Analysis

  • max time kernel
    1s
  • max time network
    154s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20240910-en
  • resource tags

    arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
  • submitted
    14/04/2025, 15:59

General

  • Target

    248233C4E61912FDF59AA96976A09267888CC0855AFE781967F6BBB125E67B9E.apk

  • Size

    52.7MB

  • MD5

    d09c1f30378a95f68276c4038c9fa193

  • SHA1

    4fd67e9b01517bfd63c538135d4b492b14d89240

  • SHA256

    248233c4e61912fdf59aa96976a09267888cc0855afe781967f6bbb125e67b9e

  • SHA512

    9030b9038e874cc46ef033e9f69f0d34d61d67a720efcfbef611ce916d3f6f81861417dbef0512b488515f687092052df82bc27e944acbad6a9181039b432a22

  • SSDEEP

    1572864:3smbmeO6FFjP+H4U9X4U9r8bwi6CUoSE7PKrwc:c07jjU4U9X4U9rILR7PKF

Score
1/10

Malware Config

Signatures

Processes

  • com.ultrapower.roamwifi.changitravel
    1⤵
      PID:4489

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.ultrapower.roamwifi.changitravel/.jiagu/libjiagu.so

      Filesize

      700KB

      MD5

      d492c4cc2bc650cdc98a5fc60b2a9b47

      SHA1

      5cf65a213804875cd292fb9870d6066d1c0a011d

      SHA256

      f891e3207429a8d14ae9c11370364d60628d3cf762482a834673262c35244def

      SHA512

      36c0207feb1faf588d66e5e50ba60691248008ba71a0321f280daa035e50d58b0cdb185c335198a17ef0ccb8496c5ee0b1d508cb49fcff9aa22924ae7f24a024

    • /data/data/com.ultrapower.roamwifi.changitravel/.jiagu/libjiagu_64.so

      Filesize

      819KB

      MD5

      085753331b4ee1444f2391c1d1fb9b15

      SHA1

      ec3540fadee96e2e87c464f9bc4d78f25a502105

      SHA256

      c8314b1b031ecd12a8b853e8f719830e4da008088828eb03d13db5428ecebeef

      SHA512

      62c6e36c447cfe206502fdf5bc9732e12367f1578d79a72d16a29c928f1ca36c5d596b83b4f050741a59ae4750a0955e6002b12236a0a2084ee1a6af248a0b64