Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3184781s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    30/12/2023, 06:16

General

  • Target

    10d91b19aa2f687a04b824dbd44d32da.apk

  • Size

    10.8MB

  • MD5

    10d91b19aa2f687a04b824dbd44d32da

  • SHA1

    dc74227a432c80e93f9f167dfa2e046023e76092

  • SHA256

    e02c2085bd4d822c36f9afd240b363c4c5b10693bb434f6a83f0e63c9ba4e81b

  • SHA512

    e04647be92d53fde0a2b900fb3499f610f91efce3df4a4b52f38515890a1c81768eeb2900643f6d27e52e47a0ba1c7b95ae3d09593dbf68844bb461b94d77d37

  • SSDEEP

    196608:JdOlIC0Vl1BfFgbkZRB1n4SU6WJYS8xhTRWB/PfYbkdGFrn+xVsF:XOlIvVdtgbkZRnn4SM2hTMB3AkdIraW

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • bqxrjp.nbhm.qbxf.cmter
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4256
    • getprop ro.product.cpu.abi
      2⤵
        PID:4316

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/bqxrjp.nbhm.qbxf.cmter/app_tbs/core_private/download_upload

      Filesize

      56B

      MD5

      5c7722bd94ca076376fa7a7f230a3d7e

      SHA1

      3dd6db64f354b2a5b939a82748777d5d2e473752

      SHA256

      217ffb4ac5c1c1bb6043fbcff0ffc18c4df633c024eb7c4c5fc80f6c9f2c0a7d

      SHA512

      f614c816f62d4818dc65d21039dc3a6856506ce339a61ca00d1337f3733d81a27e46aaf0c6f3d1abed9ab48ea61043da6550582a0c997f4862319121e7450956

    • /data/data/bqxrjp.nbhm.qbxf.cmter/app_tbs/core_private/download_upload

      Filesize

      84B

      MD5

      994d54d7ad7dc24e0f5a20b6bfec5315

      SHA1

      6f0cd77e33832aa6943d02c0cd99cc340ef7d190

      SHA256

      9098b67a234e4c0dca67554107708779b33403feb26e11d76c62faba38a75f66

      SHA512

      d93655a4a5f517d5e31a8a75626eb6ec1dcaea763dc8f09f0a05fae0dac65636c38684d72bfbecec58327b2a98b2c567bcff3c4e6e0aa1f5ccb3b1eef8d37b7a

    • /data/data/bqxrjp.nbhm.qbxf.cmter/app_tbs/core_private/download_upload

      Filesize

      84B

      MD5

      192a9a094780abb5482244bfb69678e8

      SHA1

      c1a3242a867ebb989739e8801d65463e4f53c12f

      SHA256

      4594fb4804ee63297869cf3c48760703f5cac1eb3cc9c85bfe63af11a6e6b60a

      SHA512

      97a38965f36cf303206aa3081f1fdecfc3400473bf57cf08c73adfab5189ea4078cfe154d95ba797643a4476050057a01d791c91afa7032a72ad11bf7e3eb845

    • /data/data/bqxrjp.nbhm.qbxf.cmter/app_tbs/core_private/download_upload

      Filesize

      56B

      MD5

      6583258851d2dd19ddc87f1ccea32eda

      SHA1

      bf027de10d6169a70587f063a40a2b6529fed7f9

      SHA256

      2c287bceaf08698d9b68a15bedee54bb77f6d041164ad44eddff42c6d4978b9b

      SHA512

      7e4e3aaff7caf85df28ba4877b3e2d6238fb139425ca8920d05cb0a77e813758fd6b46c05b71213d9b79ace9d998637cf7d0842c34e2ed11f4b711b2d76d8167

    • /data/data/bqxrjp.nbhm.qbxf.cmter/cache/zendesk/zendesk_media_cache/journal.tmp

      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    • /data/data/bqxrjp.nbhm.qbxf.cmter/cache/zendesk/zendesk_response_cache/journal.tmp

      Filesize

      36B

      MD5

      37e8e716e0e2f4a0b05cd9571d95b84d

      SHA1

      f8d068f6931707bddb8cd69f706f2224ad1fea3c

      SHA256

      7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

      SHA512

      e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

    • /storage/emulated/0/Android/data/bqxrjp.nbhm.qbxf.cmter/files/tbslog/tbslog.txt

      Filesize

      6KB

      MD5

      6bb2d46147636351af6a40883e9fa824

      SHA1

      c5933a8e694dcc0f9c058ebde0ea16ae11f58428

      SHA256

      2227ed66d69e2bb4d43231c851aed524ea29bda42d04744606a9b94e916c441b

      SHA512

      dd163a26bdf74d8568174387ca288308f6fc34eb31c954f95b2b973156762982926b5b1d47685490d8aae8eb8005595d65b0ca5a33e1b8589c9a22135f837278