Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2363773s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 05:14

General

  • Target

    86c7bab035a3e288190c54c0a86054586fc99241bbdace97add474f6b70e1d8c.apk

  • Size

    4.9MB

  • MD5

    bdf703aaf031a2cae55a88fe8cb6cad4

  • SHA1

    7f7d39576a2e084318a3a2461abfe8fe4a4ed762

  • SHA256

    86c7bab035a3e288190c54c0a86054586fc99241bbdace97add474f6b70e1d8c

  • SHA512

    7e428eae602f2045b557789565cf6ac4caf008cee2a094b4e28b59abe4d66b247f1dd971e707ebc655c898f0cd2f09935ffa1e24ec39478bbcb8a9aa47f03bbc

  • SSDEEP

    98304:txh6ar5nXLS/eg50dmnKoPmGyYtOoRG4W+mqjamPckgCtmq7f:tC4xLGCdmKU9OoRGcnjzPT

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.liao.jinniumowang
    1⤵
    • Loads dropped Dex/Jar
    PID:4989

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.liao.jinniumowang/.jiagu/classes.dex

    Filesize

    3.5MB

    MD5

    fe068b0a086dac3b08cd72ce6dc0de73

    SHA1

    0ec6888b27473ca7c4477b7e2f82551e82feac34

    SHA256

    9daa6485861c058c5c7ad0275a0732465c71aaf035ea149f4c52da6222488489

    SHA512

    c55035422a19f543d848d70981de6728fdd0c8f48963a9d5741c98ffa499a81717ca793ccf61b640ee6052e74269f179b0ffa70c2017313e2392bb28d6885649

  • /data/data/com.liao.jinniumowang/.jiagu/libjiagu.so

    Filesize

    558KB

    MD5

    98736de515958ae37ae93a0a0e997098

    SHA1

    72d0f9d43f7c9bdc9f19d13834c0872f5652c0f9

    SHA256

    335091dfc73a9f792cb720389c5d94eb6642764a38d70d4b6b7a8afd34038421

    SHA512

    cc4974ce398bf7f4a20160ad30e4c4b5821ff0d7f2cc9fa0aead73ddc036585266edf429add276b53d6db8dd24a344d709469b9c839451deead6b621e70c92cf

  • /data/data/com.liao.jinniumowang/.jiagu/libjiagu_64.so

    Filesize

    569KB

    MD5

    64f0958be2a8e6862b90faacb40129e0

    SHA1

    389c618137db70dbf84adffcdc3c5d4850a5ff24

    SHA256

    4f38bee50f32a8c64f4f9c671b7cece34d4a1cb926087fec8ef505327d4edfaa

    SHA512

    793cb7104013b7841c38e4aa14f4d9246aefa61aa9803160e6398c4115a2df5c6af304bad045c687467547deaab3bb77272a675b0d673f81f2df3dee2d1fe94d

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    29c4ec93b092b4558b008cf43079ee78

    SHA1

    ebca224a85e46257691acc65a911844568f728cc

    SHA256

    9490f3b57b85c1170c321e3c01017d3cadb0a73a8ccfdd5fee47fb81e5b35557

    SHA512

    160251fee0da5d4514e567ec248a747c520cf64c70cf1e70f7ca02abbbc4995e4d82cf770d329647b5ea85408e94dc2ccdf7b234d4fa692aae1b92990ed868e8

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    5730639dcec00e4cea01e5dd69526be4

    SHA1

    de3c84b3b23ef6d6dbc13d1d1b9302fb33ac5e12

    SHA256

    21784ac0d65519c7864bb9feb03e1b6c3b7d227ecd7152a575f0f6e4bf84d98b

    SHA512

    ad77c083490f54ab6a13dc135bd54596bf0d4573766c64bbff18ac065a2f3e5471f43745177b2c21c9f123a520e398d11fa1c559328da68487407b388f856f04

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.pk

    Filesize

    32B

    MD5

    dcdf907f58f234b1038c83e7b26ae3ba

    SHA1

    cf60ce26e0866f8134f1d1ec8ef940c56049ede5

    SHA256

    b05a699a30a9531c1b75662c4f9129cec74c32fd535982a2c91cef09558fe956

    SHA512

    6b5014c3b3d9a8488d929044d0c5fcac81d87530027e322cfcb7d15955dc09012d9cc536201d6696540734549d3b5b87551873dd83c7d92dbcbff85af6fa34ce

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.pk.h

    Filesize

    64B

    MD5

    3c675b73c5a35fa944c678c97a3e40b6

    SHA1

    d1704ef6210183d79fbf9d27ed6d871f0333c98e

    SHA256

    610df8f6978bfb03cffe43b4c28ac84f46cf6cbdcf9342c7e603782af5c28a27

    SHA512

    57e8707c0e00026898c07962f222ddd4e1bffdd5e8a067a7a5190b9223b734a8680591235396bf8ae4d0d507e9de64757d06c7cd38953c7b26af4328a680050d

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    e07f43c999f851a2d21b514a73b158b8

    SHA1

    3f277de90f3971cebd6a7f53563ab2be76b347de

    SHA256

    10fd6a8c05c218c65007910954704a7a44f150599c95bf44617af8bd5f350b86

    SHA512

    a2cbd8d914d3469a487da2452a7e47085e83492004a61ba8292b055ea3c206fa2cf629d1cc2371c04ea5e52a47acb903c490c4add11a39fc7237cfa4cc8cc23a

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    c658b7259a3f91931187d1923e96f561

    SHA1

    93672241f9b4313e431b38054e51444ae767616e

    SHA256

    8cad4704f1fada35d9abfcc93031bf4335aa0d00677044d1d589866653b3e8b3

    SHA512

    910b78cb902350436a969cd0ae9409c5a1883b6570d297bd11861abfc244d269947a5e2d393e4870da480e3cd2fc05b43a8cc216eaf594c7debcc52581e175a7

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    305745278c6e97e8ebad72edf00f8e76

    SHA1

    b801e7349b3aefa27af30e401c747fd0c401d40d

    SHA256

    dca8b248591622dfec05fd0708980485acb07eabefaac038a6c575b9d7d48ca1

    SHA512

    81fd6a8ecba09fba9199344dcd5f6a2bb48c106d8854932f58f8f2ebfa04a479c1cefd20fda1aa27e779b9fa6648eb049cd194685f7ccb9d15e675a4d79b5bef

  • /data/data/com.liao.jinniumowang/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    31c7b43d48d56b3b579a752fbe1160a6

    SHA1

    e3f854af095033c5e6e1c29b81471bfaff9d4da7

    SHA256

    6d569adbfae091f291240922380789cbeeeaf53c0f105d166dff0113c28ae19d

    SHA512

    652039996a1dcaffc3d6ff406ad5a0df4d66386a069f88699869d782f6963ac48a0c77ad7f10eea52bc637fa059cd7d619651c5f4bfe59de958e4989d4472757

  • /data/data/com.liao.jinniumowang/files/.jiagu.lock

    Filesize

    27B

    MD5

    5781d664714de4c4b3053141d8028ab7

    SHA1

    92a3fc10f2f8bbeb484acc24a1e8650ce0afdecc

    SHA256

    961496e70ac3934a7a2c097e1482d154caa33c96c2013f8f55b233b86345fa76

    SHA512

    daabcd59eaaa8e8f13d5e5bf4448d68bae9f5bd973357a38cbda80e5abe295133a4c957c2eff9de9719a8bc3f5706c6cc30e04af91b03890f6923ab67c138bf9