Analysis

  • max time kernel
    2759817s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24-12-2023 03:40

General

  • Target

    c9303359b3e0e97692bbc686dacd25d8f6590d09ca7cab8fd8c667f71c96399c.apk

  • Size

    15.9MB

  • MD5

    1e4191138df408aa89ee9b4217e1a80a

  • SHA1

    c188df24590660fd1739b725ddba4182a9ea208d

  • SHA256

    c9303359b3e0e97692bbc686dacd25d8f6590d09ca7cab8fd8c667f71c96399c

  • SHA512

    63054c5dc631ad38f28f70aa292d55f197897cb56ca0c218947128cc1740312b089efc6b64a4cfe38f65295b503dcc537cdde70bb165cde9dd4569b137e85b31

  • SSDEEP

    393216:pjPkcbJQqpl1FchKrYitBjEf3BcUYQWqjdws9:pjPkIQqvw4htBjEf3BcUY9qqy

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.iyuba.wa
    1⤵
    • Loads dropped Dex/Jar
    PID:5057

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.iyuba.wa/.jiagu/classes.dex

    Filesize

    4.0MB

    MD5

    e9b6917c5e6e8ec0c3575026bb598530

    SHA1

    86de45e8f20180bf76385cb9f5b63bae6425b0dc

    SHA256

    b65a49fe403920f23d593c421e17d3792bb85b79040f29f6db1be5547710222b

    SHA512

    061c15ddea32f48cb750fc79dd144807709388d205087894df0ede12aeaac46b2afdcc1a92e80855424e55b95f93ced6ec2c5ae961ada884e53afdb4bf39df1c

  • /data/data/com.iyuba.wa/.jiagu/libjiagu.so

    Filesize

    455KB

    MD5

    e5a53000766ebc433b27d6a66ec4f555

    SHA1

    2c8f53f1c03aec2005bcad67d731f07261dabde0

    SHA256

    78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

    SHA512

    370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

  • /data/data/com.iyuba.wa/.jiagu/libjiagu_64.so

    Filesize

    429KB

    MD5

    05a8c3ca16893f4e6cc997a82d987fb3

    SHA1

    76d6c6d19e0bfa83c847e5d330bd144f58994bff

    SHA256

    82e708e200cebe270ec57231729413621a8904e907efac8cfe71cb2cf16a3c10

    SHA512

    2a878c39e713fb6ff5b457f94a1fe2b5adc456924d087a1b6abd59afc0b0e9bad68852eddd34c6441e8996e66eb5fdb711ed6f477d6e447dd48cfd151d89fe96

  • /data/data/com.iyuba.wa/files/.jglogs/.jg.di

    Filesize

    348B

    MD5

    ab206d91e7ab327e4424dae1770426f1

    SHA1

    5c069d81fdb60cc99f5a584785e20bc7db22d96f

    SHA256

    efa62c46dccf6f7a0d3d8f4e2eed3ab88698cf118c32476f0d05ac7f0f7acdf9

    SHA512

    2701d28d27658d94f7503e1a31ec9bb9c6aa3a9666ec54404f2f759db470470cf353efc09f1516e993a5b416f6ec891aade8ec4b6919214fe225e3e4fe2a3800

  • /data/data/com.iyuba.wa/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    cb2d4a0a3eab14cbd0bd6560335def8c

    SHA1

    e0b3afbc0a76dbc81e8e868270a82d6613791401

    SHA256

    2df615f15378b0a0daefc7deca9c24d9fd040643cc0fd318b2daeaf360b2cf13

    SHA512

    dc2914b76e3d7e4fcad496a46f1b3fb9e0fd8d4028a402f8e7fb39924d40da75ffd2029a88ba32142aa3b56cc9bfd3a3ee2aa10dbc910e82f6f5657f1ee491d0

  • /data/data/com.iyuba.wa/files/.jiagu.lock

    Filesize

    27B

    MD5

    97c5369028d77d3d9abc2cddbca95719

    SHA1

    eef06cb1cd64a2d9d318e2ad46c19499478648fb

    SHA256

    8cfec5685a5fa5db45e94acab519f35e2c61346033340edbbaafe9c1836a1a19

    SHA512

    275184172f69b96a71278c1880673cfd26ae25e82dca9504f25bd82ef3ecef7c725c6b5874b57d39180622f54738532cb1dfe6dcb3a171df55ea9d06798a1a7e

  • /data/user/0/com.iyuba.wa/[email protected]

    Filesize

    6.4MB

    MD5

    dc554c6f6bf3639bb59287b57a5c6b2a

    SHA1

    bf33513fc92e19f304b2bb1268f16de9d06853ae

    SHA256

    7357db29e5a4ac72010d5139a97183472a02405441ff8ad9f06685324619edd2

    SHA512

    6d08664e4e3b3112aa77a49f55c02066ab7942a675898bd95f47d371de286ef1cc5d8d0b44af13002a4ea47b38e4c4c5264acfd721de7e8b0d680543de0dfa68

  • /data/user/0/com.iyuba.wa/[email protected]!classes2.dex

    Filesize

    1.3MB

    MD5

    468f4100dd40837638b94e45ddc535f7

    SHA1

    60b83f2655fc07f51b205de8f74bee2eb18abb1d

    SHA256

    fc2fa3aaf9a4f7cbeae3a71dab68beb8fad6c3cd26739a393632e419edb51a5a

    SHA512

    5eae5d8bd769f5c8208b91f7d322dd52de4a34d7c848fed798b61c2e1330665c7d8ac4fd1b262e0f05439456b1c32d7936b32f3e9d478b62d95d932e8316ba70

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    5fe3760ca0284fb016808861e9b5c03a

    SHA1

    b5265cc374d2fe6b027ed30234e3c8035db3c921

    SHA256

    ad118ac94d59ec049bcbd78ef1d5c5e036b4b05a967713ed8a6ebf6e22fbbd1f

    SHA512

    1e96a5e8e6730295a2dad3db3e0d6e9a20185d59925c1486917e78bfe56e887146444e78150cb728ddae7869ae70192154b44ce2fbfca0b4138aaf194e911826