Analysis

  • max time kernel
    2740272s
  • max time network
    138s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    24/12/2023, 01:58 UTC

General

  • Target

    b898a60d2b27f095b374237136a34969238c73b7583b0a9a92bceb8da12f250b.apk

  • Size

    6.8MB

  • MD5

    8c6a9df846504d22798ed49360f6471f

  • SHA1

    f3ddf9ec7da286e8bc629b0d0959b4fd38827395

  • SHA256

    b898a60d2b27f095b374237136a34969238c73b7583b0a9a92bceb8da12f250b

  • SHA512

    26acf003b797ce7383223dabcdd8e81ef833b5176f6d0234d00f833fa7d45526b321086378e7f9f462db8b27a055a048635601d0fa9f6c37e3f4156eb2e36b84

  • SSDEEP

    196608:FyLmbRWGgKtUopdQUXA/EE+tF98LqYlkahNYbCrXLxkE:FyYR9gKFpdrXTt3LYlDhNZrx

Score
1/10

Malware Config

Signatures

Processes

  • com.lanbaoapp.meiliangang
    1⤵
      PID:4634

    Network

    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      172.217.16.238
    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
      Response
      ssl.google-analytics.com
      IN A
      172.217.16.232
    • 142.250.178.14:443
      tls, https
      1.5kB
      40 B
      1
      1
    • 142.250.178.14:443
      tls, https
      1.5kB
      40 B
      1
      1
    • 172.217.16.238:443
      android.apis.google.com
      tls
      6.7kB
      8.8kB
      26
      24
    • 172.217.16.232:443
      ssl.google-analytics.com
      tls
      1.3kB
      5.9kB
      9
      9
    • 142.250.178.4:443
      tls, https
      1.9kB
      40 B
      4
      1
    • 142.250.178.4:443
      www.google.com
      tls
      23.5kB
      12.2kB
      47
      38
    • 224.0.0.251:5353
      3.7kB
      11
    • 142.250.200.46:443
      https
      204 B
      50 B
      4
      1
    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      172.217.16.238

    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      70 B
      86 B
      1
      1

      DNS Request

      ssl.google-analytics.com

      DNS Response

      172.217.16.232

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.lanbaoapp.meiliangang/.jiagu/libjiagu.so

      Filesize

      358KB

      MD5

      92914ae5c428e8c1d676a4620df6dada

      SHA1

      0b20d48763e2a1246746b90794cccfbbe59ddd5d

      SHA256

      4f63b87acc01178c5ff246fb500d5c3392da9647dc641f6315cf3625975bf068

      SHA512

      4b2ee1f99245f44761e8d38d733dce990ef76186a2bef1848b83fc8c51fdc901f02f180e922151ccfcf74879d227f78464ed6f7b7e2528da3f487461c04ed97b

    • /data/user/0/com.lanbaoapp.meiliangang/.jiagu/libjiagu_64.so

      Filesize

      348KB

      MD5

      77afcb832cd69898939ee6f710532c16

      SHA1

      9c51893d25d8687d82dc17e740ccae41dc6a406a

      SHA256

      4fae95dcc655d2a3aa9766a460144df23cc6fc5e4fad1a539a7083128cfd79a9

      SHA512

      56b6f3fedc1f710e7cb427d18cc92648a835f9b52dc18c1d5927452df249e7326358431d35f4d348333096427e0512552300e90d9e4b47cc16a87ba88ccc686c

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.