2146023545d09bac7736a7bb86bf61ab38bc8daa44d1642f9333e6d72b132ba5

Analysis

max time kernel
2535807s
max time network
155s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
23/12/2023, 13:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2146023545d09bac7736a7bb86bf61ab38bc8daa44d1642f9333e6d72b132ba5.apk
Size

27.6MB
MD5

0bcf3c297e3c39cb29e868d0b4d82e70
SHA1

40b87e7f910dc69062ba355626ec9c81fe063116
SHA256

2146023545d09bac7736a7bb86bf61ab38bc8daa44d1642f9333e6d72b132ba5
SHA512

738817ad3b6ffbd8b9080199f77a6a5937df99f3ab1366b80e07c88da53b2e1b17c8e01f211a8c163f17e307396531afe3183d5444ecdb270f26564df24a4395
SSDEEP

786432:L1iNQPC+R43Ya0yEd0tr2aEq7aAv+FVrmuBn0tFsc5:piWPCCza0ldMrBpv+Fx1B0tF5

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.wn.ydzg/[email protected]	4986	com.wn.ydzg
/data/user/0/com.wn.ydzg/[email protected]!classes2.dex	4986	com.wn.ydzg

com.wn.ydzg
1⤵
- Loads dropped Dex/Jar
PID:4986

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.wn.ydzg/.jiagu/classes.dex

Filesize
6.3MB

MD5
7dcea62a535a201468d1aff7f651c2b9

SHA1
d4f98b39bd84c4cc9d491b788520d7208202f808

SHA256
3457aa86bf11be16bfe83b7d77160279ab1d0f6ef3ce9c5b282905c167238080

SHA512
a11a0094506397484b3b02badf32eddc0c3a4974e12d6c6b0e1f5751a58d1f9e68d26a45ba2e38c696a7224de280906c02590b19f1959bff277fe460d23ee5c8

Download Submit
/data/data/com.wn.ydzg/.jiagu/libjiagu.so

Filesize
382KB

MD5
aa01dd97609092ce310e17bf791069ce

SHA1
f000840a8f68ea7beb2e29ea466088daf55609db

SHA256
e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

SHA512
766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

Download Submit
/data/data/com.wn.ydzg/.jiagu/libjiagu_64.so

Filesize
363KB

MD5
164b659b1b75016c75a025e050ec82d1

SHA1
53f0156f39800db2ac4acebd1f3f97ebcf9138f9

SHA256
aa8d5d52b64309ea1b5337fa5042874a3f81fcf5fe286205ac9a49bad2db88fd

SHA512
a8e9696f179ca5915536e1d600d18c452bd90588a3d8e8bfe1a94b1ecba166cf627a3e2036421294afe4acae2a4bf12d95786d26e180440794e48f7de96fe88a

Download Submit
/data/user/0/com.wn.ydzg/[email protected]

Filesize
5.9MB

MD5
db9bc8c35b1b26f26eacbea8fc55e961

SHA1
2ff2d61bab0d7cbaa7cf0fd7e0c906396f82700e

SHA256
02635ba2cb678784ab95bbea3fa3584a50ee824fa85056f880f57d234f823d43

SHA512
3f4de630eceeb9fed22577792c22eb8dab8fd30ffb7583d930433d9d8fb5f7bc3571ad78beb823bc97d5f67eb4ebb77b8e9097e19cb69424da6fbadfaceb6759

Download Submit
/data/user/0/com.wn.ydzg/[email protected]!classes2.dex

Filesize
6.1MB

MD5
93b9edf4d4313dd0674f19ec5825ad6f

SHA1
4d7be2a8477179917e786cac760c142127f730fb

SHA256
b50901f24475b489c7a91f0032f08ac0943e0815068399d86c877bf9adc99edd

SHA512
288b1a22f6dc5925333fcacb07d7e4f917a7a6431957aaeb49de45b131600345361535081254feb8eda1951c0e2880358d16b68ee3ae5afc91e85330ef278c79

Download Submit
/storage/emulated/0/Android/data/com.wn.ydzg/cache/wn_file_cache/journal.tmp

Filesize
31B

MD5
d6ac8c8db0504502d7f0e057a78c5ce3

SHA1
8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

SHA256
8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

SHA512
100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads