Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3093828s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    29/12/2023, 20:34

General

  • Target

    0347d6af38982c42be6fa774b1066f37.apk

  • Size

    23.3MB

  • MD5

    0347d6af38982c42be6fa774b1066f37

  • SHA1

    c36f22b3a4b1496d15c3521797265b10f251b6db

  • SHA256

    d905348409b1c38c383f9009b81eb393b8d9f79dc3b3b5014c98e681d9675e25

  • SHA512

    647ce41f0b7250e884c786c14a868fae12d631f7f7f8a9570445795d27f0069d093879618319e2a35c5ef69bec73ef2b51a90d32072bfcf76d238152443cc9d4

  • SSDEEP

    196608:AFWH4BxFRZhofB4MKim/dJuNWazbuZ5sElPc12APB:kkChZhofKBiadANWacsYEvJ

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tongyi.family
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4471

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tongyi.family/databases/ThrowalbeLog.db

    Filesize

    20KB

    MD5

    61c6e06afed0ed244319a8b366ccac7f

    SHA1

    e22ae75378d506a7b13191e12b48341f5d518091

    SHA256

    2d8d6058ca911211fed5562ac88fc34a45718dbfd2e6b8aa26b52f121a48aa9d

    SHA512

    806f9ad0077c1f3b8a71eebc3a327eb7037717dc9c33b71219c54d7ccf955fa5c60fbab06dbfae8d022cf0acd0d8eb6bee231d74afcb926a923b9f32f39785fb

  • /data/user/0/com.tongyi.family/databases/ThrowalbeLog.db-journal

    Filesize

    8KB

    MD5

    49c2660ac9b095c320c9281427f4a7d3

    SHA1

    884d358cad0b0e47ef848068c3edaf2ca70a9658

    SHA256

    194de1f2df275cab1f3c93c204c4080a5b5b83149f065458c67b8a173e614347

    SHA512

    7bf8fdd9c99e2881cf5846af602b9b11ac0b5c4119b4425f6ea80c8559885e77b6af976929108c2e0bcb11903334723df6aeb303f8f04781f848f210a09abf19

  • /data/user/0/com.tongyi.family/databases/ThrowalbeLog.db-journal

    Filesize

    512B

    MD5

    df30679fd9a05f4c07030f918c98b222

    SHA1

    da25654e88dcba0a4c8bd04aa599afafa6579e84

    SHA256

    573a1c8a13d70a45911b9ea9519e95f6bc7babec0104ded32cbe8cbc9791df4b

    SHA512

    a46addc2672e8d6d8eb12097c1d45543db3524e9acb56fce5607e76b343381ef552a626c5e56e95ee0b46f4a5b19a2325c4d9abe410a8952d2f31dce9b1977d3

  • /data/user/0/com.tongyi.family/databases/ThrowalbeLog.db-journal

    Filesize

    8KB

    MD5

    a3befdac053dcfa73fe07e7a8916b432

    SHA1

    c3819df431efd30edaf9c004d240fa7d811e2cda

    SHA256

    bf71e8a809e16999dec9f2a16d73316bd18266789791a1436ba0db210001752e

    SHA512

    579f3bde5693b48fc5f6ec6512a13e3d05955ae154183ade670881e1071c13079ef698b401ed1cf2890cd3737bbc09b95ac659a7e1063fc9e12e7a32ff088bd5

  • /data/user/0/com.tongyi.family/files/Mob/domain_1

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/user/0/com.tongyi.family/files/Mob/share_sdk_1

    Filesize

    23B

    MD5

    8e24e79baab91c4d0604eaa9006a0cb3

    SHA1

    e427afc94a4b957a7096f73e395a10ea404c076b

    SHA256

    65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

    SHA512

    45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

  • /storage/emulated/0/.mn_-1226295269

    Filesize

    146B

    MD5

    9d3223879cade8b9fdbc4ee5eda6d0c3

    SHA1

    5d624619f70b46a5ae6a77ea7bf740b72b9c0112

    SHA256

    f823afff1c3862888b454cc3f3785054d233f0ebdca0ef8fb234061d347e403d

    SHA512

    bd5775a1033b4e12251bd35c1850d7807d4b427f886878f1e05a312f7e9b2163a51ec0c67546d89aa4735aed6df59e82772b10ae00cdd53505da32fe4cc98ac4

  • /storage/emulated/0/Mob/comm/dbs/.duid

    Filesize

    132B

    MD5

    6390d2e4a688057df8dad9f7144f5f55

    SHA1

    c36936e0a1c55212384b04657ccaaf81923b1373

    SHA256

    85a9ea6944765790dd20935dc4454733ee102f12ccc32685d138ae883b63d327

    SHA512

    da275c42cb1708bfbdab05cc8f7bed9eb90cf6035ae1ffbf3dcdf4918ce7e9ddb658ab4c15acda1173a6f7c3a7d4ed3b24b7ab14f80550b6b0980974f4ac70d8