Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2750640s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 20:16

General

  • Target

    87a15bf136d156a91efffbd9cc475954a817851c8e5873cf72160d11272f84c0.apk

  • Size

    9.2MB

  • MD5

    efe4b89aa61d404d2bebf923f238eba2

  • SHA1

    60acd0c7e9882889437322c5caee4f1520c38061

  • SHA256

    87a15bf136d156a91efffbd9cc475954a817851c8e5873cf72160d11272f84c0

  • SHA512

    e6db6f88a8ae0c208bd5305ae5ee602f918b4c96bc9f7336c83b6a185bcce253a6adc5a5376d92265a953942b7b51949140466777acb2679ff4a74e23aa77d64

  • SSDEEP

    196608:BBvCfJMZz+TFaPyAO4qQzKrWIHfgn2+l7SCac7U7AbrGqUQ1wX+b2IcbG:TvCfJMZQIzqQurtP+Cc7UkPGqz1M+b22

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.lbbfun.android.app
    1⤵
    • Requests cell location
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4506
    • ls /sys/class/thermal
      2⤵
        PID:4545

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lbbfun.android.app/databases/MessageStore.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.lbbfun.android.app/databases/MessageStore.db-journal

      Filesize

      512B

      MD5

      188df75b59c289bd4ca50e2e19ae1217

      SHA1

      7c60dbc31332018a78c6c8b378bef908ceefd9be

      SHA256

      31a1521e3fdc39c4ee80ddf8d5a7e2706222e31a1f3e8c87a907bd56183e9420

      SHA512

      dcec2e67c4b30b98d273f3261b4121a99fc5bb8d51294cd4526a68ba7f6241013bb7401e9dff54ab82c823c097a46f7c40ac5ff6aff9f6a58ea84758b96c83b1

    • /data/data/com.lbbfun.android.app/databases/MessageStore.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.lbbfun.android.app/databases/MessageStore.db-wal

      Filesize

      48KB

      MD5

      49e23cb829a8c2e6a9e10c49134943d2

      SHA1

      9927b6750e73e8b5f387b160c4f4c35eb0ac379a

      SHA256

      afe923aa84484fd4d4c49ba904cfa766f80c60dbb862b10156666302843a8d67

      SHA512

      a3e43078187c1eff4beff0a9cfb054c4018c386800838011ce8e92507d3a57806995e305675c21eeb354c6f85a2a8d2d5c92c2d105f7ba9809c5fb81a145cffc

    • /data/data/com.lbbfun.android.app/databases/MsgLogStore.db-journal

      Filesize

      512B

      MD5

      37f8f30b90b694ab5e8f50fe4cb4083e

      SHA1

      08d447738182643f8dd289e810a801a16a220599

      SHA256

      37816c5cdbeb41d256e4035d2d774fb06a131dfcca6c9ad612fe5f948101012b

      SHA512

      a0dc29eb9437fd2634ee360f7700c8109ea9b3af68ce9fa2e17a82b2c0b83a3e5dc2122eab3019c852504e71944e60b811e9bab55c32aca7e72e77d1fe631c89

    • /data/data/com.lbbfun.android.app/databases/MsgLogStore.db-wal

      Filesize

      16KB

      MD5

      7491cc0ac97ed9773b33f3a99d03da09

      SHA1

      b43424cd84f4aaded39404dea86fef952d80200b

      SHA256

      ead9727b4d9cb96dbe682238bd35fcd49b3e9279c22e14b5d2ab8315930c8b6b

      SHA512

      43b1eecc29e63a3644b733ead6936a04cb1c81d77c43a3d634a64bd8f07b71f3dc30b32e2a32ed0d90f26d66f9147308875e22d4d8d2f4bf130ed0ad5b41086d

    • /data/data/com.lbbfun.android.app/databases/accs.db-journal

      Filesize

      512B

      MD5

      4240ff81a9da3901378bd6ae63ef1097

      SHA1

      b2b6a5fb45d2e19aea4bb4a8d21ea38e9b7c71e5

      SHA256

      50865b21ec7479c149d17db5eaefea068cb501d7da853ce6dc2e7ac58cc7b2ed

      SHA512

      ef473c49eed16b9f12134e287f4259d1442ae32062f3f02204b429dcfa4dcf32dbadd2e08cc29588356f01342a27c42e4a4138c68dd109c924be31c5def6444a

    • /data/data/com.lbbfun.android.app/databases/accs.db-wal

      Filesize

      32KB

      MD5

      8b4a63a0cf315ac2b0e1ceedec5708f3

      SHA1

      84ef210fdcffccbbb37cbe1b27c67825d583b888

      SHA256

      2e8104ffd893359ab8286efd126f55a0de9688b98b620954034061dd183ec529

      SHA512

      81c0781625b3ebcf62dcc52b108d3d05bf7c11bfc314214e192d45fc5dadb2889c5dda9f3fb559f90ef5c2f7d3e30e70b8d03c0a72ab59bc086fdf12cb0de70a

    • /data/data/com.lbbfun.android.app/files/common_js

      Filesize

      6KB

      MD5

      b9affe610c7612d64ee5b8a042bbda5b

      SHA1

      daa41900031dbba0fdad6efdd3490daa585bfef1

      SHA256

      2e5be7f8b378ea777e6d9ea744a7f0cce07e103cda938cbb082fb2c8c9f241ea

      SHA512

      070eabffb07d94d062408d99cb9bb8b3dee9231ba10b2e5804601947d2e528cdb25bf7d917c2aee0fb5c925badf34228e27566e9440817a226f74c7ee80d5eee

    • /storage/emulated/0/.Android/.a4b154574052b48a9b945f81425d8adb

      Filesize

      32B

      MD5

      e42148a3cee4f161e7f70d84c8aacbe4

      SHA1

      bbfbb97e95e8bc397312c8b2b0215039ddb16432

      SHA256

      023389f9cad353b5e806c7f3be18314399d524209b2bbb25c47f43f889502b69

      SHA512

      45571c525e195248d18e8900534d4c1ab9d8b59099afb0b9a04e27c822e6ca4821fef1cab58a3e47445c40636a8f1ffc4742fdf8becd9892a973c3f20f71e98d

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      403b179d60fad8d61ab7c494c60f5d34

      SHA1

      50a360889c8ff67b084907ef29263f4897cba3ef

      SHA256

      1363a046e35253983cd998065b4eb2da33fb70ecd5f4c6bebab3d32d196757c5

      SHA512

      002a66a8480e040dfc10771c2c74bb68b45e8d38ba3100b508b332e26488d82ee41d0a2a0778ecc1aa612886c2cde235a9672776bd1578ff259ad3971c704a14

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      213B

      MD5

      3ff2ee7bb5d058b7c629d89a779f7e9a

      SHA1

      a3c086a07d15b53f83b29a4f7c4c33088e0077d9

      SHA256

      f50f720dce1bb8958279a66546d6a76a47d9ba1a9620f204cd9c1bf4bac2914c

      SHA512

      87f458c0a29daae63d90d1707bad3935e5b0c656203134df5b6523b697b3ce7627eaa2549910e22d5bc185cccc05efefb42b462ff691bdf61714f1eee242686d

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      498bbf0a95a5dcf65f19d83c0d11b76b

      SHA1

      5d237d9374b2ab668f795ab8e38ab178fd1c6a6a

      SHA256

      01662850e80ff1ee634a6de122657aac78cb4dbd5fa59284bc185386d567dce5

      SHA512

      5e11a6149ae3785b9066bd1c9b29a05a15630f00eb7f756da21c594c5f784050ad9c2f89200c62e3b49c147d945643b6ac1151e8d5f8343a28ce773ef1673149

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      167B

      MD5

      d97c0cab75cb27a7fb8f701e042f5a3f

      SHA1

      83beca5f17da0afc36eaa6dd2b5ada8c0e4e1a14

      SHA256

      64a9c8911544691874d2a11a7989438488bcc74d380dfb37f7617923f58592a6

      SHA512

      fa95a76bb4b087933f3f66f83577a8d51bc9d236a7f7b448c42450b8ec313fa8a7737ad21abc06637f40a600971ad38665f33cb8d547f02b7ee1f9c2d197191b

    • /storage/emulated/0/Android/data/com.lbbfun.android.app/files/tbslog/tbslog.txt

      Filesize

      1KB

      MD5

      27b81b10706cadcab5ccfcc9ab13bcb4

      SHA1

      3cd0d235f2a7970fd1513e18f2f19ff1f19f584e

      SHA256

      660cf3afc6742a8009b8efc1b4c31cc9ade29a452425f64a4be9ef0df1399871

      SHA512

      65b1093af6feb128ed92e7a7a6eda2f05733bd353b2054cb6ebf0ef6b03b7127c7ae1105c66bcd0d15c3ea976c145027c8f00c183a749dc4a3a3917a2cc3bb80