Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2805605s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 07:49

General

  • Target

    f60d85f3507024bb838c50a64d932d2d2cdb15d0d6274a9a6e63766bad99a04d.apk

  • Size

    13.3MB

  • MD5

    732fa2158cc3c6c1aaf5cf9ec89572a0

  • SHA1

    eb065981a7b610449a9ea3c0da0339e0c91e042c

  • SHA256

    f60d85f3507024bb838c50a64d932d2d2cdb15d0d6274a9a6e63766bad99a04d

  • SHA512

    c32ed7308cc77a372bc206dc509c1d017be8c5bc82d5357a5360adb2ec6bdf8af2435b97f13a7b9fc92efb5777a9fd0712b8cde2dea94d60d9a96949ba16ff7c

  • SSDEEP

    196608:idr6oQ4gEyTby6I/n6WLTJulvUUBvSe1Ij46xpmhUlyFaxeBU6YtwtElwSVxwovm:mGL1EU3I6WHGSHxpCUz0KrOoMjw4J

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.mobiletool.appstore
    1⤵
    • Requests cell location
    PID:5072
  • com.mobiletool.appstore:channel
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5477

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mobiletool.appstore/app_crashrecord/1004

    Filesize

    512B

    MD5

    4ff9feea07afa1dc503b081c2412bc67

    SHA1

    545d7b874500416cc7e7e705bbdb0881efc4780d

    SHA256

    62dff12a5d06ae611e66a6c54c046f754916d49a5fbcf8245592486e420a895c

    SHA512

    ac38fb0fef05f687c0d060de718034c9566cba35b130d62fa910d518f9eff9fc4060b10a93e0719b6ad2e2f0c9c58a5a5a2f4460b4c6db8f5c1e50861fcb32ce

  • /data/data/com.mobiletool.appstore/app_crashrecord/1004

    Filesize

    36KB

    MD5

    56d28daab47c552cc21cfaf96901c146

    SHA1

    9b20f08f7dda9352081af60ebe322ccdae2540a7

    SHA256

    9a54d4e77dae4ee126f7a8bd3e1c6f1521420393aad4c4a051a7de42356c43a6

    SHA512

    ff2514245c662eb59266b7314fcb0bd5d516cbef11374b6b11ecdb0973ab3fc001a7cedac514781ba8b0bba4f38ed863c79e3fdbf886489bbdd6e21a1d135c3f

  • /data/data/com.mobiletool.appstore/app_crashrecord/1004

    Filesize

    8KB

    MD5

    e5e289a9d6f59a8266832b9aa06760b3

    SHA1

    4cf94d0bd246310b4412f7d4dec84e025aaf1c89

    SHA256

    d61d055dfc4694e739eef6be3b450f76a4a8e8af85a64bde04ea6859e67842df

    SHA512

    16cc624bbe024074bd2313025a26ffc34645e8f13991cb2747b553e0b4293d7402d1de2ea4c270950ef6f20f11496c6187d55e8a04955638ebe175f77108af7d

  • /data/data/com.mobiletool.appstore/databases/MessageStore.db-journal

    Filesize

    512B

    MD5

    386c5df91d984fcc2a50ef11f4ce5cfb

    SHA1

    b0db1fe92b25ad2aa4843d28b775037457c6bf00

    SHA256

    cf511e5bf39130508f363d6e3a3a74dc117ae8665211dbd8ea143408164ca153

    SHA512

    ad53d01592ef97c2258fbd55742d7da508b4ab38e192188c9eb5ed731888580792ff0c1124abd87cb98f5d4968fe08cdaf0321a8d00aa1065f93980d32d80314

  • /data/data/com.mobiletool.appstore/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    d137ec918676575d1555da0f9efadb45

    SHA1

    97b385fc971a32782294e4e9b42557c0a47efcd5

    SHA256

    b5dd22f6fb02c95548dc8b796637e081e1c329a71680de9ba7423f914fdd49f9

    SHA512

    e61824f0901565488860edb65ec1953e6aa151a3bcc01f53cb804cddcbdd591daafd623ccbac982c8a7d4c4b48a5e9f66584d84f4d25b12e7da4527c972442d7

  • /data/data/com.mobiletool.appstore/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    18d25fa91824621b7fb752c612d4847d

    SHA1

    3c5847d39dea032e451ba5ee3bd20345f9a1f6ba

    SHA256

    4a5bc041c7859c3c6b1be49340d605eea6fe50d6466b2ab93d84122e9746dc04

    SHA512

    180b5f9c828743a30f473eebdbfc5a0276e61d8aefb40b405879642a9219dce60bd431b93af929caa2a5541699ee53b930846e9fdc70f4eb188a09abc38c82ab

  • /data/data/com.mobiletool.appstore/databases/bugly_db_

    Filesize

    28KB

    MD5

    49ed99ad79b41bbaa51e02d78a1889b1

    SHA1

    0f4fd4acab2244ba09101ddd667ca312032907bf

    SHA256

    f794e63bd710982083aec83203097071a00a2186926a3e0eb0132eefa25ec23b

    SHA512

    589d2062569f54b407251b37762a0bfa4b80b233f5a974c91ba1c7970bee339676b6fa05065e9913aacd5721b081b2f3a788c8d0f458af672b436708384da3ee

  • /data/data/com.mobiletool.appstore/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    49e8eaa98fa08d8a86600cd32a7ac4d9

    SHA1

    0b2386c4c5e46c419fe60527b69d30e1b7da906f

    SHA256

    9998e31a2663402f41b1677a7af7e0788ed4a7435214b6411679dce2bdf5b47b

    SHA512

    dfa9b3104da277c2b9caf45a12b9086af13b5f5e1232caf48458518e02939afe14b0ddb9a8b58dd54b927cf515ade8c1a2cf8f05906593e103733a46c6d61e11

  • /data/data/com.mobiletool.appstore/databases/bugly_db_-journal

    Filesize

    12KB

    MD5

    9ce5919fa876f7b21a24d593818ca2da

    SHA1

    4b4601920b99012154eba8922a0a4316726c2917

    SHA256

    c129cb634273c8861821f9eeb875f2d2061be40302f0391b39669a184f9d9aa6

    SHA512

    d37b845e98711c2dfaae9412aefed1ee6a4a05a197342f4bfe05855858e35bccda14ce2c01b56eac22d2d7dd218dcd9d40c459453a021f89e7503315e017a0e6

  • /data/data/com.mobiletool.appstore/databases/downloads_classic.db

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.mobiletool.appstore/databases/downloads_classic.db-journal

    Filesize

    512B

    MD5

    a4f4d36153d24d18e1b80d60ef0fa705

    SHA1

    ab1a2d11f39e14ba8daed3a4716f990b864ddc8c

    SHA256

    50e98d3a691060ad5272e82abbf1b4aee8c988933f15a6673deab069bd36507d

    SHA512

    5968d69cff02ab59beb609e925308f518d832cec0ef8882bd9e48caf80d8194fe57ae5697f947c9a730a9160c1f02e60a0f018aacac1200f534fa6facb4e21ab

  • /data/data/com.mobiletool.appstore/databases/downloads_classic.db-journal

    Filesize

    4KB

    MD5

    9350a013860d0edc85bea4ba93b76cf7

    SHA1

    6c8070e638024d513db581ec8049daca0635d666

    SHA256

    260139d6c24ea6030259f9404d1451f1754fdbcfe3486198ba5da49e0a1983d7

    SHA512

    76c2b1c6df7ae48377149be045acb0e5c46118514763f86af3ab97257ea665792c8c492ac8548f9cbf729e0170f441822caee21f912768605eb7e4b4ce46079a

  • /data/data/com.mobiletool.appstore/databases/downloads_classic.db-journal

    Filesize

    8KB

    MD5

    bec260d54968fed9f7b362b7b20023f8

    SHA1

    56f4c3282011a64c6b7e07ef4bce2b2939627dd8

    SHA256

    bf573e963461f64cdc3f690317bf170cc92767cc2d0142957173c2c722d73e0d

    SHA512

    2023c46415e8220a0040ca52d4436bd708f75323d5af67e8b041bd29cabd43da0e6cb14c64e5ce7def5a6cbe176bcf420444845163f9fdba748428e9fafa3476

  • /data/data/com.mobiletool.appstore/databases/message_accs_db

    Filesize

    36KB

    MD5

    50f3d63f4b9241e212be8ec20bf3e374

    SHA1

    10353f506f0aa9dfab398275482eb42da167232a

    SHA256

    be9049dfc1751c212273b6e4d07202e47cc7de289dd84d388a27675609056653

    SHA512

    dfc6dc641041edc77b5b77bda43ebbfd0eb6c0f4d55d05a7a914f77c58f2f465e8d29aa7e2c9773ec93a257154a6c779a6b165b8765a214aa154976887d8ff7c

  • /data/data/com.mobiletool.appstore/databases/message_accs_db-journal

    Filesize

    52KB

    MD5

    d2333ccbbbcb89e3cc8189cc6d62dd5b

    SHA1

    4aec40e8205003dc6014aaec7921f52fb071af27

    SHA256

    94d20a92ca65a1b1a1ef7a4affeb8baa4709bd3e786abb8db82df347031e5043

    SHA512

    ddff4e6fb0126bcc6cb69ffc363321a59cc67fbad85eb439d50e2e26a9f8aef0e542266882ef5cdea9ef027eee2ff657bb4a7574f96cbb3b7c4a058b940261d0

  • /data/data/com.mobiletool.appstore/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    1f5a11372c0ee13f8837c27aaec94696

    SHA1

    8601da329013d2ee8dd5c2bfa2af75cf4736e5a7

    SHA256

    ccb5df4c0e2458d49df102560d55abf3470eeb1e182997c376e74332cee5e265

    SHA512

    ffc16e56a32ac8472b1754509b2b8ffe7db7271a3c55d7f6317c8c55b05d135a7e3aafc86df2fda06200c495345753d21775222cb36a31590988f291e916e8c2

  • /data/data/com.mobiletool.appstore/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    7b2ea7ad6c50bdf17e42d1fc681a4904

    SHA1

    ecabf6a1ee7238f1e0deab25b6aa9711e0dd4b2a

    SHA256

    bdd5e0e8a999c81f6ad3b9a96c5991533d50648336b92ebe4c1b661c8091eb1f

    SHA512

    c569bcc8798f3d6b743718322915e2d875217ff70cddf1d756f052e77ef7aa8c07da9a7767c375bcf655fd939a8bebe2440c8116017b686a1fa56b369bd84313

  • /data/data/com.mobiletool.appstore/files/agoo.pid

    Filesize

    8KB

    MD5

    b12d838cea97284e9fde16fb7ed0f321

    SHA1

    84da221b40815e172101f010688d30840e8d6506

    SHA256

    1d48a2979c54876116e1855ca1584d28afc63310ccb6e02982bf78e17c87c0a4

    SHA512

    d53d21e1422cde51c00fb06639b42334d07388683279ccc6ba2d9a46b98dddfccf86af255cf6ac78df74ce8f3581e6eed91ba05bf9ab05a6cbd605f10e62b970

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    8KB

    MD5

    6be201a1809f58ff0957e725190f7fc4

    SHA1

    c5171e89b4f4f8c11844b3aa8e102e783f074d74

    SHA256

    bf8c4459d2969d6fc58b4b2aa1b4fe218107e6863487f572efc82b6250997357

    SHA512

    2454c231ca8673a96fb54600dbaaa0adce384ee72acfce7ecc03528c7b956955a5eacb52d1d7bb0d62e70083f647423ec180a15eeae17549595cc687839a8c2b

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    8KB

    MD5

    9f894def0d7d80c633f8d0251ef68eeb

    SHA1

    908e527c3e106009405acbb3e2ff14a6354d2614

    SHA256

    250bff442d90e8f56b66a412255002e272a105823060f456837ab470f61123b8

    SHA512

    ee3dd027e4fd388be1f9aa61565d4074b4c7ae1c0bd21dd128fefb9c4af691a2d60b1fc8807c2689d877a15435c0e80aeb7432bdf253f1ad40f28ee7b9b470b4