Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2755562s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 20:24

General

  • Target

    89780f0341354fc22429bc76573e92c5e0bd1992866d33428f1ac2f2321ce958.apk

  • Size

    24.2MB

  • MD5

    8fb0371fb91e25a2f375ef06ae51d7a8

  • SHA1

    35cf324ffe030ba439e11b297712d8fc6b8dbf15

  • SHA256

    89780f0341354fc22429bc76573e92c5e0bd1992866d33428f1ac2f2321ce958

  • SHA512

    f3b63768e13c9661a289fd4e59c4d28450c92cecb7f5246eb9f2904bedca9712af69db6e9c2bff0090e01722a958a8d20119a94a4c6be4a81a0c30a258d16230

  • SSDEEP

    393216:Jp2g2q9dACNq9k4OuTjNi656WNg9UwJNJ92SlEl5VBLjF0tm:JUFI9q1O0J5hNdwnJ92SlE7H2g

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • org.zywx.wbpalmstar.widgetone.uex11706770
    1⤵
      PID:4502
    • org.zywx.wbpalmstar.widgetone.uex11706770:push
      1⤵
      • Acquires the wake lock
      PID:4633
    • org.zywx.wbpalmstar.widgetone.uex11706770:uexjpush
      1⤵
        PID:4662

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/uexJPush.db

        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/uexJPush.db-journal

        Filesize

        512B

        MD5

        3dbddb26c8e98ffffd4aabf081841a42

        SHA1

        a7607efe61b74a1cb66e1a437ba3eb8c1b2cad28

        SHA256

        3e3417680f457a0bfaa11d62f7e5ef7b01892117ab47570da2da39ae30dd10e9

        SHA512

        dc8cb67b7ac031bb5799ad101c81e936c0f69b4862e3ab4d09549476a622483c440d7e90fee7a7ed40f4f6938d281b8e803e4308b4b28ca7dc2bf9c7cc4330bd

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/uexJPush.db-wal

        Filesize

        32KB

        MD5

        755c537026bd69381500e62e0075682f

        SHA1

        dbb8953df087185c539961d71705bfa23889f243

        SHA256

        513bf828b19cb3c2735980dffaab2eb3913dec88030d93d72b77a0128a7a572e

        SHA512

        e613068a4fb4111279a5985d137d2820844711fd8adb1d224aa4a6c45e3f4eb34356c8e9dc6979bb66e552fdbd9f26d5a24a10402c33bac231d68f27119c563e

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/wbpalmstar.db

        Filesize

        16KB

        MD5

        d296c4769796302a98f1b1d42a61caea

        SHA1

        b4e5190b6de697d42a112e128163e2c48f564e25

        SHA256

        a7dcebaf46c16aae8d19cf5988b9d70d0ff3c2048705d4424d19eb4916a7960f

        SHA512

        aad0a23a98e0794e8b53565c07bd4013d6e8f7bdffcf748d9fe575275d6343d105e05b252e861639dcf4f22da8f9cc407bffc10c5cfe35853e0ad11bd2194eec

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/wbpalmstar.db-journal

        Filesize

        512B

        MD5

        39213d9bac38c20f2fc0beb23fca3eec

        SHA1

        acea240a24e6de627a13864e69ea319713023618

        SHA256

        d08612e0a262168f3d13adaad1da222e5a54be0af5d423603fbac5fad86fa042

        SHA512

        7841a2852ea1a19e8bb4144bd0e90e7479b6cd2b6232e805eb6b35551b6933248b890e6acfc3cb5ac13455da5c7d97e6934b0cf344aea2a1fd99571d88d3961a

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/wbpalmstar.db-shm

        Filesize

        32KB

        MD5

        caca56687c3a2a1a7c43c40565fc9826

        SHA1

        0596bdd6794bb48f5e036ede01e2707d247305e0

        SHA256

        fce48cc46d6578e345c54631cee7e17bb441692ab83c574ba412d66b7df9414c

        SHA512

        0f83efadee2149e33d59ae721b519f5af407321ac0b4dfe23b5dfc1629fbc5b4b4ef5cf90ff2bd0397197805414e1b32270c301504adcc9f06e85ad37b73b503

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/wbpalmstar.db-shm

        Filesize

        28KB

        MD5

        cf845a781c107ec1346e849c9dd1b7e8

        SHA1

        b44ccc7f7d519352422e59ee8b0bdbac881768a7

        SHA256

        18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

        SHA512

        4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/databases/wbpalmstar.db-wal

        Filesize

        32KB

        MD5

        e1d375e32bea4e6dd70ea4083a52af39

        SHA1

        260b8419f9cf868f0597f2d141c03588c99a0a1c

        SHA256

        aa706566cd1f8b65cd650d652aa3bd90195cdb7670d2e11a9829ada4d7698afd

        SHA512

        8186fca6ceee3f264c848b8ead18b3375e8404acf08bce85744005876805c0270433a19b06be98d185640c9bacfde4ef7326351cd4eeaf9d3dd7d16c0ce55074

      • /data/data/org.zywx.wbpalmstar.widgetone.uex11706770/files/jpush_stat_cache.json

        Filesize

        132B

        MD5

        e61d65f62e3ac084fe596af1c612506d

        SHA1

        96538c5c6ac1f10e7affd89943ae1a7606aa1c47

        SHA256

        b340adad5fb5952d9210ad77ae71d976e776477149b8d20a5f20a2c2fadc5ba5

        SHA512

        3a4a0c3afad925e7dc04611848383e07b39e640a128fe94b5f9bae466d93c0a47bdff3840aa7c3aa91cd76c4377fe23de86e637759a1a0a4f357184f5205b2fd

      • /storage/emulated/0/Android/data/org.zywx.wbpalmstar.widgetone.uex11706770/cache/uil-images/journal.tmp

        Filesize

        31B

        MD5

        8c92de9ce46d41a22f3b20f77404cc1d

        SHA1

        8671a6dca00edb72be47363a7071be65cf270373

        SHA256

        68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

        SHA512

        30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

      • /storage/emulated/0/data/.push_deviceid

        Filesize

        32B

        MD5

        3d849e8e988d14fc74dcc40eec691242

        SHA1

        75c0f8fa3b28a37485bed427ca31a394ef73ab2e

        SHA256

        502ffdb3c843c31486c1e67bcb8b511dcfaac329382103ec395c62b0ac568dca

        SHA512

        f8ed58b8ea7624c14d27494e86e53173e46e3362ca0859c4cb2fcff154a78b9d45fd669d5ec6a8d10c6bec58674d35df242aef486ed8231b5f219059078d5499

      • /storage/emulated/0/widgetone/log/mam_log.txt

        Filesize

        165B

        MD5

        9306da1778069dd8bb88ea4efcac369f

        SHA1

        c21cb62e5ffe28f9691988a48d1f1cdcfc91c7d5

        SHA256

        af879b3705313b99851c48320b7e76c69d639ec7d7e4b431e95ede0553719c73

        SHA512

        fdf76107537ee8728c355d422243f894a528a16c0c1fe0c1f4f6ced51afd173c12677802856c3fcd0f1fb4a8ce88ba701cf53e3ec5aed786d2d5f2aa48fe2ff9

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        28B

        MD5

        ec9ebe536b4ab31d0b32b90a450208ce

        SHA1

        cc7c72c740b6a76f453eb170caf8f4ef81c2fa88

        SHA256

        eceec1b5bc04bbe414b273fe7f43d2d7f0a556f623640fbc7db1e90dceed95c1

        SHA512

        fd81aa7f60f40c47ce6d32ed1bfe35e047f669ad85b68d1400eef072ab3060b2adedd540f9371558f4aa61b2c3722f7177a634b25b8483391a057bd8c0c57a46

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        74B

        MD5

        c91ea3fd00010db521276810713ee229

        SHA1

        6d27c3a690a310c7df7575053e8fa9ca758f7e86

        SHA256

        1aeb7750af4c24482621e4d94b89fc492e94c68000c9048c0035f57707a4b6db

        SHA512

        509df38f432c424ea87df454c28f0f8372fe1c97eec120d4dd1eaa4a29c620d2ffa7a1ca73aa23e7f4b7924dda36982726c2d0ef89135e7561ddf77fcd8d54d4

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        55B

        MD5

        e021dca0913630e5d4175d26b2832f71

        SHA1

        f4b8f0067df9216c3be4d62ac8fd7a57ea3abca1

        SHA256

        c52357e6cdf8c6d6d9034e829a1f95053e673b06b1da2fb04d8a67e6e2ffd043

        SHA512

        2421e6b81f4fbd8d6a5b7c2d1d0a04410e65bcb005440475bfe616f1c39ab8200ad83ba76a7761a5ac5d0922d4d10ff0fb562d4094c4c7ed19b3d1127b2fcb58

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        61B

        MD5

        f7d220e5eb7ac3b06bedb5259fa9ce37

        SHA1

        32470c39045dcde10a598e27c17ff1f5f213ca9e

        SHA256

        f0cfae8f3964bb20357b5c0a3aeeee42052c80b65dae626109059be03752f9dd

        SHA512

        ba14b9c7b3d2e276b6b72d37085c1cb0486cacb498f186b3af86c1429acf183eb2f3d6a1fa72625fae5a0689704871b6c510211ecd1f6e41f20ed862e5bfcf92

      • /storage/emulated/0/widgetone/log/push_log_2023_12.log

        Filesize

        4KB

        MD5

        eba6331d95167b8446d579c3559dbdb1

        SHA1

        9ebc1dc57280b4fc0f31c21e00bf7f42e504dbe5

        SHA256

        8c4b519d0bbce35126a56f31d55e10845b41ab2d89af8644b86eda9582a69df7

        SHA512

        b6eabc689f3e8b29e2e8b50a9682b1e16b1cecdebf48f0c863bc8d7747c1e5c2f4b2e3a7e060d8a526b3823c4855239e114a2c47c08b258934ea8a59d677fd65