Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2739640s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 19:57

General

  • Target

    82aa6b775abdaf499f001050aca5a320c1d35bc24595aab33366a177070d88f1.apk

  • Size

    24.5MB

  • MD5

    b88b2db835f8838ac32a02d4e0772378

  • SHA1

    03430c7af775b40bcd3f46bdc87a58a6dff7e884

  • SHA256

    82aa6b775abdaf499f001050aca5a320c1d35bc24595aab33366a177070d88f1

  • SHA512

    1dffbea6375617471a200a57b597a3f56e8652305928cd383890828a32ae4b219e63ddb8edcaf3793d2da8badc426e7cfa3192cfdf45dfd873832d742e55697f

  • SSDEEP

    786432:mru2ZyqkK+H/BxToLxRaLw/9FnzhYp9AsjrLg6/f:mrbZyqGH/BaLiw/DnCpak

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.duowan.kiwi
    1⤵
    • Loads dropped Dex/Jar
    PID:4257
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duowan.kiwi/files/storage/1/version_1/bundle.zip --output-vdex-fd=50 --oat-fd=51 --oat-location=/data/user/0/com.duowan.kiwi/files/storage/1/version_1/oat/x86/bundle.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4287

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.duowan.kiwi/files/storage/1/meta

    Filesize

    25B

    MD5

    10ea5799f0707aeef2db9b244f529200

    SHA1

    0daf401e98fbff1ab34a8c5996626c477d40f50f

    SHA256

    81be3c8aa443dcdf08384b0ba4cab5916f7f144dd2586a54ee996c03806b4a50

    SHA512

    a3f7512280c1b5000804f8c322f88ef8a67b61c0bb99e4a575f77076574eec98a06033ca9ccad225c3c286e255bab6cc5098f90c6402ba868221eb6dab759242

  • /data/data/com.duowan.kiwi/files/storage/1/version_1/bundle.zip

    Filesize

    116KB

    MD5

    e6c6b54504290bcb82aac7c397eeeb14

    SHA1

    315f0b439e93b4fc3bc49932cd32ebcbc62bdc80

    SHA256

    ed1b804ede7e2f03658c97104937499db136e9d3ecf6595898c672128f5ce8db

    SHA512

    491b32ab4656cdb11eaa80639f44978efe76448494f7015cfc9c3e451dd663a82c5f442cdb4c9e048c7b2413c5f4ec8a55f230231e61b923f81b16665895565d

  • /data/data/com.duowan.kiwi/files/storage/1/version_1/meta

    Filesize

    7B

    MD5

    ce1539cb197f0b0721dabc73016770aa

    SHA1

    9188be2faf6f4778c9425ae7b647ac67dd5e0e0f

    SHA256

    301f114df5b33ae2732782c78700a8538c38be394acfc187551862adab49d923

    SHA512

    6b79a767edc0ca2a5593f6490a9ad135ce0a44a6a4fb03d2b4732382d64d63b4e9f6f61e8e00eb2b6ed12cabd0bd3e034de812429a189ef5094db59711efe75b

  • /data/data/com.duowan.kiwi/files/storage/2/meta

    Filesize

    41B

    MD5

    9b2b5d604319974bc03e6de2e2139b67

    SHA1

    107f3d47c18695cf1986d61bb91f8d33522ce18e

    SHA256

    5f47529b7ac0682bb9b7eb2c5fb35ae4847459d9751dfbca1ae3d82286f4a734

    SHA512

    25b8ad7c0c952e32bdd1a0a4d193df99307991826ecf54c26bf71cb1dba01a9db885bb8dafed466cec78f5908cebde189a2c5091d1d4b6bbd97e1e5f68b505b7

  • /data/data/com.duowan.kiwi/files/storage/2/version_1/bundle.zip

    Filesize

    18KB

    MD5

    8b5d2ab676fab110e3f301d37616b46f

    SHA1

    ddc60eb5885d00e668d953ea60db86ecf89d19cb

    SHA256

    e009496d3f0968650ebaf32ede3baeeb12298b85c5e8c993e7f501148e8ebdb6

    SHA512

    4c5cca822dc2e94c490dae3216b5946170ebc4aa0a8b657374e36ef9308c7c7058814b74bab20e2abce4e4644d5de47e8710804fdd49a93b2a835e4efa57b0fa

  • /data/data/com.duowan.kiwi/files/storage/meta

    Filesize

    8B

    MD5

    596be2d44fa5f557702b144ffde1014e

    SHA1

    461d6580e38ccb6dc72699b6c945e53831dcdf03

    SHA256

    d5688a52d55a02ec4aea5ec1eadfffe1c9e0ee6a4ddbe2377f98326d42dfc975

    SHA512

    3d53caf3669af0254e5a4c3785fb2127567f02c6e63fe809339670ec20f33c4e900a36af2cb2d5dcbc1ea21aa2b1f996a663b6429cd5a3063be117e8e43be012

  • /data/data/com.duowan.kiwi/files/storage/meta

    Filesize

    8B

    MD5

    fa5ad9a8557e5a84cf23e52d3d3adf77

    SHA1

    cb473678976f425d6ec1339838f11011007ad27d

    SHA256

    cd2662154e6d76b2b2b92e70c0cac3ccf534f9b74eb5b89819ec509083d00a50

    SHA512

    df9c478c05321087b50a1d239b4aab290e9b793252758e706e24312aed21c29072285e436a20c3c6227f99b73638f0414fba5835586fee4e19231c1ec56d58ee

  • /data/data/com.duowan.kiwi/files/storage/meta

    Filesize

    8B

    MD5

    e675cc21c1f78217cf5d6a5b1929afde

    SHA1

    07aae1b618f604c684ee3189fa1723bef8656fe4

    SHA256

    cd04a4754498e06db5a13c5f371f1f04ff6d2470f24aa9bd886540e5dce77f70

    SHA512

    dfa8db1c35931931a6007f85a9f4035928cf159357ff8d682a50b6a0f3dfa0e020ed4eb377f6011446f351f7001bae06932ad0cb662e01f07acf6aee257d3bad

  • /data/user/0/com.duowan.kiwi/files/storage/1/version_1/bundle.zip

    Filesize

    273KB

    MD5

    6b9a2c550ad58ea9a8cea7c4e092ae8a

    SHA1

    9ae409067e9e908df546bd4fe8decf9c92af2617

    SHA256

    cf7171a130cc730965336f1184a3aa3ffa23e63c4a3a65f06710b8fcda58e71e

    SHA512

    8d0c103a1a1f068d337bfb8fdeddc669584036fa98870a9551d867b8f6ee9995cdf1d964f67405cfbb728000aa1d25ba0e92d2a1670f59c847f9a59360370b0f

  • /data/user/0/com.duowan.kiwi/files/storage/1/version_1/bundle.zip

    Filesize

    273KB

    MD5

    aec54a90725bdbbffdf446c484c8ab27

    SHA1

    226406dd2ddf3e0bffb378eabf0d93554000e960

    SHA256

    71ea4604ae2ebd6ed35f50806e40212c8da8d842a4142a16246a2a3d6a4cdea1

    SHA512

    92977b89880660281dd6de38eaa759490be5c2635ce4e33d09ba5542ea06e7f40295306b7fe124a5377c98436d7d608afc15fd281b56a60e6f4387a4c74a329b