Analysis
-
max time kernel
2644297s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
-
submitted
23-12-2023 18:38
General
-
Target
6a5ee29a664cdf3d44545e487abc2aa395e7dfe4857a1d0eb2109dcd920eaa4a.apk
-
Size
31.7MB
-
MD5
119bd65125469956a451706bbc38e70c
-
SHA1
667a4d29d9d70b44e2d3cb1ac982761b7c5c1eb1
-
SHA256
6a5ee29a664cdf3d44545e487abc2aa395e7dfe4857a1d0eb2109dcd920eaa4a
-
SHA512
73242846a73bc81f20db59f2dc1c261eef10228314c4d3c64a3a1d052b380ad2edfc1cbb4285ad9d0d301cfc5cdab19d3aadb0e856b105d58957dd98279174ed
-
SSDEEP
786432:LYNS4kCQ2zDnbE6DIBGljRq8LyRqQHwaOzicc7qNI:LT4kCn/ngaXjRfyRHbOziccYI
Malware Config
Signatures
-
Loads dropped Dex/Jar 5 IoCs
Runs executable file dropped to the device during analysis.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes
-
com.keisdom.nanjingwisdom1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
-
chmod 755 /data/user/0/com.keisdom.nanjingwisdom/.jiagu/libjiagu.so2⤵
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --compiler-filter=quicken --dex-file=/data/data/com.keisdom.nanjingwisdom/.jiagu/tmp.dex --output-vdex-fd=44 --oat-fd=46 --oat-location=/data/data/com.keisdom.nanjingwisdom/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
MD5160b9dcda98cb6267cc225a9704c8ab2
SHA1978a66edeb266338515f5abf9b9f2255263470b2
SHA256f8a0e8a1c4bd689454fd02b410523b096fed073d22f4afe7e6e52c2b276ab6aa
SHA5128a913dc42cd8a63d7abee29cf09782ffaf703c587de595967ed649fb016bc04b436d3a6f2cc1a7be73e4f34cb4e5a7520aef34a5c8b8a7936aff4f203677297f
-
Filesize
382KB
MD5aa01dd97609092ce310e17bf791069ce
SHA1f000840a8f68ea7beb2e29ea466088daf55609db
SHA256e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
SHA512766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4
-
Filesize
284B
MD5f1771b68f5f9b168b79ff59ae2daabe4
SHA10df6a835559f5c99670214a12700e7d8c28e5a42
SHA2569f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939
SHA512dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5a42b382940f686f6b2a90e5e5b66568b
SHA113b5e27cd05335c691370bfd52c8c92b867e63b7
SHA2567e85ea75192d59f043f3e097839b623648ba207bbe5ffeb1590f4152f0620338
SHA5123b764054d3a64b231c365327a46f6c91e83c7755081b72912dabb4d1982fffda16a648e90a9addd05e885c4280a7c884cd0d17fe282591afa93bedd5d08d16a5
-
Filesize
314B
MD59d4623f3e88d7a64c9173409a64edacb
SHA166dd1f67e23eb42321d9ebd62ccfe64bc2923a0f
SHA2565430cd0768fcadaabc3ce47eda9270ed42e27aeb3d9dc5a4d62c9ac625f34f45
SHA51263f7b10d4ff6eecb2df7b235b873002667346788e8c668e2a11fbe516fcd609a548672651680aabacd69a84b4e0cbe612e383a293e0848e54a542e91102f741a
-
Filesize
27B
MD5c1101151c22f142104307e37b2a286a0
SHA14df619594277c4b71d05ee3bdf9808c2a46cbe8d
SHA256f6f0727beebda04e747260747ef3bfa6e3504263fbe7b3c9575db3df49fbb9bd
SHA5129740c89ea2665e63a71e2761a6671002dae8ff2d2e9d3a50c06072d74cfa4abf15c6b2470ad593fe7cd7392070e942f10464e864dc7bef97676a0e980e81fde7
-
Filesize
5.7MB
MD5843833d5acd1c01a0711b4561c2999f2
SHA183307ebaf6e9a125b71bc832f7da407a3019797c
SHA25632f03ffb11fa0c7bfa3cc3a3cc736d0e883f941717ee73ab2113411723e08262
SHA512bca96535ed287244d8027b2dc88a626ed58692c85329bc86027c8e1999175e61e27d87d58101e2f7ec133e646328478f099e4439cbf68e0d8cdb7e202365bdb6
-
Filesize
1.5MB
MD54adae9c1dcc79004df1b76895cd7d9ee
SHA18102077e8114ad7b9c1e8c351336ee38dd75e726
SHA256e62be2105eb175ba444094b032ed54660347ba15578cd4b515cd36457a71e2a1
SHA512a7455faf38b0866014d4de54d202855fd35a83fce043255e9fe1dde98d28854a5957b9e92b5374b8c43b2947cf49a4d3fc76b07761f180e468c2b835e487a967
-
Filesize
111B
MD5df3211918035080b35995762336b9137
SHA1205a785b58130b95f54ea4adf28d2484abc4dd16
SHA256a4dac42d591d1158350ef62b73e02c758d24a26baf85b655cf3be14a76b7bebd
SHA512b8d8a5ba18b4ddd22723dd2aa7bbc64e8a718a41b2beb9d0efdadda4ef7f9e93643b6ef09e9eae24b25fb6780f9e0fbaba638fc4c035e5c88019d97fa26624dc
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD51a1f3c59bb28cedc2c0fc776a4de28ec
SHA10ba6157b8afac00cbf7d1c62f9babc515798a0de
SHA2566d1f4c7a8aa88e1f6ada881eb3d0491069d759b8e8ff29e99ea3555afbff14d5
SHA512398c0009636e3ec50e4de764b6b01a7d8b36fd3cbc25c25d3e8137f0cbcc27c0425606c33df754826c801779052289168c01609e0fbdb08a328cb20f5c1830eb
-
Filesize
167B
MD5e6d92cd0356e42ee4af723d067ccce6a
SHA1c3d71ea3fee958dd998cc5ca6af4eb0fabd46ef6
SHA2562588b8620ae95fdaf0982428f78bf0f08e99ecc58502331e691b45953ad92b31
SHA5126e3e48d639f980605f3b4ad72c5b68eaa16df29bafb87fadcc22200bd4a0368659430bfc4ecb584e08bf2ee1f75f952147a1b0aa7262fd81c9cc3d78dd80631d