4d00909acef81a38fef4b70574d16580f0f24fb233fdf3b095f97830a326832f6707ff1bf2f2f2db15377aa632e6d982a611d55c078be3cba6

  • /data/user/0/com.xingjiabi.shengsheng/files/mobclick_agent_sealed_com.xingjiabi.shengsheng

    Filesize

    529B

    MD5

    3edde2aa2b0b0dcddda7c91f211ac7e2

    SHA1

    df0f083eee25c2d48d99e6287565068ee02ee127

    SHA256

    9a6a516a2c1c501a31781c696529bff3a34633f38ace08118eb72ea0519fc12e

    SHA512

    637408bd19949652a82e979733d68ae05e76be2baac0e1c9d721cb08f62e93edc059a9df5bf301f01087a1ca5c4340551fcfd7afb50333396ad5fa11a0b35465

  • /data/user/0/com.xingjiabi.shengsheng/files/umeng_it.cache

    Filesize

    148B

    MD5

    36833b5ff2646cd36096c3fe234ddd4c

    SHA1

    93482b8af619b4351c4f21b24df56a05575a26ad

    SHA256

    85a7d4078d8c049164745d182d6f6b452a6967c4856f602a0a8ec6f7572460ca

    SHA512

    bf89e757d040bf8d7d56aad4dc559fb13b717e160e8891eea33bd4a6b3312577e3f8adafd0d005fb48f50d2441a2b1e215f4d83ec955503512f38e2753cb9c2b