gigabud | e78bb0e4ff1131855c0c1bb5e94c961e4b9b10a15e6f4598c9d5322813456269 | Triage

Submit
Reports

Overview

overview

Static

static

7

Chinhphu08...15.apk

android-9-x86

index.html

windows7-x64

1

index.html

windows10-2004-x64

1

l4ed5947e_a32.so

debian-9-armhf

1

l4ed5947e_a64.so

ubuntu-18.04-amd64

l4ed5947e_a64.so

debian-9-armhf

l4ed5947e_a64.so

debian-9-mips

l4ed5947e_a64.so

debian-9-mipsel

l4ed5947e_x64.so

ubuntu-18.04-amd64

1

l4ed5947e_x86.so

ubuntu-18.04-amd64

1

mask1.html

windows7-x64

1

mask1.html

windows10-2004-x64

1

Resubmissions

23/07/2024, 15:33

240723-szhxtszena 10

13/10/2023, 22:12

231013-14qggaee57 10

Analysis

max time kernel
763212s
max time network
131s
platform
android_x86
resource
android-x86-arm-20230831-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
submitted
13/10/2023, 22:12

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Chinhphu0805182515.apk

Resource

android-x86-arm-20230831-en

gigabud infostealer rat trojan

android-9-x86

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

index.html

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

index.html

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

l4ed5947e_a32.so

Resource

debian9-armhf-20230831-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

l4ed5947e_a64.so

Resource

ubuntu1804-amd64-20230831-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

l4ed5947e_a64.so

Resource

debian9-armhf-en-20211208

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

l4ed5947e_a64.so

Resource

debian9-mipsbe-20230831-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

l4ed5947e_a64.so

Resource

debian9-mipsel-20230831-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

l4ed5947e_x64.so

Resource

ubuntu1804-amd64-20230831-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

l4ed5947e_x86.so

Resource

ubuntu1804-amd64-20230831-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

mask1.html

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

mask1.html

Resource

win10v2004-20230915-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

Chinhphu0805182515.apk
Size

8.6MB
MD5

07914e333b98fa6a7f7f2e9f5526d0cd
SHA1

010f6efa8e33879b4a9337026cdea07f65e500b6
SHA256

e78bb0e4ff1131855c0c1bb5e94c961e4b9b10a15e6f4598c9d5322813456269
SHA512

596a45d7250923746afa593d2dba5b7c349c1b9d4b48a2051dd9069bc8c18b1d10b972a8d8ee15a5685ef83aabe1ef2219de1c4d06ba407ed17aab33e222377d
SSDEEP

196608:TY6gLpitqFnKGjMqC5sChStvs1FMvxH8d/45:MlgfqC5FAs1FaH8dQ5

Score

10^/10

gigabud infostealer rat trojan

Malware Config

Signatures

Gigabud
Gigabud is an Android RAT first seen in July 2022.
rat trojan infostealer gigabud

Processes

com.trinsmalw.bdyeurqed
1⤵
PID:4207

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.trinsmalw.bdyeurqed/files/.ss/l4ed5947e.so

Filesize
1.7MB

MD5
2641b6e41b80bcb4b1b086b161f4e200

SHA1
f160fec29dc4e7f91d2134290f534c2f1d664e3a

SHA256
56eadaebdb57c44524ea25155bda707ef9a490d9c1fbfea46e4ee611e31a85d8

SHA512
73ce93f4cae711dcc6411235baf8851a1f0a88871b66f9b2c377997f9e2ea63a7bf15e811e9c86c2b67765aee3f6e29762340d7def8159d121c06500de7c9231

Download Submit

© 2018-2025

Terms | Privacy