Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    154331s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    14/01/2024, 18:18

General

  • Target

    5b85d6e397f02adfc2242786f3d7ea9f.apk

  • Size

    26.1MB

  • MD5

    5b85d6e397f02adfc2242786f3d7ea9f

  • SHA1

    50c56b39e3d0bf3835951f3319ba62544d3f9441

  • SHA256

    9fe7a9fbe335ba8125869dd59d6ef1a3de4a5327ab6f1dd69d8eee70880164e0

  • SHA512

    bf720760ced54a6fb48bc04d132a601911c71e41bdcd79854992decf44af61eb0801d4390ac7fd61cc0475fc85d15a722f2f3f37b0412d8b29da53795ad5b333

  • SSDEEP

    393216:B5IL2/+Oj1AYBYGESRtpnZZoDlR5VpJCdqyf3pwCxWlCSXNaD3CtBjNwFdZwD1zQ:Bb9XpEQpZqDbxulHmCWO3CLKwDR5cmy

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.lhzyyj.yszp
    1⤵
    • Loads dropped Dex/Jar
    PID:4317

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.lhzyyj.yszp/[email protected]

    Filesize

    6.4MB

    MD5

    a0c486750971990f1892ebeabe9b6e91

    SHA1

    05b43a011bbcdadf1ddd3e3b320d5dc16b457435

    SHA256

    bdc35e26a0fd8eb3fa5d27cb00cb2b2c4af08480886c4943fa1c684bebad1766

    SHA512

    5abc2bdcff99ac419e5f17e889827980e5945d5a30e370c5273abac958a97d144258556a5e9c353918547aaea3a8a7ec5ab52eae0f9f3e9869526f89fb7bc68b

  • /data/user/0/com.lhzyyj.yszp/[email protected]!classes2.dex

    Filesize

    6.6MB

    MD5

    46cf469fa137d2686a45e763de44702d

    SHA1

    5cca94109e0328e5f966864f15b26db102611112

    SHA256

    9ab71fbf06edac6b1c471882d4182cebaef3257e0142a78f0ae0f27de1ea1e90

    SHA512

    27520de70b5d96455f2ebaec038e0dea3a0f8a466d4b5b6a3cdf09ce65d5dfc5bd2ee90dbeb3827ffb2521432ca8d49fcf35224523fe980447c5b9d2f1438b7c

  • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db

    Filesize

    12KB

    MD5

    edb655088d1ed9f33f9d0d499b7a3ef5

    SHA1

    565c4f4e43179dbfc285cd6331dc8ac75a901af8

    SHA256

    bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9

    SHA512

    98cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599

  • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db-journal

    Filesize

    512B

    MD5

    e9749a10449b5711b65975fe037689eb

    SHA1

    13e2960fae0d06cec81087721cf56a348dfb823a

    SHA256

    d0e370e869393cc2deb386f743b619fdb16de46184499a6ab382c35227e85f95

    SHA512

    731864eace779795a7094fcdc4d872a30a239d2f0ffd0e1d001f7f72be317016bb2eb9b4c40fa3c3e1ee6845559cfd58e1b579c2e9ccff48c6fca237894a8b47

  • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    f3800f4b9353301400c8dec134890bbf

    SHA1

    85cc8f3d760967fec8861bdabd390feaa951f6a6

    SHA256

    b793657e202e262aee9c1e27b28d6d7f61719d9898491f59e61e13cfd40f5fbd

    SHA512

    24f3a32a466e2059cb11fddfa19a45900b27e608b71fc702f42df31f7cce990fe59b1ba001bb5cba83b9cee4af00b3e707b70b1f8075d1dd1810200bc544ff95

  • /data/user/0/com.lhzyyj.yszp/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    d1d4181d3381522b808de6f969d26933

    SHA1

    d512a3b4d735f7a7911d64c12ff187a59e34c8a5

    SHA256

    215e3339fb08d3a9822adbdfa031470f58d41a66ec8b37e56036a9e024623bb0

    SHA512

    b3e24513977024e89a8c88783079f0a44605a38342f606d3ebf015fb5bbf7ec60d6e56eb1bd09eee84978f4c48bcc5aa90f5e117b543990283a24d07f902fc0e

  • /data/user/0/com.lhzyyj.yszp/files/.jglogs/.jg.di

    Filesize

    348B

    MD5

    f1d5ddab5f1dfce5dde23a817314e356

    SHA1

    6ca62b2c5bf1fbb088ecb9971af27af6a4e40fb0

    SHA256

    0c769673f3fbb71deaf6a3b4ff80124c7eb05dfd035509d0ffb8f5b16238bc33

    SHA512

    9ae08fd17103b588f141e7418c1b9292b49e911ec28d36adf564063262ae1b39a9e3d54bf806d77b8a140264e286936e4f486b49f79a239a2a35ecf13b41a2d9

  • /data/user/0/com.lhzyyj.yszp/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    71ea14bc7cffe73b44858631f9f99dca

    SHA1

    e4dc4a334466fe47bb3a0864e33cce9ba34b49e0

    SHA256

    73e0b4d63f11d099846ed367b072c698b3ab908899f5c104009e6021a0409440

    SHA512

    071c496baa400229ecbeef3968f9d1b13a71f6fd5b9741dc1e211cc04c7f52f0798442ef40b3d7622106172fee9d04d4aa071fc7ae92e8f2c1a45078840543f4

  • /data/user/0/com.lhzyyj.yszp/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    ec0c62ffafbb5dea01f79ca8ec159482

    SHA1

    707e9b84e51067b195294b7b0c12b01c6dbaa9d4

    SHA256

    027134797ded0618a996c3958de2d7f56286203cfbeeae4c7e34e68b265ccd23

    SHA512

    e284d48552e2c43bcf842498983e4d5b1079831b3a00655694da93a20bae9feabc1b4eeb2ba4df4b368e426dff24e869f262a6be2151659bada6acd3efd843b1

  • /data/user/0/com.lhzyyj.yszp/files/.jiagu.lock

    Filesize

    27B

    MD5

    9cb791d0ce99854bc06f6088d5795963

    SHA1

    16cfe7e287063d80885c1e25c44ccc889af0ba02

    SHA256

    07259c61eb616ddcd25a193f4e3de682a866e4f099d67ab8644a3021080c6a45

    SHA512

    62220bc0e546b58a2037b88b8275ff3679f24d7493b2160a15056f293a76b130308142325f75c4e6782a9b89af002dd195f41ff0f1328e59fafb536f4e5210a9

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    1f631d15cdc9aa1189e1fa7c2d4d08fd

    SHA1

    4fce50a5960ba743a743bb3799cc623aefeac09e

    SHA256

    79efe09a9b3d47dc7b9005c0b9191be58b8515a13ae276dc624b8aa38cafb0f3

    SHA512

    061c2d3a362b5d4f803bd5f92a18f51fc2f68b67d3e3088910ab9f55d57dea31bc15f30ab203e7012962a89e4b8007bebe75b28f19e3db0a8e29861080d4fb7f

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    a0c1d6a331f7c92a25bc1236e1350475

    SHA1

    6acddd6c47e04e69b8e92799b7f00f9ec7c7e0e3

    SHA256

    66549307f27d4c7b31bef309dee0fd3940230656e3691b6d9113da01dfb8c02f

    SHA512

    0d18f8ef56c63135ba4648994fb2e636806644c8a395af177c36487eead081788b23fb03cb6d5046c58aa4bf5fadf47cd5f977fe165623a09987ffb2487b3a92