Analysis

  • max time kernel
    2746885s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24-12-2023 02:38

General

  • Target

    bd8748de1b882c65db8748b9f46536700436006e5aba20b24748fde2c9d20db3.apk

  • Size

    10.0MB

  • MD5

    6b1e446a52d84c4f7830882536837ddd

  • SHA1

    3299ffa444a4ed3604f0bb5704eb0d6d554dbc78

  • SHA256

    bd8748de1b882c65db8748b9f46536700436006e5aba20b24748fde2c9d20db3

  • SHA512

    f3432238c7a73316867f7ce8ec9aafc243f7a28b5ff2e7176befa67be03a02f2c30edc9c7792c95ce4687a055a91b43cb9a8ae3ad67ca68a3aef025776701765

  • SSDEEP

    196608:U0QAZCIRknFPZe0zS2a8UOjk7Sfbkt+Fm28wQDOCdFz13SRpEt0:UxacPZe0zSV8UIkQbkt+dZszSv40

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.service.ecl
    1⤵
    • Loads dropped Dex/Jar
    PID:4965

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.service.ecl/.jiagu/classes.dex

    Filesize

    4.3MB

    MD5

    32888e964b920a4011daeb99a07a893e

    SHA1

    08b10181386026099f74090067038ffe88b62904

    SHA256

    cf023e172cd53e9d7fa1c7030f54c7499f5a4774ba359d7371207696e86f568f

    SHA512

    5733e296107e06e14967634af8273322d6987649bd66f6fcc6a5281da609e17ec00ddd6c5749dae3800226c5766f800f1aa2686ba63006a550b263dcce4393fd

  • /data/data/com.service.ecl/.jiagu/libjiagu.so

    Filesize

    446KB

    MD5

    8f55d5deb281d8aa1a0b9f72f7185e58

    SHA1

    5ce262af6a74a11931bf4b1e92a59b9acab27f37

    SHA256

    b57aa883bd4a8241fe2ebbeec0988614da1ad453f5784f3439335a6f800c7944

    SHA512

    4d74f007dc4a19ac3a8ae3434f06d2509397301c0a9b0288475280801c8907ce48248459436416fb14fc5a3a6ce790d680b6b9c95d35afc49c2f0639199b56f6

  • /data/data/com.service.ecl/databases/MessageStore.db

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.service.ecl/databases/MessageStore.db-journal

    Filesize

    512B

    MD5

    7cd3a5809474bc53c8db9784108ee2af

    SHA1

    b02bfa5d214a438fdb00b9f3b09f582df65aa336

    SHA256

    7e278ad998246ab20eeb94c56a381d202a64bb40212bc279b49578a295cd842f

    SHA512

    c225014e59817e8a906b08ce15946cbc0c2e38171afc656d73a860f02daead829e62c79a5780192ae12895333fd880b8d6359809e213e19e3cb7debe3eca835e

  • /data/data/com.service.ecl/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    8ff3a3058fc72b0c15c801368d81b5ed

    SHA1

    751bebf1c7c0a14953f75f4c85172956a56eb983

    SHA256

    66f74930ad20d6dcb589d9756d7e0100adf8af5b2a4e19580c3fb1f536cae22e

    SHA512

    e0e1919fc4e1930194169f1c10cc1f07fc3bf1db95aed65f920740069f10383684b0c4700948c2f565e2528d7524e2b94583e99385e0232a16ea9f328f657138

  • /data/data/com.service.ecl/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    d3e78a3fec7e8b37651420fca1f65cec

    SHA1

    47c7d19017950d714a3e85f4b82423a741d4e473

    SHA256

    edd600cad191c7cd513d9a7983cf20d9dce67ef0c16d5324da90031705db233e

    SHA512

    54c4eec19fe41374d488c3de095e2fec6b1cf9d8339b9a8b45982a01906075d0e2cfe11322c46b88bfc9a61ebb801a9390feef4506de6085ee683fae84bf9f3b

  • /data/data/com.service.ecl/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    997825eca48dad67f08e7a4f6276d063

    SHA1

    83791bdbc071044cfb5db7282fa614d784d0a993

    SHA256

    a10fba6a05dffd897fbf801cd3493ceff75f410b0503d79b1b209f1534ecdfd4

    SHA512

    589a1fc42d507bdab1b35061d4eb4a336f5987f598309865d68cfbcc66507124aef3a95932596b5990dfb549d52f8b5501434a3bf4761abb5aacd016854d8bc7

  • /data/data/com.service.ecl/files/.jglogs/.jg.di

    Filesize

    340B

    MD5

    33e78c6f3119e141e96ed22976606031

    SHA1

    e15aaeb40e37b6d6a30c7d7af8701efa9f35ec2a

    SHA256

    a49d165583dc9d7f99ac15f891cadc4c4fb5141d946b5f43e1d7820d5061011b

    SHA512

    86fc2511bb6b5c4f9793ab38336566a9c192e65ed2c88197a53e1b525d98f351a83911a16773828000bb7d14628dae115aadf7f31cd36da35d491839424f1750

  • /data/data/com.service.ecl/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    3fe467a5adc33f7fe3781f90aa7619f0

    SHA1

    487daf80f7648ae64c815bb5672bc2608772e1a6

    SHA256

    693f49cc580619ddde6e68885056d1c8bec966a4735e0f23a2b1000876d42545

    SHA512

    86bf554521f348a9aacb1f45c55eb48a4e4edcba52e58e05630845ce0d67f083981c09ff5414ff0550aa06e5ee8ffc010c3c2cfa5c899bb667303cb7f8e372be

  • /data/data/com.service.ecl/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    a2ebe16da03fb766f27d19dbaf6e3516

    SHA1

    78bac00825f739c89c2e08d80ae4309078f52b09

    SHA256

    740697f0d8d86a2ebfcdab65538f2ea605bcf36d37ca3fad92c74e027c868209

    SHA512

    0c3b8e0a5700a93172d27d67395f09604cc66e7dbdcf06b15efa7418dad62655cf7ecff115a4058afc487e333d2bba4fe91fceeb3c12e1e4c695e9e83956236f

  • /data/data/com.service.ecl/files/.jiagu.lock

    Filesize

    27B

    MD5

    612290a8a2c898f83c6883fe9b69be07

    SHA1

    7908ce9f31b2feaf9bb3ab68af14ae63c872c84e

    SHA256

    2867aa7fed61c6753a57992ff07d0fc9fd97635069293bf7a166b8a9fbb7dd61

    SHA512

    cc1ef73bb05092b1261b28a9a4f2b4aebada672e2efaaa160fd85cbec7c83cfe4632afc8f2351c56363f9889e9a21a2a646331149b287882c7b71a91dcb74686

  • /data/user/0/com.service.ecl/[email protected]

    Filesize

    6.7MB

    MD5

    79d4c6242010f3234e19dbdf347f17e1

    SHA1

    b841360a4c6e895d8ce41a4dfe62f2235c4e86a1

    SHA256

    9854448cd303e471ebf8318d420c7e30f0da58403739b7f69996735cf6459176

    SHA512

    e37b430468179a0f275bd3c0a85a2f2960d9494bbbecdf32634194c03bb076259da94a76da7e955bde69c53bed97b7e99b508c1811d078a4b9726a1982868095

  • /data/user/0/com.service.ecl/[email protected]!classes2.dex

    Filesize

    1.5MB

    MD5

    f15b339dc4dc991448480fe9586e36fb

    SHA1

    58e97244f00287ae5dc6b324c42a93491bdd2d5e

    SHA256

    eeb9e0445ae91681778417ea926276b7a21e77132880af12a52542f39fa01df9

    SHA512

    9615bc3aaab986a4d755d460d20d1b01f5423933107ffaf46dcc686c843fac6067121cae0918275b6b5f3d231ccc6cd10ea41f99f4ec8e8d0bf82dce03d40688

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    ab32bd78091d9398566a975258c79cdf

    SHA1

    d994c1b6b905cb6ee6c7bdc5ff98874c9d89aa2b

    SHA256

    4d92098b2bd9962d99509f1b757396e5a96b345cc733d4c93053e1104c626385

    SHA512

    6e6fcaeb976954eca9c6e278c8945d6b1ed34243bab66e04385ee3dc67b1c730c603914fdca09366749d043224d9447a5aed7fad12a739c9bce2c170e089d51a