Analysis
-
max time kernel
2723610s -
max time network
136s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 19:39
Static task
static1
Behavioral task
behavioral1
Sample
7c1f02a8aed385d6735bc54235919a8a5bbd165ab4fac235ce809dc759ce53cf.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7c1f02a8aed385d6735bc54235919a8a5bbd165ab4fac235ce809dc759ce53cf.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
7c1f02a8aed385d6735bc54235919a8a5bbd165ab4fac235ce809dc759ce53cf.apk
-
Size
11.5MB
-
MD5
a45f5febe8f1a4de3c769da849fcc9b2
-
SHA1
3360c4b370d88ef93982971ce07ead53f6da0f08
-
SHA256
7c1f02a8aed385d6735bc54235919a8a5bbd165ab4fac235ce809dc759ce53cf
-
SHA512
cb56a26a79946db671b58ebaace535f374dd3c95088e933882498db611b8d9751e6ff2774fca37e31ece372cd8a5b1548e7f85a7447319e3eb7ede0b51267ac5
-
SSDEEP
196608:AItKSEJLQRYCPkJvmtywQJZZmlnG+1rVLhfKu2L4jEwPxc4WFFQvAk:AuEBgPOvmtB3PVLhCu2LwlWe
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xgbuy.xg
Processes
-
com.xgbuy.xg1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4251 -
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵PID:4276
-
-
chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so2⤵PID:4310
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4332
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
363KB
MD5acd3a64e22c56dc0628edd7615a74ab4
SHA1ec22ef7fa9dca4b475af2724d483bda140370ca7
SHA256c57cffd4175fcd618f29d48eeba1b8b30e2bfd4ce9e05c6c5b0bc4378914d008
SHA512ec93027efd827742d3f9db70c4d4aba51e817191ff888aa2337939f2ce518b98f1c1f7ed3d49d25d3bff47738f68ead6348b1b309c54a17e18c4460cc2142e3e