Analysis

  • max time kernel
    2265611s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 00:11

General

  • Target

    7288e2f79a3596892f049aaceed6cd7799ba30aedbacad181d59f66bb5cabf6a.apk

  • Size

    4.1MB

  • MD5

    b751deebf8a2b9c0a9547e0138710e71

  • SHA1

    14146379fd09b8159d7b23dcde6ef8f3cc13d25c

  • SHA256

    7288e2f79a3596892f049aaceed6cd7799ba30aedbacad181d59f66bb5cabf6a

  • SHA512

    eabaec9415088d72991d604554d9dd4a5485cecbc64d7c2328d77476e8996c9cfc5a35551d032b84c7edc08cd8d711b55df4244d5abc3c3bb6fbac7935314541

  • SSDEEP

    98304:oMOc4213S8HvM6eyiKETRIlJJRhknpVDWj0XLeY:oY9LHE6TiKeIWnpVDjT

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.shanghfo.renren.yuedu.best
    1⤵
    • Loads dropped Dex/Jar
    PID:5052

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.shanghfo.renren.yuedu.best/.jiagu/classes.dex

          Filesize

          1.9MB

          MD5

          f13c616ab95ec0c6329df59fd0d78588

          SHA1

          4cfd35c33b0d0fb6d3b43f3ad2966f4f81863890

          SHA256

          3f26fd41d76f9971fe18f5eae28482b3437cc23936c267aed7d8363575b8ff01

          SHA512

          0e4f1f440b9ef5b738b81478f52a0d3e625fd039ec61fb054192a5f7b64448766b08508d1c0fb4093cdb8a1d042f57b1399f83fe4c08828516ba2d80a29b22c7

        • /data/data/com.shanghfo.renren.yuedu.best/.jiagu/libjiagu.so

          Filesize

          382KB

          MD5

          aa01dd97609092ce310e17bf791069ce

          SHA1

          f000840a8f68ea7beb2e29ea466088daf55609db

          SHA256

          e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

          SHA512

          766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

        • /data/data/com.shanghfo.renren.yuedu.best/files/.jglogs/.jg.di

          Filesize

          340B

          MD5

          0efb56596a2c7971e96e130bf3044ff9

          SHA1

          d632831b27efe056502627bb04167af69fa3e0a3

          SHA256

          eef29c55c86af7d723850f2131e60cb33ce7f4f5fd7e69c6c716b063c4af2913

          SHA512

          434e1309361157df46be2e1b259e8d52e639bcf85edcaa039213f3dc60f4ec6b04c7f66e1e2c24478525c76ac437fa7a599cb255f0d3e65562575f9e3e541464

        • /data/data/com.shanghfo.renren.yuedu.best/files/.jglogs/.jg.ri

          Filesize

          314B

          MD5

          fd1d54da48a6f900b132d4a6898003c7

          SHA1

          283d1403def88395d18c887244ee9315767ae588

          SHA256

          93cee80eb4f9e5b7dda917b81f4993f91133cd965a29d9c4906db8cdc7723e54

          SHA512

          18715d03e1ca4208d260d7f6045bb2bfba2d7122cbb949235959b6e55cf7d75ffc6bd38d42ec948ea59cb3051475a33bf9b13173c8a64e67110f74dae7506ea3

        • /data/data/com.shanghfo.renren.yuedu.best/files/.jiagu.lock

          Filesize

          27B

          MD5

          2af32f5830bdcd7fee5a025a9b3e6acf

          SHA1

          7931a3dccdce58f0617ab33272f9cdd75610a39a

          SHA256

          f63b6f23d58ea77be1456b64132ec71ed7844875dd1ecdfcc7d8e741d37400b3

          SHA512

          475631a78723d2436822730e0041f2c3129117696ec77facd046b9fd2575f5785546a6b212aa23c953b1a809befc1dab76816dbdb128b868c89176f78da0b98a

        • /data/user/0/com.shanghfo.renren.yuedu.best/[email protected]

          Filesize

          4.7MB

          MD5

          687778e3b9b4c4927369327d9f4a57ce

          SHA1

          8a24fee04b61eaa17251a2c41dfa6e4fc854606e

          SHA256

          979c261507cc0cec1dd7f951da8fe71d76e044ed2ca9789ad368b15345a8b855

          SHA512

          07d4f67f977fcce0977c11e44c8fade5699393ce534121099eae813b18686f14641c70e0de4b58c395332ca3e165daf41fc4d4e67d6411bc9506675f9576f5de

        • /storage/emulated/0/360/.deviceId

          Filesize

          48B

          MD5

          4c4c5285293d5141f582aefa4e038669

          SHA1

          e01852a72e5a8e6f7d63a21426b515118196047b

          SHA256

          36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

          SHA512

          097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

        • /storage/emulated/0/360/.iddata

          Filesize

          32B

          MD5

          6bc0fb20212e5d7bef50c7d1ba9b2ec5

          SHA1

          c8c36471825d23a69234649f6f990df0267e9ce7

          SHA256

          f91ceab9840fe00f57234612ed8c2c284e6a5902d6e6f2b866f8b63f2c3e5d3e

          SHA512

          275e7b42ed35a613ccf018f779e7cbb6c65b04fdf19c3e613ea277fe9c0fdcdad46257d0df26680f21fb0272b56ad284979431a3bbc07be9d1deda71234d0de2