df9d23a5b83d39ca94b219ba1df11a6ec30363e5eee0ddc614ae567f7248799d

Analysis

max time kernel
38368s
max time network
147s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
13/01/2024, 10:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

58a5b40c696064402cfe4bb190cd6443.apk
Size

11.8MB
MD5

58a5b40c696064402cfe4bb190cd6443
SHA1

8788ee113bf2958d41cdf703183c9b7ba85e3fe8
SHA256

df9d23a5b83d39ca94b219ba1df11a6ec30363e5eee0ddc614ae567f7248799d
SHA512

ae71d1512bdd06bf0e58371ef403d992b4a844222384d9be5db8890aa715e8ad8676aa09868fa954b25e96ddb3527822a32bc6c544424e052c3cf2f6a2e119a2
SSDEEP

196608:eXCfJ7r+eK+vDW/DaqBTx6ozAbiiES6eQxBOaJJer/n2gZUVW81LyoyMNqspWZ1D:eXaZK+7cxhzjWbcB9JADn2sUVW8E5MNK

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.xinli.fm/[email protected]	4959	com.xinli.fm
/data/user/0/com.xinli.fm/[email protected]!classes2.dex	4959	com.xinli.fm
/data/user/0/com.xinli.fm/[email protected]!classes3.dex	4959	com.xinli.fm

com.xinli.fm
1⤵
- Loads dropped Dex/Jar
PID:4959

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xinli.fm/files/.jglogs/.jg.di

Filesize
340B

MD5
68a2d91ab96659ecc5bc4dedb8dfa64e

SHA1
491474be55760c2e0a74d7491fb09e28fa55622a

SHA256
950915bb00cda4709b9194a35b2ee06a58d3cb8826ceffc299ec51dc2f8c35d5

SHA512
db62bfd88233332b3acb5716e2c779d4bcf8a03d448315b1fd3c7209ece48997019c58cc72f56577d57473b5f630d10db848d9192333ca6e9b759ecf8b8de582

Download Submit
/data/data/com.xinli.fm/files/.jglogs/.jg.ri

Filesize
314B

MD5
c9a8d0340480c6a316af4fb0df292248

SHA1
e386d2082fec31a43bb86caf2513ec75176a4a28

SHA256
52de63c6ffad2f18c19dd3ed59d14052599033111ab1e756ed3a761f07dbb748

SHA512
7f1dd2c4d6b617e1d48eafdc83454d6d5e4dc818d49368baf55802f0a1d6bd2348677834392ca2ab3fa89f8973b20aaa231462b59e6e6a103ca282727efb9a07

Download Submit
/data/data/com.xinli.fm/files/.jiagu.lock

Filesize
27B

MD5
c19d9a74d05ef1979c85feb66505850d

SHA1
d85ba5024c95af1e0ad05e1cca26c292d11ce54f

SHA256
7063429ffe43b648b98030c9933eca2bd631cc3f5128542f8036d6f3bd478465

SHA512
74d0f679d58ac6c503db833e4c0277d3453050cade96d6daa4fee8e0f514717a9a9628fed007755aa5f5f1d0fb883a20f726822aedf5de9a854931a40bfb0355

Download Submit
/data/user/0/com.xinli.fm/[email protected]

Filesize
5.8MB

MD5
4296d97412cb3732047f05389972c31f

SHA1
80adc8a9a23725881737ff48352bd20b2b5cb153

SHA256
05bd2126e5fba808902207ef36942c4c4ed54fbba1141a8086c9f70999f27e05

SHA512
5babe331c6005c6d1382726529ad0382145c3d43ad5bcae89ab494a860938e9276e192d1411b8023c9156d5c34ab010bfa104be0f01fafc2e8c107952bccb9ab

Download Submit
/data/user/0/com.xinli.fm/[email protected]!classes2.dex

Filesize
5.9MB

MD5
6a45c786c539b7e6133e1db4f88ebee8

SHA1
5a010c1c75607f28198f19a957dab8779bf98051

SHA256
ca5c4dd5da6a90fb6b5b98277d60e81f94235a87b890dac2c98fb24b588319a1

SHA512
8e16ee86096c80fefdd2356a354b142a4376889012ba4449c720b712b4d16ed9f3862b2822a25ca625ba6b61fea5ba0854e90a3e8a7fc76116cbd23764d369c6

Download Submit
/data/user/0/com.xinli.fm/[email protected]!classes3.dex

Filesize
1.4MB

MD5
c7beef551a613534a601d29db51d87cf

SHA1
93995652ed39337e8a76d1bba9fc5007db3b3ce8

SHA256
4acb7acebb0fb44ac7536f2509047eefc07e2c67529eb61358ad92d683ee1dea

SHA512
0c6f57e7d469b4ce4b1a46b614104465e44e776bcba741ff35ad644ce3c4ef09735cc690dc65669c24d42d0fef6c59966ce59c43e099d953399cccb32bd3ccd4

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
d0a75cd245e0a59c0212f80a6fd2b6db

SHA1
a441f59b1f9a07326fec3816fb1e78f474fce179

SHA256
115fef0620ef9d60192e3f06557769a85b34af7e634704f99e56b2c4a20cf854

SHA512
c2c1e4045ba67139ec0541ebfcb62e291f0e3c122c9223ac8cedbb46638f99d5c6f073e72dd776e14f1cc46d7a5eef76c5da1706fa7204ebf15714f5d2001b12

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads