Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3120762s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    29/12/2023, 22:15

General

  • Target

    0561f70e015e11bc18f20467665ec6ec.apk

  • Size

    5.0MB

  • MD5

    0561f70e015e11bc18f20467665ec6ec

  • SHA1

    bbb9f43d8f257380c46b5c84f8394709ebfc0367

  • SHA256

    b176592831805119e4df999c3c96430b20d810c8bcfbe268cd90d0ceaa77abc3

  • SHA512

    7a3277ed16f1902ed88aedff5fe04e3e81b088b2de3342dba432a4868a95188c07ee89a69050d0a48dbcdcccf002357756f78b7e9a9753057ce33cf356882c44

  • SSDEEP

    98304:rf8NhqZmFm+yzgQJYrJXtwUw5fyL6qaRPAq3TK1M6VH02Sqf0H3zQw:Any/J8JLwyyIqW1pdB2XzQw

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Acquires the wake lock 2 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.ubisoft.assassinscreed.identity.hack
    1⤵
    • Acquires the wake lock
    PID:4266
  • com.ubisoft.assassinscreed.identity.hack:Metrica
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db-journal

    Filesize

    512B

    MD5

    fae9780cd5943682eb632bbbe2c969ed

    SHA1

    d08061adecbac5b0a5a35ca95367b9281d914329

    SHA256

    02964d26be9b4f6b865627dc7b5d2f15e474ec1e06bfee6253c65eb49ee65e62

    SHA512

    cb39e15d3c3c30bc1e1e0697012bd5d0a1e30c860b81c77aaa67816faecc7d2aa16c27dba6351c66bbfc2cacfea5ca390f82351eeb803731193e7de825061fc4

  • /data/data/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db-wal

    Filesize

    64KB

    MD5

    f7422a1f11288c468f753e9192f86e91

    SHA1

    5bfa9e8ed01c3db02cf6cc7fa9dbe094d17a2f23

    SHA256

    500db212430f213e1f5a8292e9cece910eb4b8441f936bbed2a27a4fef27267d

    SHA512

    0cb96f3067d9df212f1f2f0e00c2a966ae838b597a053868962918e643548713a9368449bda5b68beae185eccaf7c103f9f7a4d232fb14f59bcfd969f5e8c903

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/Mint-lastsavedfile

    Filesize

    34B

    MD5

    aa8fa0e079150601ab4c148c78c81676

    SHA1

    0fc15f5d4196865d08eb66b9067d3f0fbbb484b2

    SHA256

    fb9c79d90fc68aca35c08a0e540c64507dae8cfa8658536df9a1efb2381c3e47

    SHA512

    7b378a596b0e44c8a8fc58537c8848bce37f4263a1828e40da4f1eccd1a48467eaa81e8694fde3def2b06c8433d800bb6d4bfcc474ac89b8595b01d0b4cbcadc

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/MintSavedData-1-1703927682682.json

    Filesize

    682B

    MD5

    8f6fec47677fc2374ca0d73fc27b19f0

    SHA1

    7b48379be29261fc059e186b4188286ce8316002

    SHA256

    d5bb2d1c3f006062aa0b7d9aa39ea0e23d56d072ad6f8bdc48a6c54d0af32943

    SHA512

    48c27339fdd4801ee5e1aa2f6b71b961a0fa73371e3b0061b2a76b4357daeedc37f1d53da60767f3c493da4704aaecdaf8b3a7bd864d9d4ee96912ff1dfdac8b

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/MintSavedData-1-1703927682682.json

    Filesize

    3KB

    MD5

    3db8f3ed2ec2402d4860259ca0075659

    SHA1

    fd6dd40ac7b6cff160bd58db67ff97e8e16b36cc

    SHA256

    4584700f4b8016798700c32e2d241d2496f8929e24af0892c486373c3b817afe

    SHA512

    8116f595fc60b36d0ca0af2bb90d2b1f7e88e39403869f7ddb2a18bcffc5e49f16255e3ad2a01c7dc3d7f42cb67b8b8a81b73be4e45b6b5c2f919643efb9c57b

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/crashCounter

    Filesize

    2B

    MD5

    b026324c6904b2a9cb4b88d6d61c81d1

    SHA1

    e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e

    SHA256

    4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865

    SHA512

    3abb6677af34ac57c0ca5828fd94f9d886c26ce59a8ce60ecf6778079423dccff1d6f19cb655805d56098e6d38a1a710dee59523eed7511e5a9e4b8ccb3a4686

  • /data/data/com.ubisoft.assassinscreed.identity.hack/files/lastCrashID

    Filesize

    33B

    MD5

    743168f4b98e9836a85299bd3a394293

    SHA1

    edc36b306a8ac731454bb901a601327ac1ff1d67

    SHA256

    95285d7c90069c19a86882857774f7d3e9082ccdac7dc4ed9225d5496a459d73

    SHA512

    8e5b0116753b86eca6bb651f5074a1e2e3a385fd6c536c1f737d4cc70b3715a43eff828e6da105130fed49903476e0ee4abe75388a6b88e7ad917d8e483e015f

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    496a4d27d10a0badaa610f602e932a51

    SHA1

    c7ca7b79574bae6643db8451c4ee36fe809714f9

    SHA256

    4caf353d5af64a43d3f74faaf29d8eb3a8a8e47450f161d608f749f30ec73ff1

    SHA512

    2eb6e414d2417fd8871ce178ff102b58633842a3332a7684d6a85f217d6c6da6ba6039769d52a8e90c4e854dcb2210330b86db6a7e6b6025b253f229c1c2279f

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    7316552f6cb877a64a7f08c30c3ba927

    SHA1

    970108bf3dd385d0b4785e3a2a916eef6b0cc986

    SHA256

    808a847e7e94b6fbe1c9d5ac2a6adbc5cb8b29c428f63c178334466e00d204bf

    SHA512

    4e1e8aaf2a1bef644a2ac988d8dd63e3d084192830e9ef79adf774189f0dade0a40b69cb01d376b24db0f9f6e5963425c8d9cd2374d453f016bd200a2857e636

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    116KB

    MD5

    58997293edc6f98c8ab54f329e736f40

    SHA1

    4acd6a900e67c748f44c2a4b9197ac058c2483f8

    SHA256

    c1414391c6adb5ae178943b59c1e3048209901327a3afd50f596b21ae17e2e41

    SHA512

    9e2763ae77d12d57dcd5bd566082f35ce7806d8fda537bdf6c214c5ded612342f0962efd58ac31267c1f36eb0a03da9da4fdb6c8a600c78eedc01bbe01d93c24

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    213KB

    MD5

    8df478f36c35f6d90184808168173d04

    SHA1

    0e9843aa1b693f68b547250e2496f56060ed04c3

    SHA256

    ad92fdc5d59e6f09480da883a848bda0b921c9e21538e39130e41876bb46b728

    SHA512

    5ec46e6ae19a916a88cb6eeb82d7e77ba9e850403dd8bad02b0f12f4bffbca047710df8be420fda26308aeec8c67e4341d9f7ccfaab1b4ba42a72f3c8f1cb52e

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    160KB

    MD5

    29e5e4359ae77d90d802183865401b56

    SHA1

    15abed450713cadf9fcc474436717591771fe0da

    SHA256

    e4df6bc7139e75214bc7e2b72f9cc565fdb0c67ddbe2b764f24fcd6a6a4f0668

    SHA512

    9c944e1c4012247237a641a8f36e9c786f9f80dd664824d7cbbd2c16fad816b0fa812676a020c80d31640961830d04036173b4dc8538df85bb0c405c9cda1c8a

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    d65a1dad3c76014041616ff5a3bcc106

    SHA1

    368a11b580820051d21a5b4219a8ca975cfe79a2

    SHA256

    d65eb2d3789929d96b1747264b4915066fd931f992b30202d22ab50e91fcd9c5

    SHA512

    b2351fdb5e08db3c9a75102d33b0f4d32a2be53b16f42f87f325dfbf80e9f3f8cd5496d176707ddc39349512e8d27ac767863c3edca34ac167c7c194b11ccc2e

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/credentials.dat

    Filesize

    226B

    MD5

    62a2af0bc0c6e49861e730a134cc5945

    SHA1

    a6ff6ab2dc1e36b2fa328b2c009c186680e659c1

    SHA256

    db0ae0b644cddedcb267d0bba5ed61f1240a008c3a3e131ab187a118f3a262f9

    SHA512

    61c4b726c7c52d6a4454e5003f872b1f680945754ba3ce1029fdedb293e878ce63fdc2fd03dd0dcf3c059fb3a18975ca56502b91631f53828641fc143092ca0d

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack

    Filesize

    32KB

    MD5

    1c4274aa7a9a5cac8c6d1df71e4588c6

    SHA1

    abaecd685e01cc68801292e3dc7085654a22feba

    SHA256

    3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

    SHA512

    1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-wal

    Filesize

    88KB

    MD5

    ba050af52426cb5563e22c9b139cd5e8

    SHA1

    06cdb3b58d09d87e0f8dc09c8f48df7f94cdf385

    SHA256

    8a3bf84703f3320b0a747a10d3149fb2d78c86f26c46a097183877e75e90c48e

    SHA512

    187515f7a6a3f560a6b3150b4a605403cb1b2bfd9c71443d6d9e03943edcda8e5dcd28574f76773e308ff2499005a99ff561fb0fdcba80012ce2cf530fe25405

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    5ae1dae9eb36649faeb07a94ca96e7f8

    SHA1

    9056cb35b999726d6576ef6ced55ca9228cb97c3

    SHA256

    62eafa0fe191047857cbfdbd6909930487f2216d260b4be27fd52e3cff6086d3

    SHA512

    e33d2cec8122673da3c8ffc788bf2984eac878f7dada265485d960a886ebfb00e17b12a30b546c959bc04c62a31d5646fda748df693e0bdafbb974abbbe77c1a

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    ac26a375d5d673c2a7b39bbe42efacaa

    SHA1

    a7384db83f153cce2cdd67a97a20df068f6ecd67

    SHA256

    001ea8b38280af72e70a8168524cfb2b07a711040948397d36fcace03b593716

    SHA512

    45e1842b55ebab067e53fb3c6ab880c0a652a951f26c1cae5363f429207db5f1aa56c821e89973612b73f9c0d186561221b6129db22e447ccd421b40342dd6bf

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    3baae5e08cca138f32419eeaafeb704d

    SHA1

    590a8d4d760d291fc5363ac2a5ed4f045c39b916

    SHA256

    d6e859c370372ba68ffb3da135039a7c8df906647c49e50611208b036629c586

    SHA512

    e39924f21f38ffec6b92a09a94990c5b0f1df1441c6c2ef73bb3339599b166266a3a782e93336d8c36d46dde0c2e01cef5a2dd7b43650e40b47ec381714605f3

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    aab9a9a9dae8407fae5ec531f8fb4ee2

    SHA1

    1780ff1b43a244e85a27846fe00b6a10e955fa94

    SHA256

    e92b41567b4c342722ddfb28b1f33095dda37eec36b06d0966ae1709ca6d576e

    SHA512

    12a9eaa3950c17665b258b34bb70956264ee4566a7334adac99b9d5340a0ad1b8201931b3f50ce5f3e384066d252da58a4770e5405b68fea718d50302922f834

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    28KB

    MD5

    0212579aeeeb2aa713d37cc6e6a96a04

    SHA1

    28ec9614c41a6afdce06a757cb47c53169240707

    SHA256

    0553e998a2e02b6e162909c45b241d0cd3c2b633928e2a325576ca4538f7c7ea

    SHA512

    28571e27610708c2fa3ced98a933d849a45fc4ec6566957f70b7fb232920c5db2eebfb02fbdf38fa40a60ff52c0586c5469d0a8e5624985bb0da1f934bc199e2

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    512B

    MD5

    c8901cc16ba547482a518c664ad305cc

    SHA1

    72b8f6158b354f1e2d7f4f29325bec38ecdeb4d8

    SHA256

    8e3c40a5ecca09a0aa4b03e72220cce6d908687115ae4c8611a08190c63d9955

    SHA512

    1272562f2b80e140a718fa656e461d87a2bdd882f23c31e7e1e6ce532e3ca61ccfe5dcdda8052c8943622806a07e2c62f9e4c2cd56f2ac7b8f75652f30274df7

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    8KB

    MD5

    cd63017a38ce785fc29bdbf2f47ebb05

    SHA1

    909508caf90335aad95400ea2034c45c53e7a62a

    SHA256

    bc38ce18f0fc09d1a6e07dc08f394ac48ea46aed4a82a4865f8e4a82170adb89

    SHA512

    b95a829bd3b6446be01ec43fec192d072c6fb89721f87bd2a979abbb3143b21387aeb0a7f76c46c557bfda8705d38e2f202b3332b541b14eacf1b9d4f67f4467

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    8KB

    MD5

    b05fccd19a5082d85f0706be578b8af1

    SHA1

    ab274811ccd527ad0b411c0a8e1f81a6159ab02e

    SHA256

    a4ac20afc9811df35db67ceca91af73256ec8a76c1622ca9d59e1e1328636414

    SHA512

    04e0dd16db79d90e16bd5aef5483715b279feff44c2e04e418fee664aa3f932b074c5c059705743b040ddc920534c16af9ab56087fe9180956d2aeefe228bf35

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    8KB

    MD5

    bd695ecda1ae6926bfe928758e4754e9

    SHA1

    6ebc737a43cbaab14140c1351df349df5d0abd92

    SHA256

    c36ecc9c7d799b96ebcc26ae6cfa027bcf2c803fe8048793b33a9ecbb671b778

    SHA512

    613e1365e0aa40f6da74b9c8f5d8b5b4b42c8a8299130add5b8c9000091bf948e28ba8b5986988857302afa5dfbccee11f5c607c4a7e4c4945b700a41ec90e75

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    32KB

    MD5

    97d0f95cd86aa98120bad38154cc5422

    SHA1

    47ae94e718cca0f687fa5ff517a065e99195fce1

    SHA256

    6d7deea1ab054b3b2bc58cb3e07d2bd215ea23d3f96b7621362b75a905beafc2

    SHA512

    202193205e98e105992aa80b67bc7bf1cba6b36f539af3ab7f83b851a3d24b25a9dca237a1fe0d28c89e12f6c5ff43676496845d7d6c37e9f4571f8ebd9b0b17

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-wal

    Filesize

    64KB

    MD5

    b34c160fd857910bb1aab52bb4d73875

    SHA1

    05db82889d5d18a3cd3dbd228d31296af5d6347f

    SHA256

    86706045eccc02cd68246942d1d8ba547839760d6a237d694bbc06a577394ea5

    SHA512

    4a49b277cfe5721a7039d5c6a8260b14eec2b6e0b13b0f4d64a613620f94c809598b9ee4ac98d5fa0ecdf727483523915110864938e83f817c78eb99b9dbf492

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-journal

    Filesize

    512B

    MD5

    1e7863e83d041e8c0845a822b7a938e1

    SHA1

    fa4a0da27209bf260195b366c558774076547908

    SHA256

    a2eff9d4025c1d33a833732d0d4c935cdb95d930f189a494eb86f5f690f7dc1b

    SHA512

    ccb9fafa0b9f30eb1379299217641528dde19f675b4894ce6161af555f02d32915352fa2981685618c81984de8b9aa74e8007d6f03d6474a2d16292a9f671ec9

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-shm

    Filesize

    28KB

    MD5

    dae0c9b8ede81b6e33faa8b16f421428

    SHA1

    f3f9f89b0c3a74c821a6c6168e5d4c48369226d9

    SHA256

    0c840591eb70a40542b7fd64f7a3981abbbb00e954a5b2c82610703405da11b7

    SHA512

    87c6436431cce2d4b1d53b7e4eb3490b66bb87fd0e0e18816fafa47a2bbcb64d7e4342b50fb143479e950ac9aafd60fd082aafbd205d05a2e6b5ee5392120fe5

  • /data/data/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-wal

    Filesize

    64KB

    MD5

    0a05821a6ca907d489450d36af86d5f5

    SHA1

    d4ede00bb3a4994db74e33e35990987270c8db6b

    SHA256

    4939dac3feb43b2e91be2200c7bff1ed349bdafabba3afc5d7473cbba71024bb

    SHA512

    a341a3dec18b727ce4c5091f7b640239d5b4bed4e81a1c72e001a28ea1d99edf1d576fe5925b35ae1ac3f250b6135acc354068f40e667b3a710654a51d678876