Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2978172s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 03:40

General

  • Target

    c935fb17d19e3f08a279f001cde07f984a246571df6a444baa4f69b0a30e9891.apk

  • Size

    8.8MB

  • MD5

    9932bc9c0bfde95a8de62169df9278a4

  • SHA1

    53ec24203dfe1e84e024d837d2685963c4af1dfd

  • SHA256

    c935fb17d19e3f08a279f001cde07f984a246571df6a444baa4f69b0a30e9891

  • SHA512

    7d26b214bed94ec93f19de95ba77e37222a36535915bc0b5f6386eed8d410c0c5c50c79b54b47b25978a5edb3c9c7ca3e5d62f2ec016e15b3bdd52682856ecfe

  • SSDEEP

    196608:LyJM6iQ7ABPaMBWZ2FcCojxP3wNdkpS2jkdfAIX6i36QBOa:uJZiQ2aio2u9xMGp34AfiBOa

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.sds.android.ttpod.main
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:4214
  • com.sds.android.ttpod.support
    1⤵
      PID:4246
    • com.sds.android.ttpod.pushservice
      1⤵
      • Acquires the wake lock
      PID:4362

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.sds.android.ttpod/databases/gxdbapp.db

      Filesize

      32KB

      MD5

      1c4274aa7a9a5cac8c6d1df71e4588c6

      SHA1

      abaecd685e01cc68801292e3dc7085654a22feba

      SHA256

      3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

      SHA512

      1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

    • /data/data/com.sds.android.ttpod/databases/gxdbapp.db-journal

      Filesize

      4KB

      MD5

      8c1466899779c34788419c87f2df5795

      SHA1

      2b79c905681106858ec1ed3d624fb7ac6294026d

      SHA256

      0c1bf0c94f24309ba7c69dfdcaa5f89e463cebcb4480a29437789f29f2dcf64c

      SHA512

      aa6bf8dfdafc1ae23de3dbd21be46d84bd3aa5ef29577161f5d51f0b7852a605b6f13d6d5fff76b42b5e7a4c80cfa49272cc122af9062c22ee7d7cb26e348c56

    • /data/data/com.sds.android.ttpod/databases/gxdbapp.db-shm

      Filesize

      28KB

      MD5

      78039eeeaadbe898ad80a2965aa6f762

      SHA1

      0508221908050c64d28c829052e4799b220918e9

      SHA256

      6ed1cefe765295940dbca9aa9830e7935617ebc5593f7f41a05246aadc94bf80

      SHA512

      d7662a579dca8ea2fac428f24b7d19e3a46b0e15884d05529ab51035308fd490ad306a571b9934f24a5fe30ff5ca481000a4a0c45170517407ef2510b3c5db79

    • /data/data/com.sds.android.ttpod/databases/gxdbapp.db-wal

      Filesize

      60KB

      MD5

      d477ad158aac3c861cafcf7b71fc748a

      SHA1

      082b3e4262612f6df35c0be918cc3d68e26644e1

      SHA256

      df85dff3eb240c4ffe1dc0bacead3042bf4db95cb96e49c912c2612803300300

      SHA512

      eb89066b7f9e00c75737332cddbdd884e579f87cc6ef373ea50ebc801af5c4bd8e9bd027e6f706fbac89a94685840102eb68e9b5e01b8fa66e294f2b12e1383a

    • /data/data/com.sds.android.ttpod/databases/gxsdkdb.db-journal

      Filesize

      4KB

      MD5

      3a558f5734164d752ca0efa889cc59dd

      SHA1

      1e6b9a9c74cc559d619968fb71d1e377e7dafbfe

      SHA256

      ebafbffbbe23177f114f1be9825378ec26b674a6f158570e8ce089da71d55fba

      SHA512

      a1bcfee6fa9ae0223d1f56221307b61afe3bee767e6c0d46cda7011afc3eb14870ae72c74a083c20b5808455c9d5796b823f2bb49034a6fe52fab7b1b697c71a

    • /data/data/com.sds.android.ttpod/databases/gxsdkdb.db-wal

      Filesize

      76KB

      MD5

      0252074fc864b0894a091ac079049b97

      SHA1

      0cf9a83077108dccefabf05ac79d96d8fe9f0cc2

      SHA256

      3b7dca8df85d9acfd5ab6dfaa84b9229df01d3229029fc8195984869c456df19

      SHA512

      0e12e88d8ff95393e92b950cb7d8337d3846ef3730555ba20cf51f8cf5794a1888cd2b4b80cf9bf16ff0ae498a8f14f9badf1a5f9fd7579fbce08d7768d881fc

    • /data/data/com.sds.android.ttpod/databases/media.db-journal

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.sds.android.ttpod/databases/media.db-shm

      Filesize

      32KB

      MD5

      eb9ef8a0ba3b3dd525f6946cc0a7d7fc

      SHA1

      ec8e80121cc8ef24f4acaff18799f1bf9c4598ac

      SHA256

      bcbaa8839c96fc6b00fef52a53f1c0d47bad045b73500ee483914663e9d13310

      SHA512

      891dae6f1559177fbad4a65284f4e70857862539776ed62b2957e24d8468bc03ca96646a45e46241c363d8b247668386a597fca20a43bdaa8ea24d0b56a603f3

    • /data/data/com.sds.android.ttpod/databases/media.db-wal

      Filesize

      60KB

      MD5

      85d7d12025301a6ef840a1600d74d980

      SHA1

      a6d4330424313aaf5e8219efe829f7a6391d04a6

      SHA256

      4e585b65d1ac10fb89f87feae8c04196bb1213f28fe44b59552376ea5131623a

      SHA512

      b8c41f1e007e7724bb7f7b96d66d6f9320aa8cb78678a8382b0cef84c5da4c915b6dd628a28202e35c271d531f0402177b5002403dcd5c749aa4fa684652c0f7

    • /data/data/com.sds.android.ttpod/databases/search.db-journal

      Filesize

      512B

      MD5

      8935b1f65c4f1f30c4a18baa4851a73b

      SHA1

      8d6d29c504169267c035c42524f4865eac672cf4

      SHA256

      7da40fd10bcbef661ca17a41d78deb50ac5cbfd4f6fc1abaa65376f6675ab705

      SHA512

      798860e69ee55f1dac5c3f2eadced2d54224dc88ea2451f8124bad1f30e30c1b9eb330f56b0db5c3686d2b9c7353d659c5147ffc24a6321d7bc49c3280be0929

    • /data/data/com.sds.android.ttpod/databases/search.db-wal

      Filesize

      32KB

      MD5

      b0e7c3fb60041f6f842f4cfd506885ea

      SHA1

      9d5e72c6e743275c4344b3613567655c5eca304e

      SHA256

      946ff0d55b8bcc1af6ae005ff4d2a219c81a675137ad03c2f5fceafa8a0e5cb3

      SHA512

      9253f6f26208647596f5dbb2e05c77fde058d41b1fcf6dd1420205f63d0ff57e9415e5281b2d1076620505f3f9071fd03a5017d110894cc77bf566798c77c660

    • /data/data/com.sds.android.ttpod/databases/ttpod.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.sds.android.ttpod/files/mobclick_agent_cached_com.sds.android.ttpod

      Filesize

      32KB

      MD5

      b695f30734947f964c5d0663f85dcf6d

      SHA1

      1fe80d767abf5939124709fffff304cceef5aa18

      SHA256

      15b16f2cf653a73bf155f2e088170361823f059c6dfea18f3ea6f79b299b61fb

      SHA512

      d293f5b73e2f65e016c96c5691be06cd5410a6e79ac827d2a046dd50f46efaa324e8df29d917636af6bcf1d9b140d8e9024357a93970dcc94c9754759c5bd5a9

    • /storage/emulated/0/Android/data/com.sds.android.ttpod/.cache/statisticLongDelayTmp

      Filesize

      868B

      MD5

      578f588b1affc8336f28b8b92423a60e

      SHA1

      73298349235a9a432f3c9e1bf8b2dd9b9d335774

      SHA256

      69f134872095da1c8829b20c89db6b80716234626edc4bc1af56a66f62bad9e8

      SHA512

      a4ffa12eb31447feadd84be74ea79d10f9d417ae707c06a024a54379c2b75f78b2da37f791b519c17b2ebea9ef4977c60f4d6fa0d8d28ea565cf11d0ec96827d

    • /storage/emulated/0/Android/data/com.sds.android.ttpod/.cache/statisticShortDelayTmp

      Filesize

      2B

      MD5

      d751713988987e9331980363e24189ce

      SHA1

      97d170e1550eee4afc0af065b78cda302a97674c

      SHA256

      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

      SHA512

      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

    • /storage/emulated/0/ttpod/cache/object/BACKGROUND

      Filesize

      2KB

      MD5

      2422d6549de73691889b684a71c1cb3d

      SHA1

      18ef3b8d6107da3c9681f9250249bf3ddfa07bb4

      SHA256

      9050f20db8cf0ef0bbdba0b8dd4eada25028229e9ae2e8141040b350dc6ff9d4

      SHA512

      c97aa070e1e07ce2cc435f07c6be9607b1850299aa87290651af4284efabfac14ccfe6d696ea27b001de67767d2fd566a5410a47f1b03c344dc1d8654c373fcc