Analysis

  • max time kernel
    3119240s
  • max time network
    139s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    29/12/2023, 23:53

General

  • Target

    07a5c9e0976634429b5a7f37cade343e.apk

  • Size

    11.9MB

  • MD5

    07a5c9e0976634429b5a7f37cade343e

  • SHA1

    24dbd7fc7d3ebfe36e920ea000b1408aa5f6ef55

  • SHA256

    69e51037df2645fcef1f900d6f7b507d5537b85a3afe9d259bf8185a0a5cd3cc

  • SHA512

    3ad2dc45b175c78f7780a34a3da70e767c031a79e0b1625043e7cd893d1c4a2814d66428f97118f038a2def7f54a3aa86e4df18a63fccf98f6fc8694a9e5ebb1

  • SSDEEP

    196608:xA5W4KwWfcST1z19IZbeZDKQGgnGmJZSZ/o7SjaD7dw33ixZ2zUq:xUu1hsbeZevOG1xo7yaHdwnI2zF

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • zzp.fke.etxhh
    1⤵
    • Loads dropped Dex/Jar
    PID:4612

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/zzp.fke.etxhh/.oabugaij/.fsgkea

          Filesize

          1B

          MD5

          01abfc750a0c942167651c40d088531d

          SHA1

          d08f88df745fa7950b104e4a707a31cfce7b5841

          SHA256

          334359b90efed75da5f0ada1d5e6b256f4a6bd0aee7eb39c0f90182a021ffc8b

          SHA512

          d369286ac86b60fa920f6464d26becacd9f4c8bd885b783407cdcaa74fafd45a8b56b364b63f6256c3ceef26278a1c7799d4243a8149b5ede5ce1d890b5c7236

        • /data/user/0/zzp.fke.etxhh/.jiagu/classes.dex

          Filesize

          4.0MB

          MD5

          d738620ebc360981fa8b7ada3b336829

          SHA1

          876cc70f0f0cab3f5a44e96677067ed39be43911

          SHA256

          8de0d86b4ba5d3586b800e73049f601329a3e9ab804beea57c4682f634850551

          SHA512

          b6b6b124f045f8c5d09d4e762394a222c5fed0de801900dabadeee0ad873654617cce5a3c86d452f341164f653c8fe36ec5a5f732eda4095f596a5aa92c7e928

        • /data/user/0/zzp.fke.etxhh/.jiagu/libjiagu.so

          Filesize

          562KB

          MD5

          d141f6661f27d70822c7021d752d8af6

          SHA1

          e545f7442dca4490cb67b745f6f13ed782b1971c

          SHA256

          e0313c66404c4fb7d023824265ae5a922079d422509d4b59c6fe45632c60146a

          SHA512

          0b2a4c540c077ed93561f249baa75a65344e75dbfaefdb3a68c0d653d79bb5152fcd42c13f34a87b09583f33f1a40231b4f31416b73c323859885374ca0667f6

        • /data/user/0/zzp.fke.etxhh/.jiagu/libjiagu_64.so

          Filesize

          573KB

          MD5

          42abe73319c2521e0fbda052b9d5f1a8

          SHA1

          9ba99e9d00782c0cd94cfee590dc5f540c14c737

          SHA256

          7f33251c6ad0df0db7d313803a1339cd2ee1ce91f832fd7b0bbc651bed74d32a

          SHA512

          0a5362cd28aed0db67bbda3e12e8afa24ec0edd722df732d3b8c645c6351b1864909be9eb155da2ec195ae7d4c42e0bc0b1db083232cac82e39fa4c79dee1792

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.cl

          Filesize

          32B

          MD5

          640abec082b18fc1e78314a7fe59d3d2

          SHA1

          05ac013422f3901bd845d17403cf113826b0f755

          SHA256

          0280d3fa5da22f3f248bc530422771218d365dee65b075eee125596f801251f7

          SHA512

          bac5b50a9a996f856660c8b30f8bff44d779c62b1b78ecab3066fa8fe81e024684e74f50ef90dcb20a224866972be049906f72cbbeb9d22083c54e3438d91710

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.ac

          Filesize

          32B

          MD5

          d4586f7254e1e36c14db197b0b7ab0d0

          SHA1

          1953ee5701fc1121adb84e07aa00e71ae4122f9b

          SHA256

          f3f81754edea5568be8f7ad095090fba808692df0fabc7c2dd723a4cc488bc4b

          SHA512

          b48663c34d8714caf48207d08ff374e74e5a4422c9ac70c829c6feadc24804ba65c2d0a22498a89ebdd9521a95e80a131d6153b048d4e7076dbe5b385b4cc618

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.ic

          Filesize

          32B

          MD5

          06a1c9977c5cb81a5a874e44a3bf65e8

          SHA1

          e820c5f78f32e0ecafb04cb6dc293c339ee12867

          SHA256

          c72b4b08808903266850a3ea9b83171b81299836aca22f0129193597185717f4

          SHA512

          8a0f43f48946c164d3ec421e076297586cb4519de46394bead8b8861e15315b03590e84cfeedd9e47add4d8eb7ebd5263992bb5cb03af2c6c8ec60b143589d42

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.pk

          Filesize

          32B

          MD5

          0a30e6bc0892ffc066b8e8917b3106f2

          SHA1

          5f7c586c13f029d1c59ccc9969706ab5ee5f90b5

          SHA256

          33088fb76fd33eb08ad377f9e3e7a4bba9dab26b08f9b1823cd1ff6c041226ba

          SHA512

          13d4e7d17331c6b7bdcb5202b066741cbfda2ce842ca9ffdcad6cc53970cd00c1548b5051bfcf504dcd4d2eaa58b8cd22c679495c4866d30c5ea4e93dc93341b

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.pk.h

          Filesize

          64B

          MD5

          8958a90a0dedc4832711fba5c6da8d96

          SHA1

          57dfc74bcc70666ffbce97b47c375e399b2ce664

          SHA256

          d34b35e2d24447279880bb70ea34ecbba9a31d0edea771f05340802547baaba6

          SHA512

          279915296fde59d28f7b3f09adbd59de8ced07d9f5e2f385f109301f25e122936ce1a7529684592cfee948a2bb683c69cd19485252c58dedbef819c4cec560fa

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.rd

          Filesize

          32B

          MD5

          e4d2249796ed0542b0e4e6335fe65c5f

          SHA1

          3a771d0fc6389cf361395a4fd379d3c45059de6b

          SHA256

          1fd9675a0017cdbd12409a7a252a954ce4162f71a51004ef2b57e889aa00269e

          SHA512

          32b2ea50876f8ad1872dd93d7ab4cf2dc66195262e954369a8978536113be1ccd377d0960a3bb3d13227c99a905369b3b937edabf0b2e93b83bf3dbadf9f2869

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.ri

          Filesize

          307B

          MD5

          ee8b1a53c1def968f74c8950dddc1044

          SHA1

          1864a7933a2a46a411dc91c76f519d4d40f17b39

          SHA256

          a5d6fde3602425b9c8edbc7590d29ddfaaed904b75128813f5faaa7fe24fcafc

          SHA512

          24af6c07bbaa3aa47e51bd82b69a1859f3880a1ba225561949b625cc9541ac2035ffb5f9f7cd62cc7173efef763461b786026c9d475cb66ff2a87c2feab1a1b8

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.ri

          Filesize

          314B

          MD5

          fc2936d3d0d7acfa4005bb467c923b8a

          SHA1

          7a52a3322476761bce14bdf5c28564e5cf3b33f4

          SHA256

          f4a075862ab1d5dba0e98d71e9b6972c710f97f3ed0f878d8664ed0ee1581d01

          SHA512

          5f34148680401c51e3bd45e819fa461b903848f98f53a8e5666a038fe3254a986786df68892366600f5f53fdffe2316307eac0150219b85f2353cdf9a9192c13

        • /data/user/0/zzp.fke.etxhh/files/.jglogs/.jg.store.report_pid

          Filesize

          32B

          MD5

          5521368ed981f241d4672613705503c1

          SHA1

          01f870b2ce6ed572d0a6c7a00585bdd1bf45dec3

          SHA256

          c5b77fd5dee29e48341d6fe9647a4324bcf495fa2c7357a12eff1211aad608fd

          SHA512

          f0ad719fa9cde400391333c31cd7fc6f5951b36f52159c1adb7ee59cd3c0675365674dbee811759113dc898d6f1736cb83028c7471a671c0db7b628d72518ac5

        • /data/user/0/zzp.fke.etxhh/files/.jiagu.lock

          Filesize

          27B

          MD5

          378662b37076f8d2bc04f039785fa354

          SHA1

          17b2546f7c9284c61446542fb82377e770527c41

          SHA256

          efd55f5b2d8a4e05e8bc7bd51460beb4404dc7377ea79742e531bb5d7ff505b3

          SHA512

          de161ac6417d949c11ef13c35050175e993d92513891a040cad772051dce0ca0fe60e55a4c9a24c51d82038e7f6669406de322596f849292542b0add1f8e3fb8