Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2471464s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 05:14

General

  • Target

    86c7bab035a3e288190c54c0a86054586fc99241bbdace97add474f6b70e1d8c.apk

  • Size

    4.9MB

  • MD5

    bdf703aaf031a2cae55a88fe8cb6cad4

  • SHA1

    7f7d39576a2e084318a3a2461abfe8fe4a4ed762

  • SHA256

    86c7bab035a3e288190c54c0a86054586fc99241bbdace97add474f6b70e1d8c

  • SHA512

    7e428eae602f2045b557789565cf6ac4caf008cee2a094b4e28b59abe4d66b247f1dd971e707ebc655c898f0cd2f09935ffa1e24ec39478bbcb8a9aa47f03bbc

  • SSDEEP

    98304:txh6ar5nXLS/eg50dmnKoPmGyYtOoRG4W+mqjamPckgCtmq7f:tC4xLGCdmKU9OoRGcnjzPT

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.liao.jinniumowang
    1⤵
    • Loads dropped Dex/Jar
    PID:4248
    • sh -c ps -ef
      2⤵
        PID:4310
      • ps -ef
        2⤵
          PID:4310

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.liao.jinniumowang/.jiagu/classes.dex

        Filesize

        3.5MB

        MD5

        fe068b0a086dac3b08cd72ce6dc0de73

        SHA1

        0ec6888b27473ca7c4477b7e2f82551e82feac34

        SHA256

        9daa6485861c058c5c7ad0275a0732465c71aaf035ea149f4c52da6222488489

        SHA512

        c55035422a19f543d848d70981de6728fdd0c8f48963a9d5741c98ffa499a81717ca793ccf61b640ee6052e74269f179b0ffa70c2017313e2392bb28d6885649

      • /data/data/com.liao.jinniumowang/.jiagu/libjiagu.so

        Filesize

        558KB

        MD5

        98736de515958ae37ae93a0a0e997098

        SHA1

        72d0f9d43f7c9bdc9f19d13834c0872f5652c0f9

        SHA256

        335091dfc73a9f792cb720389c5d94eb6642764a38d70d4b6b7a8afd34038421

        SHA512

        cc4974ce398bf7f4a20160ad30e4c4b5821ff0d7f2cc9fa0aead73ddc036585266edf429add276b53d6db8dd24a344d709469b9c839451deead6b621e70c92cf

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ac

        Filesize

        32B

        MD5

        29c4ec93b092b4558b008cf43079ee78

        SHA1

        ebca224a85e46257691acc65a911844568f728cc

        SHA256

        9490f3b57b85c1170c321e3c01017d3cadb0a73a8ccfdd5fee47fb81e5b35557

        SHA512

        160251fee0da5d4514e567ec248a747c520cf64c70cf1e70f7ca02abbbc4995e4d82cf770d329647b5ea85408e94dc2ccdf7b234d4fa692aae1b92990ed868e8

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ic

        Filesize

        32B

        MD5

        5730639dcec00e4cea01e5dd69526be4

        SHA1

        de3c84b3b23ef6d6dbc13d1d1b9302fb33ac5e12

        SHA256

        21784ac0d65519c7864bb9feb03e1b6c3b7d227ecd7152a575f0f6e4bf84d98b

        SHA512

        ad77c083490f54ab6a13dc135bd54596bf0d4573766c64bbff18ac065a2f3e5471f43745177b2c21c9f123a520e398d11fa1c559328da68487407b388f856f04

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.rd

        Filesize

        32B

        MD5

        e07f43c999f851a2d21b514a73b158b8

        SHA1

        3f277de90f3971cebd6a7f53563ab2be76b347de

        SHA256

        10fd6a8c05c218c65007910954704a7a44f150599c95bf44617af8bd5f350b86

        SHA512

        a2cbd8d914d3469a487da2452a7e47085e83492004a61ba8292b055ea3c206fa2cf629d1cc2371c04ea5e52a47acb903c490c4add11a39fc7237cfa4cc8cc23a

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ri

        Filesize

        307B

        MD5

        666d146560a0f3d732488c4134b94442

        SHA1

        7441eec9fd3de7dd21b28e4089261000700cadbd

        SHA256

        cea1a4cf8bafc1060c43289c14ec8dbcba93a4bbd66ec941ca641657a8fb829e

        SHA512

        16a6e457e95d7568ed64f90c31408587398f373f519640cf67376a81c287f1ea8f97f9b4a54894f2b611bc253d786816b8683be58e723860d5ae59cf5fa4b2e2

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ri

        Filesize

        307B

        MD5

        7267af66ab84655c0178cae12e7c26f9

        SHA1

        d020f183a335623fd298a00a6268d6da09ae18d7

        SHA256

        0a7d4019fbccc8873dab8de7f3e185403fd5667f0eb61c4221c59611a4dd0461

        SHA512

        999ff81bb6d527cf3a922b832ffa0a0c3d402cff900c771c5c0215c67ce0975ab6e3300acaf300a06b58fd4238ccfcad4953deabe3fbd42404fac3cb94480826

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ri

        Filesize

        314B

        MD5

        9a97b0ada1554c8333b87bd292bb0d0d

        SHA1

        74096081579f70fd27d5cb1304054bf3db9b543d

        SHA256

        2b54d5a914d788e99ba5d7d77c607236ae591194de3afd3d995d89ea866c27b6

        SHA512

        041d09f9eecc211b620af295d5a4ed3ecb3b1029859b8bed1d36fb5aa2fa4849c2d781aa3d96ec5dee2240b63a187c787cc1266d442e5d2a7f4fedb116ba265e

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.store.report_cf

        Filesize

        32B

        MD5

        5440cfaa4f21d1ec6184be1e5cd0d541

        SHA1

        13da6e15632dabde62164087dd7f18e05563c2d3

        SHA256

        947aabfb02932c5045d4bce58de34536700179850cb1663bfd90875d269dabf1

        SHA512

        8df60c5f1cf8337a5069f508055132211fe7fa35fc7785d3ad2562706b175c0b9cfa903fd7e35dd32650f56425623b409612a2a57d374595938f28bb35c0544c

      • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.store.report_pid

        Filesize

        32B

        MD5

        31c7b43d48d56b3b579a752fbe1160a6

        SHA1

        e3f854af095033c5e6e1c29b81471bfaff9d4da7

        SHA256

        6d569adbfae091f291240922380789cbeeeaf53c0f105d166dff0113c28ae19d

        SHA512

        652039996a1dcaffc3d6ff406ad5a0df4d66386a069f88699869d782f6963ac48a0c77ad7f10eea52bc637fa059cd7d619651c5f4bfe59de958e4989d4472757

      • /data/data/com.liao.jinniumowang/files/.jiagu.lock

        Filesize

        27B

        MD5

        80d5ed4dedef8f1d2806acd7ab75c378

        SHA1

        ad76eeb492f80bdf6f6c0a60108e4b742abc4230

        SHA256

        6380b057e1adfa15f0e55d34dc7f46ef80f8ce2f77f4ec9ee289d6e24b6374d3

        SHA512

        bf85130cd44bb5adc5ed37d125165ce775285bdf8663a5144da2105da8fd90634f478699c889340e981269ef18fff54c634f39789683476ce443b8ff6b7f01c8