Analysis

  • max time kernel
    2768921s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24-12-2023 04:36

General

  • Target

    d4695b9a79887fa552280febeea02ee56c0af1a4b88d0f1e1d976452a9d02e55.apk

  • Size

    10.4MB

  • MD5

    f29a288ffcb0a3b04d40a38bd4ba5169

  • SHA1

    87c22a1a9d123bb981a92a347586160b4b009116

  • SHA256

    d4695b9a79887fa552280febeea02ee56c0af1a4b88d0f1e1d976452a9d02e55

  • SHA512

    0ddfd04b2645761a14bcbfe585cfd3037b168fefbc31e3e6d37b9a8c2d6fe5f670c831778cf3253bd824750e3843437347f81edecfd97e1dfd2b135a52a817fa

  • SSDEEP

    196608:OeAWsDa15HP7MFDsGIw3M4ryKXCPRjIOnbQBs3xOcpVjbsLkpR+GpYmrA8R:OehkcGAGIw3M4/XCPmOnbJ3xOcpqor+u

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • me.jinuo.tokenall
    1⤵
    • Loads dropped Dex/Jar
    PID:4955

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/me.jinuo.tokenall/.jiagu/classes.dex

    Filesize

    3.6MB

    MD5

    5876300c0a2917e5c2c7d32a44eb8efb

    SHA1

    bff0a5ec19007c7393675b512751ed9d1e28c044

    SHA256

    cd84bf4dfd9fa9d0d0b1413fdbde60c7521f4a663d7c05d82ecb11ddcc10d8b4

    SHA512

    1e77b4ca5f36a5f998d0fbc2e18ef9e97a72306b09fa95d21576facce93fa0eb49815d4cc002cd064ae5729b54a2e4c698e7aa0855472745937680210e9b2ee1

  • /data/data/me.jinuo.tokenall/.jiagu/libjiagu.so

    Filesize

    455KB

    MD5

    e5a53000766ebc433b27d6a66ec4f555

    SHA1

    2c8f53f1c03aec2005bcad67d731f07261dabde0

    SHA256

    78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

    SHA512

    370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

  • /data/data/me.jinuo.tokenall/.jiagu/libjiagu_64.so

    Filesize

    429KB

    MD5

    05a8c3ca16893f4e6cc997a82d987fb3

    SHA1

    76d6c6d19e0bfa83c847e5d330bd144f58994bff

    SHA256

    82e708e200cebe270ec57231729413621a8904e907efac8cfe71cb2cf16a3c10

    SHA512

    2a878c39e713fb6ff5b457f94a1fe2b5adc456924d087a1b6abd59afc0b0e9bad68852eddd34c6441e8996e66eb5fdb711ed6f477d6e447dd48cfd151d89fe96

  • /data/data/me.jinuo.tokenall/files/.jglogs/.jg.ac

    Filesize

    32B

    MD5

    e9ad41f4bf019e3b7082848b85d20b7d

    SHA1

    ba5392ef6e64bfb91f7c496200a638ba58bdae14

    SHA256

    0f929692c1f037cbac3a3a3fb88c5e9d1b7433ff0a01a66d2d064ecd1b47c5be

    SHA512

    548928d11dd18f383c4bad7f43cb29e0d59ab39477da3f30742bc42fa69765efcbb0a4a0b17b20f2836f9967887be1a2a1d36e34345100ff8fb50cc2f910a915

  • /data/data/me.jinuo.tokenall/files/.jglogs/.jg.di

    Filesize

    348B

    MD5

    eef009147fd0784dfd37064324b22f20

    SHA1

    0404ff0463d30149aeac302d3c1a8cec06512bd9

    SHA256

    765283c162435ec14e3542499a00c3e3f52b6bee14d976682022d8caade5bc2f

    SHA512

    007fffad3d5bc4f07c24518efaff2252b8c0a5c09e1d180713a4c755e0d57ba19c186319e5325c7a828af391a8198363ca267d677ff9bfaab6162ea37c86ede2

  • /data/data/me.jinuo.tokenall/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    6e62eee32f0161dd7ad8c97795c9ceac

    SHA1

    5f11f6c6f8d01837544626f0349bd24fa6e86812

    SHA256

    d021fa96c4b9a88ba7a40ca39b4e31f148fda7ac93f796e1501bafdb0f907999

    SHA512

    7fef12609e49f37e93566ec5b9e75119414a4b99fc1320d81b55c155a5b688e01d55a9ac99ad4ddb9f69f0e769c86274fc949201356576c736619e9dff208529

  • /data/data/me.jinuo.tokenall/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    666ecdd76978433ea0a40db13060a8bf

    SHA1

    5b442aad37f246b785afa7530015e2c2be05b759

    SHA256

    f98c627e2adfb51b06622073e29447ccf9c5f6149868be4ae9fc6621720227bd

    SHA512

    b659ff9a913ba389e516941f540c2be361e289457b59c735313ce51f611ab6289d6cd686096a575eb2a8c950abc2197656f63fae743245a177bc0aa66e561714

  • /data/data/me.jinuo.tokenall/files/.jiagu.lock

    Filesize

    27B

    MD5

    32f8abb1965dad72dd793822d0638108

    SHA1

    d58ccc0c44b8e7a34db7911702e45c82bd3820f9

    SHA256

    8340ec4c5d2404e39516bd9cf99322141bf4ece0f18cfe5e3c8ff00a3b0cd2b0

    SHA512

    6d559314bd54433559ddeb4d11f55f717498050072d7f5a45d0eb1cbf8b978ce9c19e716874c04ab5566d4a958fd525a7d1460e0415f69d27b8db440da303b5d

  • /data/user/0/me.jinuo.tokenall/[email protected]

    Filesize

    5.8MB

    MD5

    3b1d237f5a146092ae57e6686138a56a

    SHA1

    efda4a21486bc004f05ab6086bf54e13291343cb

    SHA256

    102f84686030a9e466e05ec38c91bc27ae4db6c1bae9718d6a4eaa9d155a9146

    SHA512

    b60b1923bf10310f139c345cf80c025719ddc6dc3f8028b7dffcccbd04eaac4a468d48032353a15d0c037cb6208c17a82ee49f37dab5224f7259d49bd17f64b4

  • /data/user/0/me.jinuo.tokenall/[email protected]!classes2.dex

    Filesize

    2.5MB

    MD5

    ecfcde3f658c7ada70c2cc6413d0d1b2

    SHA1

    44788ee62df6c759f44de04658b5d195b1bae80f

    SHA256

    5923bbfe4e050c1afe5bbb6d60a579ceec1442bb32b55b7c065126ca28557d15

    SHA512

    78f45975a522e3fa9290d1f9eb3c65176a38490439247445fd6008956bc92e75819ec7510590b29fe0f61081e9400a1edd88c430b56daae56f79fa1a881b996c

  • /storage/emulated/0/360/.deviceId

    Filesize

    48B

    MD5

    4c4c5285293d5141f582aefa4e038669

    SHA1

    e01852a72e5a8e6f7d63a21426b515118196047b

    SHA256

    36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

    SHA512

    097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

  • /storage/emulated/0/360/.iddata

    Filesize

    32B

    MD5

    648c006ae0459ed7174780b7b6d9a7ef

    SHA1

    8d9269d151683e61c5b211fe0fa5eb62438bdb29

    SHA256

    b30da94399b2256d165cab1debe063a78007613cbecfa42e6bb7de2839b4de70

    SHA512

    dd613d1bf3f597516f815b63a9dacc59f53f7b2a38b6e05209e19df03224a48d8ff690fd55483d375d58d10ace98ebbc505c28624d93eca64712cd42d6ea87e3