Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2683536s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 14:10

General

  • Target

    2aeac12d00d433ab69bc5d496467dd84dea10e4288ce5b318047218053ea223b.apk

  • Size

    16.6MB

  • MD5

    147a243d7f7b45c43569c98898a69be7

  • SHA1

    3cbf2f6ab0200215b6c33a7a0a58f3eede933784

  • SHA256

    2aeac12d00d433ab69bc5d496467dd84dea10e4288ce5b318047218053ea223b

  • SHA512

    a45fe26f14601ed9c3e0375400dcac2c9ee20b664da6f50d1b1b6968dfb66cbdd0943d4e7a2dd7ede8757368c8ace415b14658facdc7161b798938f5f8fff96a

  • SSDEEP

    393216:ZvdJFbqf71lPzJNoKLybaMoYjyVL8VuK9LwjeqzK:ZvdaD1lPzBubJPt9ZF

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.xgbuy.xg
    1⤵
    • Loads dropped Dex/Jar
    PID:4987

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xgbuy.xg/.jiagu/classes.dex

    Filesize

    7.9MB

    MD5

    8caaa48dc7e5c2e03e726f05ee06ce17

    SHA1

    ac7550f0a6a0e642d10e4841bf9412a6e97ee4b5

    SHA256

    04fd7621351c3b140c422131447cf1e9fcde60d9516e6d7cc5efe84168e0c92b

    SHA512

    22293ca350847a52ac41a9e246680de411821f194723a0f3b32bdf1832b6d2c5a5bd3eb4b02a6e3e69fc61e30d892219557689c3d48df0a7ee8856e255a09d2f

  • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so

    Filesize

    382KB

    MD5

    aa01dd97609092ce310e17bf791069ce

    SHA1

    f000840a8f68ea7beb2e29ea466088daf55609db

    SHA256

    e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

    SHA512

    766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    7530a29e1b6aeb0b57110d9c3bd03873

    SHA1

    10cd2a25b926ea755089e5140bae85578d39d414

    SHA256

    24230f1797d63b125e59b324f8e162d97a8fffe9002579f916e648cd7638878e

    SHA512

    b6ed38df498c4b50c49fbf80e32f60a8313631898d8e8907e2b2e2b18254fb331d1a4fc7838fca6b3754b2ffbadb27f38879e30acb84e54aee872e4184f4e951

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    8049086ea5994ee05c97996ab389b7bf

    SHA1

    137faf3f50afa19b2f2d250cc9f387e8916a8fc2

    SHA256

    6d55e39a0d36c85a6cee540f7a015dc4ea9b97b949ffe6d2fade7bb8c657ac53

    SHA512

    2067fc373d94f6435ba6157aee348b1c78fac63a63cda8778dbf2902011d44fdbe1db7c2d3b29b751a462c84cc4e3f65dc0bd170908391109342a87c09b15cf0

  • /data/data/com.xgbuy.xg/files/.jiagu.lock

    Filesize

    27B

    MD5

    5c715de89123d859707a563d879f2a67

    SHA1

    9347b3da06602bd119cfe47ecd83d9ac494478f9

    SHA256

    1966b7da1addcb70d8e49b801dc955219cb7ccfd6a1f4e30dc546ee5584da947

    SHA512

    474c741b4577d030eebf2ec50054e2e6ff24391d619b7a22296f7c157d2750598f670ccdf90b20e7a6d5eb86db0db7348db7a0d172bf9dde6aa2efa3084bc27e

  • /data/user/0/com.xgbuy.xg/[email protected]

    Filesize

    6.5MB

    MD5

    b56bafa72224cbb4d88081445bcbe79c

    SHA1

    2062e362274ac0c1490f34903e2a320c53878946

    SHA256

    7d90ae96dcd31070f7dca702af625529a5c0b439e510aa0b59e82dd4bae4fa95

    SHA512

    99dc2152144f58c997bfac7f66c0c4a8cc42c14ec01362754f61fd4ea62faab0a4a17694c9505965af0cfd67d4f08b749f13de91dfe6da2ccb050f39c322ba6d

  • /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

    Filesize

    6.5MB

    MD5

    e92842ccbc2f3f8402863812504b95ec

    SHA1

    6e1a80d114587b4c7d1211cc097c3d0931aaddf5

    SHA256

    c11e5ae477cc44da9d739a2b4cee130cc61cdcee6da6bec9086f710c72a630be

    SHA512

    cfb54dc3b66de37c6cdf8eb03bed6eeaeba638bda3fe070dbf04de8ca92b49345d1cc9588d8d695f16b6cf0805685310c6c91acee4651320a7c437bf4fe45fe9

  • /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

    Filesize

    1.8MB

    MD5

    b32d34cc2cf732835aed3626f2d6365a

    SHA1

    3d2bdc12fd4e22d3bae35e7aa7aa5866b864cc30

    SHA256

    a8f1a230a41d3b0d6a4206a906c75c46f2a25e343bf4cf2ecbe2b3b7379d84ec

    SHA512

    2bacc2d993d7ba28cc18bca3ff6371cb39c4d1d9346a60874d5bdca2a93475f87c65ea1da3c18846941378b23c362dc371fcb5a7469f1d87ea0e5a9155042adb

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    e5cdd4322b9358435424f61f0a9024a6

    SHA1

    f46c52874b79c826d618fc426daed5edfa445dcf

    SHA256

    a27d816c06a7d4b08e119e97810e4a89295b31f5c62bc0c8e2a86e41ad6fd14e

    SHA512

    93e967641c69bbe41664ad509ea0e394ed14b0356a215d80ef4a8d30e706f7f509dc51bbb25008473454843dda0da07bc01fb127d1070932dce8e62be369b558