Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2923397s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 00:47

General

  • Target

    ac692aed9c6fcbdddc8b70af213b88794eed4fd4309f56b19a2193a75fd0ccf9.apk

  • Size

    7.4MB

  • MD5

    c24bbc1ed944bf6ce6b87ba6074125ab

  • SHA1

    1d3a61d214fa5b5ba5f739f3997839dcdb1318f1

  • SHA256

    ac692aed9c6fcbdddc8b70af213b88794eed4fd4309f56b19a2193a75fd0ccf9

  • SHA512

    050cdca862489c328e9f3f36c9449fbdae7fd7c697c83061571439fd260eb140e68140dc342d403aa76e2abe371c38dce13402cdc6210d90d17e9b11acdd16e3

  • SSDEEP

    196608:FDlQLes/A10w6NB1S5DOEiQIloYrwg5ooRnEXf:lCIb4zNdyWwWrRnEXf

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.quanminzhuishu.bookreader
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4273
    • chmod 755 /data/user/0/com.quanminzhuishu.bookreader/.jiagu/libjiagu.so
      2⤵
        PID:4299

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.quanminzhuishu.bookreader/.jiagu/libjiagu.so

      Filesize

      426KB

      MD5

      bce49bb79be4319f68190671e6ce885b

      SHA1

      b08691bc04b31010cd29251db2aadd0bbef0d155

      SHA256

      641e47e87d0d33a9e2b28e3b9c732af180541fe63da515c6cec78159504b8c14

      SHA512

      917e95f9598e91d30c77d13e0afb1a10c94cdced2c93ebec09412e5c56b673583d245f35838690853987df58bd895a6c8e1ecebf812059addd1d354ae35be416

    • /data/data/com.quanminzhuishu.bookreader/.jiagu/libjiagu.so

      Filesize

      8KB

      MD5

      6faf837225907c877a726e369f0a6d98

      SHA1

      3e2f5f7356fcb37e73bec3bff58c4d33dfc2ff0f

      SHA256

      33c19589a9a274f37a1dbf81d4163bd8357ee68af817f4bcece1a80e72074af1

      SHA512

      8907fd3ca2c385447f325fa03700c81dfbdbaeebf638484534c716516842604371f1edcc0483ef7a0cbddf7fb3893b3777f98e3adfc2872be44dfb2bae3294a6