72b964ffba7e617299c81c1b6a49fcf8eb18c4161ed0f0440adf80c30d580131

Analysis

max time kernel
2607355s
max time network
153s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
23-12-2023 19:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

72b964ffba7e617299c81c1b6a49fcf8eb18c4161ed0f0440adf80c30d580131.apk
Size

16.7MB
MD5

a65fa1f98f015592cdca4e23dc2a52fe
SHA1

950bb32a6f24435f00246a8530e33706a9a9f540
SHA256

72b964ffba7e617299c81c1b6a49fcf8eb18c4161ed0f0440adf80c30d580131
SHA512

48700393123a700f8cbe3c4897d86e9b620b1ac8b1e352f3550bbb637602c4744bd0ed6a05068e1bc965cbeff7cffdecffa5b0a172f53590f6db9f2d386b6a48
SSDEEP

393216:indwjxZnFZksuRslaws6VPLwjyVL8VuK9Lwjeqz4:idW9uRkKPt9Zn

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.xgbuy.xg/[email protected]	5055	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	5055	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	5055	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Loads dropped Dex/Jar
PID:5055

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xgbuy.xg/.jiagu/classes.dex

Filesize
8.0MB

MD5
3493316658a0c2a05f5b8ec92b738f41

SHA1
2e0d1aa5370bc3b5ec609a2db70f187c82263796

SHA256
377bbe8a72f423dc7c3b7ec0080eb732a3e869cc4d5c8cf3b255df7b6ac691d7

SHA512
cdcd4c0a9ac02255ef69554d6ab8e979ceb2de1a5542b512b84db89537621e7fce9b9d6f665525f26bf3f29ecc0b150735210461c86cf4c5bdb0a37d8d482c58

Download Submit
/data/data/com.xgbuy.xg/.jiagu/libjiagu.so

Filesize
446KB

MD5
8f55d5deb281d8aa1a0b9f72f7185e58

SHA1
5ce262af6a74a11931bf4b1e92a59b9acab27f37

SHA256
b57aa883bd4a8241fe2ebbeec0988614da1ad453f5784f3439335a6f800c7944

SHA512
4d74f007dc4a19ac3a8ae3434f06d2509397301c0a9b0288475280801c8907ce48248459436416fb14fc5a3a6ce790d680b6b9c95d35afc49c2f0639199b56f6

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ac

Filesize
32B

MD5
1264f30db5bc978090c891fc9ba97820

SHA1
22a1664ca5bac8af36bdaf8e4098c02c7fc9c1fc

SHA256
6383110e70c2cf20a67539bbf759d99229ac2dcd214cae6a3c5de840497bab2c

SHA512
f3ec53223344ea4763479b39ae62a3dde4b83e0db05d4707c9e2c914725943063706c6c53e6fc043ee13640ac98242775c901b84ec76eb3edf11615bd0084488

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.di

Filesize
340B

MD5
2b064b313778c5f1caf841416b5a4c87

SHA1
15053caae05a450c1839ec0d48aa07b19ef94731

SHA256
4502e472a2b5b327708005a9582b9438da9d5f76707d18165a8c769f659bb967

SHA512
051f33a71a43ea3a63ddad38328b50b9357daeecefbd7497b575f8ff5df355dd96b714a1e6998d907dd638cc036d526737dff17fda5f41db86d1218f6940cac4

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ic

Filesize
32B

MD5
9afbf0dc0b4a4fd0a874cfec2c55461a

SHA1
a42766499eef11be1120ff87588b7f715c1b2a7f

SHA256
75c6a927b6cffe50b1a48e8aff766f5d543dec5aec8010b835ab4c4d8dd3da37

SHA512
863cdc25dd26bc2db5a80480a5d5bd16965ce02afc94f732f31c24bdcd3daaae24d41504f0eefead9a8ecc402aa2e798ce100e8a225b13b38b05aa433456185d

Download Submit
/data/data/com.xgbuy.xg/files/.jglogs/.jg.ri

Filesize
314B

MD5
906ba7c03eed28d5a8ba80c6e181a296

SHA1
f78bfecd032410514c2128917501b2f934df3740

SHA256
9a461061d7ccf0feb7738a2e106236306a52385fb6068dfb610ca8031362c781

SHA512
79c343657082ac6780106a6e35990c2a2c94ab3a0f4fe0a11d4097ae671532307b1e104ecf40037cdaab935373f81c021a7407c4ff4423f6ce9649c8fa543eed

Download Submit
/data/data/com.xgbuy.xg/files/.jiagu.lock

Filesize
27B

MD5
6663061e35c777abf17fef84d5f1ee9a

SHA1
9b7ae980abdf2c6b2b3eab0182a0570c113a3710

SHA256
7010847967c2175326bfa2e2b8608456aba3efb313061f311022cdf8c798918d

SHA512
5b55eb844e44e767857b59c69684a1d4166193a5b731ed8cb797765ea560e7ffe6f3f3a4a429a3dff996fdc06afb81aaf9080721b6aa926699fbf16f3ebf8d59

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]

Filesize
6.5MB

MD5
b4ab2d5c6bf0fd7c371f3297c5a67718

SHA1
74420a04eb1d16349d2568f6da62f368551e5919

SHA256
642c31b931db7bbea11ef3041eeccb24370348b2e35b8516e46843818ef2aea9

SHA512
e743a8caf95f2dc42e39d9867d2d3607e5c83a33646ada1872f1bf530000e8521a2fc0a2ca091e51bc4f86d2ea0e20b7ea6ac0f2b9ff5e31f9d31b8debef5bfd

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

Filesize
6.5MB

MD5
5f5ff7788ac3dda96c24ed424d7e9f4f

SHA1
11a7930073eae7f07aeafabf294c6b9ff0b82284

SHA256
a90e8cfa45c5218151a33960a25bf5d0ac54ee7a3dd8f71e05cf0cfdfb0b1860

SHA512
48366c64118e9ad0a77bbb6726d4f89da209d35092dadef3f668467aaba644396529a2a471938f6f155b5294105be6fe326a4aae304c06d57977378d272936fe

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

Filesize
1.8MB

MD5
fdaf9029e589d1ceb0cd8368597ad430

SHA1
3472c2d44153a49043cb635e114589bb4ed46d74

SHA256
d7606d910ef9dffcfa6e70423fdce566357a4c28656cfdb92160528988ecd229

SHA512
cdbcdb8672b216b3da647e230185ef70d793e2de7f3f7d1895fb2ec75d905e57c122b65e91c504fd80c409e59792f47397a2b267358a4b1a05f1b95e3ccbec36

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
e5cdd4322b9358435424f61f0a9024a6

SHA1
f46c52874b79c826d618fc426daed5edfa445dcf

SHA256
a27d816c06a7d4b08e119e97810e4a89295b31f5c62bc0c8e2a86e41ad6fd14e

SHA512
93e967641c69bbe41664ad509ea0e394ed14b0356a215d80ef4a8d30e706f7f509dc51bbb25008473454843dda0da07bc01fb127d1070932dce8e62be369b558

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads