Overview

overview

6

Static

static

6

247ba89102...5a.apk

android-9-x86

4

247ba89102...5a.apk

android-10-x64

4

Analysis

  • max time kernel
    2813272s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 13:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    247ba89102ff8ca408e424bb56847b0756700ffe545f1b7179bcc67e0c0c255a.apk

  • Size

    12.4MB

  • MD5

    573f5d4b868cf4d2d071e3bf9f78d771

  • SHA1

    414b459a9d4329485692b5ad91495e55fc97edf5

  • SHA256

    247ba89102ff8ca408e424bb56847b0756700ffe545f1b7179bcc67e0c0c255a

  • SHA512

    801db960826b6c6a08bfa4016693167ed70759fd2a3b3cd2757090368d37d5cb5ebc1221120514edde36eb98e7b6fb0242d040e69b75a0307d5c92e10a305391

  • SSDEEP

    393216:ufIOo/E06maw6utj1VyWENtSo0dVLDuuJLwgfTnlPv:uwOoT6g//YtUL1nBv

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4236
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4262
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4351
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4373

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

          Download Submit

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
          Filesize

          19KB

          MD5

          29ff7d89a0330cd6f36ca58f0384ce7c

          SHA1

          efc89979bcdec3a447f0937488369f76dbb6f6bd

          SHA256

          a2009b8fcb78714ef0756e27994e84b109dc41e53cc6d31244cf0503d80ea681

          SHA512

          da49fe19f7f95dfa8e5c50e9975436f6bd9dfb850ce0b193856d04deec0eb511ccc8e4733552acbf01dff7970e119bdcce67787fbba0c1dd42042e7376b22ec5

          Download Submit