Overview

overview

6

Static

static

6

57cabc7c94...f3.apk

android-9-x86

4

57cabc7c94...f3.apk

android-10-x64

4

Analysis

  • max time kernel
    2575089s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 17:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    57cabc7c94719073143440627856efc9e462d1d90ad38d5dbb78b603a6099bf3.apk

  • Size

    12.5MB

  • MD5

    279c0d15b42dab2418ba7a97e9d17b31

  • SHA1

    12ecb054f4feb15ccf70ea72ed9060f72812ba33

  • SHA256

    57cabc7c94719073143440627856efc9e462d1d90ad38d5dbb78b603a6099bf3

  • SHA512

    1047f4eadcb16846f5c73909dd1c690cb2664a3e61332a6414bd374a9da67f65cad6860b7d506e4d317450c38332249c0d6948dcb32e833032601fdc06f5b8cb

  • SSDEEP

    393216:IZaOdGtB+8OMIxZFquKo0XVLqQuTLwNqo/XL:IwON8OMIzhr/E7

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4489
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4519
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4598
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4620

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/com.xgbuy.xg/.jiagu/classes.dex
                Filesize

                7.0MB

                MD5

                1ce524a33bdfece5da3f685c03d6084e

                SHA1

                c3b386ee6a6b3cadf8d2dcb074fc4e9f65e48826

                SHA256

                4c2ffbcf362656335d8deb0f8a706489fda8057951645556d94248d4d3c63f17

                SHA512

                1d218efec15a3c13b889d00b50a417d5de4e69b267b91eb4d41ca9ade1bbd1b85c83ff0b5ddae08cb1b303e86c39289a1dfdc7c0d7ec2a286826a04199663c27

                Download Submit

              • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
                Filesize

                363KB

                MD5

                6c9d83b90aa9c9f904d22eb9b16f8f95

                SHA1

                4d5e0ce3c55a22475b58a982d67ab9aa84384c40

                SHA256

                2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

                SHA512

                07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

                Download Submit