Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    12/03/2025, 22:09

General

  • Target

    64143021d11c09bae94664aa453fa828f942b3c1be8d26e843e8e266247b7b2b.apk

  • Size

    3.2MB

  • MD5

    8f1b57d44045fd3512dc1b0f7158a378

  • SHA1

    632cf062ad0a5444489010498d335c5115f4141d

  • SHA256

    64143021d11c09bae94664aa453fa828f942b3c1be8d26e843e8e266247b7b2b

  • SHA512

    67f3e844c998df3db6f343224de1a036c1cd72915c02838099caf2fed8729e3ef148d80ab3572bf6002fd9be6f5bde6803fdf1d67c5f6aa605ade220e515b548

  • SSDEEP

    98304:u/7w9rFFAQ63ATlamT5kUl+jRr3MtkFQXW:LFFA3NmttuMed

Malware Config

Extracted

Family

hook

C2

http://156.238.247.236

AES_key

Signatures

Processes

  • com.tencent.mm
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4816

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    c1862e7e4b160c46b6ed3da425c1c0e0

    SHA1

    27200567cb38d68dedce11b7ffaf4ab4620b339a

    SHA256

    5653a74935ed17ee1a0c7058144a27e9d151375d855ba74100f2df5dbb2fd550

    SHA512

    d92c5e914f18c187fc4a2431a90f398ed28e8a3530a09d994e22ab59cdab7cf7b9bb8164ad1f5ba96cd0e4805e68ff2b824b89f14fd4e23eae20d3059372c764

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    a25aaf30d9f99788e9ded3069a0d8515

    SHA1

    d69eacd0872ee0f714132400a5b900e66205df90

    SHA256

    8e2807d5e23a885d87efe98081ffd504753d36baf9757d9c449962a1f0da2b2a

    SHA512

    721f78e5a2771fe367a0a7d93598da983723edc3ac33b44e2b10ce90bd4e814d0dd05448c63904512c22952fff205f4500c6987b44a8acf0f58df00284282bf4

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    12c6be474bfc099720f1849581091953

    SHA1

    2e4637210bf2a6ddebc3bb733543a4eec9c403aa

    SHA256

    adc7e42d1f4a65ddae698d01c8a24fc8f18680339eb7d3f8c9d3210cc3bb77b7

    SHA512

    7969e401340200e002c7397397f5d915a938e27a253c0a48de7672b0859e2216d5fe07f0366682cf6ac77c956052815c327e10fa1b870ec4e4f7ff71c021072c

  • /data/data/com.tencent.mm/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    1073e261424dbc2777d5343d12238d74

    SHA1

    f679ca494a8fd0b8048d61851a41a22fccfa1929

    SHA256

    c2e3fb3f2de1f0a50a999bcf4ff5da1bbc2e2fde1a54f6898818cd6251e7b627

    SHA512

    5cababce58859d205be5f3a8a9b0ae09aeb7ce57699c817378ce03b4bc63e5a48aaaa47b1e3fa00b3fffc93988767a9cdb5599dfc51f4d79f6cf3c774b855e3f