Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3022994s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 06:03

General

  • Target

    e34d3a6468d1fd99afa4bea3a89719a6ee0ed736d60065bb57cebe58095052d0.apk

  • Size

    17.2MB

  • MD5

    a41b16610215cfe0e8bac963b6f24517

  • SHA1

    f20322f5e9f61687c8f5eecf7a25a8184dd38d80

  • SHA256

    e34d3a6468d1fd99afa4bea3a89719a6ee0ed736d60065bb57cebe58095052d0

  • SHA512

    afad47ba9090ceebae80e28335aecd93b52543cfffa582bbbcc145f23ad38a2018399ff0e3c5bcff250b003f477760f00a8866ebd066f14582a9aa61606bd95d

  • SSDEEP

    393216:pUb6DBbvHl8hikoLUQTll43mrgnpHh+FJhu+oqNhZkgM:pk6lbvWhikVmUR8Pu+oy6

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.apicloud.A6989430876027
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4252
    • /data/app/com.apicloud.A6989430876027--NDyIShsO54Rv7boPiBa1g==/lib/x86//libweexjsb.so 46 47 1 /data/user/0/com.apicloud.A6989430876027/app_crash/crash_dump.log
      2⤵
        PID:4286

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.apicloud.A6989430876027/cache/image_manager_disk_cache/005328be77a16c975cfbdf728c0e5c4a0a26a70d4bc08ba7f1f5f1d98c6494d3.0.tmp

      Filesize

      826B

      MD5

      066d9d74d2968a4c636e1094296ce20f

      SHA1

      90b042bd984bc48dbb0023df45e2203e629497fe

      SHA256

      4e1987e3c71177adcadb6f969f3d647628ad172e5725c378e97c4e51b41caafb

      SHA512

      531773ff00fea9c7dadea97ea8c2abe5d6acafb503ab20696a0964b1ec298269c51399564a2873ba5fc1e167461fe54defd369faf5ae0eca78c64944ee25a4ef

    • /data/data/com.apicloud.A6989430876027/cache/image_manager_disk_cache/565d91acbe3066617ce75f24613439a24d79026727e8049529a5f6f17eb9cd84.0.tmp

      Filesize

      782B

      MD5

      7d9e76c17001e2652677cf299625ac11

      SHA1

      858349a6cd5736f4fb7f86d332a1c8c6f77fe41b

      SHA256

      c83d3933bee18d64c2239d2cd31f41f9a94fa83685c1acae48d5da596bdb2754

      SHA512

      bdc13924379b0447903133394885d9075bbb264e9b130f78761b345fe8283aad586c36b9b7bcb28321ed98e43c3dc1d46431b5e7ffc839799085fcb984c7aa3f

    • /data/data/com.apicloud.A6989430876027/cache/image_manager_disk_cache/7136e46e85c550510b10b4a224931690f494affdba12addd382fa65528e0e11f.0.tmp

      Filesize

      919B

      MD5

      1c31f1e5d2c0d3a76878be9a58c3fe15

      SHA1

      446400edc27762015efef21bdf45f7fc5c1c0eb2

      SHA256

      b2406733f16e265ec4280089e5230af2a144389cedd2d2d2c2cc14354aa4a90c

      SHA512

      3dc802154106890af4a158f9ec899db6922d579d529b1f06bec136fd61dbb2d621d1a9005b3476b045adb0cd3b3332e43427a719fcf85443c2a9bd3e0c4c1327

    • /data/data/com.apicloud.A6989430876027/cache/image_manager_disk_cache/a1031ec6fac16dd4c787bd59c214d819092728e040722a7825dcd43ad5c1dcff.0.tmp

      Filesize

      752B

      MD5

      c5001f3970238f4e17894e059968cd01

      SHA1

      14cbf570ce4b6a44929406eee9da4d8892cf2ed4

      SHA256

      c9e2c873976a2db9a5bd8eff31fe548e0cdc870d5e0daca7a45cad562db272ff

      SHA512

      c0de8f04e8430c36eb38ca606f6265fabf49a06ace848e9e0360dd263ae13fc8249515e14d4b1fce30b621dd5df4267b9bdad8dc28e10d2af7782dd2d56eeb18

    • /data/data/com.apicloud.A6989430876027/cache/image_manager_disk_cache/f0f4f07a77c77f151780bb86c0e46e2949d3170bbe0210086712fadaa003318c.0.tmp

      Filesize

      982B

      MD5

      e244bd71c382074792e6068b699cbbb4

      SHA1

      45b72468ac7e916df525714f39472519f8bf55bc

      SHA256

      a659051bf2eccd13822ceb4efb19a80cb24059c799bdde757c8be534d1944277

      SHA512

      c8fbab691feab868b1f32b2671df327230f580d505a90709972e1ff684d3b158fc18eeb187201da479b3e0d4712f653468bd229303c03627e5da3881cee81f6b

    • /data/data/com.apicloud.A6989430876027/cache/image_manager_disk_cache/journal

      Filesize

      686B

      MD5

      f491c04c13cfdecce6fc8d82fc1ff137

      SHA1

      12c8d30bb14ab513ee3d4f115206bb05c2352659

      SHA256

      d289a374934260f0d32acb88bfa306ed7d06b08cd47a29fc136952e8de598f81

      SHA512

      b73babf5846ad8bce916c2a5f083684b24a182db2feb101b7f8dad0af218f897b6e8c5f16c595136fbcd6c511ecbfd72aa42ad21c51203a22db40e1bfaa2663a

    • /data/data/com.apicloud.A6989430876027/cache/image_manager_disk_cache/journal.tmp

      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    • /data/data/com.apicloud.A6989430876027/cache/weex/libs/weexjsb/x86/libweexjsb.so

      Filesize

      6KB

      MD5

      9bb067cd33b490d30f2c88054c732574

      SHA1

      d95a11e2be5c7a1fab9820e34cdd9e482523ea86

      SHA256

      fb993dc086feddf19af9700c7428386e3e4a5c67f273711c371ff4460a830ae9

      SHA512

      0b721c51332313c50ae466fff1b4bdb48a71791bca67ee83d2882a19e8abb59dc1406ed15d6dabbcd3ba922167fbf68a3828fd82edf4b2270ff0191b8fed0dbc

    • /data/data/com.apicloud.A6989430876027/databases/DCStorage

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.apicloud.A6989430876027/databases/DCStorage-journal

      Filesize

      512B

      MD5

      6a310ebf778a9d065106f0c666d1299d

      SHA1

      db75fd2ef832176d4df77a56ff8075a7cda35da5

      SHA256

      26685a56e5daace541e7ca219920546d195ec01e76abc81900ddb9c2cff77fee

      SHA512

      9913a8b5b40c23cb0333dba34cfda7e913d291311a44d1baa2412087e00d461877e73c9d12b03d873d6dbbf7678630139be6f3b782442931aef528d4f6997010

    • /data/data/com.apicloud.A6989430876027/databases/DCStorage-wal

      Filesize

      92KB

      MD5

      91bd88e323a8c8640161168c42fe942a

      SHA1

      abc8066eb71dcdd529ea9c3cc36671d1066ded75

      SHA256

      68f038f04d52525e79a3e7e3f4a4f61ae98db042b2ba270f6b0ab0ca9771a8d0

      SHA512

      255a6469226f188ee8d76fef8b94a625908c25f3c5f1f941ce644511251ff0bbe93a6973903ad34e96c61a7f4eb2e51ed561c8763d25d7e85e14af89b660666d

    • /data/data/com.apicloud.A6989430876027/files/.imei.txt

      Filesize

      32B

      MD5

      1fa5d91a8f94bf0690b53e4a26ef4c33

      SHA1

      94373ca0593ed5660bb7cb28314a266441de7fa9

      SHA256

      db6c3b5703ed4325b69f38b9f4d604a238aff8b4c00777ec94e92d42e3827874

      SHA512

      1e7c3c7190d18c15893a8b78b6cd720dabaab8df46683a916c251c39209a89321942f6bb4e08f1a70d241a1639318dba004f23e1a3b0a1d6eff9b2ccc2da9641

    • /data/data/com.apicloud.A6989430876027/files/cnc3ejE6/eje3cnc

      Filesize

      35B

      MD5

      762298b93820a5cd8b6d8ec469078f7f

      SHA1

      d5b02a2ff3b235cd2b61ceff53a1d88b8984477d

      SHA256

      dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db

      SHA512

      70f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e

    • /data/data/com.apicloud.A6989430876027/lib-main/dso_deps

      Filesize

      324B

      MD5

      b2e7ce01adcc7fa47c6debf64e5de754

      SHA1

      b120d12c2b7a44c68c36e10bcf88badb07b4b368

      SHA256

      94718ddb9f05222c18f4e54aef0e5f51df1f0224cb978a869d301a0949a5584b

      SHA512

      c37719d65cb84f28ba2d9f521f0469de1ba3f05291824d65ac8d29f7920f7ad59b2ec3d1611abb9e1992efbe6e562fe219061a8e0b61c202354710f512b78909

    • /data/data/com.apicloud.A6989430876027/lib-main/dso_manifest

      Filesize

      5B

      MD5

      c06857e9ea338f3f3a24bb78f8fbdf6f

      SHA1

      c5a0a2529d2deb60fec041b4fbd722a2ebe31702

      SHA256

      957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

      SHA512

      29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

    • /data/data/com.apicloud.A6989430876027/lib-main/dso_state

      Filesize

      1B

      MD5

      93b885adfe0da089cdf634904fd59f71

      SHA1

      5ba93c9db0cff93f52b521d7420e43f6eda2784f

      SHA256

      6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

      SHA512

      b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

    • /data/data/com.apicloud.A6989430876027/lib-main/dso_state

      Filesize

      1B

      MD5

      55a54008ad1ba589aa210d2629c1df41

      SHA1

      bf8b4530d8d246dd74ac53a13471bba17941dff7

      SHA256

      4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

      SHA512

      7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

    • /data/data/com.apicloud.A6989430876027/shared_prefs_ext/test_app

      Filesize

      29B

      MD5

      65f46d14a997d013e4f02415143b11a3

      SHA1

      8bdc49325efc2b61aad1a6d84d5f1ebfac241841

      SHA256

      3c667cf082d8067513255b0f46527b132c1f43c2917f5f5571d181bf0e3fda21

      SHA512

      a2b2ebb846104544a7819ced36c1626a5499bc314a15243cb4fb3d0776db53889f5359df8659decdbc77ba7d66af8b4c42714203f339eb26b15038a06fcc64a0

    • /storage/emulated/0/Android/data/com.apicloud.A6989430876027/apps/__UNI__1EAB23E/temp/1703829924231

      Filesize

      501KB

      MD5

      b1dc70af0d35509f8f41398f45893432

      SHA1

      f0ed5d9e229765cb28991be953a6fab2a99e2a06

      SHA256

      f7654e29552dab3584923600ef49b1c10936bf4c6464c623ff9b7d1a209d0f8a

      SHA512

      e9adca2ff501f320cdb3cc0a125a0520cb5d1a3638cc727547f97c88e487bb8883c8615dfcd7887b8f8b43b2991f5f65ec8dd72ce33c1e555d888812307fce0c