Overview

overview

6

Static

static

6

dd557910ea...64.apk

android-9-x86

4

dd557910ea...64.apk

android-10-x64

4

Analysis

  • max time kernel
    3018343s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 05:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    dd557910eae4d175ce22ef330db6874f7862f99e179262ab4858d4a323eddd64.apk

  • Size

    20.9MB

  • MD5

    e183d8f50f97a3137e9fdd023cbd2818

  • SHA1

    173038ca151f60c5343fd3a696e86e0c1fcb5a80

  • SHA256

    dd557910eae4d175ce22ef330db6874f7862f99e179262ab4858d4a323eddd64

  • SHA512

    c41cbf7e8e73ce012e4817cd13ffd0a38e7e42bdb3d7747b614cb4ec4d22f6dde10ccb9246684c0224767c59dea2d05656f0158003f79917b0f236bb8568eb54

  • SSDEEP

    393216:0JQuveShHECFUlUonhHD0epr5CQGgt9YuFh0EwnKvB8WaOXPSkYHNDibXrSuf2:8OCFUlFaeloLW7z/pwR

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.dp0086.dqzb
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4259
    • chmod 755 /data/user/0/com.dp0086.dqzb/.jiagu/libjiagu.so
      2⤵
        PID:4285
      • chmod 755 /data/user/0/com.dp0086.dqzb/.jiagu/libjiagu.so
        2⤵
          PID:4333
        • /system/bin/dex2oat --instruction-set=x86 --dex-file=/data/data/com.dp0086.dqzb/.jiagu/classes.dex --dex-file=/data/data/com.dp0086.dqzb/.jiagu/classes.dex!classes2.dex --dex-file=/data/data/com.dp0086.dqzb/.jiagu/classes.dex!classes3.dex --oat-file=/data/data/com.dp0086.dqzb/.jiagu/oat/x86/classes.odex --inline-max-code-units=0 --compiler-filter=speed
          2⤵
            PID:4356

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/com.dp0086.dqzb/.jiagu/classes.dex
                Filesize

                7.0MB

                MD5

                e8ada7f326a6d21550d1a2d29a01bc3f

                SHA1

                5df938fa8a7bd3fc8365a8ced70bcabf94a0bc94

                SHA256

                ed3ff06fa040b807f107cf49bbdb8f7e6cf38f7015c3ed28eae8115c4174ee3e

                SHA512

                79484cef8a24aa21c9985779bc35663266074a5a61b5e0420bf29a5b0c3254bc64b6dbc283e4b2f8b0ba2d71e4b9283adfd4147756804b23df24e1e5a4242442

                Download Submit

              • /data/data/com.dp0086.dqzb/.jiagu/libjiagu.so
                Filesize

                363KB

                MD5

                6c9d83b90aa9c9f904d22eb9b16f8f95

                SHA1

                4d5e0ce3c55a22475b58a982d67ab9aa84384c40

                SHA256

                2432ac0b864b33cd599129578c42c43811461dbcb83e2a21301ccb8d0810c5e7

                SHA512

                07d16f67cefc986c0d6974e3bbc38d95b5b184520ec8f3c9ae59a2f0e76213d359b35dc507d482322d2c045ee75183def8e3d7659ff5fa78f6afff931084e90b

                Download Submit