Overview

overview

7

Static

static

7

759a00b92d...85.apk

android-9-x86

1

Launcher3.apk

android-9-x86

Launcher3.apk

android-10-x64

Launcher3.apk

android-11-x64

libjiagu.so

debian-9-armhf

1

libjiagu_a64.so

ubuntu-18.04-amd64

libjiagu_a64.so

debian-9-armhf

libjiagu_a64.so

debian-9-mips

libjiagu_a64.so

debian-9-mipsel

libjiagu_x64.so

ubuntu-18.04-amd64

1

libjiagu_x86.so

ubuntu-18.04-amd64

1

libprelinker32.so

debian-9-armhf

libprelinker64.so

ubuntu-18.04-amd64

libprelinker64.so

debian-9-armhf

libprelinker64.so

debian-9-mips

libprelinker64.so

debian-9-mipsel

libwbsafeedit

debian-9-armhf

1

libwbsafeedit_64

ubuntu-18.04-amd64

libwbsafeedit_64

debian-9-armhf

libwbsafeedit_64

debian-9-mips

libwbsafeedit_64

debian-9-mipsel

libwbsafeedit_x86

ubuntu-18.04-amd64

1

libwbsafeedit_x86_64

ubuntu-18.04-amd64

1

romex-fram...in.apk

android-9-x86

romex_cn.apk

android-9-x86

vmfwplugin.apk

android-9-x86

vmfwplugin.apk

android-10-x64

vmfwplugin.apk

android-11-x64

vmos-pro-i...ei.apk

android-9-x86

1

vmos-pro-i...ei.apk

android-10-x64

1

vmos-pro-i...ei.apk

android-11-x64

1

vmos-pro-intent.apk

android-9-x86

1

Analysis

  • max time kernel
    4s
  • max time network
    8s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20231026-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20231026-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    03-11-2023 02:04

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/libprelinker64.so: exec format error
Report Analysis Logs

General

  • Target

    libprelinker64.so

  • Size

    180KB

  • MD5

    b7bb21dacb86fd8dd45e561e9dcc064d

  • SHA1

    ab6e7c714e4c1189be6ed87de63056b3a8be7ab6

  • SHA256

    57cae3e31fed31365a38914bcd0f4c87e50ad5a3cc449d2e440832fd1ab42b65

  • SHA512

    83bb26c279c42f821acbfc72f1299742e4376afa5e8a3308ec0f4185ad1219d831d493a1a6e209f8adc00cdebccc399ca9d875b96bf069e7f163545869a91350

  • SSDEEP

    3072:PyiXCfz5ZP5A+E6sgduKdwDv4nWGzdyNP9Clxn/ttOWKEM04C:K3zS6UKiAnWGRuAn/ttOWKL

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/libprelinker64.so
    /tmp/libprelinker64.so
    1⤵
      PID:1525

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads