Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    155s
  • max time network
    187s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    28/05/2024, 08:12

General

  • Target

    com.baidu.searchbox.novel.apk

  • Size

    2.8MB

  • MD5

    a91100974bbd2c98c6290f252c48eb92

  • SHA1

    77c42c566b682a5f9d5ca059fe92923f0645e6b4

  • SHA256

    dc1600c45a5d6db01aaf6d2a7505d517abdba01f30c089bf6560d4df65fd503e

  • SHA512

    33967e9ecba74206983909ecddf1176ef465460c10e0124434c954bfba6a6c08a3308044b6026970c30610b4bd2af888df54cea1cf0441f89f1eecbc6cc61fc0

  • SSDEEP

    49152:kLecQ1h4Oxcmem4RygNBo6fTP+neO51rUgIzw4YdYzJKKkMr/mRfmCG8I6v5Mthf:kWh42exRyel7PgL+M5sxcTzWhdJ

Malware Config

Signatures

Processes

  • com.baidu.searchbox.novel
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4273

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.baidu.searchbox.novel/databases/SearchBox_Novel.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.baidu.searchbox.novel/databases/SearchBox_Novel.db-journal

    Filesize

    512B

    MD5

    0c218c6e67b83c9ea7d8e02744bdf93b

    SHA1

    3525f643cbd14fa08b20a79abc856c23753873b8

    SHA256

    c88852c49ccba8e0a7abe81320b4a035e23ba6dc5423b1f37374dbeaa17217ca

    SHA512

    0d31a614f3d8646938f685efde2c54d0489b82b2a3571b628515b297d608023400bd03237955bec557148de5de6cf23bf5ce7f0ce550891f40d87e07bac425c3

  • /data/data/com.baidu.searchbox.novel/databases/SearchBox_Novel.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.baidu.searchbox.novel/databases/SearchBox_Novel.db-wal

    Filesize

    32KB

    MD5

    5443060e2d3742816c5b79d90eab46f1

    SHA1

    7ec17712dc7402069ffb0225ec0a0438d9391f8b

    SHA256

    e97cab78278132a30048bb87ab21c59186b41264dec3cff9e5738f9bebe6c98e

    SHA512

    f107054492af8cfdd61725a606fb62e126dcaf37cbefcc864ee01d3195b5182ad846bd81e3c472ca93d0765c6d8f4d7c7ea33480c1754a5a4de9e9daa884de09

  • /data/data/com.baidu.searchbox.novel/databases/bdbehavior.db-journal

    Filesize

    512B

    MD5

    7d3d8ac78d8160e9a73aa6201384cc54

    SHA1

    3dd7a401b062b7b1e985bdfca29d52eedfebdff6

    SHA256

    cc8e9d1d3a77b82d75434acec4443f69d7df47100dad8bd7998908776a5ccda9

    SHA512

    42c0533fd3d0dbdb6bf3f072803983b19ecdc1b28ee481816a666ce9139f137667a2e245ce07ff7f2f5722a39fe55055c2a25b6f23ccf33b97923e23dbeaae75

  • /data/data/com.baidu.searchbox.novel/databases/bdbehavior.db-wal

    Filesize

    100KB

    MD5

    69edeb279b0b8dfd5a16fbd832ead150

    SHA1

    89ceee9df7e0ae56b412331bf35edf67778aa194

    SHA256

    d3df386d9cf19f564bb3a4f6e6b6f1d9c9885a2aae4465630bb19564aa15f087

    SHA512

    e7d798caf0a89b7b2205c5b64fc239f5ea6b24c1267929a94b336fae0529698bb58b32c548ae94a55cab57a33da31cb4f67896f6e908333b04a0f76256f32406

  • /data/data/com.baidu.searchbox.novel/files/libcuid.so

    Filesize

    129B

    MD5

    768c7a7992c64274ae162edb63f53476

    SHA1

    38f4071a124c196059b069f9ac700d90a919fc73

    SHA256

    6980a59516fadde169b657db9e6803616f965f84e3400e86a7f1a917e7bdf0b7

    SHA512

    8e8b367f9d01c360860d76a2ec2659de34e39d29ac5c86f15f47613f782d97785ca6eee1d7f38e5c39d3876dc445fbe547fc58d18d7b528f5e58b5f1b5c839f8

  • /storage/emulated/0/PlatformSDK.log

    Filesize

    62B

    MD5

    be7367618d9208ac6401c461f8639529

    SHA1

    961e6b28caea6cfb94f8780d685e2d7ece8d4960

    SHA256

    e4c420b74dd655035203a819078af9d1f6fb724baddb31bf36276151f6de2027

    SHA512

    b101e1b93565ee2a8cfee9ae08b05e2f2cd0ec4be4138589ea8f7492e16239cd8c0b628c752094a668ff56a80510ecb96559c896dea77c15e1fadf089b3313a0

  • /storage/emulated/0/baidu/flyflow/cache/img/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56