Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3160289s
  • max time network
    151s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    30/12/2023, 03:51

General

  • Target

    0d7d0029872527d1a572f67c3dcee4ac.apk

  • Size

    5.7MB

  • MD5

    0d7d0029872527d1a572f67c3dcee4ac

  • SHA1

    116a224758695de7d3dd5fe63575262526f4d663

  • SHA256

    b6637c670bf1eecb887f246bbf6e952722c918bf56b745e16da320195228b7a8

  • SHA512

    7c0ee2668ee46c1166abd6aa0c83df30ea9f518691ab3dbd8e678c656ba38a0196782dd6694720625c0b2b0a117166818af328d5e61b26eb501f88cdef1ec687

  • SSDEEP

    98304:OkDOE3wjKLOUs0Zw+v8NTeaMutPbEVqQkMfHUVY8PKbNGk:DDbkKL1NZw+v8Nt1PbEURMf0VJEMk

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • com.iflytek.housekeep
    1⤵
    • Requests cell location
    PID:4239

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.iflytek.housekeep/databases/mobilex

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.iflytek.housekeep/databases/mobilex-journal

    Filesize

    512B

    MD5

    83d2e272686bf80af707f0b77579e66a

    SHA1

    855a73b29c4e9256334efbfba161e523ac9f6b1c

    SHA256

    98dff38ac771ecaa1e611781711af5cbb3d38f10a8dd23c72795b24cc0c2abdd

    SHA512

    46f63d7375f348093064618925032f99e126d54d13df120a85bc5dc1329c54aaaa44ab8b235580c78faacab036f6907ba30a63dac7270490fcf7851f9d82ace5

  • /data/data/com.iflytek.housekeep/databases/mobilex-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.iflytek.housekeep/databases/mobilex-wal

    Filesize

    52KB

    MD5

    0855070e08b06353a2ddd228d4841214

    SHA1

    93f6b0e8506706c688e2685e84e3007b3b80a7d7

    SHA256

    91a1322a73492e226c1bcaefa5a506b964ab3af845fb24d60718776c8397a043

    SHA512

    e9113d8c2c9b6165f31c083027cbc58d03b34d7f714fae51708292c87b7e2d46a448f1bcb3ee81af2cb5f9afd24423af4b490003a029b732258b91b08058fde8

  • /data/data/com.iflytek.housekeep/databases/plugin.db-journal

    Filesize

    512B

    MD5

    f23db4c28d0c1174b0001c28d8cc4478

    SHA1

    278627988520057302ea0b0c4707fffdd3a8d701

    SHA256

    2990edf2bd25193474732ba99bf3098af73a1d13a09056ce0dcb0601cee7084d

    SHA512

    0423ef7f2599b573fd80ac00d8ca0ac6ed623c62f86412d7bc3ec1b70b1fc64debfbd2687e44b1aee1b1e73c9ecab15794084a70330ae053f671cd356138ace3

  • /data/data/com.iflytek.housekeep/databases/plugin.db-wal

    Filesize

    32KB

    MD5

    303ae12aa58263a866bcdc0a62accffb

    SHA1

    8759314b99fe9cb79e35d72e3b041667593f9c6d

    SHA256

    443451a89426510ce55dbbf4f92b0ad8fa71003764210527ae46fadb2ad3be7d

    SHA512

    5743dc8e59fcc94028b65b96026c41c69ba5e73ec9b0c2e58973723a01109144896c4042a3df1794df37d99687cf16e3e72b05608bfb30e309d5ff0ccfb84f2c

  • /data/data/com.iflytek.housekeep/databases/xUtils.db-journal

    Filesize

    512B

    MD5

    7f86fb9130e6a4a3d316f5bd0acdb851

    SHA1

    61c88d0a5a2bbc3a8ab76cfddc7763b02b887092

    SHA256

    61ba86a468d80d52ebaadb32f210860a9ee01ef5f45662983b6162d5c060aac1

    SHA512

    8623a26cbcc9558499682dd67970f214ae504d3a56cace927b58f988cf6c89f3101959a94f2d21cdb60b208dccba85f20bdb9aeed18d2698df8d177d6607c068

  • /data/data/com.iflytek.housekeep/databases/xUtils.db-wal

    Filesize

    20KB

    MD5

    e8de0e8433f2731f4667e5c233257596

    SHA1

    8c5358af15358516bbc843f965631a2a8369278f

    SHA256

    7d72bbff6fc28211b8acf54634a2ea7b3b5482d7657cd1bfbcf443a004ac3e3c

    SHA512

    d9340823616090fa99edd29a60f8487d19e00c95298f8f7e65993e32a8fe37731d3ea6fad0394f29b8a1b8bb2ef5887ce6258f68418c4044101c206726a9dab4