Analysis

  • max time kernel
    2464094s
  • max time network
    139s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 09:42

General

  • Target

    9e50db40fc2f1c05bbc46ee751b4b2e609b2c46db9bcd9707b0b0be023944da6.apk

  • Size

    16.7MB

  • MD5

    81ea0a204836228a7bba9caabc30e0bc

  • SHA1

    1206823e6e1eb9a2c6ce303353b52849a2c1b91d

  • SHA256

    9e50db40fc2f1c05bbc46ee751b4b2e609b2c46db9bcd9707b0b0be023944da6

  • SHA512

    1de7a764b6de918204eb9304f72ccdbf43606f73c772b7591e49a9a12e279c1122c9ccde749c1081d01c0bba5c131a430c6dd2ecd85181c6952137782fbc118e

  • SSDEEP

    393216:jHq7bv9SHOFcyFfxgwYL5/WC5xIkuyNiBW66wji0s6JoE:jHq7hSuOPjL5ubyiBswjM6

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.dbly.teacherapp
    1⤵
    • Loads dropped Dex/Jar
    PID:4618

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.dbly.teacherapp/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    394eaa022b8023100b1aff664bef17a7

    SHA1

    2b5690e2dd4a1d09b78f8639eca97155780f06fe

    SHA256

    59a146fcdd1046ba485f9b2dd90c23f228a384e29fec93b34e6c24d898c39835

    SHA512

    a14ebdda76661a21904faaa66fd00ccc31f9e4b7cba94717fbb9ca24d89d56ccfb11e0f67475a422b1d04947abebd816128292e81557c4e0520b4d3da55d979d

  • /data/data/com.dbly.teacherapp/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    7a22fe60ecb873c07b7c71d59d9e54d9

    SHA1

    484ef1818a64e76caf2c39ac7e255ec950b09b76

    SHA256

    2517c3c0c5ef59d02ae82c0b227e9f9e1fd2b800e546ceef7093a52082b140d9

    SHA512

    c622b2dc25a3a163ac5ac3c3084cac10e71fb4dc07928a9aef7fbceee028e249f0d5dec3c866c422f95c45428c8ca09921084e50734eafc77eb1f0f058b5c5a9

  • /data/data/com.dbly.teacherapp/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    cfeead0aea94e9f09f5fb1a69d849638

    SHA1

    b7e26ab8f7734590d28ba20cf1d4e6a254ee75bc

    SHA256

    3e9978be070a3428e40aaf43a90264541250351f295f789655354c6c643a1dc8

    SHA512

    bee96c8772625d0478eaf70b0a9ad9507c50dccc5d3eada3038314d50c0f08f126a365cf34b596a9c1100ded1ab6b0893d7e6e98de47ec0e74eea551e627f73d

  • /data/data/com.dbly.teacherapp/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    d73588e75239b6e32a3fcfad5c696aec

    SHA1

    002f5614b2a8b15ad457022209a082a598e9d5d7

    SHA256

    a16d4c613f830a0ab2605a3bedbc53a3beb8b36239a79b81571448af0987118e

    SHA512

    9c9702d4f3230a8767bacf25ec5af2979575f37ccb02f79a0ef574883993581c8ae8814204cbb671f57f6b0c6de353e4204ebf8e2a8152f43177a9904636c1f4

  • /data/data/com.dbly.teacherapp/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    7b4752525bd13e6354fc7bf637dde39a

    SHA1

    a40fb12d5746fdabb040a0d0d6efc57df7eeedbe

    SHA256

    dd957007774fbd77ef3dcb604a2119cc3bbf1a1955de643eec89e728e1bbe876

    SHA512

    96c6a8d5f4a168ba88ffc444b1e0701837ee10515f5d3c9c812eeed4e95a712662ca6b2a58b2ad29650a632253b9ef0923ff9dd3731ccf61a9e7d267142a58b1

  • /data/data/com.dbly.teacherapp/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    f4a91fc2c40ac9d197c2a7ad4a1431d8

    SHA1

    14ea30f65fc64b0747b17243abb26416f47b445d

    SHA256

    8423c730792032ec59256ece0e883a6945ef335ac57c69803f5761fa71ce03b2

    SHA512

    85a612e38341c90b7a405aa31c04dffd0a16e5959018fd982e124b47bf3d0b3402e99f3cdd581d076a0259df309010f11dbe9a9546d476d451ab9fa4c66bc6c5

  • /data/data/com.dbly.teacherapp/files/.jglogs/.jg.store.report_pid

    Filesize

    54B

    MD5

    4230d02e3caad9c0881f8e92d0f217a4

    SHA1

    206fecd5cdda00572ba2a33b35d1968d1ccd5ca8

    SHA256

    131a970eaa759f97371698a95e4e7db4fb023e8a0fffd34d6a09f6dc0700ee1d

    SHA512

    96f966e2d4326b338885b94586e5b96c8892f2bbe3bf931087aabb7acb7cb58b53fcd73457cf90bfde62ad66153fa61260f33c7ffc50f78c52f1691ca1d070c1

  • /data/data/com.dbly.teacherapp/files/.jiagu.lock

    Filesize

    27B

    MD5

    72cf8253d28f9bf975a2afae783f6109

    SHA1

    6f9168e4ada57e95f3f09417ffdfdbe8c7b70b96

    SHA256

    71f647ff83f5474576588e1ad1567c27d536808e17ee413efe9ca9b0654409ac

    SHA512

    f788f2e762f24d886254113b9db06a944592a2102644b0dda629cad712ca0cd70acb65880a45a7a3a5aa81b8b90de309542d3b66f95b38e3937c177ea0fb3773

  • /data/user/0/com.dbly.teacherapp/.jiagu/classes.dex

    Filesize

    1.4MB

    MD5

    4a9dc5c13cbcb3f8c62b0ea6920743e3

    SHA1

    0c818951f70144b9b1070654dbac5e02d37e4c54

    SHA256

    9137aadd4026f90de74d15034da291fe64aeafe1b9049f301e9c3c220f30a540

    SHA512

    dcaee3fe612119ce4aad5e9982655148536f125a0814d3856ee204314cc19d91994768b3228688797d8eb14295127ede2c3a227f1325d363c6c52277bff07363

  • /data/user/0/com.dbly.teacherapp/.jiagu/libjiagu.so

    Filesize

    477KB

    MD5

    39d77dcad8e2a44dd7226f442b3a6c92

    SHA1

    6560fa96c6b5a038abaeee5f139a16e46088d9d7

    SHA256

    99cba035cae818dbdef989e70e738463798528b8ca52dbf38d2b8a72152680c0

    SHA512

    7ddfc6c05839160813e58e8f8c50d2dcda7e7b5e7f1d27cffb802ee91de4bb664bc5c257137d39152ed6e8cad0d3c1b067bf8aeb7e53f884893887b54480a5e5

  • /data/user/0/com.dbly.teacherapp/databases/jsb.sqlite

    Filesize

    12KB

    MD5

    f41f531c07d4141546a531ff9caffdcd

    SHA1

    9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

    SHA256

    bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

    SHA512

    e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

  • /data/user/0/com.dbly.teacherapp/databases/jsb.sqlite-journal

    Filesize

    512B

    MD5

    45fc59b2acb26b86c5e739bf97974992

    SHA1

    ddccfd30160be3022c65794c671c74d8c5a6e132

    SHA256

    914bca7d604a92968beb5e756a4bc370ae3d56dda1caa8af7ba37db5458b7498

    SHA512

    b626140663304709775713056134ddba8bc36962b85f4163136cbb7e7e3b7d62bae4bb41fab371c628e76c89186dea7e1e398fe4952274082f50e8788bba1c76

  • /data/user/0/com.dbly.teacherapp/databases/jsb.sqlite-journal

    Filesize

    8KB

    MD5

    c8f3cd5773cd8c01ece30bec809d8ba3

    SHA1

    32594e1192fb75964ce0e75aa4cf5e984026893e

    SHA256

    606a3d614bc64dd0a4140e394b481da717f7c10dbbdd857804ecbb8f417acb89

    SHA512

    be810b8e3586abae759ef5b126a64a926b3873fa119683b2b9b0fc1f4f280b3c002c4b6cc93e122cb5cf0fa2c24d86b5d07a88f218ff81642e5045a52b3b3b5d

  • /data/user/0/com.dbly.teacherapp/databases/jsb.sqlite-journal

    Filesize

    8KB

    MD5

    c334c590682fc49c0ee478763f61aa12

    SHA1

    bd11b154abedd0057d4c05bed759af2e0199956a

    SHA256

    fc03fe12f10e3f05b5284805f35dc80aa2cec3a4aedb7f3439bff0094a57f893

    SHA512

    c2d3b9bd3ca1f902722acfaeeaf9088756987987b1ce4fc0564608025246a24486f3540a14a690649aa1c4a6ac46972e585fb78081ecb983d4b3dc9cb1ee2d16

  • /data/user/0/com.dbly.teacherapp/databases/jsb.sqlite-journal

    Filesize

    12KB

    MD5

    c390a925298525c7827fae1874be991b

    SHA1

    c705e146146a03d5df4cca450c7972617ddbfdab

    SHA256

    ec914da955aaea6892780100a759b055306354656084b46c9c05474c66385522

    SHA512

    0a3ec7253e6f219491348132284d3dbe61f88aa4c960ed5740e46fef56cc56c9e6fe6eaf958f040f3d5a79671dcefefbb0e90af2a152b0475f1c2996c0c5cefb