Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2867762s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 12:13

General

  • Target

    0e469f78bf2551ea6e42bd7acf52ef03b906039edd0105a99074dea0f23b0ef1.apk

  • Size

    16.6MB

  • MD5

    193033f459a71d2d5649d726c93c32c6

  • SHA1

    e345884b1e2c9c0a12c6dd4033b7b671aa97b51d

  • SHA256

    0e469f78bf2551ea6e42bd7acf52ef03b906039edd0105a99074dea0f23b0ef1

  • SHA512

    a61556f98343f3d49b2183baef452c2efcb0db7ad51e065bcb62350ac4b463770ca40db327cbf7b0c2d253bbc6c3edcad0cfde71b9746484f182f229600a67b9

  • SSDEEP

    393216:+2OSISy1epUh1ww8jbH3gk7zopj2VL8bu59LwkeqrOiAo:+FSISy1epUh1wvPHwk72TU9Y76

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.xgbuy.xg
    1⤵
    • Loads dropped Dex/Jar
    PID:4608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xgbuy.xg/[email protected]

    Filesize

    6.5MB

    MD5

    e464b8e92df495382ed4f80ace0298bf

    SHA1

    b330e3fbe1e60c84c843d81b27a25bf7b4897c4a

    SHA256

    341851a59f9f9a17777b656117fa1dfa0818cfbcf40df207ad0974cfb62e3d16

    SHA512

    785579a16938f8e1b89e0dc0dc481dd074fccda8ac3cd3be5f89695d046086f4004a98882f794dded1de7c479fdff1295648fcc457c6b4adb70e0c0977cb3561

  • /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

    Filesize

    6.5MB

    MD5

    595b2ae499ee4561a1c75205cd3adc47

    SHA1

    ac121e5e631034699d0b36e3faacc399d0fe346d

    SHA256

    0fcb9417f9bd153416916a57bc8c1e0012cec5aba3dbc189ae7a4fd5196abdcd

    SHA512

    4c845ea7a9da000a840f0e8ba8a513c27c99061e36a023c71059dc5ead9afb42f0d35a25c8edd80dd2815490006a4e7af80da239d58012f6f80daf5134fba9d6

  • /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

    Filesize

    1.7MB

    MD5

    63083fa4c9bd193a23cd18ce4a8df3ff

    SHA1

    e632661dca10df4451868bf57355e35221b3a2c3

    SHA256

    e4fffbd0504bfa93d786f78bb8563d5ffd00a369ad0a48892c2beafcb4171f19

    SHA512

    2ac0052df2bf5719e625baea35ff6691e2d024652c709679c16bbe780d52fd5fd5e687f3caf9e8cd5bbc26c5800d7fa80e6f858f23e2c0f89503058620a875f6

  • /data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    13edbb52aa825506536b943561689e4f

    SHA1

    18040b58c478cd02c88d11bc0a026c5655a6baa0

    SHA256

    006a2af9822e179152f0f8c32658e0105284eae8686eaa83abda2d707b8e916a

    SHA512

    2c87035883e0065b689ac87930d2ea1b68ebeaf5a5f17301a442c86241ff62bb20881cdab438796a50fdf8eed5fabfa75334d9d8b3b10d07d4358505be7bc342

  • /data/user/0/com.xgbuy.xg/files/.jiagu.lock

    Filesize

    27B

    MD5

    e1bcfa2b6b4ffeb85e42bb72e240ef4f

    SHA1

    8830bdc4e8fc9e33ce782abd2244d0a5eb4d7b42

    SHA256

    dcb5249456d611a9f1a725b2f705a634666c7a1c2a2da0a9d142568ed350a0a9

    SHA512

    75b9602e7654b85136119dcd5c5a25ec25849651ef76c1b1956a08c05f659946d3c0f46c790ac9748b7fc461fb479803d51e7ab9a0ef9dad5c9405bff430d331