Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

aa8b62f1b1...8f.apk

android-9-x86

4

autonavi_R..._0.apk

android-9-x86

autonavi_R..._0.apk

android-10-x64

autonavi_R..._0.apk

android-11-x64

Analysis

  • max time kernel
    2918007s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 00:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    aa8b62f1b104bfea6c37f9ec11751eda01b036b22b7491101a03e85b4ca4668f.apk

  • Size

    22.7MB

  • MD5

    354f71ad4af30d72958cacc29cba55ab

  • SHA1

    e820244b59d6630d82849acc8d7f417afd3a15a3

  • SHA256

    aa8b62f1b104bfea6c37f9ec11751eda01b036b22b7491101a03e85b4ca4668f

  • SHA512

    bafce0afacf1ac822852378369e29d94574354cfa29f1405f9946786fd726867ea5b15fe468bd2550f0b675467b4b9fd3215b282afe510a7706b98c74a1a4bec

  • SSDEEP

    393216:l6bnUctkttE3jOjJMsU8qF1K0wz0Bj4KLtdhWg5SuZVuJkDfnp+qgdi/Lj+nYd:l6bUUfs+HKC4KLtdyXyDfpJgd+F

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.cyw.yijianhui.activity
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4210
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4268
      • getprop ro.board.platform
        2⤵
          PID:4268
        • /system/bin/sh -c type su
          2⤵
            PID:4296
          • logcat -d -v threadtime
            2⤵
              PID:4320
            • logcat -d -v threadtime
              2⤵
                PID:4338
              • /system/bin/sh -c getprop ro.miui.ui.version.name
                2⤵
                  PID:4360
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:4360
                  • /system/bin/sh -c getprop ro.build.version.emui
                    2⤵
                      PID:4389
                    • getprop ro.build.version.emui
                      2⤵
                        PID:4389
                      • /system/bin/sh -c getprop ro.lenovo.series
                        2⤵
                          PID:4414
                        • getprop ro.lenovo.series
                          2⤵
                            PID:4414
                          • /system/bin/sh -c getprop ro.build.nubia.rom.name
                            2⤵
                              PID:4440
                            • getprop ro.build.nubia.rom.name
                              2⤵
                                PID:4440
                              • /system/bin/sh -c getprop ro.meizu.product.model
                                2⤵
                                  PID:4469
                                • getprop ro.meizu.product.model
                                  2⤵
                                    PID:4469
                                  • /system/bin/sh -c getprop ro.build.version.opporom
                                    2⤵
                                      PID:4493
                                    • getprop ro.build.version.opporom
                                      2⤵
                                        PID:4493
                                      • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                        2⤵
                                          PID:4520
                                        • getprop ro.vivo.os.build.display.id
                                          2⤵
                                            PID:4520
                                          • /system/bin/sh -c getprop ro.aa.romver
                                            2⤵
                                              PID:4545
                                            • getprop ro.aa.romver
                                              2⤵
                                                PID:4545
                                              • /system/bin/sh -c getprop ro.lewa.version
                                                2⤵
                                                  PID:4570
                                                • getprop ro.lewa.version
                                                  2⤵
                                                    PID:4570
                                                  • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                    2⤵
                                                      PID:4595
                                                    • getprop ro.gn.gnromvernumber
                                                      2⤵
                                                        PID:4595
                                                      • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                        2⤵
                                                          PID:4619
                                                        • getprop ro.build.tyd.kbstyle_version
                                                          2⤵
                                                            PID:4619
                                                          • /system/bin/sh -c getprop ro.build.fingerprint
                                                            2⤵
                                                              PID:4645
                                                            • getprop ro.build.fingerprint
                                                              2⤵
                                                                PID:4645
                                                              • /system/bin/sh -c getprop ro.build.rom.id
                                                                2⤵
                                                                  PID:4675
                                                                • getprop ro.build.rom.id
                                                                  2⤵
                                                                    PID:4675

                                                                Network

                                                                MITRE ATT&CK Matrix

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                • /data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu
                                                                  Filesize

                                                                  4KB

                                                                  MD5

                                                                  f2b4b0190b9f384ca885f0c8c9b14700

                                                                  SHA1

                                                                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                  SHA256

                                                                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                  SHA512

                                                                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                  Download Submit

                                                                • /data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu-journal
                                                                  Filesize

                                                                  512B

                                                                  MD5

                                                                  eed509276f8a4ed62f89850f4f88dc20

                                                                  SHA1

                                                                  89d0adf21e45921101d7015684a5352cd4694877

                                                                  SHA256

                                                                  39b0b242eb0c3ec1ca0ac7d564ce44e445d88ed92169427fd3b419c6a9a6df3b

                                                                  SHA512

                                                                  e180273e6af66eb1350a12bdae7e951e34177c1da24e7c2ff1f2849e60344c16598665d5c8c7aad9d3197bd0f65ccb7f4309207d2affead29596c946da202181

                                                                  Download Submit

                                                                • /data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu-shm
                                                                  Filesize

                                                                  28KB

                                                                  MD5

                                                                  cf845a781c107ec1346e849c9dd1b7e8

                                                                  SHA1

                                                                  b44ccc7f7d519352422e59ee8b0bdbac881768a7

                                                                  SHA256

                                                                  18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                                                                  SHA512

                                                                  4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                                                                  Download Submit

                                                                • /data/data/com.cyw.yijianhui.activity/databases/bugly_db_legu-wal
                                                                  Filesize

                                                                  84KB

                                                                  MD5

                                                                  04cc4763d6acf2471f40633763ab3251

                                                                  SHA1

                                                                  6a830e5c7abc3e09cc5bce6da5ffd89c545b506d

                                                                  SHA256

                                                                  5e457c876eaaf42e3e02f27038ee1cb68fcca3056aeb21dc018e7815e34c08b4

                                                                  SHA512

                                                                  27490f48216b4f801d05995b0fe95c4b145d19b20544b0a4bdd4e30693c0d763013b4617e9a13af44f979589c7ec817460519db81c6d0e8dc05dfd53f77e2218

                                                                  Download Submit