Analysis

  • max time kernel
    2649496s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 18:46

General

  • Target

    6c6a5673b58c2ddbc4ce9668e790e6943fe264f251c1125b36f53ae022e14d32.apk

  • Size

    12.4MB

  • MD5

    b677adacbfb6c818c946402a508804b6

  • SHA1

    5f6a71f3d1b26dd27517d5693e7a2b69b517b0d1

  • SHA256

    6c6a5673b58c2ddbc4ce9668e790e6943fe264f251c1125b36f53ae022e14d32

  • SHA512

    267e1d3874923fc8c950fa60b4e9f42b6bc589119d045ebe80e32bcc4716a91f910dca52ad2a2b075656e56cc5dfef17639c45ef82878f26d2f82684918063c1

  • SSDEEP

    196608:yl/SUOeeH8NRAcrZbcPRNcODdOqlr/WO7xG+1M2VLDfOFuJL4jEwPxYNlFTnlPz:yAUOeeH8sMot/WoxdVLDuuJLwgfTnlPz

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4249
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4275
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4332
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4355

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so

          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b