Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2651695s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 18:49

General

  • Target

    6d4a0806e8706078ac5e067bfdf440f11ccdeec7f4d43995d19f97aad689c1ff.apk

  • Size

    14.9MB

  • MD5

    4497fc7ea11172c7b1907019524c16bf

  • SHA1

    8610e83f5189c3d8926a3f250aa86b935d955337

  • SHA256

    6d4a0806e8706078ac5e067bfdf440f11ccdeec7f4d43995d19f97aad689c1ff

  • SHA512

    420da4726dbfea3f7056f4d27e17affad8fd87d804e04deaa9d92667efd19580a5a6207088a737d6f2fee69ba1d46fb78e100b42365cf357e610cce0a1b3d135

  • SSDEEP

    393216:6RstXNpmPSwygp6KHuu1qwPrbKNFyV8KXy+xfi:7t9gX1qwPrGq3XDxa

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tencent.zebra
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4226

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tencent.zebra/databases/WnsDBHelper

    Filesize

    28KB

    MD5

    b187af3dec8b6620d583199cc02b5bf7

    SHA1

    5be7a28a3a5082551b6bb97d320b4b107b58907f

    SHA256

    43c9231cfa00c45e510ac0c52c8527e9df01a26b0374664274da40c06bcd26bf

    SHA512

    dce75834ee662ed7dc689f1525b793724c5693c1e66c9aaf0dcd0978dad642413cf38afab4efd069dbe888176c8bdcf4c18db0999f4275f717efe0455e1c19d3

  • /data/data/com.tencent.zebra/databases/WnsDBHelper-journal

    Filesize

    512B

    MD5

    7aa33a39dc07fdf9789dc8dcca147fa8

    SHA1

    02030832ebd6d4f56310e1c8b42a25e736799669

    SHA256

    dee07d56b90a5bbe35bdb0b65a5cb3f3148f4746343bf75e616ddfc232a1b8ba

    SHA512

    025c5d04ab3f2a677afa1428539bcf33c8e051ca0fa7fa2e4f795a0e4129409f4257463ba5542a8d4fae929f43fc58eb286aadce41479fa8ece7eff43ed75fbe

  • /data/data/com.tencent.zebra/databases/WnsDBHelper-wal

    Filesize

    40KB

    MD5

    5fbceeddafe779bb69d6ee4d5e409f2d

    SHA1

    9248f693b8b9ac9be8fb86a4b7b2770910b2e6a4

    SHA256

    7977aa9abebb280402e6c81257a3d5484f01b4f0ae2465efe24f743513c18499

    SHA512

    77d656d19d68c34ab931163c7d0e3d9910f8327c21c19723ff42dab414900a89cf186ee736089da74911ae2423487b20badf72d1289afb4c69e2d5257916d80e

  • /data/data/com.tencent.zebra/databases/eup_db-wal

    Filesize

    16KB

    MD5

    d97e7f1b73f9181edcef0349ea96e6b5

    SHA1

    1e88edca1d6f09c3a646ac453f50701cd4ee787a

    SHA256

    9ae94cd65b1d1169c43eb7a57794a53bbbbf9bf234fe32b213d48ec81546210b

    SHA512

    bad8b244e39661f8634482a337a70e60040cf6841cafeeb0659a7cf676db12a427eb39024b932a51304534237497bae64a798d2a306a059b553c167f30bf72cc

  • /data/data/com.tencent.zebra/databases/serverlist.db

    Filesize

    16KB

    MD5

    8098a364343c68299905269cfd35d1c5

    SHA1

    27dfb334c2474844dd39ce5a421b45d23843b69a

    SHA256

    51ddc4fc109a7bd5b0028109cc0eafa60fda8c30435c7628cb438b180ce91e6d

    SHA512

    e96396374e2bfcf30a2b57780d18da875915a1125e5ab1cad186be3ea70df4fbe544dec568ff1fee0ec0fe1302076804fe5b113d5cf9112fec015b41f93863f1

  • /data/data/com.tencent.zebra/databases/serverlist.db-journal

    Filesize

    512B

    MD5

    4d7af47d9ed34807805cc61e784d4264

    SHA1

    bdd3f84043d08ca434ef21a85e25f0500549b6b7

    SHA256

    a39444d5eaa1b71f80b34343f9eb79639684eedaba028ed7f1f01ff1320eba79

    SHA512

    98815864ef818effd68fa9d350600c9771f5e835672e5712574e2aeea3de87e633338427d759db7e4247e645b83ce525cdb622dcbfb23e1904900d5782144c0e

  • /data/data/com.tencent.zebra/databases/serverlist.db-wal

    Filesize

    32KB

    MD5

    5a0c820f44cb2a940aa245925cb16117

    SHA1

    3c7e3965a7ca7c1e126e799c57c5f8017e2883d1

    SHA256

    ee06e308116a43e659ce6e012f2c53d27de11c299d1081d71980dce56ce00146

    SHA512

    b8fa632e8aabf4c735dc6714c0f7ef02be642198a12d94324f9bb0024d63dee22b1f8c826b2207a62379e3519ff80d3cea3bcf20f0f63c53bea5d14b6b064a9b

  • /data/data/com.tencent.zebra/databases/tencent_analysis.db-journal

    Filesize

    512B

    MD5

    88307a921665f282230ef3a12306b6a3

    SHA1

    0208e66121a19fa3838998fd4ce3535e6a39c6c6

    SHA256

    8a18e68c65b73b4288109b8edc342292286c6fd4d37ee2deee4470fa9f32e639

    SHA512

    9ece7f5121cef789fd3cf221762ac99b324c891920c2fc0dc8dd9646c70c54dafcb7e5212d27281fff50198407be39502ab386084ea9bea2d18e03d31f090e80

  • /data/data/com.tencent.zebra/databases/tencent_analysis.db-wal

    Filesize

    52KB

    MD5

    7d032a2df5b9f2b7f8f3f1542cbe03d4

    SHA1

    3bb0d3e5942ee2c201eb7a27b97ffe9377f7cbb0

    SHA256

    39e595906acc3118fa301a90e78dba25f4972940de298165a49d7ba29b166c15

    SHA512

    3440f140c30e560daa6af0ca7de8304ae1f300c99c37eae80df5423aeecaf799955d52d83426bcf7b131bdefd8e52f5d3e8df6f45b4af056bd41d88c9450f662

  • /data/data/com.tencent.zebra/databases/water_mark_database

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tencent.zebra/databases/water_mark_database-journal

    Filesize

    512B

    MD5

    c78d0ce66244bc548dce1ee97c3a88bc

    SHA1

    6c2c7abe9065ed03399926b5d86b9afacfa95be2

    SHA256

    c27cd37aa9c1efda0dafebfefb556157844ac91f5107c9e19b3aa5a7c9218511

    SHA512

    2e67f619ac7878e3bc91784249792ee5712cdd7b30e82e3722ff21f02743cccf2bd7b8ebdce70dafbbde12058e219080f239675696d992d842c9a398d98b85aa

  • /data/data/com.tencent.zebra/databases/water_mark_database-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.tencent.zebra/databases/water_mark_database-wal

    Filesize

    68KB

    MD5

    34021d15a629ef6632c19a21ab7fe54d

    SHA1

    808aa20528841a5a7be95d428c2ca13eeff97e5a

    SHA256

    83588dc417a989da6d03a4185d4fac6d3cd919bb654eb4fc26831bc044a18594

    SHA512

    ce1d8980687e58cedb581c7ed40e806bac47b630204e091c6ff3b7463997fa158588aff5d306e4ba29bf64a5c49c0433e60ce1d44bf086ebd284d93b7337a7e9

  • /storage/emulated/0/tencent/watermark_camera.log.0

    Filesize

    64B

    MD5

    d4ca1ca5db968512771cdf3dbb53f658

    SHA1

    518285b299beb03a49ce71d616efa4604b92e21b

    SHA256

    7b769219354fc630475c355b75c4ffd5465120bb7fe02857adb0a45f8498ce9b

    SHA512

    983195deb0c1284e9134e25f9dfb84a2a2884963759cbd37e8bc4f8cde1efeae60547e595bbbc251462f60efc6efcfecf50c7959794a04be1a11c020df312e47

  • /storage/emulated/0/tencent/watermark_camera.log.0

    Filesize

    74B

    MD5

    555992342f1c9ffe28eeaa927fefb947

    SHA1

    4744847635ebd68b58238888ab594173200fc8b4

    SHA256

    d679d02fb560812a7cf02aba3f088d06306bca80f7e8cefa64b4f4dd50d3f094

    SHA512

    fc35ecf6e7304d30b5cd056f862ee9a6b773b5dc0c85978b33dcec450f0983d9e22b8e5d99befecf692b050b53fb4c0f058a94782a6948435570bb26a606de05

  • /storage/emulated/0/wm_uuid

    Filesize

    36B

    MD5

    c822616ddf1f26c77ab6202dfc93340d

    SHA1

    52370be59cc114803c9b375f7f245840a6114c5a

    SHA256

    428f51c3456d0ffb66103a2b146463dc759a1f3de2b7652dc967ebb29062c17e

    SHA512

    b4069a1fecbf235b95241f044d2670a412dabdffd24455e035f573686485c45c86be2255640601d02524407d16c5c64791ee8b98c236630d387d8ca4c6c86b3c