Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

20/02/2024, 14:30

240220-rt43faab57 6

20/02/2024, 14:24

240220-rq7n6aaa85 6

Analysis

  • max time kernel
    70s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/02/2024, 14:30

General

  • Target

    Documents_Scanner-1.2.apk

  • Size

    26.8MB

  • MD5

    73a4f549c98dd1b49d9e53fedf752ffb

  • SHA1

    1c004abba4dc5aa93928f0066e2a26df90dae1b4

  • SHA256

    8f72a4e698f170d9e735f06f1e9c135d7d6494802b88b4d12cbc0278e6cc8e35

  • SHA512

    ef8c1b7136e9aa2c8eb2514d024c868f01f9a9e84393fbcd31a1dd38f2b488919be77d2a959b175262d10e5bd361bb4641a5bf79bda52bb6bfe81aad3e58cc53

  • SSDEEP

    393216:o+SlWq5QUW1fIVeKrsiinLjmJChJ3eEF7vqqEVPxtlMdnMJ+2QaruI4jfiqnXbcL:ol4qG1fIVeKbsmgns5ML8P8XXIL

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.scanner.dmirosnikov
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4261

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.scanner.dmirosnikov/app_sslcache/documents-scanner-485ab-default-rtdb.firebaseio.com.443

    Filesize

    8KB

    MD5

    272eb9fc4d677d75942b701fec5178fe

    SHA1

    649e09f587bbed441e2560fd7df8eea9b1c7cc24

    SHA256

    dbf498a464298dcbe44dd203135d1fc26d7ff366c320dd04fc80d9488647cf87

    SHA512

    0834eeebdc13f6e0d8a3e1e8e95952a33348d2be89b3ef8e67b0d2a0a841d1175467f430f48b99060aa4b156fa0f381e76899357740ad8cabc424b0b16333d7f

  • /data/data/com.scanner.dmirosnikov/cache/1624498498047.jar

    Filesize

    9KB

    MD5

    af1f7507b04b896dc31dc05d6ab5c0e9

    SHA1

    f8a8409a9bcb3e3163b0098e432f061ae1c300d8

    SHA256

    51dd5ff34a950c026bd39ba3b923c4c47126c097e844951ab1b71ea7c0ed824f

    SHA512

    14d9057dadb87ae71e9dab793092b551cd97e42bc6bdbdef57e93d676b7c8f918719e5b7b232ec55ecd0c4d10bb99e84f84b071d182e2bfe214aab7ca0fddaec

  • /data/data/com.scanner.dmirosnikov/databases/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.scanner.dmirosnikov/databases/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    453f9d9be79983e275c9544a415946fb

    SHA1

    e2c6ce7de918e6eb719b90d663769524c8307598

    SHA256

    1180dd75eda657e584561ecf83d0a07cee03541a10eaf92b6994da3159bc3e1d

    SHA512

    fa0e64f9a2e748c8458ede2c12047d27f54356521ddf6f2da4d1e48a445566b028aab2be044f25084c7ba680e1013d20df57a5fb80d9af2ed8e419d2368004d8

  • /data/data/com.scanner.dmirosnikov/databases/androidx.work.workdb-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.scanner.dmirosnikov/databases/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    fff962c3f7b3bd5baf65f6fcb63f3b02

    SHA1

    6c1a812aee15cb0cb0f6d7b5973bbfcae2ec986c

    SHA256

    b660abc5571e6213942585e9347b25da62b614da288f1e5778815841422b5791

    SHA512

    de994605e89b695a3009f77848aa9366b28bdfac5b7f8395e38f7f6c5512424d648a5b85912e7f960473b6b783afead566f01f8505731596f1eaeafca19c2a7f

  • /data/data/com.scanner.dmirosnikov/databases/androidx.work.workdb-wal

    Filesize

    88KB

    MD5

    01b5fd8e14c188becb8497c28be2458d

    SHA1

    6c561050129659e7f85e37d26f56d1e4b6500be2

    SHA256

    54e56e2f4af1332abf3f892fce0d54414ee4ed75e163ddd849bdf2d7ccb5f446

    SHA512

    c266df112c9cdf088920a34a49029c54266c666d8421e6b7d59b1b1a43b458c5e0d62e569860c0a0cdcbff79355c66c00ab69af0936f5f9e9282574ed83cc7e5

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    edb6601ec872d91332dacc7e666580f6

    SHA1

    5d209db0a68b23ae307a796f358d93ff39603637

    SHA256

    2ddadee31ef59b3cb9788daf442527461d3f9708bffd63bc4ae5abe548851368

    SHA512

    6b90d355182e700d31cc18e61f6c241fa7fa15d3ba12c56d9f992fea00aa266d259bc1aa7ee04f7c9e7cb190d13ed8273c952aa3fd17dc36369ece7af662b648

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    02394e993eaca17af78890b5829f2bd6

    SHA1

    9c0dc75a7c7341580e19ddc53f9052ae4b721d9e

    SHA256

    61527d8b40919e34fa24a4d71790b6973b26d89cb505aee848d3275e235355e7

    SHA512

    65b37717acdb991cf94bb8382563ab9d277c06eee8c77a3548d8a059c11fe4900464346299a56346f628ef9f8308fbba66e99ed600d0bbc36383e93cd39d6aba

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7879e7021592702fd1e116b9ed157c02

    SHA1

    ce08627275212e4e87ae940ada818677115dbb9c

    SHA256

    b9d781b96887005a9b29e541ba3e1a0e6ee265341eb76b9e01a499b3fa149bda

    SHA512

    24bacc48765db83a9bce04b7cff2ba2465087d4df7f00b8020bad742ebe7516da7b1f713f0ab557a7de7765bc0f04345da1e7d2aa8d60003bcd0970265bc9952

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    531698f3d0e35e8e8b3a9a03f6edd8dd

    SHA1

    72bbcc62ca09de9d481bd48f1ff129baa6a41e13

    SHA256

    f1280bb2327d6d0314260d87cbd1ec5601f3886d88599a9290a372ceb7dd351b

    SHA512

    bc527f9a4c50afa68e4e9c166adfbca5bb39e94cf042434bc63f67366daa07b65a40c500ddb69846384597b9d15c85a52b1cb40946bf2c8ec763b216736f3862

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a622b59e764aa15ce06465e3a385f03b

    SHA1

    9cb3acb4b688c48d3969ddbb9ae023baaecee986

    SHA256

    861e7498216d3690aa02a71bd6891046bd6134762e7591fc2a2df35a3f3810e7

    SHA512

    c4a9af6e8351f32e053180a5905f798c7b84dd20fc82c75a302d715baab643aa9c5c7485f6146edccb01d55030e941d818aa35ecf95c99c90f7ccf1b005efb81

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    036c4c168964ce5bdd95ddc866055d52

    SHA1

    1f028fc915612008808b563bad933a53a56ceac0

    SHA256

    812f46fbb6ef9116bb9ceea78ba882fa65009a62946700acaf4d57f09a2ad0e0

    SHA512

    273ca44d846cf915be2802d252ac10df1f36aaae46b8ff6a2aa0bece492c826213869394f554399a8c00ff39836aa5545d70adc0aed0412b89e0c0839797b60a

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    d9c8ef526ca27bfbde67bf444eb89aa9

    SHA1

    9f9811c58fa315aeda66e5adbcd0f4c80f8b4f02

    SHA256

    e8c1182b0c91d877cf3e1a92296c1fbc5bb35a419b51ac38ce932f7f82f5363e

    SHA512

    d1b44ed53a68176868bf79a6c7351fb73ba2499ce1ea7ac37423ffede4ec3db3746b9f4722c674c515d2443e90d82fcc64c5c89e2bfca21d54a01d18e578fc16

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    97fcb26680294cfd1ef6f88f3ddc24f6

    SHA1

    fea615e31bc70d0ee7656c6555e2837496f6616e

    SHA256

    a6de55e7dd6ce1b3a04182349ed131c1815096342d7dc58a44d04435abbcd891

    SHA512

    faec037c7f56e9a8237b373fd8f3ddcaa68de7bd08f6ca2daa9c0a2e5a313cdd90d9dc2f8807c601a711d474c9fc6fadba623f8f298fb3616d14d75a7ed8ce3b

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    58914b81ea5eaa8873011a38b8155692

    SHA1

    28be5f73432982960fc436ac56da6daa082714e2

    SHA256

    818a8fd53e3e4d3e3c58973efc2f01c7eaf8bcf6ca7e5bef6262bf1343c23886

    SHA512

    a7ab057f20e14b81d7d99589c13ab26659f8066528311f5a9829b43a81b2de857a1268a55861b87d00bd0faf6b254b3422c8fd9b2e812145cdb9c7cfa5b73fe4

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    4435ad734a9421d7163ac229afb347d6

    SHA1

    e02011d507d5130c710f2fa2a9604d24327cd450

    SHA256

    be6619c6f225bd417f6b317b73920bd60b662a4b886e2108f00d5c675c819768

    SHA512

    b601c601b785b25d42671413d2cba45f5d582b1ad3ed11d6bb9f4778e23a5413dddb994248eea7795db4ae74f625c0853910b026f5e96ea321a2423775f7e535

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    5419e2ef9e2a449bbbca32b608ca8309

    SHA1

    7e0b4e4a335766524dd4ff42e95839e89b4de4b4

    SHA256

    d27b72e2d2597212c2aca5cd3a7cd6bf941b73ddaee7ab33a13566ab3a63af1f

    SHA512

    619f7f979497fb0a6a6e8da1a2db05c89d17322c9d51e47bae754ae8c388d18ccd548a476ddceb5022c3b6838137dcddda16eafca3142da1abbdd979b112a80a

  • /data/data/com.scanner.dmirosnikov/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    35687c592c4922a7d43af4746fc567cf

    SHA1

    be9f87c85699a7f6c24b4a65401e1de5197a9b72

    SHA256

    62f3da24db35e5f16ad48a6dac43e37bdc9369d7ee12e4de25f767cb7b19d6e7

    SHA512

    555862860471c6e503d038bbc5e324bff9e06b8a3acd6de8a339dfaf7abc65cef16303091a96dfc195946140109cc896596e584cb2f137e3a60eb719b01e0276

  • /data/data/com.scanner.dmirosnikov/files/PersistedInstallation6292576325141740008tmp

    Filesize

    90B

    MD5

    7067307eec84ff2339563f6b74d35f60

    SHA1

    151cbde8f3411cb4f0ef0ccffc65f4efe1f93ac0

    SHA256

    99f005e2985dcd453a023cdf5b22bcc3844105ee713eb6691d7967bb4f437375

    SHA512

    badaba9bd5f68f2e62caf66dedadf7d6d7894822f3c885c6a031203d5e157ace288bd525d3ea1d14e8226f1be52918c044c28a79f8bebb48fb3339582a08ee4a

  • /data/data/com.scanner.dmirosnikov/files/PersistedInstallation822898476234619038tmp

    Filesize

    569B

    MD5

    8077888b25a53fc4ac94ec41b7409726

    SHA1

    e51f5dcb504069195219453af7325a3c317dbdf6

    SHA256

    55fd9dd21115972c6a1069fc67cdff7d0bddcfc58ecbe3313d0d4f1d08bc1fc0

    SHA512

    a48321a94e0e132594001d2b2f143fb6fa1b4b9dd8945536465cbd1d17b4e2a40b4bce38fe40f9e3d0c7631a74e0f7ee940e41245a546fdb4b6660449fbbb86b