Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3587926s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    31/12/2023, 12:56

General

  • Target

    36f2e02e82806d101b8c486a953e55e4.apk

  • Size

    5.9MB

  • MD5

    36f2e02e82806d101b8c486a953e55e4

  • SHA1

    9a6d78b0a572efe1fa750aa63715b1495d2e63f0

  • SHA256

    ac4709532b6e916f609c4cb2893fe14990009573a87447b449ecbfba9218352f

  • SHA512

    1e81c255caf7fc92f771166c92cc1d72fcef861cd0cb8c210b7ad1a62205d73933fb51e510ce67f49efb499a130ab44dae2a709820e7b842c7630d2f5880d5d7

  • SSDEEP

    98304:HsevfgeVrVF8xE04AIb80R2fyDrV8Mwak5GuyOhIszz5Tl2pnj/EtDBOj0q:MevfgGkEbZb8mz16osH55+DEtDBy

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.guangzhi.weijianzhi
    1⤵
      PID:4486

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.guangzhi.weijianzhi/databases/crashannals.db

      Filesize

      20KB

      MD5

      b6d6410653c0d3a9e07151a6e2fbaf41

      SHA1

      ec986f26ad897acace4cee77eb0d7059f4400864

      SHA256

      7d65f02102de4d8525eb1df726710fb08e06508dcd2c32601c58c13e53c85198

      SHA512

      92af642e2517cd2c50c3e69537772ca83ca36f36e6b8ce98329801edb622888fec3182bddec1cd268d0489a1df22d707daba3d0122372e85e4cb77bb54bbbbc7

    • /data/data/com.guangzhi.weijianzhi/databases/crashannals.db-journal

      Filesize

      512B

      MD5

      e662e162a906f830018dd58798bb8884

      SHA1

      40af5e9297ce299e4d0c0325068bb07b856bb9c3

      SHA256

      5015d1270a63d21efe243d6b6ad06d166bc7f1483893046578800c8e3bba8a77

      SHA512

      0dbcac739fc5f1cf777f1e3360d6083aa3e783f6b05c1a864bc546feb6eb997255292dc218baa032ec5d5f8b6661bfcc54109a6a51a39ebaa127f1cce6f95ae7

    • /data/data/com.guangzhi.weijianzhi/databases/crashannals.db-wal

      Filesize

      32KB

      MD5

      b1a906907e2996cf8e255989af9e9910

      SHA1

      c76349aa2e1122ce0e803a70bed38012da2e4a56

      SHA256

      1fa625b690303614768551e02fbcd571600184f7d96168e060b89f3d0937e44e

      SHA512

      ab38b43718a89fc4fae1f26925c6f3c276b4578dc2b257d52afad7e64d94ee877cf63fc35dffc68a80043a9467de65f5d4dff669c424943200fcb230ee968f6c

    • /data/data/com.guangzhi.weijianzhi/databases/jpush_local_notification.db-journal

      Filesize

      512B

      MD5

      0854d65609802ae2697697b0bde3c2c7

      SHA1

      b5cddd644d0536a6b039b978171ad1a92e2bf73e

      SHA256

      e35028f16e9bbdca0dc38c99f65098d2f53b11eaa38f3129e8e825cd468cf1b8

      SHA512

      654cd316355e9bd98dcb6eb0c8710fd0e8cd83ba1db635ffc1d47342e595c72b954a84e748149c4c71ff7a00b531e9534adca0841443e4f99becc8aef94f40a6

    • /data/data/com.guangzhi.weijianzhi/databases/jpush_local_notification.db-wal

      Filesize

      32KB

      MD5

      efe655993066e65e9e7b6e73f7b4bb11

      SHA1

      0196ca9e19c05dbef37092868ac5eecda9b7d72f

      SHA256

      d31846f049af5977395f6da96590641e3eb2549a6e5c7be8b3728779d8cf609b

      SHA512

      6bd74fe07e89e5f4434361ae3d22332f3833e2f61697c6196a7f539b4b97e1849d1c75ed65c55402633891ff9aac5e64c013c23a528551e78ed04ed2d9ae1030

    • /data/data/com.guangzhi.weijianzhi/databases/rep.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.guangzhi.weijianzhi/databases/rep.db-journal

      Filesize

      512B

      MD5

      227fc484e459123ff73d53f73a70d423

      SHA1

      2d8e92947db2f2cedf83a6d9997c28acc02f9046

      SHA256

      825f19b965417371a523939cff97030eff46d6c1ba75437ba67ce92ea2d1f80c

      SHA512

      a0122cd4b0a58f3e886ced77ac88f47ecda5a5e271b8102f209c2eb49e9d812f4bf459a8bac71bc4b1ca3d7b303951105db9ae64b07974c13001f88a3d7863cf

    • /data/data/com.guangzhi.weijianzhi/databases/rep.db-wal

      Filesize

      36KB

      MD5

      55fb5c33b67b44c34e2bcb1f15e8d678

      SHA1

      02b226f0f9ecd045af2b8f46d541d4fe29176720

      SHA256

      b424a52dd66d5bcee78e86da39797451eba76ba3c3d5e29c760bff3f5f74c7ef

      SHA512

      daa7ba4831f3da3d5340f86ee8e8b9eb1e5445380669cab5bc738e3532b16bdd38477ce35ef2456070c7bf82e198a7b1a0963bc7be03b4072959b68b5da2f4b7

    • /data/data/com.guangzhi.weijianzhi/databases/settings.db

      Filesize

      20KB

      MD5

      779f3fa12f27e0e7ab6afd9fc6a4d12c

      SHA1

      85ba2fb93dc145eeed1904600ab3112bbf1606d8

      SHA256

      a89d02a6d03f5c23942cfc0f81bb2e198b9614937f31313a2693276a53fabca3

      SHA512

      88e82836f70ead35e64a8b7c744bb455517326e69b7404ffc7cd16ad23b7feb73246025fa6f7016e90553d5c0e9a333a20dcca0b6a1e49d7eedbcc37d3492976

    • /data/data/com.guangzhi.weijianzhi/databases/settings.db-journal

      Filesize

      512B

      MD5

      750bacf42a76d7477cae505b2d822227

      SHA1

      a9c2805b5a9e1e6f15785023835a59be0b098122

      SHA256

      1777e34c68862c8cc4edb11553659c54082d02cb58d13e0afe5c3a5c6dce8b7f

      SHA512

      1086df6c88b1572bc1dec3065fef2355302ce61c9dafd8a36dc3a82e131df6c4eb76d3d99cbf281ccdeb1c89e9b5b5df6297baa20538a509909bea1fbbe0e27b

    • /data/data/com.guangzhi.weijianzhi/databases/settings.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.guangzhi.weijianzhi/databases/settings.db-wal

      Filesize

      32KB

      MD5

      2c65b8c796751557c8923df27f077d8c

      SHA1

      89d4a551e7c64baa7f9fa88762e60308a71df34a

      SHA256

      209c3f90831680d0d09f7e69079b7c2b90dc287f3d5346b878b041f7a4d9c015

      SHA512

      5542f8c8363258fce76c4d2dc46b70085a0a287cba506f5a045075c63563d5756de7bbce0ff4334e4c49491f87c24480f14177a9af666d4584b8941bf7764935

    • /data/data/com.guangzhi.weijianzhi/files/.imprint

      Filesize

      838B

      MD5

      5d349e2be5c7dc078190815fad24b363

      SHA1

      09aae53f520c93571f10638426d4615b473f0879

      SHA256

      2a0baec96383e863fbd563e07961385f520953b8c9c9ee72a9097784ee6c15e2

      SHA512

      fd63c693454a5c79ab01f5dc4681ee6e9a83710d15edaa8d65746eeb9415336a64e0921a1259deb648881a8938ccef97d917e3e709ad1a35bb94d8d57fb730ae

    • /data/data/com.guangzhi.weijianzhi/files/jpush_stat_cache.json

      Filesize

      189B

      MD5

      79709283a132770c671681933a1e5fec

      SHA1

      55a39686d15e24ddb613c67f51817ee3e95edeb4

      SHA256

      f602cdcd5a417ccc0f2dc3425a9cc1fcd8bc84149619312848d19fa9bbe677af

      SHA512

      164ef0aa34fe19f2d74632c40dbd7e56b18c55849066efe08daafd7726d5aee2cca4915c8f69b72363660c92300709558f32b114448ebe032d408139117897b7

    • /data/data/com.guangzhi.weijianzhi/files/jpush_stat_cache_history.json

      Filesize

      158B

      MD5

      c367a6b3a4ce7a88a831a20cf0b81d56

      SHA1

      e7cd7342ea7343d16edc10b38abb5ac639965d3e

      SHA256

      165e015276f5af1f3ad6bb489f09106ba614eee53988fbaec40c294384fb86be

      SHA512

      f9f5de1bccde7de4bbc76c89a1038ace39d7ac2a52edfe2e7faee4fea8ad5091a568e73f2702bfc07dfe5f33be507db0b24f2fed74bd720d69a9800e1add5f4a

    • /data/data/com.guangzhi.weijianzhi/files/umeng_it.cache

      Filesize

      211B

      MD5

      a90e0432e08191eec548c7f248d7a6b2

      SHA1

      8273fbbd5db86f9522e732f53d3bce530b2250f4

      SHA256

      0904f84a818c1fd71849fdbf319f6baed1c4aee5a4b92ec4d3fd05f436db4806

      SHA512

      f4e1cc4955ebb382c46306a3764e45c8fed1fbb161801aef3836b99237ef0548a8883aa3b7f036bf4fe2a767115cf0c9d3935de21fc068a10651049ce13ec8b9

    • /data/data/com.guangzhi.weijianzhi/files/umeng_it.cache

      Filesize

      108B

      MD5

      52186b28b40d8e4472f1894a8dca1a3f

      SHA1

      f287a221df27c9b396a97975aa530e602866899b

      SHA256

      64c7152ec719874c95543a2fc84008096ef426b18375bfc2b4c14cae5c130f17

      SHA512

      f7988cf2055151d8783a9fae8a2211879ef3d2c13893616477d70cf888e4c6007b9872bd2959a442665a253acb674ca7c8e0e2f53b702bab58eb44df3c85f9ce

    • /storage/emulated/0/data/.push_deviceid

      Filesize

      32B

      MD5

      d5bce58ff27d487bf2611acf487954ee

      SHA1

      11ab26d084ec7535fa670987b5c4382ea7062958

      SHA256

      89e33555b1c11a3da258bd21dc8c893728b6955c4127354bcb53a5e0898c4946

      SHA512

      0da8e8780bd63a83fffe65556e7a8890c04b8315cbc32e4a5afd4e98ada79b54a9740aaf9b8550a57e5ee5942481f08b3da4b7ebb901fe6df219fe5f0d8126f6