Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3093802s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    29/12/2023, 20:34

General

  • Target

    0347d6af38982c42be6fa774b1066f37.apk

  • Size

    23.3MB

  • MD5

    0347d6af38982c42be6fa774b1066f37

  • SHA1

    c36f22b3a4b1496d15c3521797265b10f251b6db

  • SHA256

    d905348409b1c38c383f9009b81eb393b8d9f79dc3b3b5014c98e681d9675e25

  • SHA512

    647ce41f0b7250e884c786c14a868fae12d631f7f7f8a9570445795d27f0069d093879618319e2a35c5ef69bec73ef2b51a90d32072bfcf76d238152443cc9d4

  • SSDEEP

    196608:AFWH4BxFRZhofB4MKim/dJuNWazbuZ5sElPc12APB:kkChZhofKBiadANWacsYEvJ

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tongyi.family
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4262
    • cat /sys/class/net/wlan0/address
      2⤵
        PID:4301

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.tongyi.family/databases/ThrowalbeLog.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.tongyi.family/databases/ThrowalbeLog.db-journal

      Filesize

      512B

      MD5

      4ee2c24d23404b29622b46b9aab26c6e

      SHA1

      941bd47893c771ca8687edde7fa098e89ccb3c59

      SHA256

      48469c894426f394104fd715fc1773ddb62500f5a0422b750f6a4f9d57ef5a82

      SHA512

      8b40b417174e9a249aca55e0eda17201e58aba6d5ebecc3c693c8c1e92d58fc17b62177385007fda57c4394e784d3f8f316ab39c722201116cadcd230dc3f800

    • /data/data/com.tongyi.family/databases/ThrowalbeLog.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.tongyi.family/databases/ThrowalbeLog.db-wal

      Filesize

      32KB

      MD5

      169301275363d18c6cbf7848178334dd

      SHA1

      05f3d7895534870fa0aa8125230b26a0e960619d

      SHA256

      8010b7e291396700fc5d1ba07011feaf14732e8288de0c57b2238d3bf8c97987

      SHA512

      c2ed81afde977991a6df1ca7811aee3ddfbc629358103fcdcd5561a597bd0d3805d57757cd6357e67b963a083e34e8ef7e59853964eafa14f45ba4f86a3842d2

    • /storage/emulated/0/Android/data/.mn_410185822

      Filesize

      146B

      MD5

      44cfe7208ae8c097b5970e80132cdea6

      SHA1

      2e5172ac93968a185811d8f3abe9214e6de6a6c3

      SHA256

      87950ec4d5f1170224da558c109967c280449f585ec9fd87dfb6db0ae9491d0b

      SHA512

      1796d702da87a1c846702d48fab09472f1b04cc36b2bbaa8d46ea14f543094a4ddf64b99cb385daa25cdcd886b1dde2ccfcf1d5fa501d3f461fe2345f2a3d1e9

    • /storage/emulated/0/Android/data/.mn_410185822

      Filesize

      194B

      MD5

      7a602e3c3b6e16ece7f6ef59523816fb

      SHA1

      bc14215152e3441065b140bd122a6ed0550e26a1

      SHA256

      ae7219c83d9ae47f4122a9626c32745aedc8c4b820cb57cde4602e585307c9cf

      SHA512

      bfaec8e2aa4fc2a7610823a6545dc49f80fbc3eebd8c838a4b1a64a8bb29b6371031f9b02d9a8e851f2d2772410c3bc6c277883d1808205448e9f7ef538b416d

    • /storage/emulated/0/Android/data/.mn_410185822

      Filesize

      130B

      MD5

      f321656a466363e5192773d92000e401

      SHA1

      3a6abe9be1a6f4deffaa98fd27f3449c888d3c4a

      SHA256

      53efd5207de6ed80429ec3c7865eed2b64023a0ed66e0fd29e7f45b708a1751c

      SHA512

      fcf6884bf5ce8d10b3a3dd461fad96cb6cf0bc4129e01788de112551230fbc4d8ea6961b04411d1c7816e248437c4560277069d9c544e5450612abc0e2c0171d

    • /storage/emulated/0/Mob/.mcw

      Filesize

      82B

      MD5

      0e9c0b3fcb0983cc6b0985a39a285ef8

      SHA1

      01ac4f12acb8664b8a6419c9b0b2d15e5615d338

      SHA256

      b2a92d7032e8e1c5c2d7a990788d4118af2a0a7a9d964d0098a4aa53e8b6b904

      SHA512

      e57a2345eb3b4b464816353b5991cabced2d7622e5adacb9400926a79f3fa9c7bae11a683ff8befc9cb4b478cc15c29cb225238858f4686a2a6660faaf8aa364

    • /storage/emulated/0/Mob/comm/.di

      Filesize

      57B

      MD5

      70a42cba408700f9a6c01c7941a8829e

      SHA1

      eab01cc2c0671538795fb0b1146017dc099d0984

      SHA256

      499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

      SHA512

      8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

    • /storage/emulated/0/Mob/comm/dbs/.duid

      Filesize

      132B

      MD5

      96b261d40ffca4389b855aa89de9be1a

      SHA1

      5f48a9bc023efd726340dcb949075fdef00a482d

      SHA256

      7654bc41604dedce5089a9808553a1af589932c405e7f3618ab8e45925a33b32

      SHA512

      e7c6f1f9fe955cf7e5d6f5b940d15286f811fb44b4a840c6eea498e74f609904775e717319036f642a55e0bccb3dd11f80c0cab20d5ae7a57c1c6bd7fa8a5500