Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2800909s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 07:19

General

  • Target

    f0df58b33a1c9f488469e410a3e949c8b27f6fc13f6af7976ea1bf617e2c20da.apk

  • Size

    9.9MB

  • MD5

    4765cf2c15e947a18d2ffa05b34eb2bb

  • SHA1

    7930cf88212b54f5961f499b3d614180805a6f77

  • SHA256

    f0df58b33a1c9f488469e410a3e949c8b27f6fc13f6af7976ea1bf617e2c20da

  • SHA512

    117b915bb37efb1f1d24db03febca7c191df37b863e2cf6b55ec6626ff38cd41c6aa4559379fe20ce688589bf5dde3343f33900a5e1157c17b3fe72687e563bf

  • SSDEEP

    196608:U2fBLNlWH3n6bItbVH4Ebn4FsV9H17cn5vroe6zQh/UGS8Wv:VJLN4H3nBVHX4A9H17cnhroxQhsHv

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • iag.group.com
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5114

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/iag.group.com/databases/data2.db

    Filesize

    12KB

    MD5

    3a2f4500997b5ec2a47144d5eabd8082

    SHA1

    cedaa062dbe4071ddbf9a171b4a90b61d23a4483

    SHA256

    0a5c1be5e445298cda91babb6bbb94d25089dd41c765a449ae15f21eea9236ff

    SHA512

    57f0a637d3b4d918360689578e7b1d8b6649eee21d58b75687a95a15e33ab92556bc471b20199744e2c088e7f74fe9d78420248b71d8603ed471988e598c5958

  • /data/data/iag.group.com/databases/data2.db-journal

    Filesize

    512B

    MD5

    2bd8af3ce8519aaa7b3380a1eb2c96c2

    SHA1

    940bcb95fa513f72c6ba3f2af84593726ee715da

    SHA256

    488fbcdc2fae4de00ab9eb8c71cabf8084cea715f9f6cd522860b47e2517bc0f

    SHA512

    1d595ca6393165e0b00c4352374c7902c059f2def672674fe7f7fe8fc3f0688dc17cb9b7f4b4c58b08a2392b6638785001f7a4d06eec286edcb8d4d5f8366dc6

  • /data/data/iag.group.com/databases/data2.db-journal

    Filesize

    8KB

    MD5

    2ee087dc4192eb9d8be3f6e171b4ada8

    SHA1

    04ce904eec112123b9309cb6d48c87e42d9931a3

    SHA256

    82bb52b1ca41792095720e1cf2a48365dffc0a63061069d36f2e7439354c7874

    SHA512

    c00c28b52e94f21a272e23264835ba5f3d2be27339e064539bfcd3bf0642f976f32e24dfabb55f4f2c2c45523ea493f8e6a450de5375b8853b5fed7e9276abb6

  • /data/data/iag.group.com/databases/data2.db-journal

    Filesize

    8KB

    MD5

    cb6cdca66c475e6d2c55fb3fd7c921d1

    SHA1

    789d72a69a2810ec8d294116dc8efe626d5a4810

    SHA256

    35147850871b2d6eac8cb0843694de7d4479f0e45fb9d10a6eebe1f036dfad52

    SHA512

    6a8cdacef5ba88d03cb3a4c6f423cc0fc9e59ab141078345ea0aafa72b4401d7aa33609323cf6b937815f383c3c2a5652afa7c2e065e7ee20c6a196716c1aa28

  • /data/data/iag.group.com/databases/google_analytics_v4.db

    Filesize

    12KB

    MD5

    3e1fd075448ed4b62a9edae42285fa59

    SHA1

    5c6faba8f7084b7ed325ba75fb1bd452016ceeb6

    SHA256

    32916071d0fdaa6d832b4ed66e65f4bafdd620816d7cdf6a7070d118e6aeb869

    SHA512

    2a9f9b43a82c1922cc2bb00ba351b85fabf4e4809839208b0477b18192fc8cb40dc32e6af5121cf659bf9be478ef9811006de9d8d5aaf8e52773daf4c6e9b6f2

  • /data/data/iag.group.com/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    eee6aa0bb3f9fffc670421cf7e5e7626

    SHA1

    b818cd23da57d29c13c267142bed1df070549b96

    SHA256

    206e1e42bf2e568098d997b081777cb81ece9f701d8f421b72e67c729fddee38

    SHA512

    5b3a1c07dc5883523b0e9a6c51ebf2be03bdeeefa970c6ac74627c613ed1956cd72417fcdd921424926fe5c97eb9866793da7ac46e9b0aa821a8b1fe1242ad94

  • /data/data/iag.group.com/databases/google_analytics_v4.db-journal

    Filesize

    512B

    MD5

    42c3256242b10fd0ebc6b310ec803b4d

    SHA1

    25be373e7e82114b533d8f1d5a815fc57ea843b0

    SHA256

    241712f1cd0925501dd6b01f80592c1b72486a11e7f3adef2fb356f7c091bd2f

    SHA512

    c474f4bb9c4e04e614de32f2f30e6ef60b1967337a8a66bee72a17796cd670543d27bbe32d6721becabd36516f02ad53912d2047d156c196030ebb68ab773df4

  • /data/data/iag.group.com/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    9ed4c1a287f01a62be8c02f7adedb108

    SHA1

    cb619146609f52b432ea83773e66d45c07cae325

    SHA256

    48abe2ec4f735d9c38b39e0df99b833ef3edaf2898aff93cee49624fe8ebf884

    SHA512

    0ac8edb046d104168b2822f7d18a47b269e35d91389b7599ecc02c51f714de9d06446d62db6894eeb61eec27a9ec9a54dbfe613e9b72194e0c9bf2fd7f0ef412

  • /data/data/iag.group.com/databases/google_analytics_v4.db-journal

    Filesize

    4KB

    MD5

    a654a25e85f62776feee22741184a7f2

    SHA1

    fa9bcfd76dae23b15b59f99d504b0e931b5be98c

    SHA256

    010c95375d9ca6f661d0c91b6f61cd9aca0b3356a8d82f09891ef6c25aafb812

    SHA512

    cfd97aa6ce13a8fd0fe4d38325fa6a468b5f8c87831db779a1c31e390a0484b01ade971ab3fe9fe094a0315244363b72cf824902a16edb2386a6089decb33b7f

  • /data/data/iag.group.com/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    337a696da9e5516f8a41593e2c288619

    SHA1

    f62c2b3ba25014917087b3f2e4aa648f95be26f1

    SHA256

    e26a73729629282f33aa674dda442d57f1c2a9bc714918245dcc8c1ad91f2070

    SHA512

    7cbffdb4cb6df4346d34b4a32d9b2405cd3ee191596bfd92faf6f7ba526d4cb8dcb179420fc1987f12604499e5af58547ec470559d0022dd16ce1b2339256f28

  • /data/data/iag.group.com/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    9b3c42646ab352462bf0233d1bbb3d34

    SHA1

    9169b9b5afedcddbf49277d3656ae77940b401fc

    SHA256

    861e72c9deaf5a1ee2edca0f33a975b7acf2dafa450a66ba5618a1368af93c46

    SHA512

    04034ca01d1ebedbb2e7a1ea60d8c47db30c2646731a8c66a606f06f0d2b9ecd9910d529d41d282c140e9b8c3cc9465f84879986d9355db61e9866383702b81b

  • /data/data/iag.group.com/files/.YFlurrySenderIndex.info.AnalyticsData_FHVHX8QSYRFSTPTJ9RFD_225

    Filesize

    88B

    MD5

    4e05d386f54110bbf17c16e3f631b486

    SHA1

    5a7bedc05dcbfbcf458a4ca91d190b882805ff82

    SHA256

    a90cbff66c7b6349ea9cee725904ab64cf188c1296fb787fb2a00cc522904050

    SHA512

    de7bfb8621aa2231cdebc7e86e3c207778a7dac97673fcf74a0c9f01c8858306983041ea949d2abb7ec099698c582c235b2e38aaae6fcfcc4a2b321cd0ee546f

  • /data/data/iag.group.com/files/.YFlurrySenderIndex.info.AnalyticsMain

    Filesize

    72B

    MD5

    51116f87f23cb7f2e8b3a12cbde65dc3

    SHA1

    9ab8cef7770e83fb2a7b0a856743d49fbf0000a8

    SHA256

    b6bbdfadef2dbda17024f8a52ffb5af38e96c022388258b07de4516ffe473840

    SHA512

    ac4c529799a6559e0fa278e0eeaf45301d90ffa06dbfc839da6f27a0596b13feda0282a9b57bb7e33bb7e0a272d462616d3a49c22fdaa001f04a7f10aa0bd432

  • /data/data/iag.group.com/files/.yflurrydatasenderblock.ff1491f0-5c34-407c-aeb7-32e0a79ed358

    Filesize

    307B

    MD5

    6105538dcef04993ae694e651ebf2328

    SHA1

    f3a837783d7689a7fb0447441a67de649551041b

    SHA256

    7901a10815791e22c2c579a4783079a9d5c1de7ed06d57570995fd09ab73eb82

    SHA512

    81a2b2d7d803d27996f12cc2bfc460e340f370cbe0c1ce505c52af4b4c1a0b6b83f9672eeea2fa2d757bd81eb86f133d254bb0a840c05ffc72e739275310da2f

  • /data/data/iag.group.com/files/gaClientId

    Filesize

    36B

    MD5

    3f2a76e664e2ae0544d8d745c3894f7d

    SHA1

    d533e2435b4fab4894fd859f5c3d1ac6a012e7f4

    SHA256

    581961aae6d6535769e66cc405a786f16b101ee1ea97f17119eae0dd7901403c

    SHA512

    f383ca8b00e0b9d9957cdad6f36ea55ee745868565b3fe29889cd6e75992c7f9cdb18d0a905699ab807dc87e2e65f337fd16b7cf6b056861ab21be144652e092

  • /storage/emulated/0/Android/data/iag.group.com/cache/FavIcon/500f691df7747fce99c0ce48f5b243e90

    Filesize

    881B

    MD5

    aff8410f089908089c1e6174c0fc62dc

    SHA1

    af0fa44ae124f2225b751975be69cf21a710c19f

    SHA256

    a2aa19c688750418b7b44aced0db220c72e52ef34d4a9f1fac40aeaef77a8705

    SHA512

    2b27da14ec42c613c8d19e1e00c4430112ed4ddcf8c6162eb8707754574a9ca59d8265dcd8fcca4803f73aa2df881ede0f9a16d43aa0218f6acf738c444f75d0

  • /storage/emulated/0/Android/data/iag.group.com/cache/Object/journal.tmp

    Filesize

    32B

    MD5

    934d5b3f10926b57c4c65d39e52dd0d9

    SHA1

    12de364a24e1f07ed60b21d97d35d53d589a1f0e

    SHA256

    ecd9b1a1209ac39e3a062f0b08f05ee48bfee838a7f37b64fd4b0a162e1dba5f

    SHA512

    b724d9fe2a456e47df894285826f64688fd9c211993cd625a518a0ca618c20ea7572339d45687aeeeb99ae6a45e0a375961c92c770a2c3c3b5363ddb52a9dacc

  • /storage/emulated/0/Android/data/iag.group.com/cache/http/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6