Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3307761s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    30/12/2023, 08:30

General

  • Target

    137418fef61707130a7ad8fcbd2a04fa.apk

  • Size

    24.8MB

  • MD5

    137418fef61707130a7ad8fcbd2a04fa

  • SHA1

    86ee2ec089d66c909c21be01bf7af8edc3854c3e

  • SHA256

    4571c6a005632a83e2e38de26612b79cdf46d4ebd9be2866ea072f5267f63b8a

  • SHA512

    990db59932762ece9c2450e97696cd4af7e035aa1374aba3072867503ad1e9edcecef36da2629b3d83ef6d52552109076e32c2878707a76ddf1ec5567f5ad139

  • SSDEEP

    786432:jnHZ1g9XgVNTeMFkjtmN5TU60Js0XgM1YNcS3u3f0JCdJr:zZ6pgHHFkjtmrA6iDXhNZfimh

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cn.wlantv.kznk
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4602

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/cn.wlantv.kznk/mix.dex

    Filesize

    292B

    MD5

    63f77f99bd2c2b772a479923bde11974

    SHA1

    c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

    SHA256

    4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

    SHA512

    3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c

  • /data/user/0/cn.wlantv.kznk/app_bugly/tomb_1704114805658.txt

    Filesize

    135B

    MD5

    8ac740f12cfdb51ee9288e9232ab9327

    SHA1

    e3004a21a6e899f298740162b308f388218a7a01

    SHA256

    9e6dc0ab27a47d28b954e336af71aaba9140bbe0ffbfc539e534f44a5657ba23

    SHA512

    ae48f036999bb24165667f64f9500b22f7a0f4d4adbada9dc5918b26c74b431b4ee7cb4e5dd842dd99bcd0bbce11aba819fd29cbaea3af47934e61ae3e680781

  • /data/user/0/cn.wlantv.kznk/databases/bugly_db_legu

    Filesize

    60KB

    MD5

    3c5ceaa908b2718a5860e425a7f4e1b5

    SHA1

    8175bd1407ea62c4501262122bbcca115e907777

    SHA256

    383db01318648f05efd49de45a8a04691b26a2699a53d56eb66dd64274395bbb

    SHA512

    cadbf5866baacc2715145ce6029fc41f704ee41619d3cbeb6c361decac49a7af7cdf0b4f4de80cbc70f08a5a120645bbe08731a2f622cdd07fb3b3eeb5ee9ab7

  • /data/user/0/cn.wlantv.kznk/databases/bugly_db_legu-journal

    Filesize

    12KB

    MD5

    091903b66cb5c29d74f9d650edb74b9f

    SHA1

    037e6b0c6abca25a44bc75a05020e9f493b4842a

    SHA256

    a76e1b8aae7d2654e9ab532dac08d72159bf7ac8c437664b00d52d241aeb750d

    SHA512

    74fadfdca79e9c488d12f7c8d51aae718fab59288e7f5145d756595515f27587ef4fc177067ae08db81df869824d137831ffefea54453fab729aa55b58eaf0bf

  • /data/user/0/cn.wlantv.kznk/databases/bugly_db_legu-journal

    Filesize

    512B

    MD5

    8ac716931db6d0cc6b74350dcabec897

    SHA1

    aa4b307b7db4d448bd95a778059dc8f1989dc10d

    SHA256

    a62849a685b6c22093aab31c9118e90b25b226eb7c44f96016a2b683ecd9651d

    SHA512

    703ad7bfca13bcc944812baaf36a1197b2922003d345e5094dbd5ad7ece9b25cbc583f4474786f39208ef1be0c74586362faced7e8560cd5217ecf028a8779db

  • /data/user/0/cn.wlantv.kznk/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    6ae61c3ed6a68851223b206fc7a15482

    SHA1

    41e510d9840307dc00d5dae5a17197e5e09a19cc

    SHA256

    2549ac127e158c24443a3fb7e98991ca70942427ee27736ff1af3a04352fa64c

    SHA512

    33e18ec970ab1d30af09c174deb096f9a1848abd5be9a5d10d8eea82e6fb034329821b3ddc7e83d33b58b98b1fedfa071875def1f73fbc4e84d4f682ec3cbb17

  • /data/user/0/cn.wlantv.kznk/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    26de5ca4ea366e0add1a844bf21e902d

    SHA1

    c1cecb82a234d382092f707086371da5180610bb

    SHA256

    9f8d15c303997c20d09d1aa6fbbbbeeef0e9f0f78ae96877b4b853c23430edbb

    SHA512

    6ec2149bae5e556b0b82b791b78af79f2a587937cc53c3fc6dedf016e8280736d976a4ab53cc80ab331a8765789a553ae01568c49890a9244b1d38b767a003f2

  • /data/user/0/cn.wlantv.kznk/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    cf8c9d5e148c9e46427a0d88b79226c9

    SHA1

    893a526ebce2855c9535c09de7127870e26fddb0

    SHA256

    fe863319b92b5c188d28e6449f21eaa5a50424fe6177e252722db20f10da5742

    SHA512

    f16afd04ca81efa6232c9d029b65718f040ffa29ab4ecb68a5972850e5d6bda9b0682a0b0939dc4ca0f6e352d821c431deb0cf347f0f1a540e46f3a61a4aa75c

  • /data/user/0/cn.wlantv.kznk/databases/bugly_db_legu-journal

    Filesize

    12KB

    MD5

    a34e3d3a166e35f02aaba253c16ecf38

    SHA1

    99c930325f6532082f1e3217b15d5004fea19a8a

    SHA256

    2febb8e85fe3eb32381a5f291831092c781d683a5e1baf27daa56beceb317551

    SHA512

    8490941fab49b91b914dd20f6a735f887e0e3c2f9540373dd9db21fc5a1e14be212b828178ab4e8e520d376de7f8f05bbf3fdf765fc3aee48b041eae8a5a0e77