000aeb326ca1b92ba7d4c326b2e03a49d43a62f1feba90eccbdbaf2ad65a29bc

Analysis

max time kernel
142s
max time network
167s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
29-04-2024 23:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

08840e69718fbb05363b8ba777fd55e9_JaffaCakes118.apk
Size

7.7MB
MD5

08840e69718fbb05363b8ba777fd55e9
SHA1

862347d640efb2b22c6c0a46fbebd16723f4fdad
SHA256

000aeb326ca1b92ba7d4c326b2e03a49d43a62f1feba90eccbdbaf2ad65a29bc
SHA512

49c2f4745bf830ce94fd037a40b125ba24665cbac85ec8879e2cf8138a47a196404af9f055efd7ecbf8bb46a9d0d3cc74f7f4adde79d0e22c950a7ac45e7c02a
SSDEEP

196608:COuWkaGxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxQdporiuYlRP9momapUf:vuWMxxxxxxxxxxxxxxxxxxxxxxxxxxxj

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 1 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.esbook.reader:remote

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.esbook.reader

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.esbook.reader:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.esbook.reader
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.esbook.reader:bdservice_v1

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.esbook.reader
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.esbook.reader:remote

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.esbook.reader
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.esbook.reader:remote

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.esbook.reader:bdservice_v1
Framework service call	android.app.IActivityManager.registerReceiver	com.esbook.reader:remote
Framework service call	android.app.IActivityManager.registerReceiver	com.esbook.reader

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.esbook.reader
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.esbook.reader:bdservice_v1
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.esbook.reader:remote

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.esbook.reader
Framework API call	javax.crypto.Cipher.doFinal	com.esbook.reader:bdservice_v1

com.esbook.reader
1⤵
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4208

com.esbook.reader:bdservice_v1
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4331

com.esbook.reader:remote
1⤵
- Requests cell location
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4374

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.esbook.reader/databases/easouBook.db

Filesize
36KB

MD5
8b57ce717843c3d7b409cfec741db1f0

SHA1
c803d7ea2f2148d02309bcf2e1ac68de819a7990

SHA256
97930da183c3c54ba7fa20a1f0a2062b3118e9e97e468220225dad8a719f993b

SHA512
3a6a30fc5ea83c814749366e0425833e4ac86eedde41355fe1124fb7c15b0191f802d30a920d0e4b3805f149378efa261124c2b3262be724c4ac67d00559d044

Download Submit
/data/data/com.esbook.reader/databases/easouBook.db-journal

Filesize
512B

MD5
4b2117202e054c2dff35a4d7e57f45dc

SHA1
66c70a77f91071a216af8b103e3b2df074090428

SHA256
fcd7dfdb3618085d6b78e01c4de09f15820033394fbf2bd5a5ebdb6b2c03f8f5

SHA512
1adf27ba0bb03045acf2a32356f0d3f52d282a6f380627f3163b8a9d88e6f2c660c5b5ca901c5f5165e19f6fd32506bfd354ab983394a522dccfb18b619232bb

Download Submit
/data/data/com.esbook.reader/databases/easouBook.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.esbook.reader/databases/easouBook.db-wal

Filesize
48KB

MD5
33498993b742575297772c07f697e01f

SHA1
d0d5defd42732f8d758b9d7b120aba0cdffa723a

SHA256
ff110f184a636442160a9cd2963a352d96e51a588a4ac68d1dfd381249136fda

SHA512
d6ac8a7249db5aa49da04e0e8bd4b749e0b0786dc160630bc9c2c0108e5fcde66851987a40413666bbeb7bb1d5e202d58a80de91e7fec1b423a25155614133f2

Download Submit
/data/data/com.esbook.reader/databases/es.db

Filesize
36KB

MD5
36d1679f0b5f9f1044cff3adc0dcfae6

SHA1
b3cfd482b270c62e98f88646aa9e0efa2f4f6d4f

SHA256
332a3190f09a665d5f67e093ddec8390fe418fc64ce43d06be1fb7388ceba410

SHA512
a6819acc3460728bbae14f1ab4eeeb7601ec11d3e74c5dc0143ced6fd3e7ef12fdb43cae3eb22700ffc704ccf91f62f33570234907d9ebbcb108cd5ff6c41a29

Download Submit
/data/data/com.esbook.reader/databases/es.db-journal

Filesize
512B

MD5
9113248d7d5412b0142355e6fc50a0ec

SHA1
fae637a92547e63aae178e54fda1ccdc4feadacf

SHA256
498d3041b9dcc80831286c0a00ecb31c4ac1a36b151c76392ba4c482e4aec626

SHA512
107b5256a18fb241e0939ffadb36bb38515db191191957e9d9e997191a39c0f70bcb43ca0d38e3c1b6a2534c31aafc04bcf2c14f5180fb61da71ededae458a07

Download Submit
/data/data/com.esbook.reader/databases/es.db-wal

Filesize
48KB

MD5
184aebea0414bfc7f9996584c6072b04

SHA1
b6dbce461bb8afb2921172094220561d48fc1494

SHA256
b0680df4ca37c2113eed32a74ab2c44e3ff3e7ad6429c79363ac49864f2c5e64

SHA512
ebad75a6ddabdf4eece4b8e2994b7a24b04d4fea48b8640536d167b8a92edf151c585f2a265480c48fa1fb8e0ee82a05333ec8a2c2ba8b1e391f04b40c2b5ec6

Download Submit
/data/data/com.esbook.reader/databases/local.db

Filesize
20KB

MD5
0886e1e4e9e13ad467fed5e6387bbc20

SHA1
a1ea02f457dfb31c0bd183092ab9ef53b860b848

SHA256
78d8f689718e894f087e56dffdf565f70587d96db83daf31e326698f4f463766

SHA512
d705041d9a8a7a8838330511bffc5d8523c5b0efa062d1f0034aa36887f7d34bb8d6270ee093fc03a274672dd961f70dd35e7d5cb2ae30c0414429b8ff837a14

Download Submit
/data/data/com.esbook.reader/databases/local.db-journal

Filesize
512B

MD5
cca5646871eaccf4d393568d28e5309c

SHA1
0dfbeafffc3747b30fcf9fed2110c807881f7783

SHA256
41cc720fe2dbadd58a0395e5727a0e0e5aa5063be443d0d7056dd88ab36a5145

SHA512
d831b5459e2980bb044f1eea663a0b9f946b3980505f6602317c435c208edb02fd51c0c707f893e5b4774aad71c4a03ab8cbba67f3b5fcd91cffb6bbc4b763d7

Download Submit
/data/data/com.esbook.reader/databases/local.db-wal

Filesize
32KB

MD5
c15033455091a19c8c86784b1add7e36

SHA1
5e82810b41184cc920dfd57c3192050981ad3ab2

SHA256
b228480e9d05b8a290a2f66e63e142a90938c157844e1d67bbf65f90e0430129

SHA512
a11a7b8426218371d16f667d7d442c998bf0cc66f1c9a5d9504d7d1af48d6026725a4e4484442fc4c36500c66123334005805cc345457897e1b7f248c227e8ea

Download Submit
/data/data/com.esbook.reader/databases/localEasouBook.db

Filesize
24KB

MD5
3e5677ed2d99b125948e9a7c9ff4e296

SHA1
214ca6afbd9bf188582235e8f61c5c18c94668f6

SHA256
8105e7cefcdef23eb8b3173eb2c53e5e3daf075667aeedea11e61047b6522235

SHA512
03fbd0a3ed568812a2c3e14866ea9b8ebd91eafb77bb848ae68864eb7b31e0f2ba7d9ab34d57a0e4310d494702f4424a1d5b2d1d83236c2e2dacb5a6b8ca60bc

Download Submit
/data/data/com.esbook.reader/databases/localEasouBook.db-journal

Filesize
512B

MD5
77cd3be2899b9f022318aa653bd1f896

SHA1
14ab8f7f8e3c06e04b70681226b844fb34630c42

SHA256
67bfed618a3c60504cf623a3031f735baf4eac51f6b7038b2074f638e7775b2f

SHA512
239a4c2c56fbe4a052b4b8b6b48969140ae28cc8fa34d7be390b2fc7489b0b68c22fcddec9fb0ec0edd0ebea5c4c564cf61a4fb6f93964d37cd75f61a908fe8d

Download Submit
/data/data/com.esbook.reader/databases/localEasouBook.db-wal

Filesize
36KB

MD5
add7f00ccb51db92eb870d761cb11f11

SHA1
2a4796e1cedb66b0e9daa47ed713c5f9651e203b

SHA256
fb8fb7b29167740de75469647ff92093446132caa10026e506f8d0e576ce9472

SHA512
1e2daba50b3bcdba73cad530496d5f45b754533fa4a22333413c79d3ebf7010ab44f78cfec82df332a72000e87714bed98231f46bedec701e5f355237c5b3e49

Download Submit
/data/data/com.esbook.reader/databases/pushstat_4.6.2.db

Filesize
40KB

MD5
a766ac0a9df87b3f65b6c76ccbc58ce2

SHA1
0d4137a1ac77e95bf54ac07dff0b93c6c608d702

SHA256
52895d78371a060ca28019daf4a5b4902f544a1e6c1e964c012d4b832ab2fafa

SHA512
82f14d4adbe04cb68d0cb996bb1f2b89b5c024c9dbc3bd30e014ccd07a9f6d1cb4c16edd4084e6fd5d6fe8b38d889d8527e87667d65347cf2b2529822dc4b118

Download Submit
/data/data/com.esbook.reader/databases/pushstat_4.6.2.db

Filesize
24KB

MD5
81d84089d6ccf9084ba018017096e2d0

SHA1
b84e8fabcfec4e53a85f0a20eeb9bd5ef6bf3413

SHA256
c202c7a880faf45f5e9770a561d21383771759506e4a58e2be2ab89c4ecea417

SHA512
a6be5868ec430d43d85e88e3f893e7a96990a4716788fd5c9fb5b4f430e2c17fc3d67808a9e922bfcf12662e41f1b7698400a672086badc9dca80f5cfa4d9d80

Download Submit
/data/data/com.esbook.reader/databases/pushstat_4.6.2.db-journal

Filesize
512B

MD5
276d57b47f904bc268f988e716d60f17

SHA1
585cbd06f00e24c4cc2336afacd0226d629baef8

SHA256
f9a63bbc7cd75c07ca3774a2474180898884a414f0defbee57d0d1ca3b5ae822

SHA512
b808327b88415dab10dbce86ffc4d488e28997313a85b3ce02fffc0d2688db39738ebdec792847624f950cc108ce6605130c5db8598120cc1156cb1bced2f4e4

Download Submit
/data/data/com.esbook.reader/databases/u.dbv5

Filesize
48KB

MD5
edbe41c7997cbf08b4d68650ed9099ae

SHA1
e1224cb774dc1e415a4706db2fa5ce04ec43d46b

SHA256
25e225ed79834e0e74a94f173e72fc04eda0d761739448794cdeb0ec8ca0310c

SHA512
a148872ee95e8b5eba3750cd9c2ec1c46ab2a219f8468efe3e593c94b210e4eb7c95aabe7530b84c81699dea9d0a177bd69ca78518f8a2ce20398acb65869f54

Download Submit
/data/data/com.esbook.reader/databases/u.dbv5

Filesize
20KB

MD5
34e9c770f1f868573c4d88771f9846b8

SHA1
aae8a119e4c161d118a9b15448240588beddffb3

SHA256
2c4c3e70336382902f3a54c41c34408f7b5697c9fb4808aa8c825ec9a101f324

SHA512
36192005c26aef79c9181314dab87a15c2ff538c8a9395104bfcf891a9a9710ff462246332837b712302058659182fae6d617622ab339fd02073c4561ee47cd6

Download Submit
/data/data/com.esbook.reader/databases/u.dbv5

Filesize
28KB

MD5
e0e1e6b09efd4c928c13fe88f0d6c82d

SHA1
e341fe31cc0347cd8be5ccdcf93b37970026d076

SHA256
d4abed1d405f4c6d2971c1f4fe1263f7a6e5f746fc2ae1b47988031cf43d5d06

SHA512
9aa10cbdd2e6a4a6ea3842ed4505f82f4cc1e319fc89a1bc5fa0374ea2b1d828377649c4264f0b9b9e7f8748a1b299e956618240d9a0931abda617d835a79b2f

Download Submit
/data/data/com.esbook.reader/databases/u.dbv5-journal

Filesize
512B

MD5
4fd33090ec9290634192ab7c5951fe1d

SHA1
75d79221d9646b0e878797de3584f92f83390fb8

SHA256
d87f66cef14ddbd07852cd547dd2e048946160677c15d2b77e836a5090807f5f

SHA512
65d16867c64c70ab8212d22b33fe3c9a765e01ec825cc49861695f399465c325e2694db3f48102b5242c46aed1ccf1885daa2bbfde0e8971b1ce94f28fe2966a

Download Submit
/data/data/com.esbook.reader/databases/u.dbv5-wal

Filesize
68KB

MD5
3b91540328dda5689257276c3667b9a9

SHA1
895248e486f30291fab9ee8091f3be8aced75bd8

SHA256
57b98e6637e3d4a475b72e492628e321d209b3db6f6e2317bb51d1f926ff1905

SHA512
8a8a282ccd42308471c6935eb97aaf5ceda7eda0c6e557a58373c37222f78431e7244158864fc7bbbccae20bea0132654536c88dae9eb659edbb1e3f8062fc50

Download Submit
/data/data/com.esbook.reader/databases/u.dbv5-wal

Filesize
8KB

MD5
baa512ad73eebc3942bcdc2ee1fccaa3

SHA1
ec2cb83cfac2bf4b8b0d8133270790abf0aa32c4

SHA256
1e01e2a5c9d6654e47ccfac6b77083cc8798869154ecd64419cfedf9cddb2fe0

SHA512
528933309e66444c6c47e64a7d2a79e06e24502fb73901d6f36815552571a4a9bd49137fa6d2225e69607bb31415d621551c040ca264644a2d5a9dc9a043b8f6

Download Submit
/data/data/com.esbook.reader/databases/u.dbv5-wal

Filesize
4KB

MD5
362eded2bb7fd6cf17a6cccd5bac046e

SHA1
ff60267a684826a7efb12092d18037d0af06e004

SHA256
bf9b60575d07496839acc0822ef709e988542577e9eb7dcbbf75b3e26c4dfc7e

SHA512
ac6222e5cd8d5d4bc7dcf16f997a024c80b34507888ce99c2ff22eac4333cac888382903c768800c542008b80c0b4f9367523e6637986b1996d4dad2dd46b5bc

Download Submit
/data/data/com.esbook.reader/files/CMRequire.dat

Filesize
52KB

MD5
7a164ee2c3ade8b9e2095630d2e86c45

SHA1
8c9e858896885b364eac2399e9bd97301308f3c3

SHA256
7133c976ebd8f0f60a9c41b451ee962a60c5568fe1712e099238aea9b7fdec42

SHA512
4cd1eeed9a80ba0a10bce6e5694f676274579b75268b75a8dbc5ef2a1adc9dd6114b94acd2eeab08b649a36856fb21df47ebaadfe4080026fbd8335db51dfff8

Download Submit
/data/data/com.esbook.reader/files/VerDatset.dat

Filesize
483B

MD5
863a616e7b996b7e6ed2106707857a36

SHA1
1952285a3064dbc369af703bb58bee3675ff5497

SHA256
167a6ed5e71e671de05f1f46900f1067cc7c69d76ae012ebf497c134b8eceaab

SHA512
f31607c31cca2923e9d7a53b74cb09fde2937b11857d8c790e50f5343877e03a228764920d33e2aee94a5e96bdb4aad3b250710cac8ecb791a0ea9fb59462c5e

Download Submit
/data/data/com.esbook.reader/files/__local_ap_info_cache.json

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
/data/data/com.esbook.reader/files/__local_last_session.json

Filesize
113B

MD5
1b407284d1c552e39706095f137f3ad2

SHA1
f9591dc6e3be6905d66fc9b6800a14261bbdba14

SHA256
1fd03688487fdac465377a7e4fc28042119a15708bdb4952d58d1c29ad732904

SHA512
82dde5469120ccd711dd8fb36b6bcd2ed73a7991c673f9c4541d2f8a7a10d51148cae9205a595cbf02a0f5b190141b0861db4591e17b939d2b8487ef18d9d210

Download Submit
/data/data/com.esbook.reader/files/__local_stat_cache.json

Filesize
521B

MD5
5cf6828286e79723e1d787f67f5e3142

SHA1
73e67f44c8db44e418ec5effe6b8bf761402248a

SHA256
2351ce01cd10649f2e35a67b4ceda8dd943ef3fb1025d0c48ce4288bc085c925

SHA512
51f28e535166c737758008f83578f9aa1ad20993f6b3f63065849a32e9716be6856f3ac8cd948b4177a304f8b923a1bbd0212571dae7c9c8040baef02331ba4f

Download Submit
/data/data/com.esbook.reader/files/__send_data_1714434240083

Filesize
557B

MD5
296a54231a42fddba4c65bcbb6c3c7c6

SHA1
795e682d09bc9a523730a09e859bf651221255c7

SHA256
b66e4213f9c124c0052c0b0bd9b0f4d715199f1954d080438c3270db85d3b1bd

SHA512
d4c9fbdd8f3e9153739b8d565efa0ec5de6f0d997efc8bcaeb028f83b0bd7df9a1e3c43de87100fc4c99df8564d8415ebe069cb975642d28888ed6cdd7bd83b9

Download Submit
/data/data/com.esbook.reader/files/cfg/a/ResPack.rs

Filesize
684KB

MD5
9506d4430961a00976a522e426c26510

SHA1
20bb70b12ec202436ce8341bae92b06eee779387

SHA256
7eb06e2999d2691a0779884aa15f4732276b820f4dbb6a6a1aad26a23ad5325a

SHA512
a52e2c1b1eaeec1be974d9b0d555939be4533f1ac4148de1809ae240af1f6ce4cfd7bc602feb61789b8c37e0496e94a42d8fec4540c462c34871508a9e73a3aa

Download Submit
/data/data/com.esbook.reader/files/cfg/a/mapstyle.sty

Filesize
131KB

MD5
db362e36518c847ae80caca571e3c8c8

SHA1
610911bf7869016fb7c9a2026b3024eacf0b4593

SHA256
95549560fbb3d96dc791c2d16fdd5f098784eee75ac293556fe9688fb2f0ec9d

SHA512
41fa2b9b61c131b0926d0f47f86eea56859ca0d4e44ac23647a73ff4b98214183cb0a523336dcae4e2ddb4be932e994e1950365fd3590eb2f7c3b96bd4bb8a41

Download Submit
/data/data/com.esbook.reader/files/cfg/a/satellitestyle.sty

Filesize
119KB

MD5
6034f2a3f8bc9639ae820bd977bde4a0

SHA1
599f7994853b61bc5ee09a75b6383a13a5a685f7

SHA256
753705cb1ab2a676a9ef48881cfb036f212c4a7e7a5d34d9f8708075078e5818

SHA512
acaf0d146e4e3739eeaa40d46f7002776ebc4074bb89d12a5c25b12f53190a0e367ef0bd3225835e7e4b39a70b06e9f7328b1e342a9c5829af7610c14d41898f

Download Submit
/data/data/com.esbook.reader/files/cfg/a/trafficstyle.sty

Filesize
3KB

MD5
1e4b535871c4feb2010b614713def5c7

SHA1
4c5dc67838d12b795b6882c6dbbcc6767e42184f

SHA256
efa3ec85127a21a8c8a74640acc5fe1d992952964d4f257682f832f63c2ad3fc

SHA512
0c5443dbfdafab2e6cb7740587f48ca9a2c971b93afafcebccd17691edaa7c7fb75dfd1b6c939dd591a5aa65977f55e64b6c3690ab0a660432269fc43bf3133c

Download Submit
/data/data/com.esbook.reader/files/cfg/h/DVDirectory.cfg

Filesize
69KB

MD5
4baa4ede52eacda76bd26d5838cc2de3

SHA1
38b65c75440581f43ddb32ef17480e5c87f0153f

SHA256
c0f2b002adafe50265789ca04bc8dab8c176e6a7eaae164fdb98ebcb9ff98eb2

SHA512
58fef595b1db5f8fa7dbfcaa3b6b676bdbec8931ffa833858e2452c2f35a1b192746d2315acd27551594377ac121ec80574deee632d4bfa94b6315b8a0d33feb

Download Submit
/data/data/com.esbook.reader/files/cfg/h/DVHotMap.cfg

Filesize
10KB

MD5
38dd0dfb18988d8726aae518d76126bb

SHA1
c4fae5f5a5e4ccb97b57ebd3adc4c8111787bd71

SHA256
8514e08245e7d12e56e22d3a0ea2f89192c533a39b622d9161632bdd838201ae

SHA512
d7dfda5e6d0db405e8d5782fdfb9aa5238ebc9befcfbc1ba2fc3eaac1b4c2057af713fada7527c3abade804fa3c8272dc851d281d7039433fbc80a66b4fdd9e4

Download Submit
/data/data/com.esbook.reader/files/cfg/h/DVHotcity.cfg

Filesize
76KB

MD5
942383ae7f9f529caa0e8ca3361782dd

SHA1
250e0d59bb0734ee365f46d28b23b7895a679cbe

SHA256
409c91c2550edcbf841c382866660aed6962e2bd2bcf9ff64fb522aecbd119dd

SHA512
29d5d137dad1b47fabb7d24ab00ca0c2b56f6a1f312d8f3087d166b223982cd0b394aac1e2bc458113f17556e2a01180683c0917544ee755687374c363fdc9da

Download Submit
/data/data/com.esbook.reader/files/cfg/l/DVDirectory.cfg

Filesize
69KB

MD5
65685a117c72fe8fbf5a92b07073c99e

SHA1
b115b527f74e4c291edcaab19b316a446aca8f5b

SHA256
19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

SHA512
e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

Download Submit
/data/data/com.esbook.reader/files/cfg/l/DVHotMap.cfg

Filesize
10KB

MD5
cc3fad9057e0940ad4d4c7ad27922023

SHA1
403cbbcd7b819733b5caf49ed2a58d654441e99d

SHA256
f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

SHA512
ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

Download Submit
/data/data/com.esbook.reader/files/cfg/l/DVHotcity.cfg

Filesize
12KB

MD5
b86a5cb0d07ba34d6a5b53021f5fc4a1

SHA1
c956caf8b21c62706ae9f86f5f842170f0bc5993

SHA256
865c60c5c0066bc9ac3824bd3db8fa818f53e73876de1c5990422b0107c17af2

SHA512
5f42d03528b7f5c8a346808417cf918afb6a46c35774b6bda7b095660b9e93ffc61d1254b476cee274a42b84fb18ffafa05d19403215f98a957496768b460b0f

Download Submit
/data/data/com.esbook.reader/files/cfg/l/DVVersion.cfg

Filesize
127B

MD5
e962c995c0664b5cd8d067db1561cad7

SHA1
263524863998525598f663ba7134ecec2ab592b2

SHA256
b83792f572112503fa2c542595047271d632318a775061ae3a964948738639f8

SHA512
7337967c5759f8a078eed90adc45054e5642b1e319800549c80395dcdc1956baa8d9741348e1dc0be931f24cdb899b95d4beec35e52995703dad8d0feb04ab26

Download Submit
/data/data/com.esbook.reader/files/libcuid.so

Filesize
129B

MD5
94e0f89a36cd31e0071c9103335a7857

SHA1
9ed2e7e7278f19c0f3df47bda0c65511d89c7abf

SHA256
f742c49bf587e2038a8f88cb973b6b449515c797a4683a554e039de7b189115e

SHA512
a4fc00b58c0395d2d2bc491b47ed9da43072acc26bc43dc96848249715cfbe8ef985c280469cd63182137dec5529e408cb49d73acceb79f6b8fe726fac0a896f

Download Submit
/data/data/com.esbook.reader/files/user_log_3_0f40f_1714434242563

Filesize
444B

MD5
b845231b3f68da5d108383cb26c56999

SHA1
1aed2a0b0512e379502d9072635fff503eacb38d

SHA256
44d5e293fa51aa4c25129423c384ffecef4dd4432587569628a9725f50bf9181

SHA512
3216f360f58782324e488bd681974b0c884114415986807badd11a42b25c2f89ca7887ef92d708cdb1545545fb86179d67b6213c3f444e41b780f2930c37ade9

Download Submit
/data/data/com.esbook.reader/files/ver.dat

Filesize
512B

MD5
679557dd546e55678374a7776399cb74

SHA1
62a1d276a492b8c1f0110b26011f896c5e905cf5

SHA256
7047e6e46f4a2a3d0e61a6f6858e2d153e173d4218760876f29eb55e51f5c1db

SHA512
d5ed797d959a82064216f16a3acfe553e4ee25d2a560bc0b0c2786312585b367857a0a6f4bc833b5346e626cae828c8417f2aa31a95a64ba4d204c58f576844d

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid

Filesize
89B

MD5
46d711c5a9ced2531e023018163963f0

SHA1
9f8b1244dd16b442731041d69248824ca87e1e16

SHA256
71bb65b0e717ff47aa77b682f435bfc6095216afaedb552b7fdd70090e3c8d00

SHA512
fa22df5fed7888ca1e98998e598737831f859d3eb361b1331e1e65289098cb2f2f11dba5923415e3c73d9aed0f211d200a93c97bc2a9a27fdbe277cf70d85320

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
20KB

MD5
048c73f536f234f0ad0d2fa8bdbda899

SHA1
dba2e666721e0b0988807b8bb3ce0452dad3448c

SHA256
f1a64586ce75e770e2f36a7ef6f7419e26ebb9e9e786df3c5adce50a196d2d07

SHA512
6ae398c682724f0008ce47cfc790a7ad3dd7cc801fb3a8a692d28da5533ea7ed830ea36933bd3e3219fc8cbade90f073c2c418611921bc7d6877d94b6745c4f0

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
20b4c5a4e7944c6575524b67929456e8

SHA1
8c00624e72d53734b11bbd36d92523e4d80ed5b1

SHA256
269e0fdb977c639320baa5a0f88db814d17c1058fe5aaffdfb723764e5029f69

SHA512
c4d54bdd070a8c6b8e8be330700b75c278cbebe6f2325337dbd958b2604b81f9d23e27a537352abf1c628e35a88818efa0c37b6b796b16619754db62f9481cfa

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
3deaa9ff62ce7f77ca8f67a842cb6428

SHA1
44c9c620fb6fe6d150c2d87f140114cd04dad669

SHA256
887c89b96a50b52b7befbf9ff79256f17285aa24426100a8ab2309a69c279920

SHA512
601ea98c34f13001c6229d266b5b5bec1c364aa5b99fc5fec0b8924eac02cabfa10bcf9eae90a1ae7ca3a9f1551ea87d39f1936a47e7c70d87c6390ae263fe90

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
28KB

MD5
b21d3c7e430db116838b77f1619d77e9

SHA1
87d9bd1b676bdb785ed0b9e07e8c6607b3bdf35c

SHA256
a7877792e546f550e396c641c32e6387ac52ca6a13d59871333451dd7c10e30c

SHA512
3b4cdfbb016fe60601d804167016a22761190f0e467b7b20475907420c866edc08b084860433829c320d0f9f09f2daf8742cf0d16bd29c8c1315a2c5e0aedb11

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
36KB

MD5
3956393174345390ac07136423655d0e

SHA1
acc38347d3d8dc069b080b694e0e57f74c253ffc

SHA256
787f30f6118093df217d3affd617edc9388b0678901cd1ea49770786ec500578

SHA512
c34def7e3ac5f772ee48e663d2fbab1ab5a2d64d79289d4fb2f0f4efde80a99baf68bf05597005ccc00e7d415b28f03e98554009bfc54a6f8636f632586fa55f

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
fa70948ad100755e8995a18349a66734

SHA1
77960301f3e5c17160e556ab04cbbbbde4152384

SHA256
a585e5ccd8631792a748ec870dc59d82e8497e3114cd4b74cbe9e4502c572aac

SHA512
787e1cec3ac94eabbc4a8781077f82687ceb451c637d6862c3656cebce972af789cf56daaab4a7dea1d2d6d1843cbd3a3e05de2dd6efa75271d953f9d2bc0f3f

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
36KB

MD5
cff8bfd0b2b0f6b31b5f578c1ef36929

SHA1
8c18433c523b8fa1649fe53068fcdf42ae789a4d

SHA256
ea9281a377c9dbfb1366009d9efaf2ab4542a7edd26040d103328b6b5575178a

SHA512
11f6d2faed82f46d10a056d3204012f6690c8d13cbc650dd1e03396cbbd116197d3caf88ad75d89708b0e139de716c10e05ccb33ef0776a7814face6aec40547

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
5937ee29f9b031459caf54d65b10f438

SHA1
e55fe30063a012fdfb24b0912e8897019c64c699

SHA256
d637d9efba7ff540cc1780b46dbecd4d6eaf0efd2c733c68494cd0abec6b7908

SHA512
09a3806101f907c96893b5a2f62708bdf93b410d527a487cf26fb6c8cc22511c68675e8ce1bc8c8a47c4ab05da6f46c892a1a0f0bbbf5b83e69a5dc8b4311ada

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
f86658cfc3c29465c6c277a2009df6f1

SHA1
1dbced855b82f43a93f4c8f2c43267da5cb91bd4

SHA256
fb1a93cdf6db70e8e698013ddcc598dc6a1b1f654c7feaac65906e0fd564f2d8

SHA512
80e1bff16415f422253b3fa3970c4ee0cf772b562fba5c7e88d555899dbc0d8df36135db4791d228a22b87873fe12006b7e8f871f09f78961cdf43b9dc4fa7d8

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
0a5a1e4990fcca38b083f411c4ef2ff8

SHA1
1f2125045b03d86e770e74814f5fd71454a760a4

SHA256
f5c2646737a0bf12cba0ad0e43cb84f5849e70c0a4f1e93135ebdfe9c45b4a84

SHA512
9e86fc12ff9b00248012dfb4bd2783d2f937585b057bd2003ce44061842989b580f375ced5ecc4d5c9f534ecb83925d8be4ac5c3a7d019b0d2b434a66c59a601

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
7d2e1fe8911e663bc86b37eee83f89f2

SHA1
e42e6082cc93bf0b50a757af01a248ab08a634a7

SHA256
8c8b69c889fe249a8ce30c34e5e30d1275e767df77b1a7f3059e8ec62406ea75

SHA512
3b22a2a73b6aad71429cf5dacac8ab825587f13f1d2a54259fd81178a0ffe3aa0c58f5a9be16c269971304739dbc9886b5df10cf9502982b2ae2649993318a6b

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
aa48083137378d3c853235d29498fe95

SHA1
a1aa155f504458e4a24f39b19de8ee28137c898e

SHA256
30f794dff7faf5f0048f78216e418d106e6c4d525c686f26a3f4b0fd14c98266

SHA512
a0613ff1319d2e3f9392244cbc1b5f99b402c9b3c5fa02973194ccfb509b75b71006bc167dea7eebaded01913579b477e3d7415792fae525c781b8c8245a7b65

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
20KB

MD5
0e08463f126c9847859836f70da8fcef

SHA1
5fc3dd9a7aaa859a3a2ea446db4019d26d6d097c

SHA256
baa84a618c0b0bc4f05bfadda985091c60b5baaf300c2336a0d69ee96fd6f96a

SHA512
1853123d01b861ca6e6f19dabcb73e31d11c053c44dc0559e808900070b063f5ceadc2053511eb4dfb29f7c0dfbb1464227410fc11294bf3a190033644928ea9

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
17168e48d01d689af43d57f187780327

SHA1
bceaa1bb014f4280ef83c914a39f4ceaee1b4cf8

SHA256
8a530beb78865ac1a478f2c683225d377dc50d94e9dc77208e393200c4316382

SHA512
a5a864f440229e4e3c56fb48ce7c9ff2c1396c78456f7cfbc0b683483f6ef7575a74791e51c3a0e87f4c9ccc2e2abe92a64d606046143e4430990c46bdbc3fa5

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
4bbd1f42252d6f43642cbf60bc184de6

SHA1
4337e9dfc98635f247bf3dafc243ddad4323f0ab

SHA256
ce58f6d931c5630b328ba8fea24ddadd4e3db38fefc29dd4caa6ae8e00a24a9f

SHA512
b403d5514813a46dd97a73aa6d6db4414fc5b7950365ed1e400c243ff2767fb20ca4f20b578e217d165e2bdfc8018ef75cd13407c26ab7aacd90d21bfbcb3015

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
55B

MD5
a05e4b919d289e67b887a2e1f873f730

SHA1
aaa3f810e9d23355cc9a03afc9114bbe9495658e

SHA256
154a6b790e49b45ab1ceb807fdba407659f80ce0af845236e9954289df9d0e49

SHA512
4e3d6c6c0919728f4c0323264e89f8ec82feb9b7b1708c6416b081901adacbbec0612db8e02443d0e3def618cb05e05c2982e5534a75adb23587679f078a3e59

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
84B

MD5
74f0b329642fdc7e50f84f703fec15ff

SHA1
3ba802f187c19590b23d11a484051c886ba1385b

SHA256
dbb4d51daec95229ea94321fd7e818d894be88e8c6a93696999bc017cc86ad42

SHA512
fb2bcf4f553a2ad837c6912ae6c0670d81a01e00816bc3a0b04f61f3523a6c5bb460ae001f93bcd7079a8d3327f646b21dd30790b1ea9842370f1cf9f4c1e26e

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
114B

MD5
72a446af9fc7b7f600d012936010ca29

SHA1
c03f4dbd12dc652cbae98c50be13bb1d09ced490

SHA256
cd5c5b69ccc7e8496e8e8afce997abe3cf8f05dbe9e3bcd7a9dfbe9178668fbe

SHA512
854858509d9e80064be2f785f3ebaf6e5154d173acf1a09f1c40951d0ce500ad1851c2d10b527d9cb0d7f7825bd1e879b6f8db0b18fa4342655b2ca31951bf5f

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
138B

MD5
9011dca26900b7d26ddbdb2395759d06

SHA1
b4aa3c835d393b746919701b5b28ccf035ceef2c

SHA256
6cb11896a78315892e053df6cb5df1525e5e7d00d66e3ff071c214133760270e

SHA512
570aaea8172983ec618252ae55f45cdd976170142ecf4b21ca3da8585ef2f11705f888fb9adf1fc0afd60ceede2472f42a53be462b499c73853e61a5c4748887

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240429.log

Filesize
90B

MD5
174dc3e671e3700adf7fe83d89b44c0d

SHA1
8d8779a8f67c587b352a08898276f2cfdd9d9fbf

SHA256
e9a73b78a06989af4f9bf8ffa18d9467fdfc97e60e6771fee6d082d9ac657a46

SHA512
4f83cdbf34834d3a62a1ea0650ba1e97007788dba62646bbf9b4ce054b1458dfdc0767b2b5adeb0fe42e331174a076c5b9415ed45493c7dfab48570f4dd6757e

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240429.log

Filesize
28KB

MD5
0d3e99204c6401ea499fe9e6d9855497

SHA1
09829f00ca458eab7374d5079393a2cd69a2348a

SHA256
63ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca

SHA512
8d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240429.log

Filesize
178B

MD5
1a1dca9bb2bc8ac6396cbf0104ee382b

SHA1
e0ba04959c1b058511b6f843cf4daa65e66e1c9a

SHA256
e540767d1e4bc671c39b08094aa9888e482fbcae9c7f2c7d8f02768bb946c5dc

SHA512
5a0e37c6fbf35b594c2a2276ecf3f6e192011e6e45a344d30dd0ed71c1e6195c6236e23d770acfc95f90eacefd2fa90e0ce3ef085478139c10b34e988df3406b

Download Submit
/storage/emulated/0/baidu/tempdata/lcvif.dat

Filesize
160B

MD5
6c1194e5b71606f927a0f5be523e360f

SHA1
c130f7bee9e338db7ceb64eff503d96d7add4c34

SHA256
8d73fea500ba3321369d8d2d11793bbca3db51a43efc31a765926d57eb6cf374

SHA512
24fea7fe21e09351cd6eedb6583bdf375fbe5bda9cfa0b58cb3e9e3849a48a0d512a1356a1205d2eebd4267e6eb0790d885a3a6d90638b47ccd396c89e500de4

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-shm

Filesize
32KB

MD5
ab99b1a3db50aabc9b2b67cf947f95f1

SHA1
0304aa4e65768b4affa9ef1d946218652817e87f

SHA256
b2b9a68fe92d27cb3330a02438da33bd6214d6063a1fd91d4f986c5e6dac2178

SHA512
089c0cf504b91bdc19145ad1f70bc8d73051dcff92a82c515e08fc321ac366125beef53fd22b03abb5246151a20f08b67881cfdd9eb829e7cc61cf12dabd3362

Download Submit
/storage/emulated/0/easou_book/backup/bookBackup.db

Filesize
20KB

MD5
95729d48a43a718ba88c552658b61768

SHA1
737843f9d887c2c0d13db264cefe8735e6b3c212

SHA256
fa26b38313504baa6932c95b747763b242c0782d8cc32d34ab97eb73d6064c25

SHA512
1b0d6c20fdcd962658f64ef67df9bb29c01172746730dc0a8fcd044b42629e169787faaa2dd765e7d9b9bf288dcf44b108fee54a766f60881ac256fe2161fed7

Download Submit
/storage/emulated/0/easou_book/backup/bookBackup.db-journal

Filesize
512B

MD5
27953687b60d4beb628d3054ff5b3af3

SHA1
122fdcf293bd3a71a525f00dfbb7a1f6a0d28065

SHA256
93ddb7fdb44faf283bffe7ee0d6569000384979be5cc42083ad9ca5565851e35

SHA512
a64b3d8db79ef492f2571a2a032cbd2da677c1da189e95623364c4d29dcdb67c46a6905433ec5b188ec9e86ae412a927c79ac16e923bb59f2c01beabcfe9898e

Download Submit
/storage/emulated/0/easou_book/backup/bookBackup.db-wal

Filesize
32KB

MD5
369e884055d5dd72c98367495fc010a2

SHA1
8f503d53ebae56bb02dabe15279d7c673b85af54

SHA256
40af286a8a9c4f9830d7f7a1cdfb7c1663059620a7db8bc427cb50ee4d355655

SHA512
4d37a57fa81b269dba3046237e33eeed31ca2e6e93e7b85cc84f7832fd078e97d2c568e38cafd83d73031cd72141f902e517fa5a1ecc6a3d0616ff5f74c8ebc5

Download Submit
/storage/emulated/0/easou_book/cache/alipay_msp.apk

Filesize
748KB

MD5
d06ea38e4210a87d6b96f8b0491df677

SHA1
3ba573396398757088e559a9d372049a377eb05a

SHA256
76a24f83ad15586ff9a2081e420a707be9ddb0b5047e5b6de5974c41624ff2c1

SHA512
3d43e5bfad2b703a804a53048b6a88228a11fb80ac641d6594f774cc07f6c7367e0ee80b29966d02c9206542f467f55b0f1ddbbfef0ec372256314a7d1071f30

Download Submit
/storage/emulated/0/easou_book/download/easou_baidupush_log.txt

Filesize
129B

MD5
b66214d04c4e8a01b75460fbe5be6aad

SHA1
38bd9ab8abf6bd728988f26280e2a45296c60aab

SHA256
8fcb8db5d9a8d85a72bea7786608fc0d89e84a011693bf4a3617a1f63cf674ef

SHA512
ce0eac68e0b08a32b18a70ca622635c4474ad36073a7fe5ca77f7db077a1833a8794d2065aadb8f144cc47e71b7d2ebc3aec30d8c8dc89e680a914e4e70aaa9b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads