Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

c58d35d0b6...4f.apk

android-9-x86

1

c58d35d0b6...4f.apk

android-10-x64

1

Analysis

  • max time kernel
    2970201s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 03:21 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c58d35d0b6fe1d375693e951aee164c35eb8457d7c11cc75d6b3e741eeb48c4f.apk

  • Size

    24.5MB

  • MD5

    1fc3cfe6c4e4898e257de20460240c3f

  • SHA1

    ac1f6ed91015c521dbbb32761d10d1aab55c709e

  • SHA256

    c58d35d0b6fe1d375693e951aee164c35eb8457d7c11cc75d6b3e741eeb48c4f

  • SHA512

    3595cef4607265082239603e7e3b7020767463e5cae41a460b551b9bcfae529721ed29bbe6a42ec3df3654e6c0ece9dfa7d8319093dc05e0f92a06345c0af922

  • SSDEEP

    786432:fnCuUy2q0C2V0J1CTVU4Y6apxsumvrp22yF7X:L170C9vCTVzDjTk2GX

Score
1/10

Malware Config

Signatures

Processes

  • com.njzhikejia.mabaojia
    1⤵
      PID:4253
      • chmod 755 /data/user/0/com.njzhikejia.mabaojia/.jiagu/libjiagu.so
        2⤵
          PID:4278
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes.dex --dex-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes2.dex --dex-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes3.dex --oat-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
          2⤵
            PID:4303

        Network

        • flag-us
          DNS
          semanticlocation-pa.googleapis.com
          Remote address:
          1.1.1.1:53
          Request
          semanticlocation-pa.googleapis.com
          IN A
          Response
          semanticlocation-pa.googleapis.com
          IN A
          216.58.212.202
          semanticlocation-pa.googleapis.com
          IN A
          142.250.200.10
          semanticlocation-pa.googleapis.com
          IN A
          142.250.187.234
          semanticlocation-pa.googleapis.com
          IN A
          142.250.178.10
          semanticlocation-pa.googleapis.com
          IN A
          216.58.213.10
          semanticlocation-pa.googleapis.com
          IN A
          172.217.16.234
          semanticlocation-pa.googleapis.com
          IN A
          142.250.200.42
          semanticlocation-pa.googleapis.com
          IN A
          142.250.180.10
          semanticlocation-pa.googleapis.com
          IN A
          142.250.187.202
          semanticlocation-pa.googleapis.com
          IN A
          216.58.201.106
          semanticlocation-pa.googleapis.com
          IN A
          172.217.169.10
          semanticlocation-pa.googleapis.com
          IN A
          172.217.169.42
          semanticlocation-pa.googleapis.com
          IN A
          142.250.179.234
          semanticlocation-pa.googleapis.com
          IN A
          216.58.212.234
          semanticlocation-pa.googleapis.com
          IN A
          216.58.204.74
        • flag-us
          DNS
          android.apis.google.com
          Remote address:
          1.1.1.1:53
          Request
          android.apis.google.com
          IN A
          Response
          android.apis.google.com
          IN CNAME
          clients.l.google.com
          clients.l.google.com
          IN A
          142.250.179.238
        • 216.58.212.202:443
          semanticlocation-pa.googleapis.com
          tls
          2.1kB
           6.5kB
           15
          16
        • 216.58.201.110:443
          tls, https
          858 B
           40 B
           1
          1
        • 142.250.179.238:443
          android.apis.google.com
          tls
          5.7kB
           8.8kB
           24
          23
        • 224.0.0.251:5353
          3.7kB
           11
        • 1.1.1.1:53
          semanticlocation-pa.googleapis.com
          dns
          80 B
           320 B
           1
          1

          DNS Request

          semanticlocation-pa.googleapis.com

          DNS Response

          216.58.212.202
          142.250.200.10
          142.250.187.234
          142.250.178.10
          216.58.213.10
          172.217.16.234
          142.250.200.42
          142.250.180.10
          142.250.187.202
          216.58.201.106
          172.217.169.10
          172.217.169.42
          142.250.179.234
          216.58.212.234
          216.58.204.74

        • 1.1.1.1:53
          android.apis.google.com
          dns
          69 B
           109 B
           1
          1

          DNS Request

          android.apis.google.com

          DNS Response

          142.250.179.238

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.njzhikejia.mabaojia/.jiagu/classes.dex
          Filesize

          6.8MB

          MD5

          aae5f0ef015a11b77d2c5da2cae065db

          SHA1

          18a0f12966ea4c01537d4f360e3609524e008913

          SHA256

          60a2c4056a87115b870d4a9b41b8bbdd40bb93a33d4adcf6b99c8df27099910b

          SHA512

          069365d2bfe538ed55cf14aa128c68754696c2a29926273f622193e6d7c5019674300c1628690cc659adeaabfe809114f663ec3c0f23e0f0ba1171be2c559c0c

          Download Submit

        • /data/data/com.njzhikejia.mabaojia/.jiagu/libjiagu.so
          Filesize

          358KB

          MD5

          0f988c9a7d52923d162bbfe4d2ea8171

          SHA1

          0084318df7665847bc5cabac2f4b7cd2bdc02a34

          SHA256

          c548db6ffa4e11cf80c934aeb77d40397e7aeed067a89799262467d552921bce

          SHA512

          926bbdc706705674e3cd19186990b5c30d1b7b7141c6dd7ace9876899f2bd92275793a5b76e7becc8c6de82766a3dd075ebab9fd8ccb11d3e077b49c613774b9

          Download Submit

        We care about your privacy.

        This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.