Analysis
-
max time kernel
3034668s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 12:15
Static task
static1
Behavioral task
behavioral1
Sample
0e9703f3d949e400683957918a134a283152563b769b41756c9ff359711d8131.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
0e9703f3d949e400683957918a134a283152563b769b41756c9ff359711d8131.apk
Resource
android-33-x64-arm64-20231215-en
General
-
Target
0e9703f3d949e400683957918a134a283152563b769b41756c9ff359711d8131.apk
-
Size
13.9MB
-
MD5
337ac60f1dbf4225e571a3f5228dea49
-
SHA1
dfd67777a06f676b6e8822b7aa5b8de7c28da9ff
-
SHA256
0e9703f3d949e400683957918a134a283152563b769b41756c9ff359711d8131
-
SHA512
ee3041d406a56b62afac6453a2897784e5c1d7a73835fc47256f95c70358ee725f47579ca0748d1e7bab2ca8a78d21229dc3578b301991dc4c04326f8c572021
-
SSDEEP
393216:vl3YOwFm5fGLVe78ZduUGxbrjXoRyw9BFE3Ggp99:iOwF2SHZdixbqPCR
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.youpinfenqi.gc
Processes
-
com.youpinfenqi.gc1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4256 -
chmod 755 /data/user/0/com.youpinfenqi.gc/.jiagu/libjiagu.so2⤵PID:4284
-
-
chmod 755 /data/user/0/com.youpinfenqi.gc/.jiagu/libjiagu.so2⤵PID:4342
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.youpinfenqi.gc/.jiagu/classes.dex --dex-file=/data/data/com.youpinfenqi.gc/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.youpinfenqi.gc/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.youpinfenqi.gc/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4364
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.8MB
MD52fb0733ad79ce1c29d6a516ef937c548
SHA16c394d6e9de590a1d703b0154d68dee80b152a9b
SHA256e6a3e5e0aebf1ce0a48214df1d9380c1f0f7b79ab0ad0b0949009aabc74e10fe
SHA51216e1d82c27d3458c35fb491311f10ed78a0901e89bf9803b648fb14662a444320bad520454fb90a8ad347401a579312ede4c468c33656659ff7a8fe0521c4a56
-
Filesize
363KB
MD56c9d83b90aa9c9f904d22eb9b16f8f95
SHA14d5e0ce3c55a22475b58a982d67ab9aa84384c40
SHA2562432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
SHA51207d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b