Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    51s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    19/02/2024, 19:28

General

  • Target

    uptodown-com.activision.callofduty.warzone.apk

  • Size

    6.2MB

  • MD5

    3b918bcf21219ce96b3cd598259d58ec

  • SHA1

    ab852bb514cba45c4311af83d2b51627e87649b0

  • SHA256

    bd40c5bde39838fc593aee6560706c38178bc6765408cc88e676e942ba78df6c

  • SHA512

    3dc5aa1b20aa529be64c3d5715b1dbdecde400265a509ab9c34f4eded51491c5acacfb06e5c7b52077e67546a46111d9e1ab7e05e82526290bd83887de29b4db

  • SSDEEP

    98304:xzrMdaF3kRVY0rPGcnvTllA3GzfakGjOgCciqTnrXr/lPi:xzq/3GOTllAHE0/lPi

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.uptodown
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Acquires the wake lock
    PID:5078

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.uptodown/databases/Uptodown.db

    Filesize

    104KB

    MD5

    ed6d1e2c979a5b5219ceb48957f2a911

    SHA1

    cd124dfa63816404a60ee4bc0371907f80d165ae

    SHA256

    6ff2551b69672bf9d8e595aa79f718f73eb77d8ae7dff8fcd9e85ae3259ac67c

    SHA512

    af3de6f99e8a44ad4e9df6d3c993123988158b337ab085795d47c7df3a08c858391c344a0bc21f5b84112e343306260c277d94b02791cf8f351d4d6c8946aec5

  • /data/data/com.uptodown/databases/Uptodown.db-journal

    Filesize

    512B

    MD5

    f2bcb68849c6f99ceac4c2aec0b7cfa0

    SHA1

    698fa75e880389c66810e100cac7287445759200

    SHA256

    2f03eece532c50ead7b7a6876e942c6e2d06ebd9e1e120290187efeb4c0bc3ac

    SHA512

    fb339b4e6514355d48bf06a8828fbdccba68e42a8b3df1a2d06ee94ecf31ac5e005ddd4190e349643276150fc44375f34bb16810483efbafde569a33036009da

  • /data/data/com.uptodown/databases/Uptodown.db-journal

    Filesize

    8KB

    MD5

    90dccbac76c0bbf15b662cddbd8dbf72

    SHA1

    de70c8fe436d5d6b70fc656bc1984893e68dc1b5

    SHA256

    5cdf7808b7ba8622966766ca2ee516072484ba131ae9d8aed31f2ab8411cd7ac

    SHA512

    3e06fe106705100e2648d9a4c11361853e10e81ce448432c20f59f8fb6af590a9160047dfebe4cca744744aba3f175a5fac0eddd440f1206269d4316c3cc3427

  • /data/data/com.uptodown/databases/Uptodown.db-journal

    Filesize

    8KB

    MD5

    b448d4572331bf11c5b7f69283c5017a

    SHA1

    04ab5d8f6bdd4f8c6a63ab3c4fb76d5636d8c1de

    SHA256

    d4689528512008f96510cf9b2dc7983c000397be72b0f427e668fac229d3f5b0

    SHA512

    3532f5be78dba62b9e25713e7bb3a08d6a74534458045483896c82aec7db5fa3ae69172a1a74f9b50157ff29822e0ce477a23a8026c350005e44ecac5ad3d9b7

  • /data/data/com.uptodown/databases/Uptodown.db-journal

    Filesize

    12KB

    MD5

    6df54e21b8b0608da39c246edaf27b47

    SHA1

    51305be1b5b48b98050b23ff1fb15182eb361f19

    SHA256

    5150d33e69d4ae485889fca851970952bf6cf7f328f604485d39bc0959976d29

    SHA512

    009a13f29c9c4b711314227646d70903c78342d4a2eefadf3707e427a03e62e685ab094bf7addc3baf557e024a21722f1ac96c0b03acd712cafe355e8da428e7

  • /data/data/com.uptodown/databases/Uptodown.db-journal

    Filesize

    12KB

    MD5

    af8d31bc3ecfd3d032d0e3342979f0d4

    SHA1

    20a08d6eb63b800573cff6b0ec267809f79694b9

    SHA256

    adc40e43bc1e51a06c399ea1a3fb96fa3f8fd6f73109796d722e2afe49462474

    SHA512

    7c72c498c7be2a273b3d695c740d97b676872d4b6abd5dade2b47b5031e9eb183c8949eeeb733d594b2575c74267bc6fb7f4da966f82f422437539d090473854

  • /data/data/com.uptodown/databases/com.google.android.datatransport.events

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    182996fd2b931e93a261c1e02fcf270a

    SHA1

    c4a1ad6dfd1c0e9fdff8058f2f55521a9a9c7106

    SHA256

    0a32e846d85d14473974cc1c776257502c312d906b45320b6582b17ea1520aaf

    SHA512

    74308a67ffefb3a812117b190634cbd05811a347672776bbf813d437dc7445f80ac38f517e6d3c64273fbda70253998c51396dca09f8cc0743ba02d56868e355

  • /data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    ddadb2f305f9e9a2bfb1d0e634d20bd4

    SHA1

    1defa8888c040bb7fd51751ff8ec5794356fecfb

    SHA256

    338ce69122cacd569d185368cbf9feb4ea9a9fefef86d800548d811dc4d4bc66

    SHA512

    e2ed8dac16e829e72c69a39579655e22227f782e13b1eb09b1a49e832bca2242e03f7a3c30fc51ccdbb637fa6bbcc51f5e6baddb3e09e95acb0cb9947691ca3c

  • /data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    1f6af5947ad4af85f1b9b728edc030b2

    SHA1

    b4607fd7ca4810cbefe7054aa1c3f88eb7d91c9a

    SHA256

    3d2e121287a22e04174e93e367c54d8e98de740cd3c8afe4735120f7d13f73e0

    SHA512

    6973be3aa0751df02d35b6cb2e66ecbfc99c4d2a4bc91a21bc89e5dcf9e942596aa1490d219d3b1d6a80c1e7f1bc1492d300bf4d81383d3b19bdb82004bd3ccd

  • /data/data/com.uptodown/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e0730283e2abf3a9f317ee0ba30cb7c9

    SHA1

    4f2801e36a51dd7713dc37d3514f38f3be5cd403

    SHA256

    a7c933c000e3c10fab786aa8a0872b509cbce654f7a476717f6b6239270f59ad

    SHA512

    970c93aa03cc71ccc3a21de7ce2ad2b631e734c3bd56ee1cd3e103bf6876d347384c69fd6db9d8ab0f8b994fad9a4e54a57f13b4ad829331149a4db8a49d5f9e

  • /data/data/com.uptodown/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f14d2bf395e5bc966c4bc5b3ad5dfd68

    SHA1

    3b7a5a7598e0935bc9f044d538e568d2ca4d7cf0

    SHA256

    60b7a4983dfcd19920dbaa36d9822c83ff7fa45423a241653f6db94de75d3d36

    SHA512

    8b1439f1a4c38d1c9e87f7d3a44fbb1af6eb3686d9dad0aa65f15b3b940d9cb895fd6a25e96c0a3ed755d574fad98c566dafd3a6e8b15a9cd0e312a80acc0948

  • /data/data/com.uptodown/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    8f7b5a4a7a0394aef04ff193898ef0e6

    SHA1

    52e284566e9a3a1032297f7a4d0e6835b6a787a8

    SHA256

    5d66bb8a410b3b914353790e338300f48132d36e07d8ecb0aeac846790697795

    SHA512

    266d340e416bdb48ef5f900a6ade321db02b9548d0c11b0320f5349b5641647d3875bdf86078dd3dd4fa233ee0232eb5c5bf97ef6253be9e8f97a147fc48d732

  • /data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/com.crashlytics.settings.json

    Filesize

    708B

    MD5

    d02e2194ecc80721e65030089fd0050d

    SHA1

    9203e77deeaa8817d7ddc8c995c746befb6223e2

    SHA256

    5a3d0a339ae536f8d0abe31caf61a185eb31819010b92ba671f340599796c72e

    SHA512

    d54362ec27a7eba7c1da567731a81828ac38cc3ed058c669f33a976067edb43318c7412a83c408ecac53360b9ad9da43badf0035eecc2e72f747d35d1ce3412b

  • /data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC23010E000113D6C5011AC089E5/report

    Filesize

    786B

    MD5

    23457599488893bf615e868d89881414

    SHA1

    9dc0926c0c42c8463b8657b87fe961194039e3fa

    SHA256

    7535a14e751622a5e4bbc337eb491285f622d4b0d062fb60942e7c07f45bb57a

    SHA512

    9324fbe62c207f1597c018b5d4a5fea7d3a70e77f752577be5b4bc8d1f40b913ec1398c60e92244ba583bb67b12cbbad29008a645516ffc220b7ccd3615c24ee

  • /data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC23010E000113D6C5011AC089E5/userlog.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/com.uptodown/files/PersistedInstallation3658557274402513189tmp

    Filesize

    90B

    MD5

    9d74c774471f49cf55691ea53a617fc2

    SHA1

    5e76b9e9fe6f85570ec422feffaed155c7a7fd56

    SHA256

    2c03b0cdaaffb0dab20ae57929732b3fb47537c0f999c0831cd5bab68571ecdc

    SHA512

    76fee225e2ab2b0c05255ec71ce3b211aaac438a9246461838731e641211f8ba05c64df0590a551b9872726d730787e0b36f324eaf6adafb44b3db2f56e09cf1

  • /data/data/com.uptodown/files/PersistedInstallation7511804391480737286tmp

    Filesize

    570B

    MD5

    5e75f5d5ebceef22c4f924361c13f4c3

    SHA1

    292930125a60f1d544b5efeeed3b9ae8073bc9c1

    SHA256

    8bec0fb1a0a9f4c7f968ae73f746c6514bd35325c4e734d3f78992425fca38bb

    SHA512

    281b21ecefa3c4a5198050b671a5b0710bd9b74547598a01048fbc9bd2baa3f2d54559b89326ce71c8021a4847e073fd7775e4c8689bb5365d17c396fe489523

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    75B

    MD5

    944e6a5a08cb971370c65c06061f0ab4

    SHA1

    84d47725cc29bf167b782c702575bce4bf2ecc5b

    SHA256

    ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

    SHA512

    bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    121B

    MD5

    ffcbf87665a36fc21782400bd0537e79

    SHA1

    3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

    SHA256

    a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

    SHA512

    7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    163B

    MD5

    dcf7d6c1cfd5e7b56074e3001577c78b

    SHA1

    b8eba89aee9f6688ecda6675ef8ff4998da0b141

    SHA256

    ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

    SHA512

    42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    212B

    MD5

    3d2f15fadf69fc8d5e313a78954b7468

    SHA1

    6ae8f8f73f6313e3eae7456581432c54f9e86499

    SHA256

    4a12b110070587936cd18f8a44992bbd6ffe3d76e0efc1c7f7cab62d454cb687

    SHA512

    f19aa30b58a047d6a2d2897f57211bc948f3464fa01b36f066b259d6c32faaa13691e1e742a1a4024750f887758c579bda563837e6e0217728d6c6e3b39894d3

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    ef69682b0869b571a9a3581089c914a2

    SHA1

    2ede8e910424c0677ef0f4664d81e7309ec2b3e9

    SHA256

    7a8f771aec5b499cee02975bf27c1ccb4af17c007de4378c3b60d864a4719669

    SHA512

    761ff533a025b57301c13b9c9d5ddc772356d97a0ffcb921a23ad0c8c96d18e32f1bf57d136e08151780ec67eb6a9ec72c59bc5db91a677d2f4128bde3995475

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    f53f60fc43166d91064e42c1a2b67a2c

    SHA1

    bd844954d2ca507285811bb2a253d0dc3765debd

    SHA256

    2793b1a1a94441151f2ebe2111fff2a727c77e85b59555b550161b876d4f7a1b

    SHA512

    70373d7148276937b999619640e224b73fe168741bef66c989309079515d4bc6f02bd758081ff5b73735d26f80eefb454c88afc15e2b7c9adcc30cdecfa982ce

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-wal

    Filesize

    116KB

    MD5

    6b0628f1f45f45bfedd4b1babe1aee1d

    SHA1

    2c075073504fa4da5ce72b43eb9edb85617e8169

    SHA256

    9c02533b7b817cb602264ec3ec9db622979b2415b67e77a153301b42a24b9616

    SHA512

    ea6fcca86aef14399313b0e5b517c058169ae89f09d5db143145d9d8ed6d4b5e0f305c8d76a450e29d7dbfe196377f29ea1e332624043911f66556a47df666c0