Analysis

  • max time kernel
    2565779s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 17:36

General

  • Target

    5963ac51fdd48d9d7329f3653d58d548d74e6dfdb5ee5b370165ba7492e13170.apk

  • Size

    16.6MB

  • MD5

    4571d190afd43ec009da28d7e6398f4e

  • SHA1

    71f29af3a65a272c4313e2e1a08cf1a6da227ad4

  • SHA256

    5963ac51fdd48d9d7329f3653d58d548d74e6dfdb5ee5b370165ba7492e13170

  • SHA512

    4a9f191854c977d10d5c9379a108cab511fd2d202b7054c0eaacccf9b4301ffaff7f2d25a0f280cdb4f5e37ba38d51b590f22e445478b9985aaf30b1ef8de6e3

  • SSDEEP

    393216:FgNW7jMtG3jypqQQohj2VL8bu59LwkeqrOiAK:S4PMtF3TU9Y78

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.xgbuy.xg
    1⤵
    • Loads dropped Dex/Jar
    PID:4921

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xgbuy.xg/.jiagu/classes.dex

    Filesize

    7.9MB

    MD5

    7b2b93e7d884c3b28158150e5e508dea

    SHA1

    acffa3c219b27c5c408241e3946b06398ddd8627

    SHA256

    af2430f5bb6a241cdc72ff21e5ebe6b7d284e4b4f6b4a7c682ab6eba8ffbe7e9

    SHA512

    f798bb1280c2621babfa59e824570b08ad874ea741aef4d5806212995d5f92ca20bcd7f8eceed8e2d7cb8ca3451d79069bc3788bc1346099ea42e3a9f76fcd59

  • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so

    Filesize

    382KB

    MD5

    bad90524bd3a2facf926e649e320a5b3

    SHA1

    0021e1051f80aef052862f69b97173483736505f

    SHA256

    77bb7b4333febc6ad0fa04ce2a27abae8749825e1beac46fe5f03662c8e4c1ef

    SHA512

    4673c453ad0185020b07f351004e56abeacbd15f90a2dfb59cdcde52b3354cd9f2db39b1d941409bbc4c6f46655b833c1100ab5587304f0d35b809a6e7c830e5

  • /data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    4ca2c4ec4433e624c3e48c46ba673154

    SHA1

    f9dc16b172965c1630627a02f54a4183b0bfc001

    SHA256

    d0df6d736ea6e9267c0e938936fed739db31cebb7ce253e0ca4a0c1c0ed7289f

    SHA512

    c4de900bea8d7f88d42eee8adc4c6f8e007b17f9b8536108c479440051c0f9713f41f85f67e29f042b5a6f5072277671529f3d5737180540b8840ebb04797a67

  • /data/data/com.xgbuy.xg/files/.jiagu.lock

    Filesize

    27B

    MD5

    b0cef0ee5b2a47ea17d2e2e998c906b0

    SHA1

    f443605e08f29c656af2004b53aa0517ca4b803c

    SHA256

    4de6786d49cdf42b03bf5460449fac5881d282e0f843427edce5342473e4ec3e

    SHA512

    d6011b33ac7ca91939cf47ca47ac58d365a881f1b7b55d1fcb54b685243ecf552c5ff8076b37d6f8fcdc8129e8a490ad041d5e7b0fbe733d300632dfb6540e00

  • /data/user/0/com.xgbuy.xg/[email protected]

    Filesize

    6.5MB

    MD5

    c271706070cbcea5908e6b48c320076f

    SHA1

    3bbe9f0693421a8fbd19013c3b0fffb7ad981be8

    SHA256

    21f4a382ad94a710b39906362d53d43b6e97e7298a54859a4d3ada8b8f8fbbbb

    SHA512

    ca38b739a3b3660cf08239acea752b01cb52af3874b6c531ec00732168033deec59d22fa20e669e6c4ba5e9e647fa55bead5c470ab9e41bbaf2863a697dfbe0b

  • /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

    Filesize

    6.5MB

    MD5

    ab81eed0c49e17e95f196169c1e38e45

    SHA1

    8c6538528640100f9961e3b2ffcb2d5d247d8c3d

    SHA256

    cb20a695dfcf9911155923e6a771b21011a722f524cd63de65766e6ba1dd284d

    SHA512

    ac9f7d9f8a4d5f305789160ae61969f4363fd86f6d1cb951e442e595bdd5f07174f583f0e43241a99b6f08c16d50c1ccf8ac1e2ca8d2bc5982910f5aac8c7c0f

  • /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

    Filesize

    1.7MB

    MD5

    79afa3cb67b88ff0f442b0194d956f30

    SHA1

    9152023cb2d3fb848dcf63236e1a3b083cb59bc4

    SHA256

    5ac06d0094703f1e0766bddb39c6b8d342948c686a4282e1ec18364c1c82507b

    SHA512

    a3e7db3d1aac61438e6961030517531ea3b7aa01037d00dd9392bab1594c379c95d0b3decf742344a324bf9352ad2ee63012e81295087de36bbf385b3f37cac0