Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20240910-en
  • resource tags

    arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
  • submitted
    12/03/2025, 22:09

General

  • Target

    64143021d11c09bae94664aa453fa828f942b3c1be8d26e843e8e266247b7b2b.apk

  • Size

    3.2MB

  • MD5

    8f1b57d44045fd3512dc1b0f7158a378

  • SHA1

    632cf062ad0a5444489010498d335c5115f4141d

  • SHA256

    64143021d11c09bae94664aa453fa828f942b3c1be8d26e843e8e266247b7b2b

  • SHA512

    67f3e844c998df3db6f343224de1a036c1cd72915c02838099caf2fed8729e3ef148d80ab3572bf6002fd9be6f5bde6803fdf1d67c5f6aa605ade220e515b548

  • SSDEEP

    98304:u/7w9rFFAQ63ATlamT5kUl+jRr3MtkFQXW:LFFA3NmttuMed

Malware Config

Extracted

Family

hook

C2

http://156.238.247.236

AES_key

Signatures

Processes

  • com.tencent.mm
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5159

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    e11ffd393277f3b8ac1aaf1b7e0eb8cb

    SHA1

    0c0c089132e017a49cad5b6746bdcc5a6114b29c

    SHA256

    517db61a276d08bccfd75df30332914f81a6198d2875ef127793ffa51bef2c2a

    SHA512

    7c3c78f56f1e720b33b2432b6af49680b300f80268b2fb980966a6c45f4b1d3e14e96a49ee37cae8678e8696f2745bc2259db3464771d7e1a60d9f3dedde34c3

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    0c5a2ff0b736ed4e4cfe7d70b0c0c1fc

    SHA1

    7e05d56c6cc7b74bf7263771e48073be479a0eeb

    SHA256

    cef0423a71fc92b4fdf34b66e707d476747d9f10dbce9df6376d9bc5e6e946b2

    SHA512

    91f5c7c7f5059cedd393ac6f816c235ad134eee78923e91dacfeec9bceebfe258ed848940ce5a423825a446134a6386ec42587b4d0e7463db3db2db0fa45d639

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    448929d90cd7ddb9f678e2f31043cdb2

    SHA1

    608f2a0de21d6725afa3a8107af4ad1cad6ab05b

    SHA256

    65900a37e91a1dee3cb95fb356fdaadb4bb8ea1320e4b7e9af660d2fccf4abf3

    SHA512

    0e7637ee348f64bc083df46ffa5cef0751b68a9cdb29f519a6d2427333254b9bec1af04bcc6e7954d46f94ae2d1712b6b3eabf338f9d98479fd71e0b15214490

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    a47b13277aa72774adce3dfb6cf4deb1

    SHA1

    05539f3cb6fdb786f48a70b2ccc9916c01a412c2

    SHA256

    510cdcf038af38b5b1844c8d5f19c9d4a201f697639355f1c149bccc3a0b13f1

    SHA512

    e0d55b910ea2bee642b1f3cf1d4acf58675220f2fdaf362af18112400c49e33a94aef33fb66bf250d30c924363b933a4189ba8b70bb6b326a84d697069c6c77a