Overview

overview

6

Static

static

6

c91b01bc48...c2.apk

android-9-x86

4

c91b01bc48...c2.apk

android-10-x64

4

Analysis

  • max time kernel
    2977738s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24-12-2023 03:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c91b01bc48b7b0b639fdc0c3af9be441640a9eb2f24b5fad903eec65b91286c2.apk

  • Size

    12.4MB

  • MD5

    c48fcfdc123d1e519ed4b73d447fd686

  • SHA1

    52d930019b5cc1610cf3848e9a15e8f87dfed81c

  • SHA256

    c91b01bc48b7b0b639fdc0c3af9be441640a9eb2f24b5fad903eec65b91286c2

  • SHA512

    43f874fc70d9c2f5d3ff16d4fb094f5b431fd032ee0ebedd125f4629e2d2314fa1d2388971fa388b3468451ea3730e5847185b389cbfc3a52ba1649a1c8d2573

  • SSDEEP

    393216:rYJOXiNVfNKnU8dso0dVLDuuJLwgfTnlPC:rOOXyfNKU8d+L1nBC

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xgbuy.xg
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4478
    • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
      2⤵
        PID:4506
      • chmod 755 /data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so
        2⤵
          PID:4582
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.xgbuy.xg/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.xgbuy.xg/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4604

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.xgbuy.xg/.jiagu/classes.dex
          Filesize

          7.0MB

          MD5

          e508925d777b590cd1e8cf5c8b2976a8

          SHA1

          d0a97448e0c6b2160f650cf816a4ee81d49b3188

          SHA256

          8fa6655bade3e3695cfc3e02664771b8b4e092fb26c2adeab85cb1c22f8abbd6

          SHA512

          e3cbb24a50c9682e68130b6f1b2968d5b59d94667a16e8ac0fd81b9b9c5d145a1ac46a360b72d51549bc8594bda21e6a7d65c55264aee927c9df2ace0e73271b

          Download Submit

        • /data/data/com.xgbuy.xg/.jiagu/libjiagu.so
          Filesize

          363KB

          MD5

          6c9d83b90aa9c9f904d22eb9b16f8f95

          SHA1

          4d5e0ce3c55a22475b58a982d67ab9aa84384c40

          SHA256

          2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

          SHA512

          07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

          Download Submit