Analysis

  • max time kernel
    1s
  • max time network
    150s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20240910-en
  • resource tags

    arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
  • submitted
    14/04/2025, 16:18

General

  • Target

    C557A7988C9CE4664DE864A529AD53D4B871A4CEBB271529924E29A32E4832DB.apk

  • Size

    52.9MB

  • MD5

    eee54e651fce242cb0f61d548c3616d6

  • SHA1

    22994e0452e6d124d93b7dbc4bf9cecacc9cd1ef

  • SHA256

    c557a7988c9ce4664de864a529ad53d4b871a4cebb271529924e29a32e4832db

  • SHA512

    ad3ddb1cfde5d120ee5652a6ea6f7863fecf8038983670e68ff65e42bd5966ab022b54787a554aa9a5300f1a76d0951b2ade93908e65dec2ceeb6a45d022089a

  • SSDEEP

    1572864:hyCemeOKBGm2njP+m4U9c4U9O8E+wQ6CUoSE7PKrw2:hyCuJ8m2njz4U9c4U9OBgLR7PKf

Score
1/10

Malware Config

Signatures

Processes

  • com.ultrapower.roamwifi.changitravel
    1⤵
      PID:4474

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.ultrapower.roamwifi.changitravel/.jiagu/libjiagu.so

      Filesize

      733KB

      MD5

      cb8063ed3b5d94b6b3053fb491f1079c

      SHA1

      3894869ef4f144dfcffc8758e3c767c1b772a0df

      SHA256

      689c8d299e2af7278d7fcc8b4954457ae1c1a64740710c5d47d37077cb9ca82f

      SHA512

      4b3c280ab90ae4eead120bcfc57fd6bcdc754ca939b87ecc36835e034b1e21824594b94ee2314d6a02990f864cc8520883f374a5d136c8c87072307f68313ad1

    • /data/data/com.ultrapower.roamwifi.changitravel/.jiagu/libjiagu_64.so

      Filesize

      817KB

      MD5

      314441e80413d51a37e80fc436558ba2

      SHA1

      8b909e14e3b076416a6fe87704958a57485f7313

      SHA256

      861a784fbed6ed13a90b19158059b3d2691e10c206444ee1cc945fc859bdd0b4

      SHA512

      0c02a45426c46016424d366f82d8678ebaa1e3484e3d8eb6014b330616524a33ab3e7add3bed5895528e843bb649ea58d5de878e48a0b971b91258e8137049fb