Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    50s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240229-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
  • submitted
    10/04/2024, 07:43

General

  • Target

    8667482470edd4f7d484857fea5b560abe62553f299f25bb652f4c6baf697964.apk

  • Size

    9.6MB

  • MD5

    decf384d8c0a2a036abff47331d6ab98

  • SHA1

    c396327a2332bd6fbc771a97b5e0d4d1a43e8f72

  • SHA256

    8667482470edd4f7d484857fea5b560abe62553f299f25bb652f4c6baf697964

  • SHA512

    883bb79af2467d092a2d142357fb1353e7f0cd15230392308f6642d2ecbffea640504d4e5a151526bc1dafbdccde7df0e4ebc8f94a311270299259cec8e4d740

  • SSDEEP

    196608:q+ZMuXjLhKv93dK/mOrDoSbAHP0jXdN1+0Lrjlwfymoy1:q+iuXfhk93dK/mOHHG0jtNYIZwfy5y1

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.apps.sklite
    1⤵
    • Acquires the wake lock
    PID:4255

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr

    Filesize

    36KB

    MD5

    291a744584105a8dadb08a9464ea0849

    SHA1

    bda5c1ad6309de2b378f2c7ca44b8c0b2beebe6c

    SHA256

    da5654e8ac059a5852094c28d90a846d339f7ee9fa5168e72143013f37db6490

    SHA512

    e6efea2d9c471705dfaf6326b2959ddcff8a0278cafae6c63a9e0debbf2000a21f8e5fb4cac1c34daad2bb52706040c996c4c8ccd669262114487c3a8076f1ba

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr

    Filesize

    16KB

    MD5

    83096b77ad5ba2931048e4245e2f2483

    SHA1

    8c5ed553c497b4221eef2e480bb300622ef402a8

    SHA256

    69327e4a11d5af45e9523a681f092851b12ec500e63bc3d71b300eb5cca13e69

    SHA512

    e364f35deede95dc5cbf784d4cbe081f9aa5e0678c049b81bbf9e9948c0fd47cee81edb2b91b8be214ae187b705bc7dfa09c6a1f7ca16755eb57d3ef675c69a6

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr

    Filesize

    16KB

    MD5

    66634c014fe0f8b662841789e9128908

    SHA1

    be5d91adc86623b1f8a9c9e622cb36d13d2bb2c8

    SHA256

    2b9f424633929d8d197136b31c52404342aff2af238214bfcf91490d0be843a9

    SHA512

    41f361fd7095f93d9505693172c3889ad4a62e5199d4e9f25c20eb8c49d894cf750974e93a37986576aeb19ae13838d326eccab47d66593c90e9dcb98f6ed3f1

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr

    Filesize

    16KB

    MD5

    4296985c28794c9adad1f7a95c458a85

    SHA1

    8bb0d951e3ad22c4b652104cd19fdd940d91688d

    SHA256

    b30488f96fc111bfbbf301cfb97d0121cc755b35b34e2f7585b3e1a4a01c840c

    SHA512

    a7d68d2202b603a17f4de64e6aad783582f6f32125b3c550eff6b5ea48ceadc5b16d1bd27f4cc2444e9ea241f191f7d075d5b07d23c07c9772e7ed6ce051fcb2

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr

    Filesize

    16KB

    MD5

    ccfc973db94dae0b335a152b307f5999

    SHA1

    2980746b6cfff865785f0445f40d728edad58eca

    SHA256

    51459c94644c19fa5e6c6d52feb0c01fb8e1ed8363eaba104f11dacb16805642

    SHA512

    2574e5be7a97fc9a56eb3eff68b586d68c2ca9c5123b529ecf961d4c0f6b36c0422afde4a68274b0f327f657679c7e211a05600c6aa3ecd2f92a0ad4bd84fc98

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr

    Filesize

    16KB

    MD5

    df54b2cdaee2dde6ecca2cc62f62e9a6

    SHA1

    6c597247ca13c226b7a1d61577267ef36dd3ccf2

    SHA256

    d42b48c82b9606ef518a25a9446a94dd287228585ddf27ed2d562c32d69d45b5

    SHA512

    8045cb9ed64795a85ed6ab8b7a29158f9cab1c0f6af8dc1fcf42f37806b560550115b5b9b083556d30231c46c113887284afba3d14fba9b9b19d3c67a07ba89b

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr-journal

    Filesize

    512B

    MD5

    dd8ba4726dc7f62c78f37909120b6945

    SHA1

    d109d33f2e6aaef65f4c26958a89408e054b99df

    SHA256

    d0cfea2cd9d40957206422a798b17acca46a113fc6cd85456144f7e81e678a87

    SHA512

    8772b02a374b7df0d83c955f7997d5d79969daea065abe28e642a645b47a175cf458c4dc6732b4d08e600cf87a1d139afbf1aba4720107c190a481b6f86357d3

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr-journal

    Filesize

    8KB

    MD5

    28f4fb2de1c37497f96a2b915965c2bd

    SHA1

    ea047f14cccaab0fc228f6da737344cf2ea923a2

    SHA256

    77ae6783355a1643d89092e3642921d26a58f221cf56b691ab513cad53a4e60c

    SHA512

    d77c393d73549bc018f3518c9c9e786e6d1274e59a61799a84151dd1d0aebfe64d39286e2092adb51f6e029e4c65b466b170fc96ac9ee80b41b236b41061b6d5

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr-journal

    Filesize

    8KB

    MD5

    b6f624b72c5c7ce592e3dd9ee01dbc14

    SHA1

    eb8d0e018d69ad2e0c0ba5bc3f7847f7aa41a37f

    SHA256

    0d745a9b1efc277f6844aae2f818750e2793f1c5a25402baf3772329111b3872

    SHA512

    7ff0e86c82f41d23a28093d0ae814ce45bd3cfbae9a6e854896856a620e1ec2a5759eda5465c3ba236276767ffc3637cd6c4466af804f356cee15cd41dd9948e

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr-journal

    Filesize

    8KB

    MD5

    ba8e97ae4d9d04583d437e68b7bca791

    SHA1

    a1f119aa0ec2e8665ae51964b20dc2fe87b58965

    SHA256

    7dcdfe7a90fa7b00da152df3f982de18d92010b64239b963013e2e96b5452b36

    SHA512

    bd85d43733f9dac6c43f3f62834b51f07ef3ba97e326fd0d48cb5ebdac98dbdcae52233fdff1fad19c97778b07a09e60ca9fcbd68b30d6466364e880606dbebc

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr-journal

    Filesize

    8KB

    MD5

    74684e5128b47b7f88676d7c7e444947

    SHA1

    c578e56e3c155f75a9d8fb4213cb1f8c7c37b4ae

    SHA256

    8a7124fe2de4f2ce17c6fa912b70114ea0926c58bfb8eebf2b2f252287f25b0b

    SHA512

    f40a5602a5ebbe3ac586f0fd6d2c8b1c849e307dbaf5421b25b888fcdb92e8a3ca71bfc61c2fc910fc139785803f5bae773bd212dfa5ee34ab9be5a4d6d1f31d

  • /data/user/0/com.apps.sklite/databases/Cfrjkgtfgluhr-journal

    Filesize

    8KB

    MD5

    b29f355469ad761e4dcffd50a40b4df1

    SHA1

    51a49a24bba5303dcb296f75317023bfe7af8170

    SHA256

    3bbe562b740e41b6da2e7f0bdf548029b466c08265e1195eecebaac4e9d0f04d

    SHA512

    697b6470eb362f1584aeaa2cdc8e3217714acaba0d5bff16cbd2b52bb95b8428d7b6190bc810b5d9af85930ab38c50f9203bd6490573a4ddb9505a6ca1dac57a

  • /data/user/0/com.apps.sklite/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    571112758fefc013ca64f73bc959a009

    SHA1

    64b3e995d49a74c647cb467f54fc72c28c5af3bf

    SHA256

    632907b2357e6d3e99c86012795c6a2eebd1e8c1ee0a64c64878c5c1201413a2

    SHA512

    ce75b2bf73c4fd98b5391cf39610260fc90a91a7e85388c6074fe7b21f8b54eb88a0d0ce83a3403b496bcaf885deceab36daaae18976dc1f18fa4dd0605e2e34

  • /data/user/0/com.apps.sklite/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    409abde495cd0d3eccba2f34f89fe7d3

    SHA1

    eaa8e434d3d1a95043719645216bd1689ca42db0

    SHA256

    e258d3c61ecae2356647d0337ac58cc45f8e1e67ac17b10c4bef191fa754a449

    SHA512

    650d1ca7cffd047c9b79ae7a10cb60b2fbe54a4bd4f5b7ae5477004e82608f1fc61df9758c0c7110f3ad0f924c02dbd9dc59212630e86c20c6aabb03afed4e99

  • /data/user/0/com.apps.sklite/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    ceefbd2b6a8aca20e2d9946553ba1f63

    SHA1

    0c4f8ca93d478767761b80dd28c50e503ca7349d

    SHA256

    6ace758ce5838c594de5eb0ee53eb6bb5e807701d43b586271cfb3be77740061

    SHA512

    f0381f20b709b05b8e4031832b2a8b0c24a1dbfdf97fff1e6b72445cce87a9f130ce0681c35286f42f2221111edfd7e75bb37cd2eccd5258db08d9bf403f3f26

  • /data/user/0/com.apps.sklite/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    5094663e0aa3e33c157224f41b7b11ec

    SHA1

    c4a2d4044d8288919c5b27a55f0ee0a0d835f8f4

    SHA256

    4dcc9ee88cc3ea43be8e685f557cbf830002f20f528e535956516471a08c170c

    SHA512

    b00a34e8398aa1e7f63d9d2dbf274e5ac1284c598ba9acaa2d06b56ce2d515eb7c2a9948550b6aae2edb87c5c11263800a51f01aaab03d4626ecf32f8ab9055a

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    18a33094f1200b59bed50f2816d11344

    SHA1

    d53009adfe3395ae9256c998919e72759e15c92b

    SHA256

    849480fae89832a2d985d7e23f3ae2313dca8b2b39d3204c587420e8fc32ed9f

    SHA512

    06290c7acd6fdc7a2c7f6b7f0de8c78542dd06080674e0e1f28fc16108fd8b1fdf630428d3508db31228ab58a5813ea60ee9d2943bd8144a9e56e192c37f6d00

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    98d1af0dd010e57b9fd8d0db90529a0b

    SHA1

    3418791855235ac593017c7b1f6e23f375fe8859

    SHA256

    cd5a92a3aceeb7671905e19959e5760d71a3e98efc6de1601982c0918d74a777

    SHA512

    245eb78f536442dcead0acb0b3fc086d7bbb78fb96c0fe911fde69a977294f3fa22581a27f88f9644b14028bb1e0d6e279e457ec2dc929903c2fb0fe783c6923

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    972c426b149f582070678f7bf0351d32

    SHA1

    a02c7ba1d0b3e112fbc7581e0a746637eeba91da

    SHA256

    67183b859b18f2931b209576cfd20e03862ebdd981e070b5258495e07753d754

    SHA512

    6dd6a0ff4c7980d1f68a0040332c6fd2ee752abbc4c2cbb11b3f3c55bd846df52821a257ada8d072a951a58dc4afe9d010e156fcccc09febaf01c8fc06a2fa78

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2ff107f62767c211b9dbb3301b4abfa9

    SHA1

    185a0619120ba758af32a2d9c39deb239f6b00ab

    SHA256

    df6847194e51103d3cea302f272d9ebb0b30b3ecddb5e4a211e8a6e4dc49e47a

    SHA512

    d7b6125fe3d6a042877986c045a55a4c78f11d9932ad7c1abc2412ee1b313058cf14e60bb6d1e47d6d5a8b6f98cd699b9e7fca08f991c82b5afd9f92b631d7aa

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    0f33d19c127dac185a9d24bea05b7a0b

    SHA1

    614017cf6ee424cc161f84b9a10502ddc973c686

    SHA256

    613f692bc9a5f13ebd099f614269d710c6af01d7655b21c72c4d1a53aea11273

    SHA512

    ab0598d62e4e854c9e288201d950e4093244bae287a1ca30dd73249049b84bbe3699bbb50c75dc6191251b6ebc134bcd3bd7783184e71ebc7b9ec788188e9345

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    d0e9765b24423401aca49f3c54317656

    SHA1

    ebd2a605874daabfdc6ea676b98bd76d21c0c5ac

    SHA256

    1cb1d459f10d5c331959c2e0edb7dd934df8bc1d33117a4632be67eb0fb74dad

    SHA512

    ff1c87aed880df74260ce0d1ffe49c02c3ab783e04947821e8986c5ed0aa8f500fa517ddf51301cdabe1dfd60b88c361b0bea9db47d834daa26359515dd75595

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8c7f9f5c68ed308ac12a190dcbfb3b39

    SHA1

    86e0592d3e6d8113b468013e37ad19414c5d8c4f

    SHA256

    c4a5d5920556d85b0ccf80268160e8fe76402a42163037c5b2b4c0bfecb88fc5

    SHA512

    385bede9c91d34f6cc68aff38eeec47fbb5706894666bdaccb6f486229a62d8c25791302c9d70065fec7a31e895084f095168a752a1c591d733b3ad2f55fba91

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    d704bd520693feebd8d46dd4ea09102a

    SHA1

    5ec58e1bcbb03aeec02e64c0a2ebae27b4ad76a5

    SHA256

    3ab8ca0017e741669435a1266fd04bb54e73fb1ed2dd7b081bf86bc770deac57

    SHA512

    62695a24fcb56cf36c9bf7da8738f869809df1b59d4e2575fe2dc0601f51c4456e5a606bbf25e5b60e759ffdedc40ddd8b89abfb0c1f790b3e30290b07c0bc40

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    5a10a9bef16eb82be9d7908c0e751e99

    SHA1

    d309a4b49a7bf25fab9b0e5dbf548b9d52381f5f

    SHA256

    ecd01905f70af236861ee4b410c67ced28ce5d629f4f74f1b0347ea2f2fc97af

    SHA512

    26de5a778b7dccec3b71fd3aff4f8c05c971b6da45b3a741aff51767db3a8ab5b7e25376257265028f1eca00084c0036d362e1b9443ace361e98a189d2ebfbf8

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    019c8ae811b2703d94759fa272c6d887

    SHA1

    3d5df035a4d76fd687aab7c9bd7f4d9d4e99ed88

    SHA256

    7b6dc736ffe3513c48b3075fa5e3f6eefb04e28c86704283444f89fc43efae26

    SHA512

    e0e913f90e3a0ede1ebb0f538616073515fb8d4d88fdaba8a6fab1cabae054441460d9c1b634d0569b6fd99b17aa5deecc48000b9a8dece7772c7b83ac2b767d

  • /data/user/0/com.apps.sklite/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    6587b7675723cbbf2bd64ca2e6014dff

    SHA1

    273b311e24ed91b075582d61b4f11281298f061c

    SHA256

    772bddc9a7f0a8bcee1dee699aa76f63d5177bce487e28737b82e563d3a85905

    SHA512

    aa98a4f1542a8478d66c8df7e80b73b0831f626465b064ae57c3b92339b3e9e476fb2fbad2eefb8579e51cc8b834b98b0cd118d81c5cb9d0c6a28045704f518e

  • /data/user/0/com.apps.sklite/files/PersistedInstallation1509933090079946749tmp

    Filesize

    90B

    MD5

    4ad5be4511736cb9d0576106903576df

    SHA1

    59049c0f971763fb1d927d33c9abaa0ca87f4cf0

    SHA256

    41484ff1bc4b82fbbcb579540830b18e53ebd40ede416c89e929551e2e777e9f

    SHA512

    fdc10a9b631bd03d565d0c5b15d4667c58f89da800ab723eedc5f27f174f31d3209c93c1d450d82ec59b172cc1ebc125b15309564caf3c449bb75b7022fc38c0

  • /data/user/0/com.apps.sklite/files/PersistedInstallation2287216917310481089tmp

    Filesize

    114B

    MD5

    e510d0d79210bb1813a1c1167458a504

    SHA1

    31972c589ca2f9a87824a5192f01fe1cc5ac022b

    SHA256

    6592dc3a26cb420d15207b637b8963f14890ac62a7f7f2031b14c56e3951d064

    SHA512

    a160f91bf672fe3f8ed33d7335dde8601f9dc8cefe1983612faf5535ded4c9da759334c7b6ddf387332cbe880cefb5873816f2b285838612bbda0ae009a7cd8d

  • /data/user/0/com.apps.sklite/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    0eb157e1a86d4d00aa601dd2f6ff3ee3

    SHA1

    fee434f784e73cc7916322e949f727caf8363102

    SHA256

    b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4

    SHA512

    b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

  • /data/user/0/com.apps.sklite/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    0dc76ce274340ac051bd7bc37b1df085

    SHA1

    76dfe3654965db5ed6435298af440f3dbfd0724e

    SHA256

    d81b50d4aba57420eb538a3ce4d9eb70735eaa0c96e27c6d3bdbd96d3b3f4a54

    SHA512

    d93929fb5248c79d3032e555911264d9b0205539da7e30fdc16d6c0a7a963620a772f50e4a0aa5ff9e50abd0fce0b84e2f43f2b7510a86e6ec1abf4740084142

  • /data/user/0/com.apps.sklite/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.apps.sklite/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    aab44a1630428cc5a2a32f4e1a3a5baf

    SHA1

    39c4557348242e4161f877ac1a9b0207e66ab94d

    SHA256

    36573587d6ae70078dc8739b25e573cd7741f795663d710537c657b0c4f01256

    SHA512

    2801c8b7749b04cadfa27bc58d54aca12111de4584c15f59d4ee57c8923e83d99fd02c541246415e9d6cfeeb111b3c829e77c9fe76d4db6bb2313356d179808f

  • /data/user/0/com.apps.sklite/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    b8cd76ced3cf68336001beb40daf01b3

    SHA1

    68cedd4a380157438443965fe619b7f02ce2a4a1

    SHA256

    ed262240e51911780e4e64df61a7d3171759b9b4abca0adeaa44732568a9958c

    SHA512

    b760e0ec493cb8bc5dc18558fc93b3c76edff005fe9be821f6eaa3ee65e3ad2bf951560da8c272ca44ff44eecda775805a09e2a31413b55afcf7722e61abda91

  • /storage/emulated/0/android/.exendablle.all/info

    Filesize

    46B

    MD5

    2138ab41d53253869b264b1df0701581

    SHA1

    c30f7c45d1e1feb10dea35b819822edf4e4a2e28

    SHA256

    267879a0a48ba0e4f7ab5d9a4e67259f5131620fc9e48c460eb539df905245ba

    SHA512

    218f7ce6e9340bc8a6347e803e67aa3de4152601e8cfe4566510e6381a9613f6a9ec8c746dbe8704749b062b2644b7e593b1bb246bca90e7fa3811b99492c8a3