9db01dadaa9f7e7a2728abf0f8f54e127b31cb05029677b521776cd61f1a6089

Analysis

max time kernel
158s
max time network
169s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
26/04/2024, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

00c0e75e39f7ab087635ab5b404004b4_JaffaCakes118.apk
Size

17.9MB
MD5

00c0e75e39f7ab087635ab5b404004b4
SHA1

a9e7c3bca83e783be4477d0a0061f2656040112d
SHA256

9db01dadaa9f7e7a2728abf0f8f54e127b31cb05029677b521776cd61f1a6089
SHA512

7af6d462832a9864da15dac957048274c96776a69b232edc0d20d19bec1f704f5fe97d9737e355dc87a69475a8a1b9fa49fdc3baf2132d41f062ab41f3f47750
SSDEEP

393216:ZONPXBL3FFxnm1ucDS+N6cP+r2tF9Y83E7gf/dgmRYtju:ZO5xpm1dbNLF9RUc2mWtK

Score

8^/10

banker collection discovery evasion impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 1 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.xgbuy.xg

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.xgbuy.xg

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.xgbuy.xg

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.xgbuy.xg/[email protected]	4437	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	4437	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	4437	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]	4509	com.xgbuy.xg:pushcore
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	4509	com.xgbuy.xg:pushcore
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	4509	com.xgbuy.xg:pushcore

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xgbuy.xg
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xgbuy.xg:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.xgbuy.xg

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xgbuy.xg
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xgbuy.xg:pushcore

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.xgbuy.xg

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xgbuy.xg:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4437

com.xgbuy.xg:pushcore
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4509

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so

Filesize
485KB

MD5
015df5724b50b4fbc6dd0caf7ccb817c

SHA1
980780e98c9958aec97ab7a0de8d28a4c5fd9429

SHA256
183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6

SHA512
fda8f5343cac8102aade5f1aeac7c5b028ea5d8c92e3d12de92e1ffce30bab47a446f215c9cff7dd1e1bb88980ee0d27b5241e856719fcc1f6a5c25e062e9d40

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]

Filesize
6.5MB

MD5
bc7b7cec4c2313b65f6d767a77164dd0

SHA1
f0a2fb5db284bc60f424c2084984c830cf4d2ca1

SHA256
84906c5a9b057b44e0df1fb8030d13110748ba30ef7a8017abdd3157ef349ffb

SHA512
379bec4a7a82a83c32e93cb3d5d0e0622d78ec79a5e17861f9600069283ffeac13340003fd2323c884a114bd45102034b3e5e609b3390ce099db6ef71a144432

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

Filesize
6.5MB

MD5
f1e1513c1caa393fe8e9a3f9fff03e7c

SHA1
db053d40d0ead70c10b229d129359601a8b5debd

SHA256
4e81f36348e9d21ea9121450a9c68817efadedf40bf365af9d54a6033b363934

SHA512
e9c0cb206d14c55f3bf375fddd0d1edcf2e4540c24ac5df6e1c4884e87be9861a87b4fa5a49162fd054bafac7ed223e6f79686ffd71224f64f7336173298c03b

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

Filesize
2.0MB

MD5
e0cdaf1a37a325beb335128a913ce71e

SHA1
1b4f9eda9ff72406032655f7a7f97e361d90bb2f

SHA256
444121cbd8f09a2461d84bcdecea5c61c0a5bc7b0fd3671d6a1ba5a91281cbba

SHA512
2f24d69d48c4cf889db9b6d2d5c867b8ea758663e0e83ce1e7ecf650a6b5850669d35d46df3355a643bb2732b590d4609eabbe4aa74d4a4b076c3bb8e8a17d8b

Download Submit
/data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/041f4cd10b09f71bacd00fde53234554229824e28a95ced41bd1c0ba09a647f1.0.tmp

Filesize
106KB

MD5
7459aff7652a92bd0f6067f2d6e82f00

SHA1
df17e66aaa9218124c14a31c0b4830f1e3d85bdd

SHA256
57c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935

SHA512
58a15b84a2a49e0bfd07ba29d3c0a4590c67c83867e11664ab53519b54afaf5e95266972ea503b4c480df4971dd138afaeaab9c25f3d4747aeed9f8211bdabae

Download Submit
/data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal

Filesize
180B

MD5
389a0ad76d1e37f13b0565f6cb5f123e

SHA1
49a07db263c4cc3f8569e325235c31417a7ab0ed

SHA256
53de4009d71f44cf1fed56b374191c2ad191243b559b78c77a36f227328169ed

SHA512
0001b841599325eb88bf791d281534f114bd5958ad36e4d2003da7a4a0efdf1c3713bd2564bda174effdc9871d45153ea233eb6f84c10e8f95b4e0284d864a84

Download Submit
/data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db

Filesize
20KB

MD5
cf4a149b0794cc2f838d2cc1e1af8225

SHA1
1c2f1cd331c7334dca96ee4f6d60fc08acb31bb7

SHA256
39b1e1bb2f01b5c2b0bb5063f1140a503dc343fc3ad3a8d604840475e4ab5305

SHA512
fca6563c686f4ed4a44652e7b2c69da23950c8ac92e978ded63c8e9fe4894ff0bac1d318b6e23d5cda1de356a4c26a60e4c59a9f0d5683158d3a7a21690aa9e1

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db

Filesize
20KB

MD5
26b128db72bae4effcb422ddc2e1ecfc

SHA1
b50e48229c99872da5e6824812077fd01fdd998d

SHA256
d7e1693e0de6b6db247f89054663d8d7554b1c387d0a18a1fa79557a7da07837

SHA512
751c471692318fdaa1cafdcfb8b63813da3502e0a61b23b11f2529c6574963f56325bcb370b11054b57466599bfcbab167346ca741294cb6937ef1a5b8b1a8e8

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db

Filesize
20KB

MD5
9ee259f540b327ce685c1f8e2b738516

SHA1
dabff337cfdcc025a1343a04c6a927b6525c1ac8

SHA256
d707876ba9249efe30be583da6c1dee9224b187c532cc10111d22ab94d661854

SHA512
a94f47e4564ee066336f3722c2832ae4380203e0a4899d5cffb3b98594b4057bff20233b2a7b232e152ff8c7bd6cb58cb821ed1398771121b3b16db6a55ea422

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db

Filesize
20KB

MD5
48a2751336af08450c6461ed331fa12a

SHA1
91e7bae65d7bca0fd8e19b54fe9f8c0e66f209ab

SHA256
5dcc7e2261a17ee9465b69178b813b38bf8b0d6fee0f49bbed7bffbd2ec5cdd8

SHA512
ba9bb5839b840c2ad7d8f569a566de0a040a7ef4cdd13dc7622e9a4a46b5a027974d5a2c7dace077da14617a4433bb131b8df11ea9021d22ccb5c9968a546d93

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db

Filesize
20KB

MD5
55079ae354a39544299351976f9a5a22

SHA1
8370c90bfc0e02dcd1c94575c0c79dc86b35ce84

SHA256
7e9de332bcbce080985b6e23c929ceb2788b48710d8fcb293f0642566b7a80e4

SHA512
c53f5b2575c3ae0d2f47b32158587575921ec504fc49aa71ab2b11c2f92c8abf36a18f48bf32f0cef2097dd0d3a775d1d5f6f1c9d5e195f6fd3ee3330cdf96b4

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db

Filesize
28KB

MD5
aebe9226d1ac4b5b5dc1cd678c19978b

SHA1
0a6133d97313e00cef1652f52e9121c6843aa78d

SHA256
daaf34b48ee9703a6130f1e36738cc7758320f439d29132cf09c111218f40a0a

SHA512
8b50d725b2a5fe597ff9fd63c10ec54a1160bc1bc6b21c4852c07645d5a38e3817757121f77081f8f087f115f3874f3c81bde57f20d8fddd261c14460c28a26a

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
512B

MD5
b4521e3b3918fd26ce3ff30595ab0d9c

SHA1
6d1825c74fcadfa796996f9c0cb567eba7f66ad1

SHA256
b3a0e27eb9aedd048433d00fc4f4d307b2eeb2d5a1dc3673972724a9d1801d72

SHA512
74f6efa0bf66075a58049081ea85952c44d3f9e8927db5e09cd053c9162d17b057ac31cef19b25cb80b1dc028bff26f21b421df33d898e9082690f466fef06b8

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
8KB

MD5
7199f0004e31b79ea38ef10b9a261e94

SHA1
ee4a3691035129510c5bb41cc791b6cea07c5a74

SHA256
6fadc6deb91fd519310b4d88c5fc5decef82a0d713261d600f31ad3126bdb0d1

SHA512
46ee830fd05d3abe84aa57ad3d61e9414f17f3e5c0a7d02933e086368f412455780b59d81e388584314244c9c65cafc39a0470f3c1bce2520aa840260f5edcd5

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
4KB

MD5
8e394d2ad47d740654f5eba54085f5c6

SHA1
6a8bade93c782937bc03d17cd018008a1f0ed038

SHA256
0187bc95dab64a4b2bcb2e9e1ffe8844543b4b2e18c54140ed43772ec8e2ca36

SHA512
009d8794d7091100f4bdd7591c71e189343fc4207e7b847374630538b5963dd29df4190ef0dd50d789613f4e40657c9735827e2c4b5afd6bb41efe9ea1125f16

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
8KB

MD5
8c5ed9bfc0187dc95c2b345bca59d2be

SHA1
3cdbc0029c7c677e126362bd2cdbfb7fbbf7b3ff

SHA256
f5702477b5ff8bc526572e3efcc302ba14a60943f3cd9a89d5cc5c4fdd833a60

SHA512
198a1f96bbbcd93ea0b0e2ff8f9b7c350e838d5ac82895801c0ad893d0f739198e819427681cb9558db1a6916cd6d9738fad6f272eef4cb776f8afc86988fe1c

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
12KB

MD5
1b3cec9f5a2b689649cf565c4fd4a9b8

SHA1
3850006cf13b67eb2b00e76511ca2510f74961e2

SHA256
ebbcd93dd55e7c8694d0965dbe4a2be0ac3e311ed0e0be000e11448712015351

SHA512
d8de5c1d8ac89ce2e7f26128b2332ffe3c83c0368e8d20a14e6ccaa7c060c836c11d84230da28fcb9079e8c26644fc9e588f5ae6cf8f88641b1f2744eb193c70

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
16KB

MD5
09afe372b9f28f69659168057c91932b

SHA1
2e704bb618f40ef6da44365fe4b452923b96dd0c

SHA256
4eb5611bd30e8d6969a82e7283c9f5acf5deca404107e225f8c6d66100c0521a

SHA512
5540882f229e081cffc8cbdaef09a23110fbda23427711257ad239c075337b743cf3ea390db34b941f6f402edd31e702d940975507be24af9f30eb1ecdf3c9e6

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db

Filesize
32KB

MD5
26bb2eb5f911626397662cd3a8632f58

SHA1
50fcd337cebf755d08085b3cfea45044cf756fc2

SHA256
262fe8965c0732094ed93599202e7508f0f0933e34cf7e5b16f9cf7cf9735c6b

SHA512
3285e2f606b21371f97f5327ca73954d7adaa8cc1072b89286d6ee7ff4a211eee365c2711fc828691a8c3fd33210abf1a6d9bbecd6c9fa941a1ec6f96452fce4

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db

Filesize
40KB

MD5
c8f465d0fe2c3aa256038879c555a820

SHA1
d79bef95a340aa9b9be32d909032ae88be17f168

SHA256
21391dc5adc7be442912fc69be25c7bdf5b8d755b847ef5f04bd35cf5f4ff31e

SHA512
37e3c71e5e6a5c48ac815120a016919447702c9b8b32cebe2c30f90d7f5c8477184021ad4a55d3d100f726cfb99266c461d734e32be8e8ec1f95aa0b7cd3146d

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
512B

MD5
4445ba44c27470a57d3bc3bb7e29c753

SHA1
2da2d3900fe73152d91c377c8a46f55072135d81

SHA256
f8bc2c5649e119eae7ff289ac0a4c2421682fb91dc45bee8d29e6fbe99154afa

SHA512
caa158a370a800c57e0cc122c25a1c3166dc9cdc834269eb73bd846322c853a45fedacdce4109b680a5a1e0e72948cbf89ac078abaf7354182b65392d12ee845

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
8KB

MD5
f088c817b75976ce8b7b4082de235936

SHA1
85dfbccad4ceb4bed912220aa7cca48f1236a65c

SHA256
691c4f0f6a5784174132ac450e11c7b5ca27799cd73be2e6a6c7fcff8a7facc5

SHA512
cbb18d4183d848ea5d342736452366060d670a3479702dcd048ff7c400defd3b915549efaf7209b37b9e823d0e3c2ab538b335d5511080efd5b0d197813d04bb

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
8KB

MD5
332235769cc7faa45efc7eadb8419fa7

SHA1
392ced4f1767cef6fa595ce820c67da7663c3207

SHA256
76859db2c7ef5e8801802c15373cd9a2728d544c4e6543d9624b120685b5112d

SHA512
ac747ed65cfc1ae4a89397821e6ff573a72186549451f7eddb29dbc5887062353a1f728b2d1675e3096cc90a5e1c89fa641f006ebc8e2eaaff1cbe1c480510ef

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
12KB

MD5
946d158c4a4d4eac8001f709e154fce7

SHA1
639beaffd4bee5e109c72676bd8d812c9cc0e1ff

SHA256
d80afa574c68a783784b0a6ed02d0c640c8bb9daf5952d3683e2ecef70acf494

SHA512
8d90252bee437b68b0c1c41f37f68e1fce3ef463c8a8d0ea365835eaa6dd96b6c714702e7e0f9ab5f84f59ce4b656343352b3c37bf63345c6f2d6c50753a8eb4

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
16KB

MD5
83daff9b79a8e0e697d6368d6f3fa2f3

SHA1
6245bb6f84c802c417a801b05131f7d0bd1b9d5e

SHA256
e1a965d26b7baed96f172cdba3dfbe1e527263b12b4da890a179f726301e4020

SHA512
0f11cd9d76f19b37785e96f11dd97d331d31e8abc0dd5d460d07764476093b4eb07cc61d647f9d362634d50091ef56a195023d195cbdec391ed2edd3d37b3f50

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
16KB

MD5
cbf742673b16913ee7aea828e0323547

SHA1
3a3825947b9449923af854babeeb92bf9bc9d0e6

SHA256
79252c7107805ac4466c9485a8d4f32ddc75a7f48b70847c09ecebebaa819580

SHA512
aa66a86f47c64740f1cdf90bb7c5d1abdc1f455555dda34786c4fb6d2baaff21b505304bbed216dd7c305c6073f957ff9ca983e4557c64d841a7a6274a9bb608

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest98130553073319298246687555705882381099

Filesize
28KB

MD5
3292cb8a3fa9b3232e3b3529b5fa01a7

SHA1
d7e8248c9618906290e3fb08ad896086c926deba

SHA256
d5a5150dceeb663af4fe511f57ec0814e7b16acdc2469ac4a7e45828edc988af

SHA512
6fbfea3e66c1ef2f36ba5cecc6eac15a440cb3a74c41a782e74abbbb31ba4f0e87c68c82dcc594041b57a7169235b6a44d56420e673dbd4a5da2a63b0c791b1d

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest98130553073319298246687555705882381099-journal

Filesize
512B

MD5
f36c9ca5816828a2abea27fc184a0775

SHA1
e915c7e8a5d453e8fe24d23fe582165e995a235e

SHA256
758b1cab056516a51ae823023ee1abf2658ca60b8a1733ef0024e21fd66f35de

SHA512
a78f0adb6f8592afc083c67b1c40c1d64027c953156bee070eeac5807a955b8e694a8ca627e60a50f474f21e79ebc77c3aca89d4084b5793da6053af83414a9a

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest98130553073319298246687555705882381099-journal

Filesize
8KB

MD5
4ee53398f6bf7b26f877d54bce7bbfa0

SHA1
2eeb861789395eba340cc1ddad0bb785bc4bf755

SHA256
d4374d7abbc0f5b856b85c409671be532351798338169d396019e790cf00c8a6

SHA512
701b051c50892949e3b7cf9b70e5cee0385994e77cca23234cef3a92e343e56321a76499497a6e8dead745aa3b9b0f17c3b8b3fec1656646ef7f2f850413f3b1

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest98130553073319298246687555705882381099-journal

Filesize
8KB

MD5
3976d51b1becec841feed12ba97abf01

SHA1
2f2c6b41cafab7bf4765bb1f5d150aefabaf81e2

SHA256
40579aac5d77d055224e213222ace0bb162926305c896b16786c9315199e9352

SHA512
9dbc0616803a4b56278ec982056a259a905110043f08ede74ba1cc15eee1b34324be50a46e14b75bb4e781a26c4e9a15c84a89c1c97200fb5068498465369784

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest98130553073319298246687555705882381099-journal

Filesize
12KB

MD5
ea7ddb77f1031e2cd625cc30c7d643e4

SHA1
a47f2f1ff07d54bd87768bd7e3f37c9f15a78f1a

SHA256
e3f822cf8384f804f5a5d272f5a9d12b2bfbde79f5cc0b24fa3073fde5aef025

SHA512
6b4ddb59836af9a12d080af7ea2acb83ab23fc057925ffe14ab7c232c2772c090cd9b19e541b05f40ea64d209c734677b4c9c0a3516fcff172c2a133a33cf884

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou

Filesize
44KB

MD5
255f5d5790a10584c2977c13742e927c

SHA1
59d1458ee64b3da2ba6393d7a6889e918b1425cb

SHA256
b0b1eab33f413f7f0b05d1bc1d54ed5f945e70118ff8ea1141d163c4801de71b

SHA512
cacf86b71d6118224105c4ef139dc16f7b0c3bc1dc2efa19f6bf68093ec68f345e7e518fbc26370cda339682616fd167c7d0036eac3e37f3dfc471b975efe929

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
512B

MD5
b1d3ba35a3345728cac22779d6214936

SHA1
073d838a79bbcfa9a273a3cfc99ecf8dc0637da1

SHA256
a0d782a5cd5f7166c7bf7f1957a41a2db13b469b1317bac113be80f3a790d9cf

SHA512
25d292793c3d37d3fd4087dfdca7bf066b6b71ca2e274820c159bd3fe7712010a19c21e9e1976451dfbe61ff75ce3c391f5ce11224a9b87f28d5185d20c51d43

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
212120e62eeff648d42e86d61db7262a

SHA1
2b7381f279fffe77e412fa36a0305e39bbabd97b

SHA256
c85d739ca8fe2c5b1940aee1f2715bdf56a860ebe5a46b248413bbe51819f60b

SHA512
e6323c938e0d511ebfd8811da52366a09261aa3cc37f3e20686b7e7f42e648e6d23e6d8f635e5f763d1f576e26616f8be4a5f121d1343883971c2711818999bc

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
16KB

MD5
81bb211ad401e2c2d344836bf6ec0f2c

SHA1
b081a92b8482c108e187dd9874532e8913e1efb1

SHA256
03c318e4ceb81a50e5515cb79ecddbef0bba6b7a3d8beb3a9a099603e7ecb964

SHA512
ae3e47c9d54a6b7cdb9cae22e03bac7f46f8b243c8d4116438407e75d33fad73527b7aead7af65a9b0a704fceb7e4ca32f3d2eec8124beb8dd66bb3253a546c4

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
8b2a7436209ad418c426ce72c1f71c7c

SHA1
e4a990c5d86dab71a460b4ab75fe537fa4fa47f0

SHA256
bf8a6291c3607f09e3f823324df5aafd08c32c6e59e35b869db2cb0fd64299a3

SHA512
dba04265dc07371c1a32d1bb87172f5e07d988c0dcab5ca9a365fdf1ceb82d07bee1ded49b831a1e2f27a7484cbba892d4e66b0da3abf277a635507a351511de

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
1412c86b057086b0c51c9b34a483a1ff

SHA1
680059fe0729f0dc8cd3903e7629cd24e113ec40

SHA256
e932e38680f02e22f7f8fec0c43873c36893ea4c79b725434065fb06eb2f9c51

SHA512
b3e3503f251b29412cd0161216963c455dd2e4151343247483e26d21d0c627f85fb644e0a999d05e80aad9aa46d1175c630f2b5345f9af4c77b6a3416e62b457

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
0941bede26aaf6059ec5f58270f2b90e

SHA1
ccdad86ab58199c4b1f578470ab6011ede2bd3a7

SHA256
399c274963569e9bb02380ad138ed45214135082e809c13cc7c4337a8e42ba19

SHA512
7c2e779a136b7b78396ee1840d47f7072c0818e1d2810a8b13d54a12b8e98f084f7035aa886e7e2a22262d6e13d7d803a0c972dacb0ad733393447d1dca6e162

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac

Filesize
40B

MD5
3911ad10a2d9a4f7ef7a09639a1b8cf3

SHA1
d8d5dae863fe04bef8d987202e25e065efce1e1f

SHA256
0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d

SHA512
d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac

Filesize
40B

MD5
81024874f926b0c0c9e613997c9370b1

SHA1
a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

SHA256
da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

SHA512
8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di

Filesize
340B

MD5
50089f3a01dabd37e2fdd25d10506312

SHA1
d23cae325583cf4b0ee3639450ffc15dc3043227

SHA256
cd9e509d46080ffccad6aa9faf2ea2d58d694280af4400887871801768a81e27

SHA512
8efa56795f2a252a66bbaa1f6b3da05424ac8803ecff248bd1659e6341b9a889749355c354a0dbf09fd00f70abdcd6c6da045e23e14edee3ab99d67a7c60cc8a

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di

Filesize
340B

MD5
6755b6fc3e5a8a53521dedb689416e6d

SHA1
5dc067170c41b21025bcc511f7fe07a5cf106f35

SHA256
f4c4d236a52a6a0ec33d382da742dc90edf28115ca2b9470ebebec36f565be69

SHA512
ca8385844bbede1ff50eccd6887a460a9e0512ec148bdf51e23c587058911b130991ecb7c3098e45c253015221af4cdb81d9c87ffb2da155dcc48acaaa3fd50c

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ic

Filesize
40B

MD5
1bd86b90e1b355f123e5ce8c93c3de53

SHA1
bee5683d6124650c8be0b3740ad66e771f29b178

SHA256
3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152

SHA512
6ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.rd

Filesize
32B

MD5
dc2e848be2824acf32cff8ee979e58cf

SHA1
de0d519b548d2290385fe035f031fd2c4a61a0eb

SHA256
77b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23

SHA512
52d2e8441548718e5a13c0521a46b15ee7d6b93039edd4f3033852240a63bb4361e238b6c7020725eddfad0199ccfdb7496f8e47a3ef6116e5d0bf067f5b46c9

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ri

Filesize
314B

MD5
3e47722b8ebd3083c4a413f2b6206fdd

SHA1
cb5487d38a27899d86ab8d5d17f511c4063d4b91

SHA256
8b472988136b27a7f498819f16612a8a2e642f428347fea651a966ef661759ce

SHA512
c42b98199e125cd02401e4cf78ecfb3ed8baa207a1ae49437a92926b2f295de94b1191d27eda31bdcc39bef310d2fa7abfc3d86d334e7fe6fd3c9aca7290987c

Download Submit
/data/user/0/com.xgbuy.xg/files/.jiagu.lock

Filesize
27B

MD5
4d1bf2b86dd4a966ef149bf43031e33d

SHA1
0195a8636d92e3a6d8be5e6b3cd4043bd9fd3d9f

SHA256
5bb6f58f521e4467fa6f089886cd188649b6ffc9d8d20e0ea45b7cc9abae9800

SHA512
f138386b27d6e361f55628a388efcf7fd3bc195500ebf380ace11657851930af129cfc597ca78c66d7f8e5f09ab09e1d526bfa9a9b6da50b03d2ac2ecd8a939a

Download Submit
/data/user/0/com.xgbuy.xg/files/Mob/mob_commons_1

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/com.xgbuy.xg/files/Mob/share_sdk_1

Filesize
23B

MD5
8e24e79baab91c4d0604eaa9006a0cb3

SHA1
e427afc94a4b957a7096f73e395a10ea404c076b

SHA256
65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

SHA512
45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

Download Submit
/data/user/0/com.xgbuy.xg/files/Mob/share_sdk_1

Filesize
62B

MD5
2f415fdc51b3e0034da617e624003666

SHA1
ef10d446577d4ec1ebd272b49a0a27b10c1063c1

SHA256
6c74c190bcff9b72403f0baa8e967b11975eb7f007a23ed5dee4bff542a233a9

SHA512
ab5292a352931b49a2a40a596f182ae635485d2d533e788f421ae32db78639e521036deba6fc826d68e59b60e38ac4f01b1eb7afc534ddbe1b7423fcee88a238

Download Submit
/data/user/0/com.xgbuy.xg/files/Mob/share_sdk_1

Filesize
86B

MD5
9c71b65ce8343341e386c7eb7bef14fa

SHA1
37f611792316321e59e231ae41a0a78887108752

SHA256
6dffff61d5be74d42dab539f060527720e70e0f097601edb3d8d4a68856c6cbb

SHA512
f90a2d908d4d855d219772f05c48a29731735a36ce9007f198aacc77e486fcd98e2fa7f958c3d6c4e3173157e6b5d2f387f81a5a9d8b7fe2eb50a9ed5b55581f

Download Submit
/data/user/0/com.xgbuy.xg/files/jpush_stat_cache.json

Filesize
131B

MD5
6318f476a7b08a89bb5717d36e16f473

SHA1
ce60beb55cb511cf55c64c20df038f687860900b

SHA256
078a446be23d9ecc462b4206d5a65c6825690a73d6e26d834e8a4419567c2bac

SHA512
00bcc1697e3f45ec8a1eaf1e3dba0233a131c240710f60d4d47ab83ddc5b33af8c3109fe4444a2a465a0a7d79d2e7102c72e5f920877fb6d346147cbe04c756d

Download Submit
/data/user/0/com.xgbuy.xg/files/jpush_stat_cache.json

Filesize
177B

MD5
5d32c2563dc5ed16bcf65c2b25f04172

SHA1
cc5e583533bf3533d03f7d48fe6104b6f0707a79

SHA256
a09bf178b223e32df3c6ed5e36e1e625122aae5c02bb06d0e34c77bb0f02115d

SHA512
734445b3d0eb25fc8cd86d5d2e5f231c7b09e699d21f4d77ef8849440b4d44ce045941476c10f42ad0f2fd8c44eab52f45bbf981d17b35ef98a4d0b76ea77ba1

Download Submit
/data/user/0/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE0MTMzODk4NDk4

Filesize
1KB

MD5
b816d7c8019b76871a2f39770e3476e8

SHA1
5f737dfec7ed394dd5db6e93764323b06ed364f6

SHA256
4d30a649dfb2b8e802ca0d8044932b74000f42e3c621c610c9d1afbbc2914a64

SHA512
279af794d2ecb36e34a7f862932d064a2edc07e2a36a0b93f141b83bc21b1371f5b2fc7b6934c0f0ddbed3df6f3161c3a0ff62b63b03857d8c85d279bbbe6da8

Download Submit
/data/user/0/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE0MTMzOTI5MzM3

Filesize
1KB

MD5
135f6e5568615830f17a33e10ff25337

SHA1
f8d981bed7d3917c09097a77210f63df17bae6d7

SHA256
929cd0bfc82e79769810d875f35e48601ee9ffda8fc46a6d1ec6d2c3f9fd4851

SHA512
0d7cdb1d5f752950e82e8d9bf5e57842a04451e53f7e295b6c390910f6eee709ff5d47895c8ef84f3b6098ca237cf42515ec37b3cab11a8f7699fef1d3ed99e8

Download Submit
/data/user/0/com.xgbuy.xg/files/umeng_it.cache

Filesize
350B

MD5
41fec8de1b1ecf45ba246c7cebbce127

SHA1
56360d576bbc3d790b348b19e73715025b43953c

SHA256
9f9775448467fa4c97f2a23939c0e9833880cf7181e078a314a23eea1a896945

SHA512
8c4151cac84711a85495cad99898f3a92f07c8f94540a57901fda1b5572b8c3cda04856248883372bc56730d6c9f773126a6ce4eccd0461d2440c8797914e90c

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
66B

MD5
19402718bfb1c685a726b4e1d846ad98

SHA1
02a7e30044a67085f2f1da24e16e4ecfede65b72

SHA256
079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

SHA512
25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
bd5eaa36128ea6ba3aab7bd016c541c8

SHA1
216b93a9188f44a803404a41460aa803da3a33fb

SHA256
b4cba93d0647f9fc5792beeb964ac74254bd398d8c8b40e6410d428510354788

SHA512
60595e2b5ded3ecd86279056794b87ec5f40a0c7fc315196643d306475382caa37e7de78d8cf4683b55b002d29f01684fb553c2d5e5bfa1f6d4579eb2a652d6c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads