Overview

overview

6

Static

static

6

497ecc6cd1...72.apk

android-9-x86

4

497ecc6cd1...72.apk

android-13-x64

Analysis

  • max time kernel
    2547734s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 16:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    497ecc6cd1393d4086e0ba4c9b23adc51c28bdd2d5d591c758732f7a7eeccc72.apk

  • Size

    11.6MB

  • MD5

    c2c3aadb931d057b413eaa7a83880350

  • SHA1

    efe6c905653025de43c262c2601e5beab3b584fe

  • SHA256

    497ecc6cd1393d4086e0ba4c9b23adc51c28bdd2d5d591c758732f7a7eeccc72

  • SHA512

    81302e6c225e1feb764e3970033bfd89ad2125784d6ba004a18f6e2f96d9a7837ff3032432a9d6181d8500c24b668d613f483802bf71bb82d14a54bb5330384e

  • SSDEEP

    196608:U/tKpEjFg2zHKS6nUlOLKvCU8didc31yYgy7pos6y9h0PcG+1BVLhfKuEL4jEwPv:UkEj6GT6nSOL+d84dI1yYgymy9hTlVLH

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4245
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4272
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4322
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4344

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/com.xgbuy.xg/.jiagu/classes.dex
                Filesize

                6.7MB

                MD5

                67ec42dd57aec4183db26bdde646d769

                SHA1

                f284a98d6a836ec9823a80af900f04385bd1f4c1

                SHA256

                adaf4bc2ecc7519c040689e74648c6a86350ef3e831d7d7470a1404807733aff

                SHA512

                a297edd72c29d724110d9ba69a64caf20466556f2c3418f9140507640c1954784699e025c43ff002fdc96b75d09ae989cbc6ac4d71c2ff0ebd1070ecb32284a9

                Download Submit

              • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
                Filesize

                363KB

                MD5

                acd3a64e22c56dc0628edd7615a74ab4

                SHA1

                ec22ef7fa9dca4b475af2724d483bda140370ca7

                SHA256

                c57cffd4175fcd618f29d48eeba1b8b30e2bfd4ce9e05c6c5b0bc4378914d008

                SHA512

                ec93027efd827742d3f9db70c4d4aba51e817191ff888aa2337939f2ce518b98f1c1f7ed3d49d25d3bff47738f68ead6348b1b309c54a17e18c4460cc2142e3e

                Download Submit