Analysis

  • max time kernel
    2647988s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23-12-2023 20:36

General

  • Target

    8b9adc17efbb11032625fc0a87871d442a354c261786352feef451a78af26fda.apk

  • Size

    26.2MB

  • MD5

    bf57b56e21cdd18c7be0b03e470b8f38

  • SHA1

    38c422a12b01d24008755a9fe707e16308f990a2

  • SHA256

    8b9adc17efbb11032625fc0a87871d442a354c261786352feef451a78af26fda

  • SHA512

    cd9357cfa3986101b6dbd431a1ea69306be53a46ff5bcc1fac7490f6d881f97a2d598576e5c1a09866b4ef41e8458fe35af5d2d1f21b445cff01599a6502b238

  • SSDEEP

    393216:LMWCVYf5gqyI3ImR/MJXH0vaeoAM7tGHKJutdAeYH7JFD9u3aC2sxXa:LcKhnLR/MXHDe8GKqdAe9xXa

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.sxx.ltjlhf
    1⤵
    • Loads dropped Dex/Jar
    PID:5061

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.sxx.ltjlhf/.jiagu/classes.dex

    Filesize

    6.6MB

    MD5

    20e3aaf63f4171d083b90ef8e706f8c8

    SHA1

    cedf2d21e189e77edfb1aa45284e96646dd58516

    SHA256

    ec0be31d64f0f99daf64c0aea9cdd4e99ac009ad1247db194bd9ace370af358b

    SHA512

    b846792227d4f6e1870f8355f8a5f55467ae7f3adca4c5ec038dfe547fa3c60c6f73783593fedea6146875deccf97e239fac8b6038a5339672ba684b374fe407

  • /data/data/com.sxx.ltjlhf/.jiagu/classes.dex!classes2.dex

    Filesize

    7.0MB

    MD5

    daa89da1d48fa58b5b492ef259e37b29

    SHA1

    aae34f37bc38c237e9ec916482862c6ea59c4377

    SHA256

    cf79820bc66a5a017400619e93ca52408cdde848e8e98972993660f12b5d9271

    SHA512

    cbdbda9e7120237fcb63ebe8122186e1d24e05263d7e23f25e44e6c30281ba546c112a45044cd8d0d6739b37a73d9dbca55a4492d6e8518c2584bf5a49bb002f

  • /data/data/com.sxx.ltjlhf/.jiagu/classes.dex!classes3.dex

    Filesize

    265KB

    MD5

    0b84b2503f6c1e25c93dda9220c57d28

    SHA1

    c4f1cabd4af9e62b190e3fefcb6e8fa475d0aaa6

    SHA256

    df2bf4239f264e3c2f7dfd9a467ab1e79fc8556570a8ead5579f24257ae45364

    SHA512

    7a52145125537f317bd626c0fb9f8c98e3a537f8da36732619035b229c8cab4e08302293b7fb8eed7fff77f66efebff5036510e3b4f72c383a6ac615466f6a66

  • /data/data/com.sxx.ltjlhf/.jiagu/libjiagu.so

    Filesize

    495KB

    MD5

    de685970891708f6edfd18f03c6557ba

    SHA1

    ac50f88327652a72df73d43e9260faf169283c34

    SHA256

    b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e

    SHA512

    cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0

  • /data/data/com.sxx.ltjlhf/databases/com.sxx.ltjlhf

    Filesize

    24KB

    MD5

    f10a8c2a570294ece878bde790c1e4a6

    SHA1

    bb082991e2925b0eba883a96d3842b89dec82cc4

    SHA256

    13719c7baa45d04a65c262cb6bdc0faa158a87d86fa86153fac58eb97b233e46

    SHA512

    ad5b6e504a5c43b2a67753415e0ef3eea4463adab633a944007bd8d2fadddf8ddc70ca96d092a397dbc61585da2d6369f2462eeca9cc140ebf919368632f7144

  • /data/data/com.sxx.ltjlhf/databases/com.sxx.ltjlhf-journal

    Filesize

    512B

    MD5

    da8a0ceb6d5a7eaa30d1f195c4ac9bf5

    SHA1

    3a3b1a6844d21909dfc23cfdc836035f66a4ff73

    SHA256

    3f718e31cfd54851b5a070b32e59eae5974416b6ec5d9736803ad14aabcf97f5

    SHA512

    3a61c91c6a15e3f9fc4df4427b006cb400ede58c24d78a5aae549c50b18d2d8d04e3ce7f71d0970944549170da3bd180c49c01ccb758bb2383b790f69308f63c

  • /data/data/com.sxx.ltjlhf/databases/com.sxx.ltjlhf-journal

    Filesize

    8KB

    MD5

    bdcc4577c6eab91c585b8fff57986467

    SHA1

    4a9fca6ea9834df6e05775ea31b6fa9c0eccff65

    SHA256

    7413d596bb597fefa99ad7e0c29eafbdf3c403ed97ea729e237266b8712a2fea

    SHA512

    c3b2c3a9748d75950c65f3fa336eb70801a52d9bf42225c442593332458d97cba5a70fb9b5a6cc45feaa978a02c833e2fb65941e7092a943e63a93a08776e9dc

  • /data/data/com.sxx.ltjlhf/databases/com.sxx.ltjlhf-journal

    Filesize

    8KB

    MD5

    11b011cb5d89d74b0002bbdf81a5e2ca

    SHA1

    aceba392cddf9576aef6b51f8e7894fa596e72f4

    SHA256

    1ec04fbbf0e36c5bb0f9f27be0a55163d285bbbd66484d0b34c9218bb8f96ea8

    SHA512

    3e6fb7061c9fafb1d60409fec77cc7628c54a815969e23f69ef889445bad34c1cd6e4ad0c85387e5505888ca5111e8e4cf8978da8bbbc91731e38a298643ca40

  • /data/data/com.sxx.ltjlhf/databases/com.sxx.ltjlhf-journal

    Filesize

    16KB

    MD5

    509eec6a2175a86911f9dc0bc5900b07

    SHA1

    5acc838a46ece045d92297c8d1b2944ca4c3a860

    SHA256

    37a3b63b9d437b33454fdecb333a70b438b19b6f3e430f57d23600341afa2acd

    SHA512

    4179849e1daa596756708c302fdc5dec1f2bb33000a4c1dfe2713c2240710e610669cdb6f52a2817c9aad084f8c55d5df61ed6caffbce50f357559d8f63705f6

  • /data/data/com.sxx.ltjlhf/databases/com.sxx.ltjlhf-journal

    Filesize

    16KB

    MD5

    d73de36b4ae4f5418d984875485714ef

    SHA1

    68aa8aafcf661009742d69ccd55a07d9853ee76b

    SHA256

    4d6a7dc41391cd4e267e85c3764c7990a32fb37fe9349d6b5025cd28eb77f50c

    SHA512

    78ebc09fb93ed57140ecbe4616460e37ccc6b387a90ba9cb84973b05b4fd7a66f87f876ce338a9052c31c50a855138c7f597e62deb9a8ed6b55b7835229b8ee5

  • /data/data/com.sxx.ltjlhf/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    6e1ae489e1799f9c3a3c08bc27071f91

    SHA1

    246668200c5d7c2bf8b00c704c7dca98c3cdf0eb

    SHA256

    d487ccab13ace52f23b9eef2aedeebd90ccd3f7deae78ef8f42388e3366c6691

    SHA512

    cd9f65c3cfe8429dbee7fa97b91541390f1c3ff81e70ffd97c12ef85bdb45e4144f0a0c06764a875cf0e8f23698d591a5c3fb83ccfccf1d4657dcba678cec943

  • /data/data/com.sxx.ltjlhf/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    69f3df58639e5d9031ba844e8da85d74

    SHA1

    d5ef7198f7bc1aa764f603184551ec57f8ce93d2

    SHA256

    a4bd0e758c172c04e369a15349ff68e2dd23cc4a1eab063df426df63abc7c961

    SHA512

    9c43b4f74d54b9e1c8930659c5bcfa678e253eea2bd0b1df34faf1b5a14249d13c275c9483b3155728e2ccddb0521d2db01ee2f72415351723b1a4e63f95a5da

  • /data/data/com.sxx.ltjlhf/files/.jiagu.lock

    Filesize

    27B

    MD5

    4c1e91b45da42a10b30c7c118f28d816

    SHA1

    623911a4d7c74af36435876cb3dd54a5924dc482

    SHA256

    1f6b3bf157f451171b014b1e65ae97a7d5f350b6a3092e1eac042e5a66abcbbe

    SHA512

    474666a5840a1a4ffd1529ee70cf15338b9177077392b54d60f21a77bf629c202d7c72ce95af925901d9ac9323ab46b80683635ef86d70efc16df99c64924f9e