Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3021352s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    25/12/2023, 18:33

General

  • Target

    34d77ad3afedb6dfdfe9c59810375baa.apk

  • Size

    3.9MB

  • MD5

    34d77ad3afedb6dfdfe9c59810375baa

  • SHA1

    a583dfadf87c11b1ce751f56658a78a08192a206

  • SHA256

    b662638c1e9067f1848ad10e73a6c620d1f9d011fd718a82b7d0c2eadbf20028

  • SHA512

    c298195b786eb1fce1fa3c8a11a77181c4fa856633239ff37ff4ec7e8374e17cf2736227534c0b6ead571c6c3aa3f95cc063aefbfb8c1e1c086c45673d916d02

  • SSDEEP

    98304:gxQFZRLvP3d6VyQyKRKTGm3sFzDnul463N/LXS6Nc7EHikxQUphD6udUAiG1T5oh:2tnLul46FJNcw8WOuqAOh

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • us.airconditioner.ACremote.tools4tv
    1⤵
    • Requests cell location
    PID:4587

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/us.airconditioner.ACremote.tools4tv/databases/db467

    Filesize

    40KB

    MD5

    bbce0ad2622c37855d618fb649e90be1

    SHA1

    aee580ec1dc842db283129c2b0e657aa8d97a261

    SHA256

    c5f3d7f14724b420bc032ad0527219f85dd5460693ecdfefbcc0ea1a93cdd91c

    SHA512

    1d2f0a242a95da3dc56bc8027e2c18f9d9a7074976b73ff97b92925debf8fbd60b499e6acc41a6427611ea62dcc2c4b4c54b5fc16243d05c6a3d74490fa3ac69

  • /data/user/0/us.airconditioner.ACremote.tools4tv/databases/db467

    Filesize

    40KB

    MD5

    ad3ae26bc150556998e34da88c33a206

    SHA1

    a1f5e9a2f0194816e1fd1e326f895714f05c32fb

    SHA256

    66607b2bdd6900312193cf79ce4c9be51f6346a12ab79e7254205713268d35f7

    SHA512

    c1196c2df2e4f53675dd940613c5fa74f6754bc59452b91d35512a20e68e08c6e4c0f8895df20add00a61a4c00f7f84adac7b92f0839f9f70654d7ff0727fd71

  • /data/user/0/us.airconditioner.ACremote.tools4tv/databases/db467-journal

    Filesize

    12KB

    MD5

    3151db1f6a0c7542a2f575b1fcedaef8

    SHA1

    0954a65991ee8856b939421877bb9a0be17550dc

    SHA256

    86a63448ef9d7a72427cf29b6585a4b6d67c975316b5f87353e9cfc1829ed283

    SHA512

    e5e4b3d2d354f4efae99a5e7deab8f8a2a96d251d873bc39e9eab2267198dc3ac341534e6c2cb6c0b92ff73ebe497fab4bc4314da9b93c04efb3a2d2b80a23d2

  • /data/user/0/us.airconditioner.ACremote.tools4tv/databases/db467-journal

    Filesize

    12KB

    MD5

    87ae14ba64a092626232a2dd8523923a

    SHA1

    483f3c97895366def261c6ba588a30d0279c545c

    SHA256

    1b0ba639fa4abd4340416099cd7b894fcb03fbf65c76b5cd480c416c9f1dcd26

    SHA512

    0bf606fc382d60102b76dbe73aafa87db556c9331672d2c7265215e824df4f6fd3f05193cabd06f12c625e5cc53f53834fc30071250a7e15ecfcd936d789b84e

  • /data/user/0/us.airconditioner.ACremote.tools4tv/files/UnityAdsStorage-private-data.json

    Filesize

    41B

    MD5

    16d3e6eac0e79222a9b368edac765b34

    SHA1

    48d5e621fcdd84108f5750d6905180b622715b11

    SHA256

    3a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7

    SHA512

    d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747

  • /data/user/0/us.airconditioner.ACremote.tools4tv/files/UnityAdsStorage-private-data.json

    Filesize

    623B

    MD5

    4e6209ac35cfbffe8978d889ca2befc9

    SHA1

    10b9524a8ff76d2da062c366df51f42b45312a66

    SHA256

    13e4de8ae625a0c085b87c1aaef25c4c4aff5bc0a262ad89cfb5acd918a4251f

    SHA512

    24505e80cd052d7ff8d44213ab8679a7c3af98dfa2f62f45eb05b21b9c6ef16034075519e304daf9c9a518a231aa91cf56781780bc7310c232bf68c13d6a4d2e

  • /data/user/0/us.airconditioner.ACremote.tools4tv/files/UnityAdsStorage-private-data.json

    Filesize

    724B

    MD5

    2c38668a6e1d00cecdc93beae3b53305

    SHA1

    7fcfb68dad92a36b4aa72d2ec9891e82fc368b1d

    SHA256

    4f54d8115db62d8aae8fec2a27ff498ae57e76ce8077b0165de5b3d6eaa2f4ec

    SHA512

    b0b273c67de23112987b04fbed5e75f12b88e4d6d740b6c06a2213370bcd638b5bcac845dadfe4ed9444f207e41c196979d0b140633117a6d327a30e3e71cfb8

  • /data/user/0/us.airconditioner.ACremote.tools4tv/files/UnityAdsStorage-public-data.json

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/user/0/us.airconditioner.ACremote.tools4tv/files/shared_prefs_sdk_ad_prefs

    Filesize

    181B

    MD5

    5f1a61cd768d1d0d2ba1f41af39ed1d6

    SHA1

    e9efaab032c07d485ba10b77448eb05eafb5a8ce

    SHA256

    323711ea097e99a032b55fd7c52e319f64c28762778f63760046ba3f368bc082

    SHA512

    2a89c90459c010d2e0a943bc5fd085d0472d9c167e827dc7d25843b66a88e284330827767c4978a96ac3c763fa18242bb225590973fe0ca2fd321d28b04e4d12

  • /storage/emulated/0/Android/data/us.airconditioner.ACremote.tools4tv/cache/UnityAdsCache/UnityAdsCache-1997627f1aecf784ea32a81e4c2995fe005fb2055fbf4ac1837b9f6b65cf4c4d.png (deleted)

    Filesize

    65KB

    MD5

    f00ff5d33d5e3711e77a8290e9d4cbf3

    SHA1

    3e8bb691c4de863cdc908beaeeae01e97c1168ef

    SHA256

    c63dc66a1ddb2881a38e0866a99541882075401ca134a41cb8fb419d86a3bfcd

    SHA512

    31cca02e715fd6b574e14b597247388904bd2aace5f6796b52d4ad7be663a4910f57afeecf4ef36318aa2b8368409a8ff2c94fb900facae4a267fe3d70f36f68

  • /storage/emulated/0/Android/data/us.airconditioner.ACremote.tools4tv/cache/UnityAdsCache/UnityAdsCache-28c7258b88005c5d5723295aa94eba80805de62d6f2696761c64b1e375bd7378.png (deleted)

    Filesize

    741KB

    MD5

    3072c66d5f7d6c654063e2b5381d3dd5

    SHA1

    3cccca91b119f7b990556a0f00cff44c2865883f

    SHA256

    f774deec868442dbba114cd988f45fcbb2cd846380cf1d6e755bc89c54a26406

    SHA512

    7b38d348dd1f34dd70d1786c51f38bee3e7f426906165b747fd137188cfa5646739ddf56849559f88c6d5546a9b3643567a5f1e5779f26a92f420adaa0da4292

  • /storage/emulated/0/Android/data/us.airconditioner.ACremote.tools4tv/cache/UnityAdsCache/UnityAdsCache-a9e63017aac8bd9ab63a6970fe9fbefd51dae1341ef70842485228923bb61e5c.webm

    Filesize

    1.9MB

    MD5

    93b13958551eeffbafc8d2d264822d7f

    SHA1

    e76985e633d5d4dbef50b4e67088b20c7fa3f912

    SHA256

    61333e9a6d762bb6f857039d0bf13434516b75be07643d1adca57b6b561bf8fa

    SHA512

    9404c028690ced46aa8af954cefd8ab8274b67b67bc08e801fdde2ac0324cfd7c7872b9554911fe18bfe15d379a0e4c9ca0d82fe6ef37badf331e16f74fa0d82

  • /storage/emulated/0/Android/data/us.airconditioner.ACremote.tools4tv/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /storage/emulated/0/Android/data/us.airconditioner.ACremote.tools4tv/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

    Filesize

    1.5MB

    MD5

    d856f6c351066cad287a2510d4e02d8e

    SHA1

    f87e8b8492ef4c6326bd8c3bd9663a30c4a1dd3a

    SHA256

    789f1086e15e1741dcea59e7495e85884ad86ddfa1d73b7300c88d399b62c64f

    SHA512

    10e60f7d78648f47f71744d5c10ca81a2f25f2c2cb60adba0d3fe61ef6ff84fe2258ee1142ab3141c09d2cc1edce12012f32724af40e7c58af9688c76f17b769