Overview

overview

8

Static

static

8

1c11aa65e4...74.apk

 

1c11aa65e4...74.apk

android-11-x64

7

amap_resou..._0.apk

 

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Analysis

  • max time kernel
    2897262s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 13:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    1c11aa65e480169fcb7a354039aeb6cffed577344dde303295f2952f49202974.apk
  • Size 20.6MB
  • Sample231223-qesv7addf2
  • SHA256 1c11aa65e480169fcb7a354039aeb6cffed577344dde303295f2952f49202974
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.ciecapp.android
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4595
  • com.ciecapp.android:pushservice
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4768

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .jg.ac
        • Path /data/data/com.ciecapp.android/files/.jglogs/.jg.ac
        • Size 40B
        • SHA256 17653998d5cc76ee20e25438d6cd856e7d5f320319f2f7c1aa0774bf3ec58f59
        • MD5 SHA1 SHA512
        Submit Download

        .jg.ic
        • Path /data/data/com.ciecapp.android/files/.jglogs/.jg.ic
        • Size 32B
        • SHA256 f46374e37fee907017b5c5d3e4f8c839111eba390004ddf7338c9b1e65514de4
        • MD5 SHA1 SHA512
        Submit Download

        .jg.pk
        • Path /data/data/com.ciecapp.android/files/.jglogs/.jg.pk
        • Size 32B
        • SHA256 484486c10019b28dd1d732c100808efeff7bb33e5bfc3c0403d56c954cbf02c1
        • MD5 SHA1 SHA512
        Submit Download

        .jg.pk.h
        • Path /data/data/com.ciecapp.android/files/.jglogs/.jg.pk.h
        • Size 64B
        • SHA256 6b1ab773528b49479b148ba9f8e5e70c322d67a4f952dd5f8b1d7e7cb8a32649
        • MD5 SHA1 SHA512
        Submit Download

        .jg.store.report_pid
        • Path /data/data/com.ciecapp.android/files/.jglogs/.jg.store.report_pid
        • Size 54B
        • SHA256 0e130ae0f26cb8c5ed3539e6343bcc743a580e33cbe3c436f8f394bdb0c4535c
        • MD5 SHA1 SHA512
        Submit Download

        .jiagu.lock
        • Path /data/data/com.ciecapp.android/files/.jiagu.lock
        • Size 27B
        • SHA256 d87a3ec51f599c0c206c1c2859f2553146f09bee336b38c45700087d91739b5b
        • MD5 SHA1 SHA512
        Submit Download

        classes.dex
        • Path /data/user/0/com.ciecapp.android/.jiagu/classes.dex
        • Size 5.8MB
        • SHA256 4b25a4d505b5938cf900ed9f1d01d6f3a11f3d5416f2d38acf366496008a42bb
        • MD5 SHA1 SHA512 SSDEEP
        Download

        classes.dex!classes2.dex
        • Path /data/user/0/com.ciecapp.android/.jiagu/classes.dex!classes2.dex
        • Size 3.5MB
        • SHA256 60eac4c820e9802e37128d4538fa895f0f1a32f5875e842c29ac7f2bc58878cb
        • MD5 SHA1 SHA512 SSDEEP
        Download

        libjiagu.so
        • Path /data/user/0/com.ciecapp.android/.jiagu/libjiagu.so
        • Size 487KB
        • SHA256 baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushext.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushext.db-journal
        • Size 210KB
        • SHA256 7ea375531252f5909a7d20492764c8ef96a7719da403b04a7736dea24f7b45a6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushext.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushext.db-journal
        • Size 8KB
        • SHA256 fc3a94c64dc03460e330dcc67867f862b2b9168255aec28e8d0594ffe7f8dafa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushext.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushext.db-journal
        • Size 9KB
        • SHA256 5fab4324d1cce90604b05931f0b3b93e3a81cc4be5f3b09909a9dceda720589b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushext.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushext.db-journal
        • Size 1KB
        • SHA256 46b3ff54b495afa6d065aa08229b1ea1ccd996203ce72dee8d47cfc03b9f1d62
        • MD5 SHA1 SHA512
        Submit Download

        pushg.db
        • Path /data/user/0/com.ciecapp.android/databases/pushg.db
        • Size 12KB
        • SHA256 bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushg.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushg.db-journal
        • Size 26KB
        • SHA256 c635cb6d52f23b89deeb7f80ca603a58a0caf454fa318abc62ae0db23537f98f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushsdk.db
        • Path /data/user/0/com.ciecapp.android/databases/pushsdk.db
        • Size 12KB
        • SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushsdk.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushsdk.db-journal
        • Size 512B
        • SHA256 a3a7118127e08e4f5bb69b3508d6efadab28a0d3f812a53510c2f568a44cc094
        • MD5 SHA1 SHA512
        Submit Download

        pushsdk.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushsdk.db-journal
        • Size 8KB
        • SHA256 1db4ec292c31144efe2f353058f2762d9e45ffb3f7948429421c51f1296e5c77
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pushsdk.db-journal
        • Path /data/user/0/com.ciecapp.android/databases/pushsdk.db-journal
        • Size 8KB
        • SHA256 20bb6857df0bef52a0da485e39fa04db272bb07cc2456bcbfa0fd538aea3c147
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __wap2appconfig.js
        • Path /data/user/0/com.ciecapp.android/files/apps/__W2A__webapp.ciecinfo.com/www/__wap2appconfig.js
        • Size 3KB
        • SHA256 0845f262b5c37f6633290bb3c89cd52cac025d156335a9e51a1ec1a1b29fd955
        • MD5 SHA1 SHA512
        Submit Download

        client_index.html
        • Path /data/user/0/com.ciecapp.android/files/apps/__W2A__webapp.ciecinfo.com/www/client_index.html
        • Size 872B
        • SHA256 3e478e46681cb880cda1e75680258f7fba63261d6622daba87a6249a64e1d56b
        • MD5 SHA1 SHA512
        Submit Download

        manifest.json
        • Path /data/user/0/com.ciecapp.android/files/apps/__W2A__webapp.ciecinfo.com/www/manifest.json
        • Size 2KB
        • SHA256 6b56641969a37823208287e5b07611a724f8ca70778c2eeed0548bb13a6997d8
        • MD5 SHA1 SHA512
        Submit Download

        sitemap.json
        • Path /data/user/0/com.ciecapp.android/files/apps/__W2A__webapp.ciecinfo.com/www/sitemap.json
        • Size 515B
        • SHA256 86e7471d0caeaa5306a352376175ea0d377d9c22277c193dea6b9545f1390c0a
        • MD5 SHA1 SHA512
        Submit Download

        __shortcut.js
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__shortcut.js
        • Size 37KB
        • SHA256 0295b03e168249702fccff78b03f20e7e8beb760286b8ecea910438e4eb9fdc6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __template.json
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__template.json
        • Size 1KB
        • SHA256 1b355863045b34d4f4f5c4562ed0b1f256fec4c71a603a472d92f9230e1f8be3
        • MD5 SHA1 SHA512
        Submit Download

        __wap2app.js
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2app.js
        • Size 210KB
        • SHA256 7802d3ce5a8991a0887c76c78311b3122de97b49afaa4a2e222e51792ef212b8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __wap2app.ttf
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2app.ttf
        • Size 2KB
        • SHA256 fa82d37dd15c712ea5b2e9d53f1f29395de28158a75ca537bf5dfd3761db5aab
        • MD5 SHA1 SHA512
        Submit Download

        __wap2appbrowser.html
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2appbrowser.html
        • Size 9KB
        • SHA256 c17c9fa9d1443652798ead675193629bbda3c285e60d6fe8a0b5e2e39e05ca03
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __wap2appcontext.html
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2appcontext.html
        • Size 416B
        • SHA256 3eb57ce77cbeb3eb30a1a17c405c9ddbbb9bf82b5c2c87ed31f6f479793afb09
        • MD5 SHA1 SHA512
        Submit Download

        __wap2apperror.html
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2apperror.html
        • Size 1KB
        • SHA256 d969a084059966b4fcc7a090ce06d45493497ebf6f6be97bacf14cab6756d268
        • MD5 SHA1 SHA512
        Submit Download

        __wap2appplayer.js
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2appplayer.js
        • Size 26KB
        • SHA256 38b381c6b5fc3ee1136beec3db912dd71e0786cabd90f069c0b4ad6b7b310792
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __wap2appquit.js
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2appquit.js
        • Size 10KB
        • SHA256 655868bd3bab6196ff736ba9b7ae3acbc614cc4a2839117cc0f5e58e27bb7de3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __wap2appswiper.html
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2appswiper.html
        • Size 46KB
        • SHA256 72d7ce0d6e3b6ded505bdd9f279ecc3262027d40d6222fdee2749c9850f46d65
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __wap2apptabbar.css
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2apptabbar.css
        • Size 1KB
        • SHA256 e613d71151b2c01b697f662e3f194bcd60265c767bef9bd49766bbd54f24b019
        • MD5 SHA1 SHA512
        Submit Download

        __wap2apptabbar.js
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE5/wap2app__template/__wap2apptabbar.js
        • Size 4KB
        • SHA256 74f86605265a03be3a48a7db37e4dc8a16acf660c92716f77f3740c3f7610ac3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        eje3cnc
        • Path /data/user/0/com.ciecapp.android/files/cnc3ejE6/eje3cnc
        • Size 39B
        • SHA256 5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf
        • MD5 SHA1 SHA512
        Submit Download

        init_c1.pid
        • Path /data/user/0/com.ciecapp.android/files/init_c1.pid
        • Size 487KB
        • SHA256 6881273cb2379cb765c44584ca60486c95635eb74eb5aef4f9521620a7ad59ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .imei.txt
        • Path /storage/emulated/0/.imei.txt
        • Size 32B
        • SHA256 1441755a12513d11977f1b54f2f1ced0e500d6ef7890273f728d5f9ee36540e0
        • MD5 SHA1 SHA512
        Submit Download