Overview

overview

6

Static

static

6

98547f63b4...67.apk

android-9-x86

4

98547f63b4...67.apk

android-10-x64

4

Analysis

  • max time kernel
    2793175s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 22:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    98547f63b47d52e7765e367e19fda3bbeead8c6759e7af574ac170b4102a2b67.apk

  • Size

    12.4MB

  • MD5

    b0d7ec6ade32d66f3517432a459b402a

  • SHA1

    3c05db7cb1dc3854b71673a32eeb7dd17b5bb272

  • SHA256

    98547f63b47d52e7765e367e19fda3bbeead8c6759e7af574ac170b4102a2b67

  • SHA512

    2dcf8c25b60c1ede9ac3fd26c8cd2bfc9a8e50dea27e2e854afab173a9079992f69e926c048373b0557986393b14361fdb0cc100ebb0d2a6cd42c1bceea21331

  • SSDEEP

    393216:x7wO7zE+4e2VvLEG3cch7o/dVLnuuJLwgfTnlPC:x8O/qeqvLd3ccYL1nBC

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4247
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4275
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4333
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4354

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.xgbuy.xg/.jiagu/classes.dex
          Filesize

          7.0MB

          MD5

          d2bf8c7614072c91a49f828131775215

          SHA1

          982d0bc90da6f6f825a7223c9f5d609d53feeb54

          SHA256

          1f339a339b84e1d492b1a30472995e0f3517d04e01d333a12f3bcb3b4c5108c6

          SHA512

          43e09b8ec071478d46c36df18c476cafe2cb61246dfdb7f8f1f0f66613141991433278fac097f3039b481b99be061a2dadd7c201d32f17e072ad4c8684b8ca34

          Download Submit

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

          Download Submit

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
          Filesize

          4KB

          MD5

          c3bd94806827fa174949602f28c8b145

          SHA1

          7ad8c87b8176d05f020f00c19f7c581edb6124c8

          SHA256

          ce2bccda58e56392f4fcbdc5e052d638e7962f3a46eb93b1516bae35aca6276e

          SHA512

          f527bcfc2166326c65bc7916a5678d5f14f89f57bacd6ed82e00c1c3feb7bfa5692cda63f374538a7854c857c65c015327faea18a7cf352b628cee2ad89c41b8

          Download Submit