Analysis

  • max time kernel
    3630436s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    05/01/2024, 06:36

General

  • Target

    43019a9c6084d1cdb588df9919fb6105.apk

  • Size

    9.7MB

  • MD5

    43019a9c6084d1cdb588df9919fb6105

  • SHA1

    f87997b7bb25045a2e82d4dbe50b744f2913dcfb

  • SHA256

    8b090e6a3048e8ae37e0ff31deb05533d0b624fef93c693a3dc7e539d0649850

  • SHA512

    9cee65c7179bc276c8efc7ed4a9a25f686cd37e29175684fd5fe1e73c638d63146e6fdc82df50162ff60c0e0abc7a3ebc0cc59373fb24ba0b78a99eabf38d41a

  • SSDEEP

    196608:BjQsDa1eHeXf5yHAVSaqkDMOhu2gTnWLRdGgTpTRVPzLl:BjQkcVXkwSaqEXhbguIgT9Rhl

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.phy.eirless
    1⤵
    • Loads dropped Dex/Jar
    PID:4983

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.phy.eirless/.jiagu/libjiagu.so

          Filesize

          455KB

          MD5

          e5a53000766ebc433b27d6a66ec4f555

          SHA1

          2c8f53f1c03aec2005bcad67d731f07261dabde0

          SHA256

          78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

          SHA512

          370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

        • /data/data/com.phy.eirless/.jiagu/libjiagu_64.so

          Filesize

          429KB

          MD5

          05a8c3ca16893f4e6cc997a82d987fb3

          SHA1

          76d6c6d19e0bfa83c847e5d330bd144f58994bff

          SHA256

          82e708e200cebe270ec57231729413621a8904e907efac8cfe71cb2cf16a3c10

          SHA512

          2a878c39e713fb6ff5b457f94a1fe2b5adc456924d087a1b6abd59afc0b0e9bad68852eddd34c6441e8996e66eb5fdb711ed6f477d6e447dd48cfd151d89fe96

        • /data/user/0/com.phy.eirless/[email protected]

          Filesize

          4.1MB

          MD5

          3b4048555832df337be66dcdd5d6a975

          SHA1

          5d06dd0595e0437476f334c64be1a7af50af074e

          SHA256

          ce436e49ecd2dfe17acf00bc3152dd7ef587e42fc4afedee67a802559b8637dd

          SHA512

          97281dcb9eb76aaa3d80d3ebea91a23d05c54f7fc42190fbd195d3ee9dbc5899788997bb23de5f71177fdc3bc4bc8bdae9d19f6a230eede0ec0c902643128938

        • /data/user/0/com.phy.eirless/[email protected]!classes2.dex

          Filesize

          5.2MB

          MD5

          4a5b9ad8f953d32e3ccde3688e7b4699

          SHA1

          ca90184d5047c9e0ce2d81275bb768fe62ec2dae

          SHA256

          ee5eb0b4e13ccc9604bb90285eb5c15fee0fa4c94517202546f4f2a2bd07d310

          SHA512

          d750f9f4aaf7d0c65ffc2b41bc0dcae8b99942df56e4f0ca31ba6ac1b13a8fe2821550832b74a233fa4cd57324b9603465ae8b9f21843db63da230d1d2fe5136

        • /data/user/0/com.phy.eirless/[email protected]!classes3.dex

          Filesize

          2.3MB

          MD5

          37989482a9f0656736932d293788dd78

          SHA1

          a5f51299a788c9f2583d09083b9ea16db9e7bc2f

          SHA256

          c154e1e3211ce7974cbef74ccd8a5793f16bc3b62a33a471212026227f43b9ab

          SHA512

          b21b88e9df9c6586fe34c2e09b02f987028a1a9934a344493310cdd83eb6134b8a24b338d837bacf7a6b9fd70fb579413e9664d38fa05aede113779e8b15f54e