Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    23s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    03/02/2024, 10:17

General

  • Target

    Yellow-app-release.apk

  • Size

    10.8MB

  • MD5

    27317e8a5d860ca1f76c2692d1f0a7a5

  • SHA1

    e0cf8c4f6c36df72a5a105b02051894a406e7c6f

  • SHA256

    892cc593ffefa01a1f597cdd248d708bfd13768890295414a9a55e37938a4464

  • SHA512

    a7eadf8ece7b80bd8a03d0f419604ed46e86aff03fa7951cd4e85e587a925250f01944aa48f7314a0a331e53845a87b11bc8c9cfa47e4540e0911fc7e89fa20b

  • SSDEEP

    196608:ShGSO9oeBwHVceul4YrLYG28HUNIaTYu/y1LHqweT8uyOeAO:ShVmoRcfGgLY/Xi+gm5T8Hd

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.test3f.video
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4591

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.test3f.video/databases/supersonic_sdk.db

    Filesize

    16KB

    MD5

    1c6a248544a7da0c2af38c326222be21

    SHA1

    5d1d0875b241d1db543df53216a5e447cd49d0b6

    SHA256

    85758e10d3ebe59fd3a8a556f46a1c0624745d3b47cde06a5bfcb917f0d212e9

    SHA512

    f569409410bae0921a5dc38dbbf0aece22bbef7c5204d0b4c4abe8baab2af070d69c03e38d77cedbd46a19d902f8014c618d41abf3b95d0349e53599ba2ac17b

  • /data/data/com.test3f.video/databases/supersonic_sdk.db

    Filesize

    16KB

    MD5

    62865a384807b58830d6b3c4d49f8d7f

    SHA1

    8e6bc3c446d92b3da5998711c2b7591a40f35601

    SHA256

    1644916edcd575fb17a1621671e97a480144663ea359683dc073754e07d382f4

    SHA512

    ad0912f101f4184a61e14f8af7d837d68ada766f0af5c727a12c70c59aba555fb4b8f8d663ac78a3ce8066c5cc57b4e9c8c50ab74c9dd13c6e1194936c5eaf33

  • /data/data/com.test3f.video/databases/supersonic_sdk.db-journal

    Filesize

    8KB

    MD5

    994f7ba42dba405fb86596abaa8c14c0

    SHA1

    0663efb375785f0b97e8b2409cdd2c295b2511e8

    SHA256

    bf63d546eeed69f0a92ca673bb6191b5828bb406c7fe5e980462a5fc92d7e738

    SHA512

    08a7dd7bf4eb6848e1c3136977d7770c834c7a8ce5f73938b2124a2c449a5d79b516aaab7de8ea0fbde38ad4607ecdc3af4fdfccb6616264aaad22b9df190c87

  • /data/data/com.test3f.video/databases/supersonic_sdk.db-journal

    Filesize

    8KB

    MD5

    a3821d273214652abbf6fc2bcb6d748d

    SHA1

    ef5b7ea93cb59346921e47dcf3074c7de635feb2

    SHA256

    2e1a00046d22ae239cce1ee3976076a8dda84a3d7cc32525d8a6f640fc81973d

    SHA512

    58cb850f683c04fc8d056cacfd0a9acc0f8eb6d9daca9ee5b1cf21905296a0fd089c30e91bdba1042fd0270e77cda7d8ef4cf66d591f32a620d56660e89efc17

  • /data/data/com.test3f.video/databases/supersonic_sdk.db-journal

    Filesize

    8KB

    MD5

    61e2034064646fdd47face11dec9283b

    SHA1

    fe6b03f8d7c4a4988480e5980863e803a168d7ed

    SHA256

    4c7e5d7c9d2e23762df40ffe876348cc4b9e392831e4b98102312b38ce64f4ef

    SHA512

    047999274d234e0581734d12063a4cd1e1b281e940e0d7f40c767a141d6e68b2b943aa74a35cd3604b6ae6d7c3c0d841c38d6e532681ba815c86898b7db854e2

  • /data/data/com.test3f.video/databases/supersonic_sdk.db-journal

    Filesize

    8KB

    MD5

    4cbe04399167ff8a107fa33eb4f8c253

    SHA1

    4399ba9135be55fe9264d5c8398dfe2d5628c8cc

    SHA256

    3c591a1d83f0d10a797ac1c66e9d9fe2f14620f4b6e89b13a4191c2d1f2c168e

    SHA512

    b5b54b2980529af18d7754286f1be77d3404e8014fbdd77fbb119eccfe1ec524c309878dd21e2f17f56f2de23fff4ff6dfacca4ad789259d607775cd7679f533

  • /data/data/com.test3f.video/databases/supersonic_sdk.db-journal

    Filesize

    512B

    MD5

    2d91ba7feff89036c0414e48dee2994f

    SHA1

    54bfb2979d0a3191a5c9457d87af5ddffce1540e

    SHA256

    84650fecad79e98a7a7f95fa24ac1cd7e940089d02c6249294788b4fe8d73b12

    SHA512

    a2d1d9335cc53db2da1454b750632faf9b4fcded83ee66e6a5ffb50ceee25a545db64a0212aef72e24ce90cc28b37aa7749d1ce5d1f236ee55301f10bec9f0df

  • /data/data/com.test3f.video/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/data/com.test3f.video/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    dd7be6ed02a16b7274b7e22d3e5d67e8

    SHA1

    b13f2e224471e83b2a737bd45614325dd440f6bf

    SHA256

    679d78c78e66f7fd58abb091d683645c5500bad64a830185ecc2c5a2709c7c48

    SHA512

    6cc67dd0ea03f5db2de695f00d54d5ee410dafaf9c7e4edf043daf2c2f4093246afaf9ada6e0de623063fc6cc244d59f585178dcf2ed21c4e5ff44c72ba661b7

  • /data/data/com.test3f.video/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    a7a5b0251dbfc880c348491c51e8a603

    SHA1

    6f90ed8a5424b0655279bad9685a9cc9164ae28e

    SHA256

    1ad4980ffed96b280ae30d1d362b0a1f90b724bfcce7e8605aa7a625fe771f24

    SHA512

    c248518f3301607f2036a4b4c50aebddf6f6470cb5d7ffd5db5552016db7bc96e0fc8af24c984f421f40294a54a7df0a3b9e98ebbe8e5b76eee1df7b4c516052

  • /data/data/com.test3f.video/no_backup/androidx.work.workdb-wal

    Filesize

    112KB

    MD5

    ce040ece392c8ed55dbe720355f47b74

    SHA1

    e33e2f606b5346401f0239b26ab8012e2b2f74a8

    SHA256

    c3a5682bcbcf410aac27512d9a39f5e16f84091b207193e8f9f26efe6464b1f0

    SHA512

    1d7a651e863be0620ffcf6e4812553fade6126711a386e142e4637b45f46072d89083b43dd53be003f7cd8678bae253704bc2e6ae56f53c828beca950c36a444

  • /data/data/com.test3f.video/oat/x86_64/[email protected]

    Filesize

    462B

    MD5

    51edd19ababdcde28f420f7a75e941dd

    SHA1

    d15451af555dd0530323113670eba14f1eb0609f

    SHA256

    2fecd4a66a7e33e6406222b1cf3babb90630c4f1ceb5da99a2eca8184bb18dad

    SHA512

    96feef7ed819191e434c99171cbd8d9f2522a5130102ef8e6de0442ed6f28e0d40f666be8fe6fb91ce52870d017af62f322ea70f6e06d4738a4b40c3942193f2

  • /data/user/0/com.test3f.video/[email protected]

    Filesize

    3.1MB

    MD5

    7a1ef0317c0ec7ce434899af1a537aa7

    SHA1

    905084f065b9c35ef15f04657bd6c560ee42d50a

    SHA256

    5b6d9d6948dd0fb84712c2f6535593b8bc12b7ca152ccef7d6601c0f040b6deb

    SHA512

    5642a88425742400607474d449c61bd10a6d608a970d96028899a3a3960428a3b5b50386e29e097285a706b6aa47d9b32f5a86b3d40d030f0f52f70aaf2dc4aa