Overview

overview

6

Static

static

6

3bbbdfc6d3...a4.apk

android-9-x86

4

3bbbdfc6d3...a4.apk

android-11-x64

4

Analysis

  • max time kernel
    2537921s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3bbbdfc6d338464af8d1ec131e263149600cf88878d95a7ca69af67fbc265fa4.apk

  • Size

    11.4MB

  • MD5

    65100f37c5c9b5eaf82abdd0deb5ee4b

  • SHA1

    eb4051f400e2ee6ecc33ad517222167a82c11bfe

  • SHA256

    3bbbdfc6d338464af8d1ec131e263149600cf88878d95a7ca69af67fbc265fa4

  • SHA512

    e78d60b721c3f28180b13150d00631da9b463c1a678d1056e1336793b75089f8901ec1d060937b38d2ee0cd09ff3d9b7caf8c914c6157a49ab45d17e0d035d1e

  • SSDEEP

    196608:2zf4JkYLmln/IqNO54OkNmG+pcVLNNfJu/L4jEwPxc9PFoz:2T4JTmlhNg4VLNNBu/LwA98

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4219
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4244
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4303
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4325

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/com.xgbuy.xg/.jiagu/classes.dex
                Filesize

                6.6MB

                MD5

                1f2b7921806844a3a335da824a2c51a6

                SHA1

                8055aeca17345916e6248f0a800b89de76bb739a

                SHA256

                e9716135ec8aacc21246a8818d2b1985bd1972bcf99867117a0d8c5eff8c6404

                SHA512

                4365eb7631c407115ba70ae9015119c123fdea8d8d173bf75f4a695bd031606564690700ca7c5e3b83abb702974e80eb658295e46eec2a4dd31f85e2eb4094b7

                Download Submit

              • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
                Filesize

                359KB

                MD5

                3d5f6f33036d1d83a9db4a241897d3fa

                SHA1

                846a39db4d511863354867ec2c83031a61c92f78

                SHA256

                cdf3d9163dd27e237407295c2727c0a99c522719c4bd750f8ea19e31143341f0

                SHA512

                d210723a528e0cfde902290f65123947ead0d36f5a4bf71b833eeb318aedeaa9b8b2a4d07c1371baddc4a849c40e29e1ce28a36991f88f495009ea45fd09ef8a

                Download Submit