Overview

overview

6

Static

static

6

694e8071ba...16.apk

android-9-x86

4

694e8071ba...16.apk

android-11-x64

4

Analysis

  • max time kernel
    2641403s
  • max time network
    135s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 18:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    694e8071baf1139181aab7da122c8f3d1e1df2c68509260a26a4bbf0f7e27916.apk

  • Size

    18.2MB

  • MD5

    96d6fb84b6edf0795db3b5af4ccc160f

  • SHA1

    3260c3fdf2994f19ca94a2d5ede8ef4c9b93c4cb

  • SHA256

    694e8071baf1139181aab7da122c8f3d1e1df2c68509260a26a4bbf0f7e27916

  • SHA512

    6a8c33e60371443ee3a7f6f3b75a77e7eec8d46905da9454d538e11818744f88c0f33731c13ac999d3a8dc055eb44787d6f0844aab5189ff43eb9903e8fb0f62

  • SSDEEP

    393216:CnOZc58B2BK65EdjaUrFFFd16pJXLDvlCqILHlPr9z2q2c8brC:qBBK6+aUrLQXLhC/xAzM

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • zwzt.fangqiu.edu.com.zwzt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4266
    • chmod 755 /data/user/0/zwzt.fangqiu.edu.com.zwzt/.jiagu/libjiagu.so
      2⤵
        PID:4294
      • chmod 755 /data/user/0/zwzt.fangqiu.edu.com.zwzt/.jiagu/libjiagu.so
        2⤵
          PID:4353
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/zwzt.fangqiu.edu.com.zwzt/.jiagu/classes.dex --dex-file=/data/data/zwzt.fangqiu.edu.com.zwzt/.jiagu/classes.dex!classes2.dex --oat-file=/data/data/zwzt.fangqiu.edu.com.zwzt/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4374

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/zwzt.fangqiu.edu.com.zwzt/.jiagu/classes.dex
          Filesize

          5.7MB

          MD5

          5b4de1c94ad0834b2199a07182b55cec

          SHA1

          12382fec9f779124af09745dad2b58756b41af28

          SHA256

          1041a5983cef7ef395dd0f85b99bedfba1c606551495379a7c25876d1a59b150

          SHA512

          a9399fce2afebda2311ce2add5ec994b63c00cc8292c3b95728b2083516515c2f64f40c52e3071cf8dee34dda8356a9d03c795f063acdc0f400d3c9c6236a3d0

          Download Submit

        • /data/data/zwzt.fangqiu.edu.com.zwzt/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

          Download Submit