Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    7s
  • max time network
    188s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    03/06/2024, 15:15

General

  • Target

    923c93f1c54ca40ca063951bf6181c2d_JaffaCakes118.apk

  • Size

    10.9MB

  • MD5

    923c93f1c54ca40ca063951bf6181c2d

  • SHA1

    5bcfbc0921ae28f63aab96f4489572bba123ccd9

  • SHA256

    3d9d4516e1dc0ba7620c95013f8b0cb1f30a75cbabad9dacedc3f0f5ff5a1c63

  • SHA512

    a6fc3853d1e466e106220f843c1023fdac0fe5937ab6c720fb8b380c4b1fde54192a5d2016558660576506ed089a25bc0d82a64e669bc506684b81fb8119a1d3

  • SSDEEP

    196608:ckaLYtT0UUnvR6ezTE52ky5CMiiBlbdmEgdxGQoeaJKG9tcgZ+cf:ckJzUnJzTEwt5CMiidEOQMJKG0g7f

Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.duia.offline_zq_qbank
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4226

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.duia.offline_zq_qbank/databases/kf_9751_ISME9754_020000000000-journal

    Filesize

    512B

    MD5

    8b1d4c072a1b504e1e691b37033208f8

    SHA1

    f5b46180bf287085bc5a78832935a42363baa78d

    SHA256

    e8c3584823676c578431bfe765888f65df4c510e5bc4c415d8b3a32765c2c590

    SHA512

    7cd6827e72a0ec251ce4aafb180a217090f57465a674a6901032e4dd3319554b367ac98c3b097af9a83ad320f0e5f02da5039b0e35800dff93d43b44d40c218e

  • /data/data/com.duia.offline_zq_qbank/databases/kf_9751_ISME9754_020000000000-wal

    Filesize

    48KB

    MD5

    2f173b9d364e1db784aa6febd4ae7ebc

    SHA1

    0976215e5a665b2715f4491cb313af524e3fdfca

    SHA256

    00a74d378c8f6fdb43126d83cdb7b143ed5d935af95ff08f6f242f7543429a58

    SHA512

    1eba495a8918f96dcec14b03215cf8d43cdf8e6bb08a1165885b8169a52529b30ca791c00e3cad8ea8ddc2e25530d3b5a3716867fee0a274e3d2563000dbcf5e

  • /data/data/com.duia.offline_zq_qbank/databases/kf_9751_ISME9754_guest429471cc901a4f5bb3f7e8a

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.duia.offline_zq_qbank/databases/kf_9751_ISME9754_guest429471cc901a4f5bb3f7e8a-journal

    Filesize

    512B

    MD5

    f9053c1b80c0d6ee4d8b9aaa7a961d7f

    SHA1

    9b1ba926da7548944e781cee78d5472714e27031

    SHA256

    bb9449145caa9c4ac13ce5bfbedf382baa5883425c736aba1a6aacfabdd25b67

    SHA512

    c463e601817271203ccc38bb045ae0953086a86031b6b93589ed807d75f8d9ed379177696fe1950f2c703318681487c25b312910178a76cfa9c1ab2a787c9772

  • /data/data/com.duia.offline_zq_qbank/databases/kf_9751_ISME9754_guest429471cc901a4f5bb3f7e8a-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.duia.offline_zq_qbank/databases/kf_9751_ISME9754_guest429471cc901a4f5bb3f7e8a-wal

    Filesize

    48KB

    MD5

    98e968405fd776982a85380f45b08377

    SHA1

    c7cde2d872b955a95381f0e182d1f1163661e9aa

    SHA256

    6514d29387d63fb6390a3446389a32f1e18d1f0258b62cd11f2b27264fa24f77

    SHA512

    0f13bfc455f18b74a7077ffc8addd5373fc3b203a15c1670eafac20071edad2050cee6c455e10ef9b36b17cffb5ac058e05564356153a53f3b8fad82de5cbd50

  • /data/data/com.duia.offline_zq_qbank/files/cfg/a/ResPack.rs

    Filesize

    525KB

    MD5

    0357e8edde36315c0e0a4f5385de625f

    SHA1

    2e6c6f15010e88dac5078f34e31a8ddf5e032f2f

    SHA256

    44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d

    SHA512

    497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

  • /data/data/com.duia.offline_zq_qbank/files/cfg/a/mapstyle.sty

    Filesize

    248KB

    MD5

    46a9f9a5221dbe4ff71bfcd2ee045c5c

    SHA1

    915cb3bc2f0096dede38afc1cd7f09c8782360a9

    SHA256

    ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

    SHA512

    185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

  • /data/data/com.duia.offline_zq_qbank/files/cfg/a/satellitestyle.sty

    Filesize

    166KB

    MD5

    3f1348cd6165c9a66a9892565c917ca1

    SHA1

    96f0c939438c494cf3fd89246d458e92c0c7203b

    SHA256

    5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

    SHA512

    405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

  • /data/data/com.duia.offline_zq_qbank/files/cfg/a/trafficstyle.sty

    Filesize

    4KB

    MD5

    6a86f30539dfc9332cd235fc48fcb62c

    SHA1

    5c202003f6346edb85175b8df7c460793f5512c6

    SHA256

    34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

    SHA512

    f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

  • /data/data/com.duia.offline_zq_qbank/files/cfg/h/DVDirectory.cfg

    Filesize

    69KB

    MD5

    4e9eab735928758b860e48b2f9befd7b

    SHA1

    7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569

    SHA256

    1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4

    SHA512

    c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

  • /data/data/com.duia.offline_zq_qbank/files/cfg/h/DVHotMap.cfg

    Filesize

    10KB

    MD5

    c16f5ca1517683c46e02a6b71aab3c00

    SHA1

    2d09a048d1b8d556d89d4d723947e9e234b5e59b

    SHA256

    13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

    SHA512

    a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

  • /data/data/com.duia.offline_zq_qbank/files/cfg/h/DVHotcity.cfg

    Filesize

    1KB

    MD5

    883c30365d5d377966125dd0c079debd

    SHA1

    d296ec1e3f4badb6e3e6166c1473fb55d4265761

    SHA256

    50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa

    SHA512

    00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

  • /data/data/com.duia.offline_zq_qbank/files/cfg/h/DVVersion.cfg

    Filesize

    86B

    MD5

    298924848d2517a508f43ff0cc51bd3b

    SHA1

    b9fcde7b86653ead6deb57280a6049cf87745710

    SHA256

    0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

    SHA512

    63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

  • /data/data/com.duia.offline_zq_qbank/files/cfg/l/DVDirectory.cfg

    Filesize

    69KB

    MD5

    65685a117c72fe8fbf5a92b07073c99e

    SHA1

    b115b527f74e4c291edcaab19b316a446aca8f5b

    SHA256

    19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

    SHA512

    e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

  • /data/data/com.duia.offline_zq_qbank/files/cfg/l/DVHotMap.cfg

    Filesize

    10KB

    MD5

    cc3fad9057e0940ad4d4c7ad27922023

    SHA1

    403cbbcd7b819733b5caf49ed2a58d654441e99d

    SHA256

    f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

    SHA512

    ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

  • /data/data/com.duia.offline_zq_qbank/files/cfg/l/DVHotcity.cfg

    Filesize

    1KB

    MD5

    1c6abcbbd253448057930ad1cc59ac75

    SHA1

    a5845d1c4bc87b8b4785b456d76edcb8309eda4e

    SHA256

    a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

    SHA512

    71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

  • /data/data/com.duia.offline_zq_qbank/files/cfg/l/DVVersion.cfg

    Filesize

    127B

    MD5

    d54b7b380a5ff46c78283013a07d8e0f

    SHA1

    f697c5f7028ba2679a96d6bc5291c38ff96d7982

    SHA256

    c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

    SHA512

    ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

  • /data/data/com.duia.offline_zq_qbank/files/ver.dat

    Filesize

    6B

    MD5

    8e31aa8d6b61e8b044ac3346e87098d6

    SHA1

    70e4050667039f00eb5231bd731b9f3cb5daf00b

    SHA256

    d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

    SHA512

    2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

  • /storage/emulated/0/Android/data/com.duia.offline_zq_qbank/cache/uil-images/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /storage/emulated/0/baidu/.cuid

    Filesize

    89B

    MD5

    c02730b59730aea4ab73572832c5dae4

    SHA1

    64325c9621f8c98d91c0cce2e306908816b415e9

    SHA256

    692733ab89c7696d3530bb0e0418fffabbbea08ed5b1d6edb4278938914b503c

    SHA512

    bf5f82fe3657e96aa6e9c5edfb1ed0c9d7d818d4068c094eb50a6beff1909931700cab3bfcaa0c2adac7cdd39fabea191160abe9605d15234ca64a22dd398061

  • /storage/emulated/0/com.duia.offline_zq_qbank/crash/crash-2024-06-03-15-16-14-1717427774365.log

    Filesize

    2KB

    MD5

    43c234d92438dce7cfbd2d57920e441b

    SHA1

    03577bf2b9669aab201a3294d3d050aa9a09fc7f

    SHA256

    b5507521ed7d2b9564004490bdef705aef9e6746bd69ec313e821379fd4d7381

    SHA512

    edb9173c72783bd2eb12169cc54e311be8504793335c33f0a158cfe41aeca6229e7d4a5f43e0d4284c255459457bbaf23505b281d98ab68d41cae3334b557c8f