7c6042992097c8e8add806a2d3df2d5fd537e774b052b10fc8003b573e60323e

Analysis

max time kernel
151s
max time network
155s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
09/03/2024, 12:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bbdc55042e4d772aaf77522764fc62b1.apk
Size

18.3MB
MD5

bbdc55042e4d772aaf77522764fc62b1
SHA1

cfe56fa045d75f5f816c271e6924bd0cb12bfc89
SHA256

7c6042992097c8e8add806a2d3df2d5fd537e774b052b10fc8003b573e60323e
SHA512

5345d98ba224f62c92b697cfa372728b8605dc26b12ec179883c1521ed6c13cb36f37956321a3349ee7cf3667af06578d1ff34572073835c9f3fea9895d417a0
SSDEEP

393216:D1IQF0MlvSYKYO5/XenzoxM42003u7xaupQ2cYd3kgJ7ZRxn179jva2WD:pIG0oKY1Uuc0+N9bkYn17rWD

Score

8^/10

collection discovery evasion

Malware Config

Signatures

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	cn.bagechuxing.app
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	cn.bagechuxing.app:remote

Checks known Qemu files. 1 TTPs 1 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

ioc	Process
/sys/qemu_trace	cn.bagechuxing.app

Loads dropped Dex/Jar 1 TTPs 9 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/cn.bagechuxing.app/.jiagu/classes.dex	4193	cn.bagechuxing.app
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes2.dex	4193	cn.bagechuxing.app
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes3.dex	4193	cn.bagechuxing.app
/data/data/cn.bagechuxing.app/.jiagu/classes.dex	4403	cn.bagechuxing.app:pushcore
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes2.dex	4403	cn.bagechuxing.app:pushcore
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes3.dex	4403	cn.bagechuxing.app:pushcore
/data/data/cn.bagechuxing.app/.jiagu/classes.dex	4478	cn.bagechuxing.app:remote
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes2.dex	4478	cn.bagechuxing.app:remote
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes3.dex	4478	cn.bagechuxing.app:remote

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	cn.bagechuxing.app:pushcore

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

evasion

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	cn.bagechuxing.app:remote

Uses Crypto APIs (Might try to encrypt user data) 3 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cn.bagechuxing.app
Framework API call	javax.crypto.Cipher.doFinal	cn.bagechuxing.app:pushcore
Framework API call	javax.crypto.Cipher.doFinal	cn.bagechuxing.app:remote

cn.bagechuxing.app
1⤵
- Requests cell location
- Checks known Qemu files.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4193
- chmod 755 /data/user/0/cn.bagechuxing.app/.jiagu/libjiagu.so
  2⤵
  PID:4230
- sh -c ps
  2⤵
  PID:4762
- ps
  2⤵
  PID:4762

cn.bagechuxing.app:pushcore
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4403
- /system/bin/sh -c type su
  2⤵
  PID:4580

cn.bagechuxing.app:remote
1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4478
- /system/bin/sh -c getprop
  2⤵
  PID:4664
- getprop
  2⤵
  PID:4664

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.bagechuxing.app/.jiagu/classes.dex

Filesize
3.9MB

MD5
901a0decfb0da41f6c127450e270885f

SHA1
b57e560cd2d3360040fcce6ca6028a705c306a1b

SHA256
293620e654f2c42bad0e22cb43782e9bd356bb9242281755b73d1d0a7cf1a973

SHA512
cea261cedbba3f4f24bca34e76f06849dcd09a9188244ceb1f6a24c6402af50ce00224525cd8865d372ccbcfea8cdc10e574d12bebb442a2aa519081edce834b

Download Submit
/data/data/cn.bagechuxing.app/.jiagu/classes.dex

Filesize
5.7MB

MD5
06f18a878207338e32ba40c384f969d0

SHA1
154950622b0d53d24ab4bd5caf8844289b972f4d

SHA256
f0aefe36717b50436af10e8e42c6c0eff0c9f2548cc0c03414091b4ab2eeb055

SHA512
6c8eb91557a1c1a6d4b7c1afe405a7eedbfa9e61fe06582f528bea6b4b74704dceaf097ac0be1fc0dc49820f0db62147a7f8430f14b44689ec28b2f4a44ec9f1

Download Submit
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes2.dex

Filesize
3.3MB

MD5
64c6ff32fc4a79f34219c3a4f50c4fac

SHA1
066c70b3424eb7aa62e6e36d7751e82d72b588a4

SHA256
4744a7f9f2dcc05e43838201a3a2368f5e2e13be2f922fa917719a3b14ebe472

SHA512
e927fe3b358ef8a80065b9cfb1eaa1d747c74e27bb148b6f8bad85e7c5f19e0f4e0c7da73005a47dd1eba72948a6ae2ee8ffcc393d750de255c45f0ec1a5402f

Download Submit
/data/data/cn.bagechuxing.app/.jiagu/classes.dex!classes3.dex

Filesize
83KB

MD5
7ad42a7fc935fa157b833ff7bc5b6fdb

SHA1
0b4f67d8e7db48fef5d2b2f314eb98c77c164d9a

SHA256
08d64c43dbf9d967faf4ee2523dda504a52fc3f61bd6ee5fd1118b0f1b51449d

SHA512
9eb170b51e51f0564ffe00cb503e9803eb0bd9afdc5f4d0804237e2f74f41f35d3a824f4b7cf1a51d88e6636fb5944e432528640b18a2cb88134ef9223650e38

Download Submit
/data/data/cn.bagechuxing.app/.jiagu/libjiagu.so

Filesize
363KB

MD5
f7f5e960db0c8a6f3b5b8d1a0427a042

SHA1
a8b623f9f87a6e785508befe07314da2fa903bfa

SHA256
17ac5b03f2a51ebdf2cce66314bc8e3e1547bfa0dde61357fcc07768aaaecb3c

SHA512
ec889d1d9428cdbac082d0b5ab81cf33ac417874a416daf27b02af3d207b1b02ed794fc0b3f0ea266c8edaf3bfeb8f3cef7c631af689405fa629fee948ae8cba

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
363KB

MD5
d0de5778b50b0243f7015f22b6e4dacf

SHA1
f3cc3c498e8a1b44f0d0ee798c9a30b5018bd884

SHA256
37dccd40a421681df03fed9d3e68c919ec437373d05b75245013c8a8ea5c5f4e

SHA512
3a23e3e533aaed9eec0d2280a3fde2a4f72ec8422fd1b7e21849c706bfa24e030e22808a9140b832a4c9c1acd01fcca3232ad5073878b07e293132a93672fea8

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
227B

MD5
7c0a08d3a27a7d6d9cba7f49071d9c13

SHA1
a7b04382468694b03afd30836d23d320e1f4479b

SHA256
cd9a430581a049df08d8834d64ba5ae7f3f5c32491dce986a0d83b7e2d814089

SHA512
235e1b778bc69842f92ff7d0f1d8f9129deab27bb931752eb1c1082f29460b0d8a6fc8c52b79ef545d07dae1288232ae05ad8501ed6c2ee40c349868958f319a

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
3.9MB

MD5
ada7aeba4195d75a5ddd2b57a6da256f

SHA1
9d695b83f25667760256dc32955602e60faa836a

SHA256
e8a3d8375094f8cf8be62486f764a1376adb280d8fc5a1ebc9d91013b4f3a471

SHA512
97cf1ff5264ee9f58d2b05f03e6b13d5bba316fc9ed2c447eb76d3ad815e9acaf438cbc5eb661e29ee1034fe988308118985e59680b86998f4fff13d548338ce

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
108KB

MD5
2022ee39d24545ab03a105f661a22af9

SHA1
73088e76e4742f3bbd72e12832183b43f732116d

SHA256
ea1478102b57a606e5de8fe4623ba8c5050e6aca0864be9dcd8ec56ec54647be

SHA512
16a10eb3c059ee6d6d9716197ec0169aa07f6f4cb901ea04246f0d9f34cc931bfa265c15ce6f4f0506920f365f06b19d574d2435077f29bc9d9c217c780161d1

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
234B

MD5
24308e51a34b102643e22157663968b4

SHA1
4b2d786e801f4dcc790d1532a6617f6b7c6700f9

SHA256
24954e0a6cbdbf773d8ab1ae1eb999ca392c26fb7b74dcdcf9804e8a7ce27583

SHA512
1824a1d57e8570def1d1ff998e7f245ad5b922db1fae00b56b4c4850b05aa60a0349b0263394eba01114300439d9a0bc5f8f5f194a5b37c97cc3c430458ce27a

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
314B

MD5
48986fd7b435d2ce21b375b09ef047fc

SHA1
c8b7cdb9bf21be2798a54a2e720528f44bec112e

SHA256
3f0cfe84ec211974e25b77c1d5882c3239090268530334a7c0771e42d4cb9f30

SHA512
5bbb7b3f353a5e1f24d7c037f21271691380218a777bf68bdab2d6e9336e5c5d5fbe8d38c879b3d07a2c4e6787eeb7945e54ea8408ea3a7a74387e8cf7a35217

Download Submit
/data/data/cn.bagechuxing.app/app_crashrecord/1004

Filesize
314B

MD5
ef0cec452e05cdf5f0bd423125ed6bd7

SHA1
33cb74a8cd9b50d006c741703b322e730a5c390b

SHA256
2e08b670911fdb34b23583c1542b640465f843ebe4aca46af03e9e0d6c2f39a5

SHA512
b3cd381b1f2176657523a0899f674fc5762a464c0ad0c8706e6a97480f3de442bf7bb8250a3994135cd3538903c58fccf92363185dfcb6936a9dbdaad9e949f0

Download Submit
/data/data/cn.bagechuxing.app/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/cn.bagechuxing.app/databases/bugly_db_-journal

Filesize
512B

MD5
2f0bc1a30ea1edfa47093a5b41dfab64

SHA1
0cec6089dd62d26cd32c5ccacb2f8a9b75e8c5ba

SHA256
55f67b2bf00be6013d32e56753bbb1627839d6394213a4e6c495a70652373e5a

SHA512
22cbd6c50b8be313c838f4c84ae063c089f3bdc4f43451f60eaff3f90f1fb3244cb3c8625cd8db156a94b2e78619dee93a75302ae085b0595d4fc7664f2700c7

Download Submit
/data/data/cn.bagechuxing.app/databases/bugly_db_-wal

Filesize
16KB

MD5
5bd087bac471f98e707f680b353621f6

SHA1
db4f4adef29bb5413085edb8a8845177ee46cce9

SHA256
10686376d379a3bbb66caf377500842b1d46fe8982a6ef673d39da61a56a4f1f

SHA512
5b084b0fd098f6753a026deb59626f1857930f4dd58109253b11281d12cd2291bc9e1da5a99add1bcc9c891053951b6886c13ef444479b76a1af23319b8bd104

Download Submit
/data/data/cn.bagechuxing.app/databases/bugly_db_-wal

Filesize
3.9MB

MD5
9888d601b265e7db0c43ea6093fc8099

SHA1
a3013f7e6279061d284f74e5b25b119634311a95

SHA256
ca96cff5a7eb1479d1695595ba46f2363a883ab9b893808422d07d5b79af76ce

SHA512
e053ba7c1bef6b4d375fe2f2bccfa6bfc60bb2b3e6923b7ca29f09c58f2cfbf48337d019770f5cbf345c2ad5415887a0d1677b252e1cbf83499e974aacebb032

Download Submit
/data/data/cn.bagechuxing.app/databases/bugly_db_-wal

Filesize
76KB

MD5
92e9bbfeb609339914de2c2c2e665537

SHA1
85fb7e25e1b06d3ef97f3a9ec1583113bcb55673

SHA256
77d5a7c49e59cfb327f2682c36ec02f6d1e61ad56d9e00967126e71e008b1c0f

SHA512
6cc0f527cd3a5d958c4ae834049d7b68b36ce0c5c3d12cc678510828e3f489e403140c8bf86aa564245ee9ff9bf945391f6da0163ea5c54d8a60023fc9dfa244

Download Submit
/data/data/cn.bagechuxing.app/files/.jglogs/.jg.ac

Filesize
40B

MD5
919ae8378972760d1eca8bb5c972f5b4

SHA1
845aab643a67e39fac0f4c7c9daab68e4211d1b8

SHA256
49d2a49ba348c3067cc9a4126951036af35d4cfb02c79186a59cfd8c105f36c3

SHA512
ecf4078e95b9ff2e544cbaaef33c7e1f6a598f4245862b9bd8af5d106acec5fbb027b94595d2626cf150fd298ab16ad3053fbf8a3efa503e05db60b7022f8c54

Download Submit
/data/data/cn.bagechuxing.app/files/.jglogs/.jg.di

Filesize
340B

MD5
bb1e9b3e73f29525a7dfa00e13211246

SHA1
765161519742eacb9de86655713d1704f4018fd9

SHA256
4431534376dbd3f29cc5712c910854fd4a09cafc1360cf6444d05b36687c5454

SHA512
68bea9a345777e03a783ae55a4f67910f869410d90497a81538f498faf598f0cab7f4547254adce2410c288445853a93e301ad85010b8e298373d87a6b007a19

Download Submit
/data/data/cn.bagechuxing.app/files/.jglogs/.jg.di

Filesize
340B

MD5
918fecc220f2294aa3d729f7b2bd7f48

SHA1
66a3dee2cb676c4b2cb3f6d848644cc982a75077

SHA256
e5abd2afc1f569205fc924619d157805fea1af7161c0f2896f59f2655598e72f

SHA512
24bfc7e708f7936d3bfc4e50e5ea63b17fd5b1362cc018239dfe658d705ef19dc8a6493b56c83f74b4fe975bfb25eb22d3f2f27368577bab5e4c01faed5839ee

Download Submit
/data/data/cn.bagechuxing.app/files/.jglogs/.jg.ri

Filesize
314B

MD5
0ff0d2be8aaa85c5d891cb2733e8b613

SHA1
85fcb6d2749d399e53e4ca85be62c3a06ec31bf9

SHA256
8d48fdd25657a05d13074778e6a0a8346e2dccc3e9277ee59188f663b1400812

SHA512
9ef017541877da7db2f43f57f346c1be0d29c21f9bda8ec7c993bdf5e476599a11baea49bae419f94ab153664c390a4a1fcaa7c0982800b377e8e668edec58c2

Download Submit
/data/data/cn.bagechuxing.app/files/.jiagu.lock

Filesize
27B

MD5
e0092b5e667ebdc0464bf3015a1a56c8

SHA1
680f83a93586aa03ae36e216607480cc3eef9a23

SHA256
df2c708d12e0130811d63dbf33e7a4175908c8a2c8ac9f7c58766ac5e46e072c

SHA512
25f80f028409e69aea91fd5b79ec0b31deb5f2bcf2e07d89eb3ac52d79f000e266b5187630d871ba38857bd7c21576c79b71f61bfe525fafbe4a05d619261ae7

Download Submit
/data/data/cn.bagechuxing.app/files/.um/um_cache_1709989074125.env

Filesize
576B

MD5
8e984c84a3d5eeb82f77ef6bee7b783c

SHA1
41c2dd54877245f2bd4dcc55e91992756a149c89

SHA256
6ab531f1027239b2747cd3f723de98bd2193f619d79daa27e84e0ea4e9cc2009

SHA512
ac45f2dc58444ab87695d57cb6360ac41cc7bf6ca43ffbc2c5b5412432fd2272e3605714ecbc7bf11dea8392dc7eaeb10dbb9b8a42e80328f8ab83c91eaa913b

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/a/CustomIndex

Filesize
4KB

MD5
4b0ac5409aea846169390ebe55250e0a

SHA1
06f6726034f8a9ecb367c8dfa041fcc3c7279cd7

SHA256
21d502d8854588180ce5c57e92974f0d90936c5ea953cb3c465053e7e308795f

SHA512
0a1597a05bdc7fb133fb3b3da40d66f2bbcd5b58eb95349d3fda68fce5900d67d15859412d6f2715218521af9dacf94a2fed2365352d9a509acd261914d8fc9e

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/a/ResPack.rs

Filesize
780KB

MD5
50a3a60cb3f313669e80d670c5d73763

SHA1
84ea55ff01cd3a2fe2e57e7150acb6351328f2f8

SHA256
e4af2f6b2580dd07c1866b6d85181840a39b315fa48456fbd1c9f7b1ee660ada

SHA512
2056c13569cc05a7ec58ff72331ea3b63a6300310104eb96455a8d3f349222e071759512d99172bafb8c48a8e8ac54d978a5826369a5c74ece167fcb0e63a973

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/a/mapstyle.sty

Filesize
699KB

MD5
f25830284236204761444abda75d50b6

SHA1
bdf7439500e8178e302b7dd8c8f2e0dfa60bd062

SHA256
adc33e0512c954e58f03a15acb27b4462a70823f7ab6be477fc0bf255c4676ec

SHA512
36793137f0047c8c9852d23d85ccd1712340e7371d3affc75f1b5e66db68e6063564720b044ea206c8b49e7c90558164b453bc04151d5778f9aa4da5395ea41b

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/a/satellitestyle.sty

Filesize
366KB

MD5
43d8e1eac760776144667e06f7fa6125

SHA1
86e1107c3005828e82a9df6b68ae8dde967af8ab

SHA256
9f2d16f46378885fad1701984df4df19892fcaa25c60f36123aafcdbebc72a1c

SHA512
6d41707ae5652c8e31cd453aa364c04de22a4d30e4cbb782b85d048df0c4a36efad491d788f588ada7e06282b77aab85021777782c2462aaeb2302eaad6adce5

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/a/trafficstyle.sty

Filesize
7KB

MD5
831c0530133dcc6511bf3d9e15d44505

SHA1
b608f72729bf14b2397b06a54b933229c454b38a

SHA256
15a5813a7868f81ebf58cfd76b93e4f40d139bfa46f93112f247f3ed25deb161

SHA512
ec4120830d2737e3f97fdc0e894e3534ccaa84edb2af7709cdb8070439ff63e4130ac000daab3fadfb95cfebe123d5c7a7929a8e5313b67cf7baabff911c5f15

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/h/DVHotMap.cfg

Filesize
10KB

MD5
c16f5ca1517683c46e02a6b71aab3c00

SHA1
2d09a048d1b8d556d89d4d723947e9e234b5e59b

SHA256
13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

SHA512
a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/h/DVHotcity.cfg

Filesize
1KB

MD5
11ed43e96f09a823eb14788bf3caa090

SHA1
8e29e6ef80cd77c0540b429532c49b24bea8cb9c

SHA256
8f871252718e80ce8ce25f36bd390f813cf6798035e18da2a385369a747aa41b

SHA512
bc7af1e6da3d69bcf86db46749a99a410d40c7ede77d1fd37c7afc12b067ede9659d89ed356b27ae877cea45ec7b93dfd46d618c358bdf7219d91e55e2364891

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/h/DVVersion.cfg

Filesize
352B

MD5
41f0e4f2b59bbb29115b4bdec0d44cef

SHA1
63764035cc6e1c68e030c042b6cd50c741883cb9

SHA256
bdf9c0066b322ff479562a56b9effd13bde3566fe3c1805d95a7875d1a04a13f

SHA512
f548f57d1c3dfadf958d2e4bf67cacf953a0689adf79293709b537c5d970ae1ec3ca08c7bf2b0e92a3d320e14845ae05c77481196f7e6f53a689eb543a10c440

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/idrres/DVIndoor.cfg

Filesize
10KB

MD5
8635d90bf3f1d885d2365c29ee6672a6

SHA1
36862300eed674e22f397d1e4f13fcc402e00565

SHA256
ff2a75551d4166c9d16b88b9d3d76c8f3ca59eec52fb8e1514b54efefc7a124c

SHA512
32516270a6b2ade4d532e7fccde571fa0e8f7bfbbe7432a89d2bd7d11c8cd5c426be2da4dfa1f82f10b5b1be19c205113becad2a56aa6bb5b359280d1d6eadcf

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/idrres/ResPackIndoorMap.rs

Filesize
257KB

MD5
9fab0f1fcc6c764bf0eee994eacf2dd9

SHA1
4f0139dfca44b1e5da69d69097396f61724959b3

SHA256
a75431b0f2fb06cf3c563e5805047b38d0c8f915517fe8783514e829ee15e549

SHA512
3cab952676833e2fcaeb9e45252d3ad8ce494e599feb0c73916770368c4abcf0b3934fb1c691451f2332405a5bf8c919f0d119829debd30d00e8709465acfab5

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/idrres/baseindoormap.sty

Filesize
46KB

MD5
70522fd7c1f5edebf35a992ba8e385ac

SHA1
4798e3d7224ea112180a898d9233a2d2d498ced5

SHA256
984f07241c879fd59e279f15fb876024b5b320ff6358bf9e228a425208de5295

SHA512
c16b83794e4e839058099c6a637225fe1e5729e042e8ad039f7e0b19273488676ca097abbae066ca764e586172cada01360a2730f3f6c7623957defa13e2e25e

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/l/DVDirectory.cfg

Filesize
68KB

MD5
1107c2249c958b6d8ea65fb5584fc123

SHA1
30b1ac251159756a41ef1c13b0eb48487bb4eb20

SHA256
9889f14eec0d798ced2b8c7a1dba11bcf5f12fb04b5b5116775439038b34e4ac

SHA512
fd00cfb78c0871fbf4e253ca7133365578b6abebd4edc43a5988f62fa7c5e1725986856dd0638dfdc0d6769c6edded483d147bd19a6f3e81d950c9b16356a421

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/l/DVHotMap.cfg

Filesize
10KB

MD5
cc3fad9057e0940ad4d4c7ad27922023

SHA1
403cbbcd7b819733b5caf49ed2a58d654441e99d

SHA256
f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

SHA512
ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

Download Submit
/data/data/cn.bagechuxing.app/files/cfg/l/DVVersion.cfg

Filesize
127B

MD5
d54b7b380a5ff46c78283013a07d8e0f

SHA1
f697c5f7028ba2679a96d6bc5291c38ff96d7982

SHA256
c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

SHA512
ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

Download Submit
/data/data/cn.bagechuxing.app/files/jpush_stat_cache.json

Filesize
136B

MD5
db52813a9fc3237ab10ce4433f6270be

SHA1
101e718346813999a2cce68aa871dfe2495fd2c5

SHA256
588edec12816677ea03de8af426b487d7327119f9a2dceae4c4420d00e1b0bb4

SHA512
8b71ff4a037458efe18363767ebc30ccaf1e1461a2d0de30bebad42ac04b4d954d68b971bbb912de45ddee5689d306c87a22f3a8093314d1ff109eb312a7b8f2

Download Submit
/data/data/cn.bagechuxing.app/files/lldt/firll.dat

Filesize
4KB

MD5
f77b4a4916960f4a33b6a8c6cf750f58

SHA1
e728b90a7fec99ff21f023ed9702af06b6c0c784

SHA256
dbb9597b7b0e344e064389774c24cd8c728faf0dd5cd0eb2d109257abe7f4de4

SHA512
8c046e3b1c54b05b77261e2e03c23a787d1526b059f4bda9b49a98fe6ae19b85600b1585fc26878a90e43a5927f87731d6e57825632b71c4df8fa2af4b403e3c

Download Submit
/data/data/cn.bagechuxing.app/files/lldt/grtcfrsa.dat

Filesize
801B

MD5
1b006846988973f075b589832584c743

SHA1
2b666c2088cc9b1d059a343cf6c183294e758730

SHA256
2e43bae82dd9dc614d81cb3ee4c6f2863fafcfa0bff0d6d648ea447e661ca07f

SHA512
15ada6ccaf00510eef62582c1c6333f6aa6e753c9ee7f52817c6d905a2a16c43b08d3eed36b6a582745b6bdb2877dd1ef152e7a4f900451b2c2ef4e63ea88260

Download Submit
/data/data/cn.bagechuxing.app/files/lldt/grtcfrsa.dat

Filesize
227B

MD5
5750f8be8ee9be7bd64055634d65d6b2

SHA1
0095b268c0491eba675da009be9ce001051821df

SHA256
c7211992ebc17d8e99c045fffcd4efa63d2ee3a26dd82a7670f502bd70d30eb3

SHA512
98a8013ad46a6ffe4e2aea0947d512ad6251325b71773a32554d3cbe4fc3157fe49b438e214164085b5f103d374821391488d7c4053e0247f3379f137b1118da

Download Submit
/data/data/cn.bagechuxing.app/files/umeng_it.cache

Filesize
310B

MD5
082a7bdf575c5d75c6bbc471cb9bf8d6

SHA1
7d859b5a98726436dcdd3365f249fdc0e9a20656

SHA256
6621fd42b9f381535e73cb67fb5b40c44bd22c3cf3cd888d0bb57d88fc11eb0f

SHA512
0e78a7df0e1fb52e172ed6b660a1453e5b5b08be5fd9fe82c5ec912053b69792adbf5dfa3a2bd8844957be335ab5a7577e9164680f93b8c2b69ad6a5c208c5f3

Download Submit
/data/data/cn.bagechuxing.app/files/ver.dat

Filesize
6B

MD5
e87d86c44260a351e57df0c7ebdf5e2d

SHA1
4a8dc93f1f5d65f85478d88afbff97b9768ea367

SHA256
ea8266c074b8f6c6bc858a4a33621dd900b447aade2644e3cf3a0d464bf82b93

SHA512
2fede27c0f0d92dea50c16d54c0c64fd5188ea89d9ec1f09d67be297888b873e95ec94429bbe2eaf133295e2e89f8477a8ed257b0453f55619b04548e9ba012a

Download Submit
/data/data/cn.bagechuxing.app/files/wsm.log

Filesize
249B

MD5
f647242fe254b0e36185bc9427f82654

SHA1
2002926ce5e5d109408dbcb41dba4909b221cb5b

SHA256
cf1ded3f125d5745c87f9bdb9c0eb6e6f905d84cb0d36a3f418472a4eb2ca1af

SHA512
c7f0d86cd71ef088816c57b8e2abfb44d7c84b9b337e4f6218df1f935f21e41f155bce3bf3c1e0ead3f268a64f8665335222c6da276d8f96ac88e996cec82217

Download Submit
/data/data/cn.bagechuxing.app/files/wsm.log

Filesize
96B

MD5
6ea8c97fd63449ce8ea96d4faf42c6ff

SHA1
e59a05f21486971dfdeacfee95271dfeb307a075

SHA256
35abb1d0be55854916d3ce8847e8c0a20acd4e64e8844d4c620431f3a816d23d

SHA512
f16d64660ea382de2069e1b122ab47798e391710315752be5e2d2bcc30cee2983c7145196d331aefc561a926393646b472215351afcb7c9ee684208a63a704be

Download Submit
/data/data/cn.bagechuxing.app/files/wsm.log

Filesize
143B

MD5
577e40172cc5d84100c463a461d923a1

SHA1
3d718691d23e830ff1376ea1ba07f09ca5965afd

SHA256
0cee1b5cf721fb404a465b97965cf34c698bcfc871243bdeeb04ecc29517e46b

SHA512
fbad308748fc10a74257fbe90c8c03541107c23289e5db8ea7fca5fcd9f76bff42132a977f1c17ef7ced45cd3131ed20036f6e0f3ca2edae2cdd8fd65cbe6977

Download Submit
/data/data/cn.bagechuxing.app/files/wsm.log

Filesize
27B

MD5
bdbfaab01eed6acb4f1de419939ac7c1

SHA1
709313e9eeed3d7ec67676339ffb252bb46f1663

SHA256
f6788b7a9d4b593582e38f2e19a6fe329114244dacdc22feb4c0f27b1326fa10

SHA512
12df69aebb31f2f2073b5b036d5797454417c507f3202432737883e303baa9f06040e05c5f11ec17261b939ec81723184db647193efd46acfab55d95db9a5625

Download Submit
/data/data/cn.bagechuxing.app/files/wsm.log

Filesize
249B

MD5
bd73366c5ce3bdcb10ba2980450f4e5e

SHA1
c421d9621c539a98f8f96f10864d18b1b486be11

SHA256
f456e6e44b8f29c40a742853666eeb6747e541b128cc49aa6c9f0405f77c9596

SHA512
5d147b4846094f4a0d8e106616c79f6deb3eab50f2656f735fb0ca4f55189f66609860746fb47cf15be5feb7d720e6bfac6c74733621a21460a880a0c1ef2fc4

Download Submit
/data/data/cn.bagechuxing.app/files/wsm.log

Filesize
143B

MD5
0399905aa804a41d54b41792f8001135

SHA1
2c3d1330db435fb0f34df05281b95a9ca4caa1d0

SHA256
e0b0cbd8582d4275837360749cd2c1a83eaecbf1732137022a64d4eea8b374ba

SHA512
3217100cc03a298dfaca32fee9e259979dcd8ac1e91ce3b6ad30fe64cf615f2098c1a5c5e8327289ef501e00f7d54e1c02a34c66da013dff6e5e52e44c555d73

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
c058d762bf29de37838b90f9dfc72146

SHA1
b071c8ff56508ad84c7e643fed7c45637aaf5d39

SHA256
b2c8f5de22d52b3a521f6280b5217e157cd87a60f89313fcdb2bda1956828fe5

SHA512
97fd4fcc182229ea135bb77748e99eb967e20a7482989ca4d20ca6a4512d784a2f948fdc89d7ed140b91e191fee374916cbad93543cdc7aed2830149b63ae9d4

Download Submit
/storage/emulated/0/Android/data/cn.bagechuxing.app/files/BaiduMapSDKNew/cache/tmp/DTTempdat.dat

Filesize
2KB

MD5
8b474b933a2d9e6228d0d0c2e479d998

SHA1
4d62755cd5477be0a1607826121856e7ff22e2ec

SHA256
72cd2274ce0850e42d65416121e6fe65c98428ec05984b4d9500874ffa2c76b4

SHA512
748274d11617885cb866552f80fd4c5cf30db73c098bcfcc6b85e1ba3e7be11a54540e513793e8af8bbf4adedb2e35c6deb8d69c6b423967d32b8ea4e2f117f3

Download Submit
/storage/emulated/0/Android/data/cn.bagechuxing.app/files/BaiduMapSDKNew/cache/tmp/DTTempdat.idx

Filesize
164KB

MD5
9821fa9bf06a0d5162dcaa8b76421dcc

SHA1
921532f0899bceb3d4573c6c1af5c5781f182db4

SHA256
d6441b5f22170d11a2cb15c2b58ab912734740ff3c083e6ebfd83914ea2ca6a7

SHA512
54f2fd30be645b1ab1b4ef3a4cf052642ccfb6f7ca461f8f97ad7a6d674f609e2fe3e815b00e2cbf421fd2123eda59faad451767d8e8479fa54d7f8d59ca9664

Download Submit
/storage/emulated/0/Android/data/cn.bagechuxing.app/files/BaiduMapSDKNew/cache/tmp/DTTempdat.idx

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/storage/emulated/0/Android/data/cn.bagechuxing.app/files/BaiduMapSDKNew/cache/tmp/HMTempdat.dat

Filesize
2KB

MD5
eabe6bee6e08fb16c5ebe88cbf201629

SHA1
c192bb1ff70c073800f78cdb74629e438345425e

SHA256
ce338981ea2ce0f03ab4456273e26d70afdad00b9a5ee930753a34c4d1c4cfd3

SHA512
dc287ccc3c52600882a3f699efddea9cc8a8260b4b01091372a526cfc34f8a98bce241080c34b4df2576d83aebb323438a7d637cd132ab38cd9e268ebc53c264

Download Submit
/storage/emulated/0/Android/data/cn.bagechuxing.app/files/BaiduMapSDKNew/cache/tmp/ITTempdat.dat

Filesize
2KB

MD5
6e4165d590cb8f5e934ba317c8e07000

SHA1
d433b1c0bc77146414ad94fb12fc39cbe6a609eb

SHA256
00b865139970e945b1c9390ef93281f8e6c3650da83fd70a7e43aea0f970a05c

SHA512
abeb12dba014466d4629973c65dfb2fbff32cba67600068338dd7902466a342fc053aa008321f8b01fe0c33b218bbf8a1240afefc51b23e4d0e58d43e6b89882

Download Submit
/storage/emulated/0/BageChuxing/config/map_style

Filesize
1KB

MD5
24b8b02bac631924bf2689d10ee904ac

SHA1
8e279692153006799f34201e6016ba5c354496ca

SHA256
0f7ddb5c4225a96693fb959bdc40f88cf44f4aed5f196887087e20d0b60a47a4

SHA512
f24527d01a789c9ab08c11c6fbe23461fd330a96cca840ccda89f261a753075b034755cc6c8053f793a249bfd3df019a4c27bd2911c92b8b54772a0a9708b0c0

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid2

Filesize
129B

MD5
09e74d3683e493fbd4474f999aac2b08

SHA1
6fe6f029c9b6df3ae24a7d02237efffbe7073e89

SHA256
0b556efd489bff64eb824cb9dca712f438ebc191451f1b5e248a5ed2d9ca2299

SHA512
e4fb40b9601ed86f0b1e45b7b157546d5489db45480e97a2f6a566de7428959f0cede3d90414495782a65a08acf188f9d44058e008f071e6c4d6877c5fd8fb35

Download Submit
/storage/emulated/0/baidu/tempdata/lcvif.dat

Filesize
96B

MD5
d87e3dadb033e4b3cfdc09e001d0c93b

SHA1
f68acda1f4b7202c3b3fc5ea69c1038daac43989

SHA256
7493e4a1c3d1f1b4cf377928d4b12fc76de46bcd351088fd3505c2a45c9bae62

SHA512
b5f69480eed7c842ef2e011e52fd45c193c8bf0e916e2789d3c1b27660c9d78d671c436d88673d8855dcf50d667305b143f3b27ff47e1853ef2462a26100d82f

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
c139c4f30316f04e9b491ac8f270b216

SHA1
4c0e38de654a924af87ffb61d5f75b8c7944a8f1

SHA256
d6cd832acb9d883c21c416a8e51bdea8435021ba4bde225a773683a333bdc43c

SHA512
5e84db13c6969ca416d463fabbec1a65b10a55be3c8dbb956e9d1f4f09185ac19ec998e828fc9c5854fdd75c7e2e95a8fff251a7be758b39ab10b3a31b5b83d5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads