Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3120794s
  • max time network
    177s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    29/12/2023, 22:15

General

  • Target

    0561f70e015e11bc18f20467665ec6ec.apk

  • Size

    5.0MB

  • MD5

    0561f70e015e11bc18f20467665ec6ec

  • SHA1

    bbb9f43d8f257380c46b5c84f8394709ebfc0367

  • SHA256

    b176592831805119e4df999c3c96430b20d810c8bcfbe268cd90d0ceaa77abc3

  • SHA512

    7a3277ed16f1902ed88aedff5fe04e3e81b088b2de3342dba432a4868a95188c07ee89a69050d0a48dbcdcccf002357756f78b7e9a9753057ce33cf356882c44

  • SSDEEP

    98304:rf8NhqZmFm+yzgQJYrJXtwUw5fyL6qaRPAq3TK1M6VH02Sqf0H3zQw:Any/J8JLwyyIqW1pdB2XzQw

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Acquires the wake lock 2 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.ubisoft.assassinscreed.identity.hack
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4620
  • com.ubisoft.assassinscreed.identity.hack:Metrica
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4665

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db

    Filesize

    8KB

    MD5

    f580f2982b65f111a2756d9dc7ede0ca

    SHA1

    8ab4be5ffdc89a40a2c12a9a006b1649b8f7ef1a

    SHA256

    8ec55e187e46cffe0ab1b3fa391a77922c29da49078d96b419cb8b407757461e

    SHA512

    0a113a778530e68ed622df7aee6a58d8b5277cc827532695587408a93c1acef75d373dd1e60da0f9479ca345a6d5227fba57808f4cd47853e04b6342f6f9802a

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/databases/OneSignal.db-journal

    Filesize

    512B

    MD5

    5d9a4e0c86c47fb3b930ae1368bcc3b9

    SHA1

    c68d8ec20e1f8069f15828c58df9fb3525fa07be

    SHA256

    b1eff3f4a7b5d4f58df7600c19b012b94b43e72ee54e01ebf3a6b21dce3a743a

    SHA512

    d82e6c43a36a33b64ed5f91de3eae70678ee0a880e85c39b55849b296c378c6ca36daa3ba7b07afe4c1e1e4370636d9beb8d7f9f842260d92d50e400adbf4183

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/files/Mint-lastsavedfile

    Filesize

    34B

    MD5

    262e96b2ff1c7ce123c6cb9617f108b1

    SHA1

    f6a8125f7c2ba28f99a8636c5d1a1a8d4f645483

    SHA256

    e9e5257f84cbd6b6666284d2b107779ce4b319015bcadbabc5b1940dd05ad923

    SHA512

    c29f842b3c81bbd3ebb2b73307715c08f8150e01603c04b71773d876560729d6bf2e741a1e14b966565ef2a32663ce0b0ca823dbdd8ba9fef6ef426728c7c153

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/files/MintSavedData-1-1703927689439.json

    Filesize

    682B

    MD5

    8192875eb863d3672e9239c44cad90f5

    SHA1

    bd1a7c0f937748bc70fd08311d1aaf88280f4824

    SHA256

    9ec4eb478583e04c63c08ca6453281f1a974b928abce78e7d8a8247c9cfadc6e

    SHA512

    9f00e02dbe2b78a2603df1154182faa08b984d5de6ed52a2193bc695724099e887aaeb3edfaff961238a6e655aef2feaf3c47c99e77f46d914d3845cf4cc03c1

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    116KB

    MD5

    019459e00609ab3873afd9a51984d3d1

    SHA1

    250844a4758c809c3535e241e6b3377f37098b66

    SHA256

    bc0d2208000b8cd0b9a36262267a9171116865927acb6a1b7eb89a6aa35e177c

    SHA512

    4fe12d5008998cf1062a2e6d8d620efbda08fc27393ddc788a7000aefc4232e3b457779bc0f5c752abb43d61ec8b3ac909c5bb610df4c5da0ebc23957efd5699

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    db3bbad31b54ec9415f4714ab5118a5f

    SHA1

    36dfe8aedf3b085343e504b2130c0eeab66e6050

    SHA256

    8cd1d1ccfc6290162fdbf23e4a9ea6220a369d752340f030bd1c557f241fe183

    SHA512

    7a5c88dbea439cce3da570392696130b8d1a7562994d938e0702c984fbefdba60053db3e91ccb612bebe7bbe8001066edbaf5980e7f207b48583d1957e191d2d

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack

    Filesize

    36KB

    MD5

    28fb1d1ed7e925a5a6c0496dfd08b875

    SHA1

    0d25d6a6c9d26e3986827a9cc02e3e07743d6e06

    SHA256

    7085a0b2cdc1d8b890abd2bfa8c4e14822da886337d3fb5ee67aaf3dbb11adcb

    SHA512

    80d1e7682c942c3eca4945b7db7eb32a12a3f744e6539271a33d1bd5a03ce8a477f0d5596d1f814d7e290e6519e15bbbeafe284ed1275858cacaac2fd341c7b5

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal

    Filesize

    682B

    MD5

    0e94ee0886e3c8fd075e3f6471614654

    SHA1

    d3003d7e4ea1e606323629f6a33e989819a5e1cd

    SHA256

    006b92013e4308d1b6518b9622181a78e129ffdae3f4097501857fd245fc35e3

    SHA512

    b0bff02f85a385a76529ba4932ca8479e09b795f19e55e49d88b734f8ce53ed68a68b1878ed7798c3b79870d7c285a5608499f0226a83dd7e169caa13641be4f

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal

    Filesize

    8KB

    MD5

    d596714e719cd2e0899d978c65c84a21

    SHA1

    aec1f2e1ee25829ac433ca2f3b6ae9921909969b

    SHA256

    bfae2ee2bf88351e1e0f8f4bf31bbf47db80d32ef4a046bdc48db90dfa74c100

    SHA512

    3e508ba524a898c6432410d3126173943b81e39ac4ab142eac3a873f99b57cc1d6199806e6f47903b0b4034aacd784cee30ec21b70ba81f920c82f982292e188

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal

    Filesize

    8KB

    MD5

    90bd41d4213f5470056d6a1ed8531317

    SHA1

    f0021288a79eec1b9d1eff4304a0afdebbb75943

    SHA256

    e931133f92bc0b52ac9783939f12067931dbb4f3eea7a2359669d0b95c765fed

    SHA512

    c6044eb77b9f938d5f9bf3fb9efc566d064be5d2768c3160c7ad071972dd908ea22b58361fa9876becc672f42e7c649e9474db863dd2e89cad53ba3baa9cfd26

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal

    Filesize

    156KB

    MD5

    38925886b220698e19a93e8db7f79970

    SHA1

    f9d64ffdd67cda3d2d988af8b1a30f5a2013d6f5

    SHA256

    8f31d2320cdc544fec311c5ce0a6c25ee71a922b926dfe4bf65928cd8eeb1e36

    SHA512

    db7d2df31a60a167042407580b641c0a1bdd36e1c49011df8bfe85ec42c3234ca0b85af164358ab048d62cff60459c2670e410e5a08ae000cfe404b9498cbabf

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal

    Filesize

    12KB

    MD5

    6caecfb40385bc5dd3b1d1863b1cbd08

    SHA1

    144f4927baded3391b7365fdd94feb0663c83aec

    SHA256

    89faca8203b6708dac80929619b542b9f33f3a2788fac44cc8dd2ec963539bce

    SHA512

    85551dd08bc278f263a0a6514708c125c5bc1c7db2f69fae45927f05e3b9d62e96a202115cbf617fdd4d7d220fa01a2e0a380bc450186eaec5db6ef86208fe88

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/db_metrica_com.ubisoft.assassinscreed.identity.hack-journal

    Filesize

    12KB

    MD5

    0d784023fdddc2dee615c4f8ba9fcc5a

    SHA1

    bbbe01b64912be4f2237de7d3d49dcae24cff8ff

    SHA256

    1bf548ed7c85e110a5d37fe14810c71cdd591d9bd4976754161922e5cd17854f

    SHA512

    d91a72dcb4f481755d9a3a87c7813bd87d9e43c81dcd96572b682a7172c458c31ff249f314d255518c1427ad1ca76a172ab8f19cfe4f58361d0ca07a905e4d06

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    0af33fa245d0d8754ed34f785a1d82c1

    SHA1

    0c99c4ead9fd4a65c1d86b2673d9c780fbe79c20

    SHA256

    b2bb848fcf6c4aabed0268b5ac1551337cdd6a983b77d7e4cec4e42e320f58e8

    SHA512

    d710030d426ae03807008e9a52f8b4761ced31dda88a73bd53f1553025a7106fea24000fba3a7c839d9f9a5f538f035c9361f228c04ba21fda28e0383bca1d9e

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    bcba36e1c41bd7c06630a0c7c4ba5c2a

    SHA1

    e5f935baee63d30afa401d4d6777dbe409aac4be

    SHA256

    0d30a97f65d27ed4bf6e70a66eca10ff5b55722d3abfe2f776b8e5cf9898efd4

    SHA512

    33600f1b1c2eb27698de41bcb2a401dd5ffa7cd754af8863a7dc4942b35938d433b0e4b1126d775c8a2e3b348e34b07f73b1e99315ded258ff86116271d5028b

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    12KB

    MD5

    6fe9a6d527d93ed08850819164fa106f

    SHA1

    6d86dd1bd4e9b2f3fd8c24cc25ec575cdf28e899

    SHA256

    8694b26fbee643e04011d6ebbc23b755cd684c084ecbc4b5563c8300cea27d33

    SHA512

    00bfb133e26f99e87af935209ce66ec5227fd7c3fd2ae64bc9ff3d05c46e4fe8e777390fe37033b6100516b2fed4bbc5605cc7677749b51ea87dcd9151b7a86b

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    36KB

    MD5

    bcbdddb0e47c00db50c3037838ed30a5

    SHA1

    626d1ef30d4021af547a4f31849ed82835612eb9

    SHA256

    887d3808196ccb35d37c098e357af3d5edf00d8a1bab5b54ca59810064cd33bd

    SHA512

    802f3d47a60713ce3c0dc4f222c7fb02ebbdd0279efab8599d3374218ea69c29edebe997d7ad13a17822193e07141f3cbfea657bf382136646b872d8a8634a32

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    04606bffc7a8f0d09d1eac635ef5b781

    SHA1

    7d9ee237d71bcc4429956c9659feb2e55fb43004

    SHA256

    e788cdc0aed98221cb0d96e70a2d4c84f661d483f721fe95ca1f76f4767b4c4b

    SHA512

    2c1e62805fd28b9b1116342763112d90406c854f1c0699d9bb6e764f24f8a416c3d5e13c0e052985813e0db990483346c83dfdf6b41dfa60f06694592e78a3c6

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    a92e48620c0fb29d4803253e25efeb65

    SHA1

    38d7b6395e495e947b5c67d6184f103b182199d4

    SHA256

    989d4cec3625f106ab32c2f9cd494a10ba81845281d25078df36a9e6110ea3ef

    SHA512

    87f199c74c35fa55d8064dba12963a6b21e17fe7ada0163362608bd0e02b2806d065e9c85a92ea03a8903c1f6e1a0a3242dfaa7c4a80aee64d59e8487a9a4fdc

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    20KB

    MD5

    9e959105a823abdc401dfdc90ce909f1

    SHA1

    e2819cc40c4002d21d46192c81969204b23d7b21

    SHA256

    001c7370b279bf4168e020203f7936573a1a5eee3e673449ba3cbb34ad3f02b1

    SHA512

    dd53632d22b6c6a036d3f6b2381f329532f931452f33cee80edcc43c6d90a3af767a2f8530677aab5edaa0abd2130f19834d695c713f409894451368d9518a1a

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    512B

    MD5

    04f22226af7ab6a852313e01dfac5fb6

    SHA1

    e358c4303208e89d5829c43075ef582d64e7db47

    SHA256

    b3393b1f98148f6bb5df9a268d9f9d2d73fa71b0ef2eb7eec12230b3ff91e6e2

    SHA512

    6f15ac49a2f01d3434924794e790355d0df2a745cf2cf7576fc896bb968b1d4e6add831a493d314e96257070ed57f513dc2801eb8098b7700fc8548d47eb4481

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    a42a37283893f6b9d7f968ebe1e22d97

    SHA1

    21b13601fed772f8d5249a7a12a7df777a8accea

    SHA256

    0a6412dac9b89a4dd1783d6247982edc7c7bcc9a7eafa9cdfbcc791cc90343dd

    SHA512

    b640ce87d95bfa18f789679c0c569faafe5787ca47878a628f341f536de3a70d68955b02edde73b89a2229683734e9246322d61c0977727301bdeb0cdd6a84e9

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    8KB

    MD5

    b6ec5cc55e943ff6e22ee94d4443467d

    SHA1

    c01363e4bd11da076797f21be9a9ab027c83003e

    SHA256

    de514223ce81e5fd6a06b737d5c35a9710cf188eb4a8ac8e063b1917b20521bb

    SHA512

    bd9744fe421ca8f6d5e410060dc3dbb5b850c2e13bd8f475340a4c74e8af5d8725038b16059f85addae0aedf80357ba5eb422e4dca79f121255c0bb2d87cd89b

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    5e6207493d003c015e6b3d587f044048

    SHA1

    914324d6b4efd93346256e238c424c17d49cbf8a

    SHA256

    97f45cf55efc37f8656bc798ce331e217b0c939397966bc580ddf26d8808ced9

    SHA512

    1e6a722338d07ee1d559d077eca04893f6af0be912cd14092317b06a1456e377574bc0ffaa4fda9ae68143ada06ea3af4fd450d43519dfa1355870e435a51e82

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    8KB

    MD5

    e0e8778124c8b58af7372e0e665cf680

    SHA1

    f9ceaef5b2c455e8c5cc664eb7eed0c3e42c6a71

    SHA256

    e91318ea214756feaba0a6528236f60a57edc4a202b2334a6afab39aedd8b7d9

    SHA512

    a29c646a04d25e1a1e3c76d92f7ec69502d1aff16f81cfc4a9f7446e2fde97fc92b9112f2dc170c7d50e43214c635d5d917167ac9b60eb761220d63bae46ab79

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_client_data.db-journal

    Filesize

    512B

    MD5

    678cc75b01591d51c600db64089e763a

    SHA1

    c1bed83797b073410d0a20ddf0c491b69b6df4ed

    SHA256

    d8d6b303ab506d18e8668542fe80067e30223c28334e9a9b9c48bb5fb2ef14e7

    SHA512

    e82a87b4c390297ce87ab647e39f1afed88790b22216413b7c76a99c34b00602d66ca96a75c9d6b8001bc3493d4a71debbe55f3940890c60e72eb57951ab2b44

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db

    Filesize

    44KB

    MD5

    03c39fc6b63d1da63a21930e135f0811

    SHA1

    3b96acab80ed2019de94d318773953c4388f7e83

    SHA256

    9ec78309476573fe0b92e720f1991b022292106e862a9908795010dc1eb121e1

    SHA512

    92560d90e05f8b66d643f5211132c653571bb00202c42b8d1d126a1af8fa72e859b46f773aa714d56961e9f0dde324aa38ccfd55eb7ed2569dc81389a135f1c0

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-journal

    Filesize

    8KB

    MD5

    caef47783ee24d15303f5ba0511c384a

    SHA1

    72331a306aefaefe8002c0adb6f3b8fe8e77c80b

    SHA256

    e8dffc0ddc92b6eb2c95f81747bc5534ece4a390d34d32f60e53e4c01283eebe

    SHA512

    331817dd0af50bc536fc3227cffea454eba6d2d26549c7f439152a2701566a427efd77250d26974e575f3c874e83ccda62b3e7c830099b9cd46500f689458fc6

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-journal

    Filesize

    12KB

    MD5

    01b94fad1857eca51f0eb3c0ef92a261

    SHA1

    2b7108f71ca2379c73349cc7aac595a5405451de

    SHA256

    ffb408f05bf98824f7a209ecb86642fd36a1e0870f859cb94727b2b03300f4e2

    SHA512

    00c40d2916824c8bf387c7a8601aeea49aabf900a208f304eea29c1de2b82a90bd0140f45793ab605f0a6832b172f60edf734988270e897782802372ebdea66f

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-journal

    Filesize

    8KB

    MD5

    5b1f049d17c270d7da75064db00f76e1

    SHA1

    20c0b382a2c1da6e67e922e4627f6d29dc03a205

    SHA256

    cd9305480d6b67a194a7d556f9d313cb522bd30988efcccc6879e5af2315e610

    SHA512

    c48a61454a47ea0dd27371b5dc18c6bbc339e9b43525604067666d1669584bfdca7de9652331f60b5097e232a327dbce33342ceb98e0d9a65174a1669cf43eac

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-journal

    Filesize

    12KB

    MD5

    df3a4ac89aa2aee0808e1ebd6e3c43ab

    SHA1

    379ab648ec63c4484ca5b550d1fb789f46fbfee3

    SHA256

    504bfa07329da8a3fda09df16a11ee35ca2189925e6a4dcdb8e6a7032faa30c6

    SHA512

    835d6dec247390f0ef00ed4d2baee9ff30c5552f2f50ab9b7881c429a1ea5659bd85042d145e693af14490d50e83eabfb4b60e6a303ed84383a59d40a8a5a3c6

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-journal

    Filesize

    32KB

    MD5

    804980b338931d979353b190148bf789

    SHA1

    e46ca355770e6dc1131d911fae1f50f26623e86b

    SHA256

    9b3a3ff211dd793c517d90eb0a509767fe951f8a532534c4511baa38ec79aef7

    SHA512

    5bc577934626bdae8a2c16f0c2a9a7cec2a89e0302e0b1b6f6cd62030fffc12259ba29a666408a73907c03592359bc267a90a5be40d3f74df4da51c1959dce78

  • /data/user/0/com.ubisoft.assassinscreed.identity.hack/no_backup/metrica_data.db-journal

    Filesize

    108KB

    MD5

    d46e2e84c63fd4ead66a553eed78aef7

    SHA1

    6a228c93a12bfbc769df1f0e29285045a6f76f74

    SHA256

    e18060de3cb9f80ed81e911f66e2b4ac63e6e6da7bc7d492aa8890f01db12081

    SHA512

    dd9d96a2cb2759756ced1162e1273423c1b401f8c38272b7dc62db88f655e58e60601f342e5de180f571626d4d0b47bcd191ec263f49a794231c2615b5e3f96e