Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2832142s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 14:10

General

  • Target

    2af4f2ac261ffca0fcb5a83de3084c4aee585960e3ca632d62bea544d65e6c41.apk

  • Size

    12.4MB

  • MD5

    84dfa41332540a1de7928facf8d421c3

  • SHA1

    fe249011d37542143ec26924cbcb1bfddaf2eeab

  • SHA256

    2af4f2ac261ffca0fcb5a83de3084c4aee585960e3ca632d62bea544d65e6c41

  • SHA512

    fbb7a6c04436d388ecef975e838d7c3508e62c304ea037cb3d374408cdc8b601a45e6d3778c9bc710c033a1da94e9ed1de37863ded82ec57deae55687c3c8528

  • SSDEEP

    393216:AN5O+GVU9XBeQkjUa/IosdVLnuuJLwgfTnlPV:AzODU9MQkIa/yL1nBV

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4201
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4227
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4305
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4332

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.xgbuy.xg/.jiagu/classes.dex

          Filesize

          7.0MB

          MD5

          75df15d9723bbe56924d6928d4175380

          SHA1

          ca3eec9bf5041aee49f0982e831442ed665de2ec

          SHA256

          0be4869cca260bee792fbe2532d47598f71725b95f5d121d9550253b296f37dd

          SHA512

          c4eebc43eda76820ab6611ac9730773e77195a64f8790fc57f5532a6cf04f30e8496d16ba4132a2906e9d6b654ea26a4570ede6862b8bd8a5257cced45f4d7a0

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so

          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b