Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    8s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    20/05/2024, 06:59

General

  • Target

    plug.apk

  • Size

    11.6MB

  • MD5

    c74c7d855d550aef8302960b3579b5d0

  • SHA1

    67a2e2a4fc587d39924d358abf7c5a520614179a

  • SHA256

    f5b159d22cf14c18f881958441a7c78677fc49742a525a04305cb33858f32682

  • SHA512

    9076dc99ffa6f3c876fea329f190a35f483ab5b8ffd00695d843cbf7584a4d796e489eedc0c335fb1a3f542938d067cdf313686bafb831e6e17636d0f7189bfa

  • SSDEEP

    196608:0zBnw+M4mMH7fkS0KWxIfluCpGZ9bng4UZdM/CRVFglZ8e0dCXCAJ+qvfkTgNXqF:+Z1lguWxkuCps9zgTZi/5ZoCXxJVkE5O

Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.zhangyue.read.iReader.plugin
    1⤵
    • Queries information about running processes on the device
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4314

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    f0913278cbbeb5812b8b34d4f5c0ff93

    SHA1

    d416f5b953e329bc218bb6b32113a1951819c3f2

    SHA256

    8b4936d40cc9a04a2d47a152ed5d637eb772f6f683d7daf4ac5b81bec9488a49

    SHA512

    ae9773aadfabacec5b5ba144e1408bb791abb8a471b06d8f22b2c44df3d5a2562ca4b89ede55295a6fc11de8902559b8176ffabcecb273e66de8b7379f647ece

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    213B

    MD5

    92f0151da2caede38f861ac5da69b6d3

    SHA1

    356b8e3143fca138d7457efea55e5066dcae50cf

    SHA256

    b872cb89038cf65bb1dd6a6f5307cba416fd4649e60bb4aa12371b76d21b3f9c

    SHA512

    8c82993d16e486ab03655844f0be1225aacd14dd4ebb0ef74e8f3f51cfca54c482cd6a046fa8cd922d40aa0d566db94525f26cda6f9f3d9203075da9087b7359

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    6050c023db7b7942dad5c5055e55af83

    SHA1

    0953e8bb149025bee5f5edf502d88a2022d047b8

    SHA256

    ba775d17131176eac201abd1dfaa71696945d110da534eb17573ca6fe5dc224a

    SHA512

    c94ad8e0b484499bbf6e817134436ac786b3379549293466fdbdff975df3a5481cf3beba38ebc8500eef4e18aa2701dd72a62baf47acb1a702be171a74d722d3

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    f2f8efa6e8fdd2f38ef239bba7fea204

    SHA1

    ba5f7c7ed857a1847df96a969a470ac563507ca8

    SHA256

    5b31f2e5f71ac13103340ca85bd3cb7888e00582f3698a7a0dfefc9fd2ba6e11

    SHA512

    917bd2aaa93792cdc1d091b6bc83508a4395ccf3b5071c7e13c4d312b11b7b6e237df8d86982d18d4283f75eca09d68b7c95bf57d31915218012df0fb8627ac5