Analysis
-
max time kernel
2970201s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
24-12-2023 03:21
Static task
static1
Behavioral task
behavioral1
Sample
c58d35d0b6fe1d375693e951aee164c35eb8457d7c11cc75d6b3e741eeb48c4f.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
c58d35d0b6fe1d375693e951aee164c35eb8457d7c11cc75d6b3e741eeb48c4f.apk
Resource
android-x64-20231215-en
General
-
Target
c58d35d0b6fe1d375693e951aee164c35eb8457d7c11cc75d6b3e741eeb48c4f.apk
-
Size
24.5MB
-
MD5
1fc3cfe6c4e4898e257de20460240c3f
-
SHA1
ac1f6ed91015c521dbbb32761d10d1aab55c709e
-
SHA256
c58d35d0b6fe1d375693e951aee164c35eb8457d7c11cc75d6b3e741eeb48c4f
-
SHA512
3595cef4607265082239603e7e3b7020767463e5cae41a460b551b9bcfae529721ed29bbe6a42ec3df3654e6c0ece9dfa7d8319093dc05e0f92a06345c0af922
-
SSDEEP
786432:fnCuUy2q0C2V0J1CTVU4Y6apxsumvrp22yF7X:L170C9vCTVzDjTk2GX
Malware Config
Signatures
Processes
-
com.njzhikejia.mabaojia1⤵PID:4253
-
chmod 755 /data/user/0/com.njzhikejia.mabaojia/.jiagu/libjiagu.so2⤵PID:4278
-
-
/system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes.dex --dex-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes2.dex --dex-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes3.dex --oat-file=/data/data/com.njzhikejia.mabaojia/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed2⤵PID:4303
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.8MB
MD5aae5f0ef015a11b77d2c5da2cae065db
SHA118a0f12966ea4c01537d4f360e3609524e008913
SHA25660a2c4056a87115b870d4a9b41b8bbdd40bb93a33d4adcf6b99c8df27099910b
SHA512069365d2bfe538ed55cf14aa128c68754696c2a29926273f622193e6d7c5019674300c1628690cc659adeaabfe809114f663ec3c0f23e0f0ba1171be2c559c0c
-
Filesize
358KB
MD50f988c9a7d52923d162bbfe4d2ea8171
SHA10084318df7665847bc5cabac2f4b7cd2bdc02a34
SHA256c548db6ffa4e11cf80c934aeb77d40397e7aeed067a89799262467d552921bce
SHA512926bbdc706705674e3cd19186990b5c30d1b7b7141c6dd7ace9876899f2bd92275793a5b76e7becc8c6de82766a3dd075ebab9fd8ccb11d3e077b49c613774b9