Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2750116s -
max time network
164s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
24/12/2023, 02:52
Behavioral task
behavioral1
Sample
bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
amap_resource1_0_0.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral4
Sample
amap_resource1_0_0.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
amap_resource1_0_0.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55.apk
-
Size
27.6MB
-
MD5
083478ca7ec8f00d969e290dd3246851
-
SHA1
44374967a611d1154671c7e4489453e37f7b16f7
-
SHA256
bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55
-
SHA512
f500540aa1a09dd5bcff03f2b83732156cf0fbb515a9234b7486031ca77a5c0678db9ce868d66b0076e12539995ee11c085f104dc687bd78143512cda01f3cf9
-
SSDEEP
786432:GOammX/jwEqOvLLLPE47G470TF1vxUR+RREdAqbxmrUFHt+M:5ammbwErvLLbyBEzCqbAIL
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.yyq.annie.jieyun -
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.yyq.annie.jieyun/[email protected] 4962 com.yyq.annie.jieyun /data/user/0/com.yyq.annie.jieyun/[email protected]!classes2.dex 4962 com.yyq.annie.jieyun /data/user/0/com.yyq.annie.jieyun/[email protected] 5072 com.yyq.annie.jieyun:pushcore /data/user/0/com.yyq.annie.jieyun/[email protected]!classes2.dex 5072 com.yyq.annie.jieyun:pushcore -
Queries the unique device ID (IMEI, MEID, IMSI)
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.yyq.annie.jieyun -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.yyq.annie.jieyun
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD550750315eef281575611bc425174b939
SHA1acaff02526d7b4c257e00002ed09af364f66a401
SHA256c8d37512f73bef5a1c1b060676cdc6d508a8d8dd36f2438f5d6353c9b8524bef
SHA51260584a993992a68e8d0a53be705e3a9d52fc126df26b9bdcf80d14e659f1d70bceb926e0a99a69fdf40f1c09fd61aa52c2d2c008ee5c3ef59af5922a75161ea9
-
Filesize
12KB
MD5ea628e04765adaf4238a5dcdff4bbd51
SHA1a801947619ea8c368efe9c006a324dc6339ac60b
SHA256885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
-
Filesize
32KB
MD538564ad4c73e5619bc2264b0c44997a5
SHA1e55f6fe1b20347ad4cd58d77af0b0feb149f63d0
SHA2561820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8
SHA51230d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d
-
Filesize
512B
MD50ea69e8fb31895409b16c8667d66ef87
SHA1a60dfd0e626e0cf6f755344c76e9ee543b3f25e7
SHA2567c94e4e41cee1fe62d2b6454694bb62ca4fffc9d961ecc7ba77c867404677e51
SHA5126ee1db06951db1aa0bbd970905e303c3a99c1df9b56182aeec233a3502977d00a12fcf3a8aed6439fafb67bee52bf9ee9e7d966fb48cce3a3d917e013eb39cb4
-
Filesize
8KB
MD57e48561bbbbe39d288627e74a128ef84
SHA15c234dd06db2931c7fe47d67256113d05b4f4ba3
SHA2567d49319e49a35f163b0c058ecaaf64e6e55b493b6b0b1fa4af63d13979c95799
SHA512cdb3d342aff28050566eda8434496a4a5d09c9e3e930c5fd252b83ea8f67c7dabb3d782b61edc7e978f82da3535271cb1a9b1de620c5ba19ba00a285acc6ed86
-
Filesize
8KB
MD529be9869865f8272b40ef14ab48d52cd
SHA1bdb1b0129517cc4440845cecc41b1b8982400f1d
SHA2563d4cce0071cbfd82e461b4c89d2cf191bf2e93c9be6bcc0ba25f0b45715b0585
SHA512558688e8f2207d5d65c798098f3cdccbff250b6cd1e3948967b7712a4b1b1767ba2de6176c05fe4b08e8abf9e4cd6d4464c70056aa9fc8b94f2ccd4d5a18fd6a
-
Filesize
16KB
MD50e95a6741b04d8595d1ee0ad70d083df
SHA1e8cf9e047980d069d34885cba81489a57faeded3
SHA256b37b71c670ead006177341c0626c3eeb22021680d11706666ada957830d69239
SHA5126662ba4c5d2ebd91b3d9e3dd1ecff24c9c9d0555851f9f6d067af01281a6df28a8274abb4dcb302a6c51491038e64ce9b1ebaf75f82cec58d3a6aeaf29c15a7e
-
Filesize
12KB
MD522551b49faa6dcb9d3d84749b9a983ab
SHA1abc7ec470e7e4f9595ee70583d4bfa6ab9e330ab
SHA25614a28e0bc60cdb6cad7b1c04bd85867973a4199b21048cbed13c84920fa31458
SHA512a55b4cd135b7f5eb2d2f6d596dfd8db55001c96e9f5c986324a265a6ad9e503bb084b36ac398294ef472e9bfd05175ba6281ca5476389377e471a5fe683f5542
-
Filesize
36KB
MD50908e924aa236931dc7166fef6e00862
SHA17782648d6d8f6e835bd47058d4852932c096a467
SHA25638f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
SHA5123c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
-
Filesize
36KB
MD567c12933d1e0e63d9801a6aa43092ce7
SHA1b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA256abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
SHA512db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
-
Filesize
512B
MD5debc84f52a4c1a0e72e3d2a73350bd1d
SHA123685c884aeaac6f132e2e06e575c644852e03ff
SHA2565a93827cbaea470db1a9f5f520670439da2e3d5459483e31a8238f26629ccf6b
SHA512281496222cd360bec59025011f4910fdd9d2f6f2b5a48b61a926b7ad4f389dad382dd6dc463ce288f7a17bbbb6d32ada73e52f8924824d50cc89e6f5ce463051
-
Filesize
8KB
MD5096c84634c8546d10639ac2dbf2bf0de
SHA1580fd3022d45e6fc30f14ce1d33f53023108d5ad
SHA2562121eba5e36c70db3735c0c6611f8671547d50330f607b9a1c7d50313f5be561
SHA5120db2f4ed710706fb51099dd4a1e8c1fcf2a3a1defdf5914a597e857d9db8fdb0a662be2c43dc58ee25011e26332c8117848fdf77287fb764d4a282e50613321c
-
Filesize
8KB
MD53837f1a65a624840c9bd1bde8bf1cc33
SHA1cd88616cc37d864aab031692362cbfb1c667317e
SHA2561c721b9bc16fddf090209560de5d80b3a08f325c9512e9b191c8ae0e03bf505c
SHA512347ebf0dc928fe68d4c9ec1cb3914c11b26ab5dc2bc8ae312c8e5ef76f311b860b8cdecdf433b0b5511976d4328c5be7885e00a47e9a721e7e60ddefaaa7a162
-
Filesize
8KB
MD5b20d214fd5d768070825a7dc8e50be0e
SHA1f6b13116247e57bb0a7de8e027118dd1ab4e8928
SHA256f28f923634fc488562d8850365c707316cd6e9d680dfe13b5cefe3702609d2ef
SHA512bf00dc04475692024ad6fefc71de7cf870ad608f82cc0e3c386a4b955b59cbb6bb0c12fdd2b6bbd33fab11279adcf47cfefbb40e346d929cb2a10ff350b7144d
-
Filesize
8KB
MD5a0c1b7c7337eb720a676d0b09ce93fb0
SHA1a941502f731b7842703035f1d191ef41db838664
SHA2563c03b4095ec0a9e9a3085452b7ef6fee0b958b89116e5637f4c590c619c84797
SHA512a7797b073ed99f51eb2e378ea7eb9f801e0192b8f9f1ee6f044ef7d18efe19cb1a667101a08cd78313994a94e078f02b727bd33bf50045115a178c6f74511dc4
-
Filesize
12KB
MD50b94af3c344c057c2a3c5f849dd10d88
SHA1af3c97b707b1606dbb04853138342fba407aee12
SHA256bb49b604255070283f39ea89a50cadaf95101c0211a14b31bb80edbb544fe872
SHA5121c70afce3933467eb0c54f67eb545384ca446f35ebe97ef3a463514cacdb7a9083c9b65b44e21a7f8df4f007ad29f1e6e628a2b377ceb694417e588e5786cda1
-
Filesize
40B
MD58b4f11590cd2c2bb56f958604dad3fca
SHA1f9c0b1632346daffc48c1ba472b107a57e23704d
SHA25657499a3ef39dfdbd30d440483a6d5b051efa59c696e6333f33065e3ad940e493
SHA5121cb95381005d2d666b28254df8070dcda3fe56d7364a53d0346d986bc07d72661f0e6b08e405095f75fc49acafdb27cef320c27e28eee97063d23b5c807b8d37
-
Filesize
340B
MD5a940c2babe3ac4d19d4be22a92966f1c
SHA11483fd9a0d11e9cb1d5e45bafdb187a09d180937
SHA256d0ead5b3dc73ff9bbeaa1a66385b17605d84fd79118981e83418162d6f2b8e75
SHA512c7197da2c7d7fb3bf33d0056b4c4ed1dde34c54c3dfb553f854aa82dcbfafc063e133bda9d428275ca5f159022040d4a067f09a7d2c7fc4d6c5c895509fe229e
-
Filesize
340B
MD5d136cbbc310f8c35f308744c5c5d8d44
SHA1ea6271dddc0fe6775ba52c4aa30d2ce535cac4c1
SHA256bf2ba0e55ae4660b82daaa7c2e7070fedaadc611dde90800626aee2ea4ba1804
SHA512df26172ae0c0a40f1fd7b18b6cb4946983398fef9d8bcd9dbe96281b51ebd42bfdb7f663fabb613f9177e495f7d56c03cedc0f51280e87616ba97a426fe613ad
-
Filesize
32B
MD5860eef02e800e85dc46a950e8ee782d2
SHA1c96297ad2a2c9f54f859ec1e31d22b8802ba5011
SHA2565bdd9382415a4203ffbf8d004a61eb009c9efa625bbe28094cba0b2e2ef5d5d5
SHA51236f8413111531fda548ae5d8a5f99dd9935f17f4990188b81853510452df24c6bff42ef0e5c4636285ec1c25941eb37a463a5ca7c50098feb6a3b2e09ba23f97
-
Filesize
314B
MD53018c6b862d65191cd8cd7ed67aae6ff
SHA108dfc38056f68dc3e123155340440c2082bf9410
SHA256888137fe0d4547b4fab7a966f3ec8e2ea1aa27f0e493e4364a81da9d2f0483dd
SHA512f9f4ff2d6881cce1e8815e8d0c55272e929f3df76053bb81565d7db06ee0fd2d868f39efc95b163f7aaa08e84663d8b8139250c7aedfd6043a3b4ef64022417c
-
Filesize
27B
MD537ec8652ff0977c81b16a3ffb6a9ec3d
SHA13df3579411502642ccacdff5d1ad0e8571204b34
SHA256195c38d43a54380180b418a730923c580cd7f27654ca1603b52f1e28c877d393
SHA512b3c9769ce9af53eeec8cb5f7585b274b410ecb8646710ddb33f82fe400538653e546a95a471ab3d1190bdd77ee4282cc1d68337ee05666b25c9d13e4cc435384
-
Filesize
1KB
MD563ae922ae15f29f3e048d0a88b1465c1
SHA10baa544f00e9129dbe3e906666bd10a3d1e33173
SHA25665c596a3da8b251350bfb7952a07fded9227da90d0faf056308c7186b6ae9b0e
SHA512a7bd2020f0d5d9cafef638e138be9a9eaf4c74237475713e6f5b8576cc5229039e70754377f5cda2f81e1c0a584145e259262b81cc60d1bbc66f6c5261c9d212
-
Filesize
162B
MD5d0824485bf7bb0db123cb494b2e55177
SHA115038ae7448b63abb056c40353d16c2c17528dca
SHA2564f2152ca39ae33b793341a2b7b8615a62cf2166fcbfe81b0dd4e53c2fb9114fa
SHA512a075dd53c2e0d9fbbca16453419612ed7447e32d57b01cefff71785230ee033b5679b70cebd3ab4871173ab05b37f8ae027fd36b0501dcc2c0c60a33e46b31cf
-
Filesize
60B
MD5bc8fdd5424faf1e00929694004503cad
SHA1bea011722f09d61d1c24687673acd33e43f89450
SHA2565e2703341ec5fbb9cbf6840430763e86d899b49f81eae8ffabcc94df151d0988
SHA512e6f1955282bbc0281d40ea3f2bfa424819db4b817d010de997d8b012371dbf8e62e77da54abad8ccc315eb403183c08eeecf27a47efd22936fca8d44bc8a7dc2
-
/data/data/com.yyq.annie.jieyun/files/jpush_stat_history/active_user/nowrap/630172d0-03cd-4734-bb56-24de29076f35
Filesize159B
MD5dd62a5109a38ac789b6aea7bcfbb9fc1
SHA1ef483c37d2057301fe6364470e7537bd1dac59df
SHA25649e81022b21e7167c2a8064515e4eb6951118d5a24f349955e4d169e2f3740c0
SHA512b71a507edae480456788db59adc79d872e3b89d7735b7d2abf7fc005153aa2c8a620ac531318db365223fa0a6cd522c72cf7003ded8b4e3972bccc1c65f248d8
-
/data/data/com.yyq.annie.jieyun/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNTU3MDM2MjY2
Filesize1KB
MD55ba3783cfc41d787466d1a6eb86fabf1
SHA14c84ea403090616a07d9ece79d88eafe0a1d47b7
SHA256cfe1b7eb153c1bcd91f660391cdb26d9900e1aef807229a74090d6fe79339a08
SHA512b8a96ce0c5f4183f5ab5b2c91e45c4e1bd4c1dec6ab5aeeb46d67ca6d56c2eebc0c0f93b2283c87625eee93ce0776ac62ef37963169243f6d4e45548c91ad85b
-
/data/data/com.yyq.annie.jieyun/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNTU3MDY2Nzk5
Filesize1KB
MD5aa87b3e837862a5f215d1de1bf67bc4b
SHA10b32a27cd9d52cf01196dbc403585b1450210389
SHA2561e2e42e056aec2a0979a7db4aa56bf499d0f7ecb5312f872d8fe2eabf36e553e
SHA512490bc2fbb9fa02caf4434c3e02f293422557567b98305fdcdd3afcd9dcf1e82ab0e86fa9e9648432c67e0b90d4dbbb04417b25b85f2c3fc5fd532ef5ea784f45
-
Filesize
433B
MD5bc4e16f4cc482291722aa512b8afbe4c
SHA159a6274fe0c844bfb1cbb885d10a13644e0703bd
SHA2566bd45dbe14b46847e49c9f8a5e4c7095a2f83b77415591d7637d7c7de69f8535
SHA51224d7f1633170a8eb648aeb9a02eac7d6ea0202d3d3021167d178d3187934ebced863dc2b30d7aa82284d91ebc9dfee3979ab60803c0a15771418fb25d65a688f
-
/data/user/0/com.yyq.annie.jieyun/[email protected]
Filesize6.6MB
MD50d41555632c3f3eba58c684a0873cf3e
SHA10373aa56a4051e0da7d6c521775966df7d81d4e3
SHA2560d4bf4adfd8ab7b7be62e755e3b85f0ba67d317deca658b70c1b2bf6cfca4996
SHA51212ee2fe257d5cea75bc0bd33ae35e106df26f47944400a42931b21e759b1d734c24f0c098b0ce2b5c18a198fa42ecf99830b1c2a94111c840881e4c54851f16a
-
/data/user/0/com.yyq.annie.jieyun/[email protected]!classes2.dex
Filesize5.6MB
MD524d60df472253f925873fea742957462
SHA103a131b409cff89326dabc9eac76c4abe9940349
SHA256aec3f3ec92ffb2aa48b13299d49efc3805b72868161d6f9a9729ee6cefb1ca5f
SHA512122b6891e22b7858741ef70134f7ad21d0fe2936a9b0c19a4844a6f00ad400b4fcae2bc9d24730541a53d52fafcaa2a2d428bbec7daf67ebdb7eed704192d110
-
Filesize
111B
MD5b3ea1123859d15724a1593fe5fc771a1
SHA1b67199fd6ad71f959f629ddba70340650a3c8698
SHA256873f856d7f0aaa3007535a9972d1774c78930518d20c9fadae0ddaa178baed13
SHA512526496f7638dfa23e50f45e7ab90734a322b1496446555111c3a20d26218846e1b77c40043fd54b58b5ff89ccba127345200d7bec1cb1882d0efbaa0bab37939
-
Filesize
213B
MD52de720c177c2593cb71a75518b9629e9
SHA12a59780571096d48d309f3cf4da4e5779fe85312
SHA256659e33a844730cd7fddcd53134686b74979c698341f486f46653078b6f1e78b2
SHA51215444f6057336f50683ade8aa40f0b31b4a755cb1f6c30e1dcae0882646adc40bb12fbc926bd0807298797a91b3399c6c00a47f79a8d124d8c05618ab969c234
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD5198d89ca2185254a3da6c65efe12639e
SHA1342710d573af4c51cb89c2a8570fc1397c2bfec3
SHA2563d61d2e1ddc5824b9f91c30e146b25271a8fd0923d370cde0cebe7f439635a2a
SHA512e3b9c12b66928444753e553c5726278dbb2a30aa8dfef30cd3f34263e12bd85593fcbfaf9af25b51d5c5575b448a16ba59ced3c34f8165e01323f0717d93a688
-
Filesize
167B
MD5e6812ff1fd3459617fea4ffc2ae194aa
SHA11a4edc58eba0b71919bbc9dbba4d1f6b816d89a7
SHA25663ab05cc7e73c390d46d0a8e4fcef8d4502049138ddbab4a54b067510008d233
SHA512f4451c29ce7544405242037d80fec4ee70273497aaedd4c8af1a55b502219bec612f65fa2941732add3189c7acfbecaa11ac21c78017f9cf5b86f3205c24d138
-
Filesize
48B
MD54c4c5285293d5141f582aefa4e038669
SHA1e01852a72e5a8e6f7d63a21426b515118196047b
SHA25636c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
SHA512097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
-
Filesize
32B
MD5d192c904f641d64fb14668dee83418d9
SHA1d5f8cf2879debf7222f56ff7d7c6e9b0cd7cc40e
SHA2568fadf81587243b90d49243e52fca16b33688abc5797aca9147b0bdde1b22b409
SHA5127c4a9a3d4990a9e1efebf27501fe3a04dcb85ce3c7a35692699db841057cebc7d057457c8a2783d2f35f4f308cf4e349533117656c1d30dd203e293e0709a0b9
-
Filesize
486KB
MD532688c5a7064ebcd7817600ee3ad5217
SHA1d60e09a9ea0e51b1a9fc0d3aaa47a0ed0518969a
SHA2564ba8f3f49d86cabb7e6b3ea9905b51159f70a765ac168c41e4d230002073bfc8
SHA512f5dcda742ffc77631551f648831b8a2cfa5df385e0a28ac88f4be2ca3bba61f16b4c58d9429756e79593f050d1975e3189694cddce4df7431582b7fdd833fc0d
-
Filesize
2KB
MD585bb512543ad96224c87a922cd741380
SHA147c60eb520a135abd9253fea4d767d92ee724de8
SHA256810f1ee4f0accccfc4c5b8cc7da7a83eda3a245be054a6e9b9e091452ab42486
SHA512fa96f1a2f98ad258477cc7866d426e73ba6ba0f927968991be39e1cfc2bf8248b00c32bb60dd7e691fd71e95b8609cf5a0e01ecb92b7dea7b05b2ebb5372ca3e
-
Filesize
32B
MD5d376da5ad42687508514474bb1d3f6aa
SHA1a71e287f431c7e9833529c7b907bf64dc442f7d6
SHA2567796d60356bcc43a220b872790b55d00ba5b4edcd68441d142d6665837a6bb39
SHA512216ad77034e8461c6c5951f1e62cc670a0b6edf1fe8490f5f81eed133a0c48e97e81903036ebb98a69e642d60956c8370ac5c4e379c7ec06826d9a29f5fe9c12