Analysis
-
max time kernel
2675695s -
max time network
129s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23-12-2023 19:07
Static task
static1
Behavioral task
behavioral1
Sample
723ea8bced270a729f16bb8dd9999f1932132f4524f3b43408e379ba7fc958f6.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
723ea8bced270a729f16bb8dd9999f1932132f4524f3b43408e379ba7fc958f6.apk
Resource
android-x64-20231215-en
General
-
Target
723ea8bced270a729f16bb8dd9999f1932132f4524f3b43408e379ba7fc958f6.apk
-
Size
12.4MB
-
MD5
e26c7bb870bc2e5ecf49bbcc546c388f
-
SHA1
9970f12747b4fae3d533ef86ad860ea225c38b28
-
SHA256
723ea8bced270a729f16bb8dd9999f1932132f4524f3b43408e379ba7fc958f6
-
SHA512
f8a91f78fd798cbaf5b6da0880c81b0ac6a17b6d4f66071814ec16b63b5eed63b72dbacc752b0dca05cef680e6a7cd8ca067ab0379b65b06cd04398c840fc93c
-
SSDEEP
393216:Le+O9kNt20MGJ2LHrwzo0dVLDuuJLwgfTnlPf:LzO9kNt20NJ2LHrwbL1nBf
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg
Processes
-
com.xgbuy.xg1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4272 -
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵PID:4304
-
-
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵PID:4361
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4383
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.0MB
MD5dad768c1a769652727d5039fec1e2a73
SHA1328e8d9346f3f511075c1e47a44c2e3040c450bd
SHA25677bc756f7fb691e7ca4cd7e899fc588750d1a63a99627103d4d40f24ca4931a3
SHA512d2a901a5baf35b15ad1a3560664ba03dacac5684f639e153f25f8bad91e715b5e68ede9dbc9fa35458891affbeec711699eb67488af509b4a39034d3a5dd2091
-
Filesize
363KB
MD56c9d83b90aa9c9f904d22eb9b16f8f95
SHA14d5e0ce3c55a22475b58a982d67ab9aa84384c40
SHA2562432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
SHA51207d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b