Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3048996s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    25/12/2023, 18:33

General

  • Target

    34d77ad3afedb6dfdfe9c59810375baa.apk

  • Size

    3.9MB

  • MD5

    34d77ad3afedb6dfdfe9c59810375baa

  • SHA1

    a583dfadf87c11b1ce751f56658a78a08192a206

  • SHA256

    b662638c1e9067f1848ad10e73a6c620d1f9d011fd718a82b7d0c2eadbf20028

  • SHA512

    c298195b786eb1fce1fa3c8a11a77181c4fa856633239ff37ff4ec7e8374e17cf2736227534c0b6ead571c6c3aa3f95cc063aefbfb8c1e1c086c45673d916d02

  • SSDEEP

    98304:gxQFZRLvP3d6VyQyKRKTGm3sFzDnul463N/LXS6Nc7EHikxQUphD6udUAiG1T5oh:2tnLul46FJNcw8WOuqAOh

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • us.airconditioner.ACremote.tools4tv
    1⤵
    • Requests cell location
    PID:4498

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/us.airconditioner.ACremote.tools4tv/databases/db467

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/us.airconditioner.ACremote.tools4tv/databases/db467-journal

    Filesize

    512B

    MD5

    28129a59e5d90f9ed6db3b5471416edf

    SHA1

    4ae4994c332388c1b3253bfe42334ccbfaad4a17

    SHA256

    6987d065061de315e005475bd76c980bac96749b79bb3fb7f6be8accdf4e92ee

    SHA512

    a7b3d12a6b5e7bd41064d3e140c354e5e8c3d948ae75c0d8b2d1e7de50ca8440d92db61a55e73eb6bfda86358172170932c977f32d7c147ac6e6b7d0c8a8e417

  • /data/data/us.airconditioner.ACremote.tools4tv/databases/db467-wal

    Filesize

    16KB

    MD5

    adcd7c00c79e49e2e760bf37ba972a69

    SHA1

    33a7c40a49a3c079e5f0e41f7ec68231e9e380dc

    SHA256

    eac403bfdef4560aa13b55efa080ed8622ac6d229aedd7da9d72a93b90729dd4

    SHA512

    abc5dfa5b4138ba7b409e5f753fbd02d3a60b204e488a2d37521d7a49cfd21568acab5b3b515ba34ca04f13817e108a4663c37ccb0ed3838c0d8cde8fc4df6dc

  • /data/data/us.airconditioner.ACremote.tools4tv/files/UnityAdsStorage-public-data.json

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/data/us.airconditioner.ACremote.tools4tv/files/shared_prefs_sdk_ad_prefs

    Filesize

    181B

    MD5

    5f1a61cd768d1d0d2ba1f41af39ed1d6

    SHA1

    e9efaab032c07d485ba10b77448eb05eafb5a8ce

    SHA256

    323711ea097e99a032b55fd7c52e319f64c28762778f63760046ba3f368bc082

    SHA512

    2a89c90459c010d2e0a943bc5fd085d0472d9c167e827dc7d25843b66a88e284330827767c4978a96ac3c763fa18242bb225590973fe0ca2fd321d28b04e4d12

  • /storage/emulated/0/Android/data/us.airconditioner.ACremote.tools4tv/cache/UnityAdsCache/UnityAdsTest.txt

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff