Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2832142s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 14:10
Static task
static1
Behavioral task
behavioral1
Sample
2af4f2ac261ffca0fcb5a83de3084c4aee585960e3ca632d62bea544d65e6c41.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
2af4f2ac261ffca0fcb5a83de3084c4aee585960e3ca632d62bea544d65e6c41.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
2af4f2ac261ffca0fcb5a83de3084c4aee585960e3ca632d62bea544d65e6c41.apk
-
Size
12.4MB
-
MD5
84dfa41332540a1de7928facf8d421c3
-
SHA1
fe249011d37542143ec26924cbcb1bfddaf2eeab
-
SHA256
2af4f2ac261ffca0fcb5a83de3084c4aee585960e3ca632d62bea544d65e6c41
-
SHA512
fbb7a6c04436d388ecef975e838d7c3508e62c304ea037cb3d374408cdc8b601a45e6d3778c9bc710c033a1da94e9ed1de37863ded82ec57deae55687c3c8528
-
SSDEEP
393216:AN5O+GVU9XBeQkjUa/IosdVLnuuJLwgfTnlPV:AzODU9MQkIa/yL1nBV
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg
Processes
-
com.xgbuy.xg1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4201 -
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵PID:4227
-
-
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵PID:4305
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4332
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.0MB
MD575df15d9723bbe56924d6928d4175380
SHA1ca3eec9bf5041aee49f0982e831442ed665de2ec
SHA2560be4869cca260bee792fbe2532d47598f71725b95f5d121d9550253b296f37dd
SHA512c4eebc43eda76820ab6611ac9730773e77195a64f8790fc57f5532a6cf04f30e8496d16ba4132a2906e9d6b654ea26a4570ede6862b8bd8a5257cced45f4d7a0
-
Filesize
363KB
MD56c9d83b90aa9c9f904d22eb9b16f8f95
SHA14d5e0ce3c55a22475b58a982d67ab9aa84384c40
SHA2562432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
SHA51207d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b