Overview

overview

6

Static

static

6

7cffd46646...29.apk

android-9-x86

4

7cffd46646...29.apk

android-10-x64

4

Analysis

  • max time kernel
    2728065s
  • max time network
    142s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 19:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7cffd4664621d53e1b17de3b1f6e63865fc9677d4e157f67d34af62d36ee1729.apk

  • Size

    12.4MB

  • MD5

    4541cf6f95f961a8555bcd7b7381f5a7

  • SHA1

    5a3087eda2a1e8122cfaca04048a5bab035f90c7

  • SHA256

    7cffd4664621d53e1b17de3b1f6e63865fc9677d4e157f67d34af62d36ee1729

  • SHA512

    f7be5ee67ad3b4a44c3ec9d5de81daee1e2ed221c1cf40ac1509a043edd6129233ffa7e3cf52c174f5a3f2ec272bbec788ae396c323810cad54364f3b10c17e4

  • SSDEEP

    196608:n4/SKODgd+XwslZ4jEPiUB+MCfYO76G+bU2VLyfYFuTL4jEwPxuCyFo/XM:nFKODgd+UEaUsfYo6XVLyQuTLwNqo/XM

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4255
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4282
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4309
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4332

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.xgbuy.xg/.jiagu/classes.dex
          Filesize

          7.0MB

          MD5

          4dcfc5629b409c529d922e4b4aed5999

          SHA1

          18697939d73cbbbe85aed23f8da1d2c565fc6ab1

          SHA256

          d0c04f27ddcd3fa5a612533d4c542c723f8521faa648eb09349a0b7afb768aae

          SHA512

          b40b1a245ec6d0148dfcdddd5975211ffdeceb64a5bf6d4d245628fb0120003485fe21846fd87f446c3bf5189ad293a9f657e1a28998df8967e2b3aad09e8a09

          Download Submit

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

          Download Submit