Analysis

  • max time kernel
    113s
  • max time network
    139s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    28/01/2024, 00:07

General

  • Target

    7ba329bcd648bb32b7a6ddb4b8ab464b.apk

  • Size

    30.7MB

  • MD5

    7ba329bcd648bb32b7a6ddb4b8ab464b

  • SHA1

    d17985be02aec25c2fdc3e0ac30d91349fd038a2

  • SHA256

    5c78b239660d8bfb61e0f13c6a26dca732c22680acbe98f8ce87a523724a54ab

  • SHA512

    f8cd2158a7c7ba1870e5bdf440dc7243e09a4b20d2de96e0d5fbf7ead6ab991ca4707e0b61d486614cbc713241676d618b25bfa8b5854e2e754aceb817ecd49b

  • SSDEEP

    393216:PDCVDlORChZoj3+UMJXH0vae6AM7tGHU0PbNzOz9dB4Cphgl0ZJFD9u3hPHJFFFh:+RIRsZoSUMXHDdG00Tx07Bb4PeL2

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.auntec.zhuoshixiong
    1⤵
    • Loads dropped Dex/Jar
    PID:4629

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.auntec.zhuoshixiong/.jiagu/classes.dex

          Filesize

          6.9MB

          MD5

          1e0da3682bae30612fbed06e995c26b9

          SHA1

          9f8119b5a2543dbfa77024aa5464dd0c279dcbc3

          SHA256

          4fe51a4f8e7398c6f9139944f398bbf95304e32cc17236d2917da755421a7fc1

          SHA512

          b5ae1db212c1a2b1f2092de3e7fda7235110c744b87aea3fb0d33ae574d9cee5134e5d03ab7c6acf1b178d1945c2c1e0aa4ed77229dafa8226c94c1498c19623

        • /data/user/0/com.auntec.zhuoshixiong/.jiagu/classes.dex!classes2.dex

          Filesize

          6.6MB

          MD5

          e4712e0b55a5a0cb9ea7a811f231b275

          SHA1

          eff8b09790d52b3c8913b2bd1e270a5c22338179

          SHA256

          f792e926fe4b6c1ce5334a25db0f5dc608c2e85f9b568ccdc55a7fa5ad74d95d

          SHA512

          8a857f1e35f4e7550f06be1eb9b5cd3203652d718f8c44ef718b16538d07eea87076c9a1112bbb9b88cfc86ebf1f7b0c3ebe4dfce53311d92ccc6d927f55093f

        • /data/user/0/com.auntec.zhuoshixiong/.jiagu/classes.dex!classes3.dex

          Filesize

          1.6MB

          MD5

          d1a3e756a60a693ab0ed53637f3c096c

          SHA1

          75819da52e918369c565cadc749862260bcff490

          SHA256

          69a4712ceb836e874b9f2aa03fc527ebe3f20fc48d80cb7cb94138824f727186

          SHA512

          ee729bbc336c975a178bcf23e7b3ea96f4ea6d74ab5a5d87f316d6e547bb5e31b05bb69f0d14ffb8748723f9a36dfe9fc72fa8f08298d65ad2dc13a15c9375da

        • /data/user/0/com.auntec.zhuoshixiong/databases/com.auntec.zhuoshixiong

          Filesize

          24KB

          MD5

          4842214319759c825dd922fc30570be2

          SHA1

          b23f22e41061b0ddf9acfaff685875817cc2e220

          SHA256

          dd43b37ebbd928cff00152d00575d88e5fadce5c7af63921ef023d977dd51c1c

          SHA512

          97962a9b966b72f3e9366ac3b8541b1ebe63e744196a2e6d4a4d477aa53ec0166ef2c4a267e535b134b4206d4f7b2700c7db0a1b96327f89d472fce752e3ccc7

        • /data/user/0/com.auntec.zhuoshixiong/databases/com.auntec.zhuoshixiong-journal

          Filesize

          512B

          MD5

          bc757b6d017067304c0e900ef33fe9b3

          SHA1

          82a970f1bf8c1b842a71fbce83b47ea8b61fc27d

          SHA256

          a9e97b2f61af62f054158cf68c7da2089fc87c41f96ebf339004abb69202fcab

          SHA512

          53052bc5b650bdfbb4f067c5a0c5b4e768099765b9cda6e316e4f1295b7d973d306492926c04d5a6f01830a19119ad2618cc1059a59d55886f40ba73ecc022f4

        • /data/user/0/com.auntec.zhuoshixiong/databases/com.auntec.zhuoshixiong-journal

          Filesize

          8KB

          MD5

          4726d407cfd463b68f1de2e28828a829

          SHA1

          c3d6903e13ddd62a4a1becf239b7ba088b218573

          SHA256

          cf1d3d1a669cd89d440959688d06df34c2669938493514218dce16dae3c3867e

          SHA512

          ff0b3e4c09ae9f954c1952221a9594f28608f4ad95073177b4beb94cd530f6fe40870c7d72f91d5049ed39c0d29564ba3a4a02ff8b77f97a89e4d30a69c4cd3b

        • /data/user/0/com.auntec.zhuoshixiong/databases/com.auntec.zhuoshixiong-journal

          Filesize

          8KB

          MD5

          459913053220f9357d98ce0f56b433d3

          SHA1

          3f7a58bd77872e140446ca835d244154bae7094e

          SHA256

          9d6c326eae59a5558a29069ba728e832bd07b056fbe385bae8295c642c734377

          SHA512

          965147fedf2bf59b2b761cfdbdf21251c15448fe5cd1584add3347c1ba7acd61a2ad8d50c037a1b86d652d5ff3dd2bf242563e74c58994ad9a19b31f9fb4ef6a

        • /data/user/0/com.auntec.zhuoshixiong/databases/com.auntec.zhuoshixiong-journal

          Filesize

          16KB

          MD5

          5d18c0f4c1b00c10a526dc911e72921b

          SHA1

          b6dfd700e921a7e1dcfcdec53a35e7173978e8ed

          SHA256

          ab7be94ad09a3dc3d0f0eee39d58466c53e0403f784bac06cc18049665702c28

          SHA512

          b8a748bc67c542e603e90bce27e30620e585755db6b6d9620d5968fe77a7ef0b9406adfa7a6c1e8f3d06d4d6431198416f2db915d615dded59eb7df589a89b6b

        • /data/user/0/com.auntec.zhuoshixiong/databases/com.auntec.zhuoshixiong-journal

          Filesize

          16KB

          MD5

          2d274fe45660a14b8c2fbc87d3acda0d

          SHA1

          81e3ff81ef6b9aca1ceca1c28a937f958cd1b8eb

          SHA256

          1b47d18d8e8c73eddf8e87675ca1db938ee32ea017390cd598bdbb1169303355

          SHA512

          aa24213920c9683cb575965e04e494912c1b3d489ecee97a0f3ebc6f8aa7fb68570a1d91ee43fc45b1a4e2e45ae3db9b424d2ed70c2b860d44a0e4deae4769fa