546a1a9e0136416704a94b086187cb29805508bbc1a8d4f146c09146179a1f80

Analysis

max time kernel
2571791s
max time network
159s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
23-12-2023 17:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

546a1a9e0136416704a94b086187cb29805508bbc1a8d4f146c09146179a1f80.apk
Size

19.2MB
MD5

5f20eb0d22f1f8b34f76f7955eb0adeb
SHA1

7d78292fe71541c467f11761c00df6b74084b2d4
SHA256

546a1a9e0136416704a94b086187cb29805508bbc1a8d4f146c09146179a1f80
SHA512

28b43b0184152280c0c0acd464c878b5f1045558a27592b1cf31f73b3de5053e52a13f58bc6c1c2541a866858581a1373b72468b3327e1831f312ff5941d2406
SSDEEP

393216:ojjQ9Zy1joIBB1uHRiNkr8scj+r2tF9Ymud3j7gfPdgZ7iiTrx5r:ojjQW1oQ2PY9F96TcGZeiT1x

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.xgbuy.xg/[email protected]	4639	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	4639	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	4639	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Loads dropped Dex/Jar
PID:4639

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xgbuy.xg/files/.jglogs/.jg.di

Filesize
340B

MD5
197c27c4e277b62430a300f1597fd540

SHA1
aed408411fafdf1567c97f32573efe762a479716

SHA256
76efa4a3ca4c3457d1fb03114f82eff5e8d87f34cb4568ea9c498568e78b7883

SHA512
edb8477d6f13e4e874e6f5c02d7b126e8acbc0da8c6860651d0aa2f114a2809654038685ef51fb18be7f5d2775f40f2dbb5f2a397ae1902c49ae9784a12c92ef

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

Filesize
314B

MD5
94b3d39fdd1274784fbec400532ab6f5

SHA1
62389c5095fe15e6cf963ee8950d2323a3a5a3d0

SHA256
e8ef269eb17f6a8c285d957b6b57ea445eeeeb55abf43126d9f843fb0f769592

SHA512
8884c70f44aa8846c34eff78140378243d5bdb91cc95c323d942a390513ae99d1ba530cc4f3063144f18c66371ecddfc22a5d12145459dffcac3eccdb7d389e0

Download Submit
/data/data/com.xgbuy.xg/files/.jiagu.lock

Filesize
27B

MD5
0fb23a998416cbf446fa876dfcee7c9f

SHA1
ceae90240174f71f7311f229f47276786dd1a82f

SHA256
7e149d85137d67572a227f912c4a4ccd23aee8f88191fb115a7ff5aa8735b47d

SHA512
2c6d2798aed2d9a7bee41cecd88c2acbfb5accec9dcc82380069def16d95bbfca5629f88d07ed324d938c8331c60e07eed05b3af0841532d57cab51f7bfeefcc

Download Submit
/data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so

Filesize
455KB

MD5
e5a53000766ebc433b27d6a66ec4f555

SHA1
2c8f53f1c03aec2005bcad67d731f07261dabde0

SHA256
78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

SHA512
370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]

Filesize
6.5MB

MD5
3607e9bc414a499b1da47aeee45672f2

SHA1
04b39c1fad9bd8b87eb58520ef98c649b4864a26

SHA256
80b924b9cb646f78b355227c8c265a0e694c3b1b2b17bce5c992fc8399e475fa

SHA512
0b3733811437cc28a57930c5cf57aa692e8e18e55c1dd3ba534de00cc374b3d1618a40dd0bea185d369816e96c67fe5d6ba981a51142f5f436997f0bcd574771

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

Filesize
6.5MB

MD5
2edb8333947a3cbbf4f2ad35404817fb

SHA1
22ae5219b5a313b13dc9d65590507fa01cb63b77

SHA256
c9f2509cab8c706548fa84a52ec17f7477666cc5d216e2751023c13c783658a8

SHA512
f90cb78128e059c587698697d88a20a101d08965c05b845382316dde2015a9674b975d68fea7f4a457cfb333c741248e2d84a39f4ce6db60f5497eb431f86026

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

Filesize
2.4MB

MD5
26cfde3ec0e689982b8c2c01e0313830

SHA1
e79bfad35416572ed90b33106b0e4353f609d742

SHA256
450570e28912a1267aca4a1f0c7f28571da0a6c83cb711bf6c35f6a8b228b4b4

SHA512
431268d92e22fb0a819384434ac2bcf1a59d18cd3300e13524baaa517641ed6cb2eb0d8a8747b75d2aceb73fa9b026005fe6cff339a47c8a119329f198f7972e

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
e4150abd502cc5e9f88cc21c331c1fb3

SHA1
b26301baf9ce58a9f82cbc029bfcae9f13d3934a

SHA256
b28dfc3f54653b89abdf7e39efc7e93cc949869405c019804405968e602dec6d

SHA512
4b2492d758216ccd051803fc134a4126a0c2cf32886da7f444196eefccddf1d9535867311e7e092cf322814d0fd16e1ba59de04247e3d29655c554c547716c41

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads