Analysis

  • max time kernel
    2890460s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 23:22

General

  • Target

    9f7f1514074af06299510b71c2454fff76509f3b95ace94e9d6c09899d258f07.apk

  • Size

    16.2MB

  • MD5

    efce75791d4c2151ab2531aa477fee06

  • SHA1

    cd955c41cfa3f592f686d125a00803b0691c0677

  • SHA256

    9f7f1514074af06299510b71c2454fff76509f3b95ace94e9d6c09899d258f07

  • SHA512

    b97ff217ca96e9adc5c8b43859049e802493098e03cde3cb52856c26a21ea6b6789ab640d40ac656a2e272b2413ddc3d4c9aa605e9b1ad3b60f8bb99502a9cac

  • SSDEEP

    393216:Tlpxvd2Y5Qg19gnKJddXl//86IzfwDwdS6FMQTSzga:l1Z9gny132wDwdNc

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.veepoo.pulsewave
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4232
    • chmod 755 /data/user/0/com.veepoo.pulsewave/.jiagu/libjiagu.so
      2⤵
        PID:4259
      • chmod 755 /data/user/0/com.veepoo.pulsewave/.jiagu/libjiagu.so
        2⤵
          PID:4349
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.veepoo.pulsewave/.jiagu/classes.dex --dex-file=/data/data/com.veepoo.pulsewave/.jiagu/classes.dex!classes2.dex --oat-file=/data/data/com.veepoo.pulsewave/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4369

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.veepoo.pulsewave/.jiagu/classes.dex

          Filesize

          4.0MB

          MD5

          9bcc52cd45a8a5d41171d1413b6c7f46

          SHA1

          c0cf121114fa66331a6d60560d049ecc5c23a9a9

          SHA256

          f05f56b44ef350e637c5e88a171ed6fc29966158674e65462542263024ee471b

          SHA512

          86d317fa733a4f5455eb65e63943f61ade882994e207b5071ad02b93ef8048f213956ad4a860274fdd914816502badcbc6caa8515cb3a1a04d85659261a92ebb

        • /data/data/com.veepoo.pulsewave/.jiagu/libjiagu.so

          Filesize

          363KB

          MD5

          acd3a64e22c56dc0628edd7615a74ab4

          SHA1

          ec22ef7fa9dca4b475af2724d483bda140370ca7

          SHA256

          c57cffd4175fcd618f29d48eeba1b8b30e2bfd4ce9e05c6c5b0bc4378914d008

          SHA512

          ec93027efd827742d3f9db70c4d4aba51e817191ff888aa2337939f2ce518b98f1c1f7ed3d49d25d3bff47738f68ead6348b1b309c54a17e18c4460cc2142e3e