Analysis

  • max time kernel
    1s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    14/04/2025, 16:05

General

  • Target

    0720AEDEF3D2C2B02548F7922A0A3663B31D85E470C0EE09476BC3789DDF5BA9.apk

  • Size

    52.6MB

  • MD5

    cf84555bba5c12fac6c937b3efe11d3b

  • SHA1

    8524f0e7ce2be16f28d2831dd5bb8536ac6bada2

  • SHA256

    0720aedef3d2c2b02548f7922a0a3663b31d85e470c0ee09476bc3789ddf5ba9

  • SHA512

    1983a75750ff895488810c509d908d94a1af95569eac1ab97dc455d289bb80346aaadf05887d8670698ae8fa6f722fe3767d425e1fa920a01e6e159abf456d1a

  • SSDEEP

    1572864:3AMvqmeOIJ5ojP+H4U9X4U9r8bwiGCUoSE7BKrwO:3r6dLojU4U9X4U9r8LR7BKH

Score
1/10

Malware Config

Signatures

Processes

  • com.ultrapower.roamwifi.changitravel
    1⤵
      PID:4728

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.ultrapower.roamwifi.changitravel/.jiagu/libjiagu.so

      Filesize

      697KB

      MD5

      efc5b6d16b00b36497edf1ed9f75ca1e

      SHA1

      5444de54cf0de825ac31e782e53089df8e43d175

      SHA256

      6544941690fd703597c2a5fd38ad103843f576e49bb8305b980784a76bed8382

      SHA512

      2166320d39d5437e20b77d9fd54726d08bbe2515ca1c052ec4698ba25eab14ec3905eab94ed5997593549b253d156109fcd9f0442ffe1eec583613b50a7d9796

    • /data/data/com.ultrapower.roamwifi.changitravel/.jiagu/libjiagu_64.so

      Filesize

      814KB

      MD5

      cb9ba5dd461e5a453bb2def0dd08b19c

      SHA1

      3a2f9e6fa89aeb118d87f65ff198f0946ed9b473

      SHA256

      dc41774786efac19013fe3e322c38548ce3589a83e675063d7e0d5badd4041f9

      SHA512

      f7bf0a1092b12f566d0d34b967b222301424bb15631afd555b5aa8b7e61879305bb6ef25d42e9eab42a49bdd3af7c539dbee89423fe7876df7e157194d7f2df2