Analysis
-
max time kernel
2732203s -
max time network
135s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 19:46
Static task
static1
Behavioral task
behavioral1
Sample
7e843a7eb3165df9f85734fb20dca4669dfb9698a3d766fd4de29c1e4cd164bb.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7e843a7eb3165df9f85734fb20dca4669dfb9698a3d766fd4de29c1e4cd164bb.apk
Resource
android-33-x64-arm64-20231215-en
General
-
Target
7e843a7eb3165df9f85734fb20dca4669dfb9698a3d766fd4de29c1e4cd164bb.apk
-
Size
19.0MB
-
MD5
724a3ff4c88b8ae3fd1e5c770eb20af2
-
SHA1
d33c5e08e0a157d68d2947af6633af9e835e7300
-
SHA256
7e843a7eb3165df9f85734fb20dca4669dfb9698a3d766fd4de29c1e4cd164bb
-
SHA512
a185f59c74b83d71106997b7fc6b92157a65dc7e53f23b9065e647965ef292e493e6d5d4d86f141379781852489a7d0c04adfdab31fa842c97e12e973c9e0eba
-
SSDEEP
393216:TjvrCz4VbudaDfqb7dqw0F8odSH+yzBMqOAwd6jSZ0OG2egb+YA9A:TXCUVqabu5q1pdBo6MW+pE
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.lrlz.mzyx
Processes
-
com.lrlz.mzyx1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4262 -
chmod 755 /data/user/0/com.lrlz.mzyx/.jiagu/libjiagu.so2⤵PID:4289
-
-
chmod 755 /data/user/0/com.lrlz.mzyx/.jiagu/libjiagu.so2⤵PID:4345
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.lrlz.mzyx/.jiagu/classes.dex --dex-file=/data/data/com.lrlz.mzyx/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.lrlz.mzyx/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.lrlz.mzyx/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed2⤵PID:4367
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.5MB
MD5a958c27224b13e9eb0f8f9fa864d8aeb
SHA1fbcaea111d84001b7cac68cc8a7e96c9bb2d34a8
SHA2562dea84f56f3dd6007b4f7a8830bb0f874c9c51ca22daa5d7cfb04144db6c0fd3
SHA512f2121d0ff635b48348da84dee12dcc5cac543e1d3ad8c673da936d8a28097140e6553eba82ac171f2c65148911546241408675c029e925c999277f172e200042
-
Filesize
363KB
MD56c9d83b90aa9c9f904d22eb9b16f8f95
SHA14d5e0ce3c55a22475b58a982d67ab9aa84384c40
SHA2562432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7
SHA51207d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b