Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
1magis_phon....2.apk
android-9-x86
7magis_phon....2.apk
android-11-x64
7.jgapp
windows7-x64
3.jgapp
windows10-2004-x64
3libjiagu.so
debian-9-armhf
1libjiagu_a64.so
ubuntu-18.04-amd64
libjiagu_a64.so
debian-9-armhf
libjiagu_a64.so
debian-9-mips
libjiagu_a64.so
debian-9-mipsel
libjiagu_x64.so
ubuntu-18.04-amd64
1libjiagu_x86.so
ubuntu-18.04-amd64
1Resubmissions
27/05/2023, 05:36
230527-gazy9sah26 727/05/2023, 05:32
230527-f8sgeabb8x 727/05/2023, 05:23
230527-f3az6sbb7y 727/05/2023, 04:54
230527-fjwgrsbb3x 7Analysis
-
max time kernel
1536456s -
max time network
161s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
27/05/2023, 04:54
Static task
static1
Behavioral task
behavioral1
Sample
magis_phone_v5.2.2.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
magis_phone_v5.2.2.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral3
Sample
.jgapp
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
.jgapp
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
libjiagu.so
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral6
Sample
libjiagu_a64.so
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral7
Sample
libjiagu_a64.so
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral8
Sample
libjiagu_a64.so
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral9
Sample
libjiagu_a64.so
Resource
debian9-mipsel-20221125-en
Behavioral task
behavioral10
Sample
libjiagu_x64.so
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral11
Sample
libjiagu_x86.so
Resource
ubuntu1804-amd64-en-20211208
General
-
Target
magis_phone_v5.2.2.apk
-
Size
44.9MB
-
MD5
3660e335327b6ee08bc79ea5d306decf
-
SHA1
903dca809f8753bf35a9dc6aa86e911a4b783905
-
SHA256
7afd143741d6976bb76cd9ec447ad5919024f7080a80363dc128731dc11c1f13
-
SHA512
12b01a7d7f536acaa32acd7bf78f4337e597bbe019c1b772d9ab781b24b5f603dbf56af455d23a42033acd3bc56a8641ff77468dc3a18db1f93363a33371c223
-
SSDEEP
786432:MhAJOhTeIMJ8Kv8HE7CSINzZu+UQQkLtuHoer13Ot7oj8BKng5vKEczFR09RmjCy:dsRenJ8eVItOQ7tuBR36InQyfFRbKJob
Malware Config
Signatures
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.android.mgandroid/.jiagu/classes.dex 4283 com.android.mgandroid /data/user/0/com.android.mgandroid/.jiagu/classes.dex!classes2.dex 4283 com.android.mgandroid /data/user/0/com.android.mgandroid/.jiagu/classes.dex!classes3.dex 4283 com.android.mgandroid /data/user/0/com.android.mgandroid/.jiagu/classes.dex!classes4.dex 4283 com.android.mgandroid -
GoLang User-Agent 1 IoCs
Uses default user-agent string defined by GoLang HTTP packages.
description flow ioc HTTP User-Agent header 93 Go-http-client/1.1
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
MD54748ce36baaa6be9d54e244dac2c7116
SHA1b767f8f04fb370ab6d9700808331554bb08a7858
SHA2562a810099a8107952f68fdef5ec4a730e5ef0c1421fc19276c5b0f0564af0ccb9
SHA51286c57864d9b2e960eb4162590879df095b202ea372318e43e852f409f7b0f4bf4f87dc8a6b7b92cbf33bc4a5b498e019452b64c5c3294bde73f90b4832991fd5
-
Filesize
3.8MB
MD59c05fc1b2af2ecc0f141ccb0a391b396
SHA19d07d5b65ba763389c439c4cfab4f405b60c60ea
SHA256611f08a1d9e909414e46fc73db5d1605ece97b3e3343796d4209f560d0efbf24
SHA512d767fc13ececceb6164583ad7c52f5e7766241addf41aa4a15282cda4729b2e6b7deb7ba82e6cd75e323517bafadb13b458fb28c5d45d1a765dbf5fa104298ad
-
Filesize
1.1MB
MD5023ee41216dcf11b41f1b7146379f52e
SHA131eb9bfad3f4087bfadb39f4535e804e04becdee
SHA256ab9a002e9bb3858b285919f968962e229102da8ef79e7de5021709eff0c1e10f
SHA512845a884cf1d9e70a7e07ab1e55f6762d3e3962a393db924a65d94a79ec9483ab31a621f5cd758551523d7a1dfe32e6c0a965ff508112a6c15ad1c214d9569084
-
Filesize
91KB
MD5a064940e1841426724903df75df17c1d
SHA17f6e7d461adbb6773c9de7c2fdc1d3f162eb65d1
SHA256c288eec4e8d1098f0d27f19fb3e1e89389951ca8d3330be3231c376db11779e1
SHA51290a1d34060e3d664c10ba1dba6ef50db86d7fddb3f6fdd0521ffe93b091ffb8b6f53ce4ed233a90c698889b851a8dd6448ccfeccb9808a86b40aea131fdbcd17
-
Filesize
698KB
MD56ab6725efbd85c0c822f05ffa3901495
SHA1dfa782a54200ca3e4367281b608a594e74322f8f
SHA256657704558dae272dc732170caf1d66cbe00295c51ee8ea9ad7eba473755940d8
SHA5128ca5f223209008fb97dee97d87d08b748b8c6b9f9d4ecb49a8319ea5aff89a05c898f03d5d5e23155a9d4db9ce85ab61244887599673de525d32fd29379e8172
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03