Overview

overview

6

Static

static

6

408eac76e9...ae.apk

android-9-x86

4

408eac76e9...ae.apk

android-11-x64

4

Analysis

  • max time kernel
    2677874s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    408eac76e9676ebe0532b2f27a5fa22e142ed010a60361a58988d4c88d1871ae.apk

  • Size

    15.7MB

  • MD5

    49c846c40b908571b10c20ab157cd8a6

  • SHA1

    b5cdccf4d2deab660eef22ecb20b56e69435c431

  • SHA256

    408eac76e9676ebe0532b2f27a5fa22e142ed010a60361a58988d4c88d1871ae

  • SHA512

    c5d2b66d349b09465c55bfd754692fb6fd9701e54f6f3f5a8429e9c84c67d419bc0837ce39c4cde939a61e027f1f5583f8d472598d746a8a153cf15ab54ba36f

  • SSDEEP

    393216:vPArrgm+NBZxUzdcUbNSGyZBDOxBvcM5iHzzvF:nA3gm+TQJxNSGyIxcMYTbF

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.broker.youlan
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4245
    • chmod 755 /data/user/0/com.broker.youlan/.jiagu/libjiagu.so
      2⤵
        PID:4272
      • chmod 755 /data/user/0/com.broker.youlan/.jiagu/libjiagu.so
        2⤵
          PID:4320
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.broker.youlan/.jiagu/classes.dex --dex-file=/data/data/com.broker.youlan/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.broker.youlan/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.broker.youlan/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4341

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.broker.youlan/.jiagu/classes.dex
          Filesize

          4.0MB

          MD5

          f34e83b3dce50b1ff70e55cd556821ba

          SHA1

          0be9a8590a74816b765328c93d0af5ea81423bde

          SHA256

          f30057f5d4d75a0897f1399c926a3c2fb18af9054de0e1bf0541ee08b08b2b32

          SHA512

          9b7eb876656ae69fffb7824d8935e369bf9a52c20949d70bccc53b1795bacc8eff6add9cc1c7d7f01c1f7faf416dc16b7a0b8c31654af0b99f58b28b0d927557

          Download Submit

        • /data/data/com.broker.youlan/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          1383b616dee6678b3591e577ace67225

          SHA1

          f2b0f5968b52f9c3ed022f3b3ba67e6142df89ba

          SHA256

          945e12ea3019404a01754579a234b21ff3c7c17c175750e514c0d404e9f30554

          SHA512

          72dda5b9833701c52e44260d979f6b91dface07899aa20ea686ef3d09f3225826140b7e8c336072aca21d51e88151a3fdb6952fc53b9749051f16197e8086b60

          Download Submit