Analysis

  • max time kernel
    3019124s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 05:00

General

  • Target

    d74766fb6063b847a7258538462bb7b6a3b88a4e43ab94205a4ff753362c2b52.apk

  • Size

    11.2MB

  • MD5

    367f04b61b3258ed9fd26465f24c7817

  • SHA1

    97ab4b0954d02f659c1282de378049848dbcd04e

  • SHA256

    d74766fb6063b847a7258538462bb7b6a3b88a4e43ab94205a4ff753362c2b52

  • SHA512

    50bee05c0fdbd72ba997135bb27d42fb2645d3088b7e602eca45289bfbb8ab2072c70802d1d932857f09d1e2a377b7e57a4a6a88559911f5d5ce3ffa0113e536

  • SSDEEP

    196608:ELFdOoeA7zkZCszWQSo4BUNapisRWY01qvjeewnH0TsIhitBRgTBQqu:mFQBTQYqvjynH0T1QBRgTBQqu

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.rong.fastloan
    1⤵
    • Loads dropped Dex/Jar
    PID:4247
    • chmod 755 /data/user/0/com.rong.fastloan/.jiagu/libjiagu.so
      2⤵
        PID:4272

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.rong.fastloan/.jiagu/classes.dex

            Filesize

            5.3MB

            MD5

            64417eaa907c75aa16cc6ae2cae9e69a

            SHA1

            4075e844e58f1c95d594503baa7181a294ff8e23

            SHA256

            7de0726776f07e23db53efcb00dc4034894ec562d9cb9b1fe46d7c6f7a990f63

            SHA512

            b1c37ebdd060385bbbdf897cb2e2e490aebc60d651df9be107adf77970ede2feea52c32f5daadae6127609acda3e2b46d234682ebbaba8e912ff7154495eed60

          • /data/data/com.rong.fastloan/.jiagu/classes.dex

            Filesize

            8.0MB

            MD5

            c14ec95172875d039321b0cc56f4517e

            SHA1

            6ac77ecc4918a180939d842a8437aeec09e13295

            SHA256

            277f1a1774532c2a7d7eb32f83c531518ba63649c5f7f0a6f9eb0b83a57e954e

            SHA512

            d3eb464f8499340fb8670cf0f65b29cc9f0b5c58fc0a07753756bbbfe62d999486cee31140c75ec4318d3a9e382489b523fbf4c17e264623a3c46cfed8d3d156

          • /data/data/com.rong.fastloan/.jiagu/classes.dex!classes2.dex

            Filesize

            770KB

            MD5

            ab288e5fb1ccd518204c9b045e009730

            SHA1

            f6291aabd366f03ca4a852628e99acc4e8520607

            SHA256

            d8413d0276d028f574de6a6183d7979829822e76d6fc9df76d17e3a2e51dd643

            SHA512

            45599ea8f08c59640a31ee82c0afbf9ab74d36738bfe58134d23cabd271eae716bc6f790dba99bc2695856e12146c4ccf06e2bc950f75fde0435aefc6a6b366b

          • /data/data/com.rong.fastloan/.jiagu/classes.dex!classes3.dex

            Filesize

            63KB

            MD5

            9054c6a64d45c703458b7391165a0abe

            SHA1

            2e52f70d51a4b65570b037c28a8dc63ff02bc441

            SHA256

            82a3a177cdbcff1f915437144fe63093633680c0e5dc48034cad03d2bc50c467

            SHA512

            fca2017eb61cb8f4589cf299f0582d249c54721a54b4d69390f37a6f44491b92dea3f585d0f113e012241355e5b4e842483002efcda84ce6cd8983158ba840dd

          • /data/data/com.rong.fastloan/.jiagu/libjiagu.so

            Filesize

            363KB

            MD5

            f7f5e960db0c8a6f3b5b8d1a0427a042

            SHA1

            a8b623f9f87a6e785508befe07314da2fa903bfa

            SHA256

            17ac5b03f2a51ebdf2cce66314bc8e3e1547bfa0dde61357fcc07768aaaecb3c

            SHA512

            ec889d1d9428cdbac082d0b5ab81cf33ac417874a416daf27b02af3d207b1b02ed794fc0b3f0ea266c8edaf3bfeb8f3cef7c631af689405fa629fee948ae8cba