Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    10s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    08/03/2024, 00:11

General

  • Target

    ba054617f90525ec6c02424633718bfa.apk

  • Size

    3.4MB

  • MD5

    ba054617f90525ec6c02424633718bfa

  • SHA1

    7e4c4ba87061ebd6f2f547940dd6b79158c160fa

  • SHA256

    abbc87fa1439c09814c13498d4423edabf23d42a5ed6a031f95993fbaac45763

  • SHA512

    828dab834391606ffe90f3d39efa2cfbe02719f217fbc8931bf2c009b0ad66ebb8debe9414add47fdf4a59ad48d312adf00ab7e10f9c5a4e0fcea656f441de2a

  • SSDEEP

    49152:hrlA+arKyM+2Pb2TBK7JXHlGSCzE7hAjusadV6sFTY1VKb0j3TBYhtqKI5t:lbCKR9mWXESCz++jusaT1uyb0jr3

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.qqzzs.apps
    1⤵
    • Loads dropped Dex/Jar
    PID:4471

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.qqzzs.apps/.jiagu/classes.dex

    Filesize

    2.8MB

    MD5

    c5ba68b07892bba8b0ad57b22fcd62d7

    SHA1

    d94816c11bfc367381f693574b4603fc67bff88a

    SHA256

    ff1d44386379ac1b596b109ca201668f40dac83287f7872bbc7814946ae8326c

    SHA512

    11f5c707aba6cbf346b190ac7b9f011a9b5402557c7f91a49df6f640f06ac332f561bdd7aec8839186d21877a73555161642c90e49e980acac4be37de263b42e

  • /data/user/0/com.qqzzs.apps/.jiagu/libjiagu.so

    Filesize

    562KB

    MD5

    d141f6661f27d70822c7021d752d8af6

    SHA1

    e545f7442dca4490cb67b745f6f13ed782b1971c

    SHA256

    e0313c66404c4fb7d023824265ae5a922079d422509d4b59c6fe45632c60146a

    SHA512

    0b2a4c540c077ed93561f249baa75a65344e75dbfaefdb3a68c0d653d79bb5152fcd42c13f34a87b09583f33f1a40231b4f31416b73c323859885374ca0667f6

  • /data/user/0/com.qqzzs.apps/.jiagu/libjiagu_64.so

    Filesize

    573KB

    MD5

    42abe73319c2521e0fbda052b9d5f1a8

    SHA1

    9ba99e9d00782c0cd94cfee590dc5f540c14c737

    SHA256

    7f33251c6ad0df0db7d313803a1339cd2ee1ce91f832fd7b0bbc651bed74d32a

    SHA512

    0a5362cd28aed0db67bbda3e12e8afa24ec0edd722df732d3b8c645c6351b1864909be9eb155da2ec195ae7d4c42e0bc0b1db083232cac82e39fa4c79dee1792

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.cl

    Filesize

    32B

    MD5

    d562a11df02beeb52d645aa4f494c1a2

    SHA1

    24f391335e136535ec37690d641170814fcf25ff

    SHA256

    de88e6cfea3117994def70abb9c78cde8f12a548bdf4f76653532e9cce0ed782

    SHA512

    95f9e5ab4a91768fd8ec6cb53f30ea7b3dbcd07ad25f54bdae405bad9f0f06c06385502ae9e7dc5050845ef4cd8a681b5a7db6c07f1ccf12804e2077e4fc60af

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    3b07adbf935b7c5ea1d30e37fff90a09

    SHA1

    a9e0e58eee56e73683331a63b52df2d082f53dc5

    SHA256

    fd9dd189f8719435402416f556fdcf078d645b0059966cb699f37ab7cd42f97a

    SHA512

    bd81133a7b9a2471e177a1dc3a910cc4e79a5b4b2e20e1f2462e19f75041f2d9264a623714ee2ba097c01a3b42629101f346bacbbe07593145850f226f890134

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    23adbf4e7a687ae48a607303b62ea0b5

    SHA1

    872f301c09f61f1742b453ff909aff8d0aaca970

    SHA256

    3f3099ba39b84c8a4baa746b8143827b91e0d4cb0441d53fe932ecf97ef295e8

    SHA512

    2a937d5a12db71e27190863efeaaa9fb3a6460002fdff686065611cfa4e9bdedf6cdb58c63c4c34183e43cbd977cd63824d9371d77b30cfecc1f11736bd9ea83

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.pk

    Filesize

    32B

    MD5

    64cc9315ffc377ca5d53f8a656301912

    SHA1

    9962ad3170303f5f88c9d85cdba57caabc766a52

    SHA256

    712add2be148b9fc4f31427f50d70fef91bde6472a612ccaa1b7d8ec6a2b13c1

    SHA512

    c0e162f3c1606b5722fd00433fdb471b7f18f27165910311fcc0e0873ba812201e0a3338a77eef9820b75539d555fccaa738679873285b020ac57fe794352a89

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.pk.h

    Filesize

    64B

    MD5

    91ae64ce7637dc2bd25d55255440eb4f

    SHA1

    dc1f5d3ce20092a72aa44e77a543d4518ba52160

    SHA256

    9c3a89fddc69e84998bf588c45ab95e0ea62e1c5155eed47f82587879bb62a8b

    SHA512

    4c306ba3a78fe3587ec3fb94f085434d2dbd66d618c17fd297bca74d632f86b5f87af7cf1a7dc60747da1756c719c785a99b48d1fe142013d65fc8b9ba838152

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    d0b49e0bec4f50049eae5092cba7cbdf

    SHA1

    71329e9103d48dd1a40294b7276e9f13a031f305

    SHA256

    8fd05057af3079d27a332af136f4759125859c2e0977bd749b60ffd58814c8bd

    SHA512

    9a0899c654ca8405b79a54bfbdc06ebfbbda60052b002680290f8a504a69f35bbf921f5b110f69a6632b1bf3c12510e4659ae99fb93cd802fac0207e383bab39

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    8f85c2fe9bfa66cb10e8389e8940126f

    SHA1

    86f041472a4f8769958b52dd7ab9a532e20f70db

    SHA256

    7d88e34645720cdcbd28dbc9b4fc5ad6444a198e0962ee7c11331f073f7bdb1a

    SHA512

    c0de8698830b7588a92040232b03d5673f08dd3c4ed8d1a8229e0ce2368e04da8fdf52f763c1646eb773cfbca49e050c32120031eaf8f541ced5f019f1f2a169

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    fd7945fd2fc063f4a797647f66626fa8

    SHA1

    ecadbd0dcfcf9912e00c8eadec0195ca48e6e3f4

    SHA256

    a1e249fd6bdd40c7c7c510196365514ee1e984336d6798f4c70c0262c64b27c0

    SHA512

    331eb5706d386c69aa4ec00e7c8631de5a2a6cccd6bf6a42be2b3e99fce9aa8d823264d5c332b92aafd1e6b42bee427389c2a5c3057dbd6753d1655929a0032a

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.store.report_cf

    Filesize

    57B

    MD5

    b8686ee3fdb2f574a1a6c977b6f32b84

    SHA1

    a9115f40aacb841126ace304dda2cb26392e7b0e

    SHA256

    962f281f512c9f1bc4d9b279b20a41bb8601b5b839f291b5764a1ce39e1f44fd

    SHA512

    b27b4fb0ee3f4c6744e38b11623cb9a3515d7a18323427ff4672a33c14c68b4c9c131d05835ea15b6a377f99ef92fcddb8f68b334db3fd4e40bf0e5cc04090ab

  • /data/user/0/com.qqzzs.apps/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    b347618718512b6b20272c16dadb77a4

    SHA1

    c4bd8a0a205593ce92b828ffa36c75298fce917e

    SHA256

    082c28469638ba5bde6baec549b783cf0c26655612a675359df00ca7e1d806f9

    SHA512

    a3739ee044ff7e7fc6d567cbed4c3f84e5d64dc3685c3ad88abfed2d62c4aa0765611bc79bf2349d2ed0e817d1e19f5b46bc7ed05a7bc21ec23598680059339b

  • /data/user/0/com.qqzzs.apps/files/.jiagu.lock

    Filesize

    27B

    MD5

    bf9d9d8d0acffb0f70771f24f292e5a8

    SHA1

    9f9feb71e01fca01ad4e2082771f01f568369b33

    SHA256

    fcef801bd23de0824c360a758937e37d6cf5ced3ce0b9f42225af9dcf0af4391

    SHA512

    1d13709dfb17893d7a577c2c6a72d4dd26ab6b73147381bf2e53cd2a21d8bd1387363469d0982fc9581bd4ad1ea238434ed2dfcc7ab424be1d87ecf28a2ceb50

  • /data/user/0/com.qqzzs.apps/files/com.tencent.open.config.json.1106567792

    Filesize

    1KB

    MD5

    f526172de1566b34fdcea744710d9559

    SHA1

    000cb54d9a008a807a1c5a3fd2b2e7cb41e7939d

    SHA256

    8572be02b59f4d514000939ec04a9b4e2380c55265256b724a617d8d0f4c6940

    SHA512

    dc81f0fe345b18c96b1638c67b9ef4c5e60059dfc4a02f3c30a23645d4847abeef46cf467d044c42597115c48052ce0e8ea24328382114a544c5dfd039a95e7d