Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2803114s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 07:33

General

  • Target

    f2f1956314f980e2c79856058578019b187c327c10aa78f637643d03d55e971f.apk

  • Size

    13.2MB

  • MD5

    c4c5c8ce40661f9caad6b4018f5df937

  • SHA1

    d2e0d00e4a4d707b43cc6ca2b0be30931a53adc1

  • SHA256

    f2f1956314f980e2c79856058578019b187c327c10aa78f637643d03d55e971f

  • SHA512

    daf12baefbc6cbdd3f77c36892c5c0fc7b4d30af1d315e9bfb9b9fe4adb2fe2caaf8a278c4d5546707b042d12bb2230cb6a53dee9a1ad86658355f5fb3ee5fa4

  • SSDEEP

    393216:pzn3xGG/72h9gK9VKsGxfg5+RjQBiL9aXiProv/nRd/3:pz3xd/A9VKseZL0XiPYnn/

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.tieniu.lezhuan
    1⤵
    • Loads dropped Dex/Jar
    PID:5057

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tieniu.lezhuan/.00000000000/37CF018B.dex

    Filesize

    48KB

    MD5

    75d46252620a12dd7343e91c8ba209bb

    SHA1

    6615b67e21963e5689685f8494f442dcd729d4d1

    SHA256

    c433c8e3f847da2b98ee8b704ea3b7d0f38d6249626dfe26a22bef0c08e5fa71

    SHA512

    9ae5f0ae0a77bc8c9a27a43252ba01d4bbb69a326eb028d2e887d701b202b66a7065765f2f0214d2b0701493634ff33c2104becdb80bf7e8c2657175857b7af8

  • /data/data/com.tieniu.lezhuan/.00000000000/37CF018B.dex

    Filesize

    48KB

    MD5

    4e93a7a07efedcc6e3c741526d2d89a7

    SHA1

    e25833d7a51783c17978a7c5e7953d7cf1df80f5

    SHA256

    26fd97dcb56a0ae4ffee7b9514cb697de101ad39e3b2af2933b1eadf409b740e

    SHA512

    94a5e0b50c0efc69b79fe9b46513537b798a45d00234a7fe1c529e7d5eb153704ec9966a0e0819983f726260579707d7b82e7b31f845fa7602e06c078b98319f

  • /data/data/com.tieniu.lezhuan/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.tieniu.lezhuan/app_crashrecord/1004

    Filesize

    228B

    MD5

    7043456c5fd84feabb4470d47f4631e8

    SHA1

    e3a1d3f96eb88afc97deb9b66643b3e213350216

    SHA256

    00004dbfbb1ce944855f113d650118ace22c793335692c49847f90e0613d54f2

    SHA512

    77e563affc6a302bf24268172ed3b4d83b8fbf2db8aaceb90d064c2b7b2ca3b8706b39e6bc2d750850f326528d0e9c7b98ae95a52b4bfa69e004ee717f81c624

  • /data/data/com.tieniu.lezhuan/databases/bugly_db_

    Filesize

    52KB

    MD5

    5c4c6c89b5302ca53fd3ceb2d0a1e4b8

    SHA1

    a74539c44b564bd18b72929f54ed27d2302d4c51

    SHA256

    73fc5bc3b6098447a3e7e53193f96cd214b510d6e72dd4f3706e64fbafaaaf14

    SHA512

    4123d7da4232bb37b9874fb2e1c399cf861bd5a2a8190ebf43da68b461cb58b3767c3b9f4c957a36c115f36cf516e0ab02c7ef523423d64ca06ba6c1278cde57

  • /data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    de0c8abd3c70e6cf5c25e85effff136b

    SHA1

    76163b96483e633fff59a935cbcbf892a7176f90

    SHA256

    7476f7e7daaf50819898dd4929dc1af38e4d33515d9f6e7634acb530ffee263d

    SHA512

    cf56447271432a4b94952d89904c57e5f93bca9fabe2d5f06a26cc3c8f13403884226d9d60d2be5f5ad7942b25e31c35bf2d5b5179b103d1ad59c5e5353f9d4d

  • /data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    b75dc84a93b57fe83428346ef0bf489b

    SHA1

    2bcb6f2e7b761be8e2a59ec9a161fd685e8567dd

    SHA256

    6b73435a2a43edad052b67fa94d78acd7a2392dd8cb5cd727b978e9097a4cff4

    SHA512

    35a7353725e4391490cb0a96c3c5b150926b7aee302a38dde0c8af83aaba0ac25e406c61c4ee94e5309e4f6d408a56ae01e5ea14a00751fe1e15d6a057821b89

  • /data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    6083e34fe92deae39f857a3d9d7ff1de

    SHA1

    73d33d2a9262d09bb4463b9d02feb3f4259dc61f

    SHA256

    a9e97c7d56623d144ec9e6b5f86683987dec6047d86621de82b9563394096279

    SHA512

    fa5da310bdbaa1e4413773abe123d196c80f232348adb7764e84424730bd384b505c1de7a6ebeffc26e72ebb675bd45d27f8d587ef524ab4a499e336aae2a514

  • /data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    7bd72415f91284b689d850fa2807b874

    SHA1

    9b5ca41e471d8a09e22de5aff5c8559690e05f06

    SHA256

    f13b795bd161728046f3079766aaeb1af8456e06d0a09e9596888eb9c26ec595

    SHA512

    c335471f54ddff4af2d61ff99904cf29270bea89f140edecbe848509de4256670fb4c9a27f12db514f44eef37dae429eb86c17b799bda639938e71d444880b53

  • /data/user/0/com.tieniu.lezhuan/.cache/classes.dex

    Filesize

    9.0MB

    MD5

    7a16907c5f1ba2ab831fee6c5aa32dda

    SHA1

    053c689a3617db6386d44127ecc8d9392bf03517

    SHA256

    92a7b48550213dab85a98e562b9dd5b4acf8a9ddcd5d02400c37548ecc4f0392

    SHA512

    1715cd520ad2dcc9d9534b06cd091170fc169f4a73be64ad965d5fcd3614e807dddcda3c07ae8271e777672abacc9c0c2a36fe0f73a9193e37f24e414a45d087

  • /data/user/0/com.tieniu.lezhuan/.cache/classes.dex

    Filesize

    3.8MB

    MD5

    9cfc22170663ce25d8ca1503d349655e

    SHA1

    d9618f192e863a4517f908cedd0ee855ac0c3a20

    SHA256

    ec7fc67f1a6747ca0e0f3702f3a849cb6e228ed0a1291f3e5d03f0c621b0588a

    SHA512

    1d05ae7ba0edb3200c43afc92a7d0af5ff92048071c38be7ce5d5f3dcbaf8ff8aa95a93f032dfed2c6ba9ec06b65c0e402eb7c5548df690cb7fba3619d91601c

  • /storage/emulated/0/Android/data/com.snssdk.api/cache/clientudid.dat

    Filesize

    36B

    MD5

    cb9c1851f60a18ca39f1b2eacb6d43ac

    SHA1

    e6823fc2607e6d21364b46f540ec84fc03e48a33

    SHA256

    c96b6e0b152b8906decef43a0ab2617755998d935e57dd0ef317a1fe0c5c2d67

    SHA512

    7e3fa91eee04f8442609d22605a254a8f61b6f1591508673fa4b4726b048dc5634caea5f48ada8467ecef589570f60c8729e3a59be1e83e45501b51088d1ab6e

  • /storage/emulated/0/com.tieniu.lezhuan/config/5ac714da7be6d534dd74c84a097f98e0

    Filesize

    344B

    MD5

    e40486f187b6418e41342dd350e245b5

    SHA1

    0008cd6bfc016d338dda7d0c20e47bb52d7d1fb1

    SHA256

    ef5a56713465434fc83bdcc0dec5df3ce5f511007cb66201ab405a4aa1716f39

    SHA512

    206c11891a43912011a97bdf8c5f52755bfe8d9f3bc5e09b5a978497e269ebaec5b58ffee19286c774e908d53eed38c58fb2d42858970cbb3d0a7787a9bbea14