Analysis

  • max time kernel
    2493951s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 10:21

General

  • Target

    a1beb94e3a568a68b1d4b92e043ff591e493bbd88303045a8c130e78ab4f57f5.apk

  • Size

    27.1MB

  • MD5

    1de9c2f37614fbe9318836700202c753

  • SHA1

    d079b0771aeb21a7beb24cb4ebadf5aad1f9ef31

  • SHA256

    a1beb94e3a568a68b1d4b92e043ff591e493bbd88303045a8c130e78ab4f57f5

  • SHA512

    89333f191a9f4d077cad8d168d71c2c57295f29076174b16a04953e183d907b6620fd376b67cafafa36f26c76ce49b59bb3918898074c31a44ed59958b5dfcc4

  • SSDEEP

    786432:HhyzOKqBSy/E7Nt17idasYFrH2uCScu1iYOfVxVroZskoeA3NipZ:IzSBxCzVio92DSOV0ekNOipZ

Score
1/10

Malware Config

Signatures

Processes

  • com.rahelp
    1⤵
      PID:4622

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.rahelp/.jiagu/libjiagu.so

      Filesize

      477KB

      MD5

      39d77dcad8e2a44dd7226f442b3a6c92

      SHA1

      6560fa96c6b5a038abaeee5f139a16e46088d9d7

      SHA256

      99cba035cae818dbdef989e70e738463798528b8ca52dbf38d2b8a72152680c0

      SHA512

      7ddfc6c05839160813e58e8f8c50d2dcda7e7b5e7f1d27cffb802ee91de4bb664bc5c257137d39152ed6e8cad0d3c1b067bf8aeb7e53f884893887b54480a5e5

    • /data/user/0/com.rahelp/.jiagu/libjiagu_64.so

      Filesize

      513KB

      MD5

      db22c5992479681884ab1805a6c9c441

      SHA1

      8e7c8a8aea4a6f7630871c1525355fbc0d7e9500

      SHA256

      eff32c4751a44e601ada9133b68c81ea5fd4dad5e3e88fb85d6b452f1dcc8324

      SHA512

      4c46486f7c8be5848197776a65d7c1f4f9d898c2278cee657a2e6e2cfd003c2efc4f6e76f48511ca1c696ec0339ce649d601bd8c3abe5c7a2e6219e263222e54

    • /data/user/0/com.rahelp/files/.jglogs/.jg.ac

      Filesize

      32B

      MD5

      3560cb7c6a516eb180d276c684e7e369

      SHA1

      0f3d4ae1926e87457e6bfbc66de2180a6584c4e7

      SHA256

      7f71792098d2b9a753f53c58989efef21bb2c393c8ef5c7eff4fa294610642c7

      SHA512

      0a1d7d53871b676aa011d74822d88a65c873bdd6f7fc5d6d05991598c31c2b1844eb121d1cf267614efebb9a51105fd1012956c269fb50af63667ac4726f7f78

    • /data/user/0/com.rahelp/files/.jglogs/.jg.ic

      Filesize

      32B

      MD5

      9bc50647f219edf58f69c63c81aa4020

      SHA1

      8f9c013f6c87b01ac97974ad62018f23b900451c

      SHA256

      a432cef09d478277390ec810647b6cf9ea83be53b2aeeed3cb6675071518e050

      SHA512

      92c1e04200f1516c44e0325e97b9b71889c18d93d9e7a70f5d8cc14c96341fbea1a26f1f32e6f5c9e448f40cad85e67dc14dea245527e5a85b857a298101fd33

    • /data/user/0/com.rahelp/files/.jglogs/.jg.rd

      Filesize

      32B

      MD5

      3160d28e937ff76cf28879f90761b095

      SHA1

      4efb7dfa046fef9ba918c0d311721d291c6eca47

      SHA256

      ae0dac02bcc8e09c49cdc14ad6e41b8e22775f32d88cfc9b9605689d98d77a04

      SHA512

      723a14e2d94057fdca31f2cf03f9a6d1d6d9ebf92cd3275f95cdceb894ddd900af28fde16c09aaf8a9c542af8c381d18a4f1424956543e2382f2fde406173253

    • /data/user/0/com.rahelp/files/.jglogs/.jg.ri

      Filesize

      307B

      MD5

      93f853cd3c457a44c03c06c59b3df571

      SHA1

      6cb2d83dcb88213e26bf209549f19fdbd0e2c863

      SHA256

      da1605730cdefe221cc202728a0be75177e244e4cf52b0d5d30f912ff2e49e82

      SHA512

      041fd4d5520e94664b1f12aed8be458ef8788e642f6499b2ee6c2373684cc34c0e8cf22052b5e58ecf7e1025a9497a53c75770355647db792c6d72d70496be40

    • /data/user/0/com.rahelp/files/.jglogs/.jg.ri

      Filesize

      314B

      MD5

      f35477bb658fd6daa091cd85a9efbe83

      SHA1

      81925e0b3fe78588407bfbbef92976f9b9909c35

      SHA256

      cbf5b80b0b9a08481cf353e2d9f4055e136b568bc60b0d03f1cd7d20308f13ac

      SHA512

      61e35b5a76cacb4791bda51d93a3381588ad3d8bf296f38d9c5e505c87c5a42e4cb457e4c6ac2c88e6d2c98deb3271eb49d0b83260a122e7107b7ae01670933e

    • /data/user/0/com.rahelp/files/.jglogs/.jg.store.report_pid

      Filesize

      54B

      MD5

      8665ad4f00ded77a732b18767c5c5d6c

      SHA1

      5089c64d49f77af7b339a604aab37dbb5970ff63

      SHA256

      4a5537230a8d8c2cda3903cbfcc1eeaf2b9164789c16050de1868f3630177828

      SHA512

      b52ce45da29ea1866ec1c4aa2857304802e5f88a0632a991b11e90f8316c155b381586974e24b7de6f6fb2acd951d7714ed03810bdcce82a26e0d025b83886a4

    • /data/user/0/com.rahelp/files/.jiagu.lock

      Filesize

      27B

      MD5

      c7f2ab8c0e5f918a2c307fc99d25d562

      SHA1

      fe695e3bf70113301b92993dd9d87bf50ddde288

      SHA256

      ed7f826b7f5676fb4368f744993a66e8ebf97106b2f4460a61b9b74d63d5d142

      SHA512

      f7db131af6cff824f6bee8a67a7f58ab9a6a1fc503cf8732a9be35ebecaa5836f32ef6846e5e31240bc0e8faf6274990162a6dbec7caac201ea004d383991b0e