Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2735391s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    24/12/2023, 01:34

General

  • Target

    b42d39b24e6a7a1da6a3caf421842c2742fed25820440a12aea962e8a10d199c.apk

  • Size

    16.6MB

  • MD5

    ad30eda4a673e4471650cfeda7b9a044

  • SHA1

    1b91dc283fe0fde1e7318656fcb13d7b5e535792

  • SHA256

    b42d39b24e6a7a1da6a3caf421842c2742fed25820440a12aea962e8a10d199c

  • SHA512

    767140258c9ff5b31f7ad8789cda3ca64c10555ef9d4bfa6fe3db25d532f989eefe5243fe418526781067614f5a5f8492bfd1f1a24fa2bed2c5582587ff72782

  • SSDEEP

    393216:Te0Vw67Bo3HdCuiHJ/wVYo5jyVL8VuK9Lwjeqzm:Te0AIuiHJoPt9ZN

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.xgbuy.xg
    1⤵
    • Loads dropped Dex/Jar
    PID:4463

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xgbuy.xg/.jiagu/classes.dex

    Filesize

    7.9MB

    MD5

    80f3c558c1bb350c342f48925bd65775

    SHA1

    fedd9b82cdbdc79e5dfc9a1cc35df6693fb452ba

    SHA256

    61b822b243901e55aee37508159d37ff9e17dba09cfff789a985d635daee3734

    SHA512

    681f6ea8269710d9bdc015c1e7249aafb4176af23db7a215f713450e7e6348fce470e8dab2e0f12da8f16566cc2a2036de5ee51c3f69261f33929fbf6e574522

  • /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so

    Filesize

    382KB

    MD5

    aa01dd97609092ce310e17bf791069ce

    SHA1

    f000840a8f68ea7beb2e29ea466088daf55609db

    SHA256

    e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2

    SHA512

    766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4

  • /data/user/0/com.xgbuy.xg/[email protected]

    Filesize

    6.5MB

    MD5

    86a98fc1fc5a4be8c586f51c67a97268

    SHA1

    8685f420a04b365aca6d513c3c9913224428edc9

    SHA256

    8b522c8b1ae9ed55748d64c35ff70e401f1559e259adac525e8616a18acccaec

    SHA512

    8c00265385037273b424019d49b84c7ca7ee1ac5a146ef3e81b647a6af21b6a1205ffd760d538fc9db4065ddb2722b13feb7471235f4f98f77f58ea3d62da98f

  • /data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

    Filesize

    6.5MB

    MD5

    5e0a085d5972a8ca4468666f58f466d7

    SHA1

    40b5b262f0ded720f3ef02413d5df1005f3dc3e1

    SHA256

    34da18eb7460f63eb9d85ae512bcd803fbc817251ce491765beb0fddb8c9aef5

    SHA512

    a537adbda036f608d5f283addb82c5d77ff93946eed0f5da5f1b1a43bbb95ab3aebbe88d792c81686063005f732a7a0050f8467f35f2b22d94ee38d20948cb3c

  • /data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

    Filesize

    1.8MB

    MD5

    b4a7f9124e5e694816518dc3fa08769c

    SHA1

    80f49a6f2b10b8ed4203338ca52d3c761964465f

    SHA256

    27faebea6826f04d1bb9e2166025b9c5efba572fae566c0d1522d575921d640b

    SHA512

    e841072c34e8a6c6e6dd3bf994837b24ae648f52a7c6180e48f30cc115be817d78893b40839a1f5d3435fa11b495c12d45cd7619ee0a9373e307b7d197774131

  • /data/user/0/com.xgbuy.xg/files/.jiagu.lock

    Filesize

    27B

    MD5

    9a819cc5bf197f556b2160907371aa30

    SHA1

    a43e1c5421e499d7cbcd613ee58c0677c64f7fb3

    SHA256

    754b251442565d284ec019eacdeaf94ea1da2bbd266a6dd52fceb2620896c797

    SHA512

    751bdbfa29209222c7385c997ef61e6b9fafb06eef5a8186b56d0d379fbcfc73eaf41d1a3de73102f54d497f4c614775e5c5190f050b672eb403f0929ce7cec6