Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    19s
  • max time network
    142s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    07/03/2024, 17:08

General

  • Target

    b9385de404f63dc5d8924c687397c6d1.apk

  • Size

    14.7MB

  • MD5

    b9385de404f63dc5d8924c687397c6d1

  • SHA1

    f429f3df969da450994ab715ba61aa2bfa630d3e

  • SHA256

    da38db6ef307da47d362be16199cb5bb6f55906e288709a0994a10d323c122dd

  • SHA512

    da56713f6d83762c9fc8fbf7fcbbad16b882fe3ccb9e21d8a4eddd3b2971f198a4c69af9103b16371dc7520484aa05938c54d313c1981459c1b97bcb77277024

  • SSDEEP

    393216:0X2t+9FnmSgJ5xXRy4bUXuR4CfGjKUM+AGBf:V8uSgNdAI4COjC+B

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.active.aps.pbk
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4238
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4272
      • getprop ro.board.platform
        2⤵
          PID:4272
        • /system/bin/sh -c type su
          2⤵
            PID:4300
          • logcat -d -v threadtime
            2⤵
              PID:4326
            • logcat -d -v threadtime
              2⤵
                PID:4345
              • /system/bin/sh -c getprop ro.miui.ui.version.name
                2⤵
                  PID:4366
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:4366
                  • /system/bin/sh -c getprop ro.build.version.emui
                    2⤵
                      PID:4393
                    • getprop ro.build.version.emui
                      2⤵
                        PID:4393
                      • /system/bin/sh -c getprop ro.lenovo.series
                        2⤵
                          PID:4424
                        • getprop ro.lenovo.series
                          2⤵
                            PID:4424
                          • /system/bin/sh -c getprop ro.build.nubia.rom.name
                            2⤵
                              PID:4449
                            • getprop ro.build.nubia.rom.name
                              2⤵
                                PID:4449
                              • /system/bin/sh -c getprop ro.meizu.product.model
                                2⤵
                                  PID:4474
                                • getprop ro.meizu.product.model
                                  2⤵
                                    PID:4474
                                  • /system/bin/sh -c getprop ro.build.version.opporom
                                    2⤵
                                      PID:4499
                                    • getprop ro.build.version.opporom
                                      2⤵
                                        PID:4499
                                      • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                        2⤵
                                          PID:4524
                                        • getprop ro.vivo.os.build.display.id
                                          2⤵
                                            PID:4524
                                          • /system/bin/sh -c getprop ro.aa.romver
                                            2⤵
                                              PID:4550
                                            • getprop ro.aa.romver
                                              2⤵
                                                PID:4550
                                              • /system/bin/sh -c getprop ro.lewa.version
                                                2⤵
                                                  PID:4575
                                                • getprop ro.lewa.version
                                                  2⤵
                                                    PID:4575
                                                  • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                    2⤵
                                                      PID:4600
                                                    • getprop ro.gn.gnromvernumber
                                                      2⤵
                                                        PID:4600
                                                      • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                        2⤵
                                                          PID:4630
                                                        • getprop ro.build.tyd.kbstyle_version
                                                          2⤵
                                                            PID:4630
                                                          • /system/bin/sh -c getprop ro.build.fingerprint
                                                            2⤵
                                                              PID:4655
                                                            • getprop ro.build.fingerprint
                                                              2⤵
                                                                PID:4655
                                                              • /system/bin/sh -c getprop ro.build.rom.id
                                                                2⤵
                                                                  PID:4680
                                                                • getprop ro.build.rom.id
                                                                  2⤵
                                                                    PID:4680

                                                                Network

                                                                MITRE ATT&CK Matrix

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                • /data/data/com.active.aps.pbk/databases/bugly_db_legu

                                                                  Filesize

                                                                  4KB

                                                                  MD5

                                                                  f2b4b0190b9f384ca885f0c8c9b14700

                                                                  SHA1

                                                                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                  SHA256

                                                                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                  SHA512

                                                                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                • /data/data/com.active.aps.pbk/databases/bugly_db_legu-journal

                                                                  Filesize

                                                                  512B

                                                                  MD5

                                                                  13fa9d1efcdb3f79e80b08c67a147962

                                                                  SHA1

                                                                  570be9729e29edd0e877c6b7225937655f6595ad

                                                                  SHA256

                                                                  41b40aefef4bf13fbc2193fc3235dfd3591b7579a71410895616901f471a5502

                                                                  SHA512

                                                                  9a5991b33ed48a7661a3dec196f173e2964fd34f904d0880713e0d38f5203bce6c89b5a0d8f266a9eb290c751961b4a5648bafaa9266cb96441f7f0fde24be0d

                                                                • /data/data/com.active.aps.pbk/databases/bugly_db_legu-shm

                                                                  Filesize

                                                                  28KB

                                                                  MD5

                                                                  cf845a781c107ec1346e849c9dd1b7e8

                                                                  SHA1

                                                                  b44ccc7f7d519352422e59ee8b0bdbac881768a7

                                                                  SHA256

                                                                  18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                                                                  SHA512

                                                                  4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                                                                • /data/data/com.active.aps.pbk/databases/bugly_db_legu-wal

                                                                  Filesize

                                                                  84KB

                                                                  MD5

                                                                  4b255254460e49bfb910a36873dc5f14

                                                                  SHA1

                                                                  3af8eeb6045bc9e28f5d6cb79b3549824a137f93

                                                                  SHA256

                                                                  5c6affa35ea9ababf95b789678b3c36eb3cdcbe640c133e5de014a0995aa9c32

                                                                  SHA512

                                                                  0c06c61a8abfb2be3d3b339c861c64d7b7acb6c7c61c526249ce3f19bfb2eb19a52b600e15f644e44b99bed78a50d0499e63fd0095ddfad77a529c31f20a36f1