06638a341380b1af4356b6d490f144bdecd66af1df23675c7f103344075f412c

Analysis

max time kernel
2854928s
max time network
151s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
23/12/2023, 11:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

06638a341380b1af4356b6d490f144bdecd66af1df23675c7f103344075f412c.apk
Size

17.2MB
MD5

28a5538f508846ca97a41636b4b1f283
SHA1

597ef11b49984c4e02044103e764dbd58b8566d3
SHA256

06638a341380b1af4356b6d490f144bdecd66af1df23675c7f103344075f412c
SHA512

c79bc211819869fd3af5dd8d903f7c8a77414e4b6f8e7e63d596048a8921ad953127d4dd57077c98aff43ca7c8e6456b0eef525172140b1f0b241003fd1eb567
SSDEEP

393216:He20taOi0PVJ5s+7WHowFTfcB+r2tF9YmulwE7gfq5H:He2kvP5T8d6F9C5cQH

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.xgbuy.xg/[email protected]	4487	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	4487	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	4487	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Loads dropped Dex/Jar
PID:4487

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xgbuy.xg/files/.jglogs/.jg.di

Filesize
340B

MD5
d0d5e65498427b6f88e214e3ed6f6050

SHA1
dfe9d6aa3ace821725f439b92612e82f4b3147b6

SHA256
7f2c86593563487d8cb68f8be57dafa57a3bb5a97641e8acdf43f4202369b03f

SHA512
818448ec26f28ca2641c1430b2c436b21c3c75b817b38281c7604e84061b836483b6535cae3ae4ffa0f98c3ce35fa43a3c5fd8aeb0ceff80d60b8abdad2af10a

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

Filesize
314B

MD5
a64d426f863fc017516054ee3bd75899

SHA1
b0081dd3a7cd2f556ae713b526ee2d8366627753

SHA256
11b49debdf9ce0506d86827b1d6f69e90d4571c7b56ea97dce6f98cb441196d6

SHA512
23e3fb0663e9d483255d660a61e2f6efdae068bc9b7314de3bc6386a0cfc2af004c3675fe6df5c48b768145c04ec4f4288ce03ae7125d62d6d1d2726179921c7

Download Submit
/data/data/com.xgbuy.xg/files/.jiagu.lock

Filesize
27B

MD5
dc609c2479c1c567e04ef7709ddc1ee1

SHA1
4c08df61716c976e175d52499206efa84f4e866c

SHA256
d1c7318c57bdece5a65c2634db2f2d2e5d16708be2b9aad599f62f71e2b1d9ce

SHA512
7e519edac5aad80b41f13d083c1751dbb72dddf4e03ca02b1b9243bc4a5b705cc79afe8ff55cc880e38ed848d9cb49f042132097e6632de1f6ce49f1be881af8

Download Submit
/data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so

Filesize
456KB

MD5
7e7125a1193cfa8a696c1b8a6d2a103e

SHA1
af193df6127a47f455ebb7d5b792d2e982f4e004

SHA256
707cbb7d210699b111f050a382224f04ba2dbf72ecb4ee8f420d5759b6a23681

SHA512
91a62f00c2a9dc3c28348ef512ca56ab44d999e11dd806d565109159e79f25833c9141023ad639c7f5132acb8038ca0d7cc049ca2118534570d3ef1b36798b03

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]

Filesize
6.5MB

MD5
b2dc807813351c38c74b7c0bb84f635b

SHA1
a79749d01d26e351b76a0ffc3a291f1d8b5640f3

SHA256
feec2bdd767d0c29a6bdd07780acfabea2f5192430625f5de22f3d17d9823581

SHA512
7b9c27f16cf8d1b0cd5436c6bfe8ee0b5495da0dc74b2fa3e0160c8952f23d0afe0b1c70995a0c7efb7433617c3ff76e70e2327f7fcaabda6cf1a1b5db9dddd5

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

Filesize
6.5MB

MD5
e474dac4aec4ec48f73928d5753fbcc6

SHA1
a1d08ac41842605e86ab851ab57a18db9b0ae448

SHA256
1ac3e632c5d143632bb28f430dc1a94896943532f9edca2087f8ecdf0a1ff220

SHA512
19fb5f72735ff441b72fd76cdd19f1442dc85a653fc326f6f0593298b3776231b04b7435c63f644d857927ff6c396e921da36684cf94b5cac66f18e0bf671715

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

Filesize
2.2MB

MD5
67be119e5f4411390353a828ef5ae8d7

SHA1
94426601ccfdea3f3178547011140e6af0cf95f6

SHA256
23887c4397c1a3cc35fa7243cbd3d3a001f68dd808125bb9ec3c838fd441285e

SHA512
bfea1f60aaa66b718f7dd4e2c92c6bb02364a31afef6be01a6a52f3a459e075cfb651237ff334ce469157b7486a5486e26c24da3c611523b5f534de45f65eba8

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
e4150abd502cc5e9f88cc21c331c1fb3

SHA1
b26301baf9ce58a9f82cbc029bfcae9f13d3934a

SHA256
b28dfc3f54653b89abdf7e39efc7e93cc949869405c019804405968e602dec6d

SHA512
4b2492d758216ccd051803fc134a4126a0c2cf32886da7f444196eefccddf1d9535867311e7e092cf322814d0fd16e1ba59de04247e3d29655c554c547716c41

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads