8468e2a8a54e198803a4787794608fef57e146aa5e9e86984182711ed1d240bd

Analysis

max time kernel
2432935s
max time network
130s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
20-12-2023 04:36

Target

8468e2a8a54e198803a4787794608fef57e146aa5e9e86984182711ed1d240bd.apk
Size

25.1MB
MD5

e20d333c33b18db9922c3e2e46efa4ac
SHA1

d3eeacf8df7649a02d96a9edd6c3dfa9fb1529cc
SHA256

8468e2a8a54e198803a4787794608fef57e146aa5e9e86984182711ed1d240bd
SHA512

2c16bb77c2fb33f443b8ad95ee5e4f2a1bcfddb67c691b2ef0e7410ac89c93bb0d7ecc6143eb94bf427e2e569029b50af377c14c55664645d795b56154b89508
SSDEEP

393216:XkD5BaZAoFT44oIK3evRPB7+tJH1EXDF88HHt09CB8mIZyqZGmUpmDDqdeHnDo:0VgZAvpCRYtJVYV69CCmayqDDDqeHU

Score

7^/10

Loads dropped Dex/Jar 4 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/com.cops.go.ly/.jiagu/classes.dex	4252	com.cops.go.ly
/data/data/com.cops.go.ly/.jiagu/tmp.dex	4252	com.cops.go.ly
/data/data/com.cops.go.ly/.jiagu/tmp.dex	4306	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.cops.go.ly/.jiagu/tmp.dex --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/data/com.cops.go.ly/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.cops.go.ly/.jiagu/tmp.dex	4252	com.cops.go.ly

com.cops.go.ly
1⤵
- Loads dropped Dex/Jar
PID:4252
- chmod 755 /data/data/com.cops.go.ly/.jiagu/libjiagu.so
  2⤵
  PID:4285
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.cops.go.ly/.jiagu/tmp.dex --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/data/com.cops.go.ly/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4306

/data/data/com.cops.go.ly/.jiagu/classes.dex

Filesize
76KB

MD5
61dea04ed095c78f2082a75af9250cad

SHA1
7b74eb9b262b3b7ed2f024b19244f0ae1d9e49c3

SHA256
07168a7bab942645f617b390978513de20a1ff821f14c596704d7e31dc9370f7

SHA512
b902715b31f59b007f2d983b6182cbe39ffa2dc401c01f12d15b311df0b7d499fad45f422f761453de100efb577462cc96961fdef600e9aff8db63d2c3d0703b

Download Submit
/data/data/com.cops.go.ly/.jiagu/classes.dex

Filesize
163KB

MD5
d5ebc2f6361b6706af66a1e2fb29edad

SHA1
694cbd8168c50b0d626ff0a8dd268e18cee35138

SHA256
0902114afc4d667028b2f2ae6a266c1c0971c1849618c5a2db6246fe63cdfd31

SHA512
2515ec59b907db9f4670c21f96332f3bbeb1ea3f29c9e1778ba727741b822c716e2896f04b0da2521c4078e595d87fefab945fab75d8d76693e3540b2e1696d5

Download Submit
/data/data/com.cops.go.ly/.jiagu/libjiagu.so

Filesize
446KB

MD5
8f55d5deb281d8aa1a0b9f72f7185e58

SHA1
5ce262af6a74a11931bf4b1e92a59b9acab27f37

SHA256
b57aa883bd4a8241fe2ebbeec0988614da1ad453f5784f3439335a6f800c7944

SHA512
4d74f007dc4a19ac3a8ae3434f06d2509397301c0a9b0288475280801c8907ce48248459436416fb14fc5a3a6ce790d680b6b9c95d35afc49c2f0639199b56f6

Download Submit
/data/data/com.cops.go.ly/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit