e34b589cba67eceb6752f60ac761fb2ba4c9138cac0f85d083098b7a15cdbe15

Analysis

max time kernel
152s
max time network
159s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
07-05-2024 03:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1f5127e4369a2d0a48ba52d82ea40704_JaffaCakes118.apk
Size

5.4MB
MD5

1f5127e4369a2d0a48ba52d82ea40704
SHA1

38984226ece1c5a01d0a828bbf5951cb0f0e8d07
SHA256

e34b589cba67eceb6752f60ac761fb2ba4c9138cac0f85d083098b7a15cdbe15
SHA512

287126c8f212b4ea665a24ea8d5bf73e7fb0996693d466d3960c9e4a0b008cb57fb61769e0f41ba4ecb67ae2950f57a65103d4d431511af1b7d69c6b364ee93f
SSDEEP

98304:A7wvvzO7pgAu6eczkEeammlqPAqsN9M9Z3F7dxiuVBhlW7jpD:HK7feczk5Aqe9StFhxiuvhlOFD

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.zhongxu.jiashequ

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.zhongxu.jiashequ

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.zhongxu.jiashequ/.jiagu/classes.dex	5054	com.zhongxu.jiashequ
/data/data/com.zhongxu.jiashequ/.jiagu/classes.dex	5107	com.zhongxu.jiashequ:pushcore
/data/data/com.zhongxu.jiashequ/.jiagu/classes.dex	5338	com.zhongxu.jiashequ:remote

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.zhongxu.jiashequ

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zhongxu.jiashequ
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zhongxu.jiashequ:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zhongxu.jiashequ:remote

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zhongxu.jiashequ:remote
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zhongxu.jiashequ

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.zhongxu.jiashequ:remote
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.zhongxu.jiashequ

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.zhongxu.jiashequ

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.zhongxu.jiashequ
Framework service call	android.app.IActivityManager.registerReceiver	com.zhongxu.jiashequ:pushcore
Framework service call	android.app.IActivityManager.registerReceiver	com.zhongxu.jiashequ:remote

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zhongxu.jiashequ
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zhongxu.jiashequ:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zhongxu.jiashequ:remote

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.zhongxu.jiashequ
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.zhongxu.jiashequ:remote

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.zhongxu.jiashequ:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.zhongxu.jiashequ
Framework API call	javax.crypto.Cipher.doFinal	com.zhongxu.jiashequ:remote

com.zhongxu.jiashequ
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:5054

com.zhongxu.jiashequ:pushcore
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5107

com.zhongxu.jiashequ:remote
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:5338

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zhongxu.jiashequ/.jiagu/classes.dex

Filesize
3.7MB

MD5
f3e74283ad354dc526afcc456dd1aa33

SHA1
a6949d38779878141e15425f71e48949051886c1

SHA256
f978abac903bd3377d1b20f379af3d9e96ecfe29367f1bfa2812e44c65563b06

SHA512
14b08c78248a63f4d56fde7e3fbd7c08bcbfbfd5d5d30db37ab0872d8dcf5205662d7163b2baf55da838df1db7d7baa10e48f599fa7f50422c8a961a4022efa0

Download Submit
/data/data/com.zhongxu.jiashequ/.jiagu/libjiagu.so

Filesize
475KB

MD5
5aea02f4e4c77fbf2e7a27f7ca9cc06b

SHA1
522db1748608e9173547b29b7aa82ddc3542c534

SHA256
5a1c513b347e2a929769e2be67552c1d591704f08f7b5590282b66cc2c7d7bd2

SHA512
5c979a11f5e896829db906f533756efc1cf3c5a7e35ecc9e376a0aae818f2dada013441649feac2e188bd51affbbf35156e32fdc6552e185bddbc547f3850316

Download Submit
/data/data/com.zhongxu.jiashequ/.jiagu/libjiagu_64.so

Filesize
509KB

MD5
a2c6c6b8e1d0c7135af38041f17d1c86

SHA1
ac3dfe0a135570adf118a2cfb8b590c8e0979302

SHA256
c231ac6bc843773fd43b8443319af159aa26c33c88e47b2d6fca9092d6c7e91d

SHA512
0e7594f3010cb1a571d1c615a5b6839040d82e6aad8e0a645533308e7da5602e488a1eb37ee6fbd9cf7be028ce060210da0f46c03bcc35cde4c0a9091d09a5a1

Download Submit
/data/data/com.zhongxu.jiashequ/files/.jglogs/.jg.ac

Filesize
512B

MD5
00cfc9935c8876bff002b89e85a72afd

SHA1
11d85be86d3a04ea267e8c28c3c18325fa558361

SHA256
c1572309cb8fb0ce0bc37b4f365d2bfb86a84116219db07d2bfc3a3ea23cae6a

SHA512
d3a087046befe59f746313b737127c9613c5bd9854b21d13a14242c6305ad6941ca0a2b6a93d18454d914a90e1ee5dfc9da8e61dbdc391a3b3f3517e1c40e3f0

Download Submit
/data/data/com.zhongxu.jiashequ/files/.jglogs/.jg.ic

Filesize
28KB

MD5
2cd47ada17ad7a4e3d5e2717cb2762c6

SHA1
7cb844672cec4a3bce75c8cf81e80e8ad7cc49e5

SHA256
5f266f7cf5a44a3cfcc9bfbba94735081851edc224cb071fa6e650227e214279

SHA512
c25229cca649bc8ef54c0770a976034801c0a300d181c107c41879d7f6b7056c6282210c98661428078381032dc6fb0872112dde7e8efb1a9f9b333877f18dae

Download Submit
/data/data/com.zhongxu.jiashequ/files/.jglogs/.jg.rd

Filesize
4KB

MD5
d80b2615ae178ca47011aedb2354b971

SHA1
7e6ca42d4e172ec575f089a96f8cc3a940c4ca4a

SHA256
107c42b9be02805485d630353096fd4a8c7121bd08f6506090e8894a6fb7ee0f

SHA512
b1b4c61a6899f76c1eca920a0cd3c9e862b8c6363ed78ca1b17832ae09c1b42065ee4cb5dca8d2c4c9dc65cfcb1345e0a794468d06347408d7a55da147382c51

Download Submit
/data/data/com.zhongxu.jiashequ/files/.jglogs/.jg.ri

Filesize
20KB

MD5
dd3b95854dfe3e19933079fa273cd153

SHA1
0cabeeb749070a4b6fd8cd44cd22ee6fd6fd03f1

SHA256
793b960d34b425f9ff38c1db5172c47f25c2fe45da8aee24a4fce3ad894fd7ba

SHA512
6f7338a2b8755836a22a573c757ad8e3589370bad61faf63de7016aa1482f7c2ff6d09cd772b9927bffddd4f49c7fd4e1cc030201f1637d9f5e4af3702f2da5b

Download Submit
/data/data/com.zhongxu.jiashequ/files/.jglogs/.jg.ri

Filesize
8KB

MD5
1118589046c07c242c17cb4ce88a821b

SHA1
df348ec912982fd9bb7069aa619df641e281629b

SHA256
a8b8d0407326e5f3c052864ed712fc1041189098bae84bba0003a1c98985c761

SHA512
55a7233845e4c9cc1403a5d7fa7afe0bdc2e3e12d9809fb755ad4ef9b0610527685d6b1eb53d56a45841e3d131c8c4e51ef9edca748df1be897044da0ac352f9

Download Submit
/data/data/com.zhongxu.jiashequ/files/.jglogs/.jg.store.report_pid

Filesize
32B

MD5
eb4018b1c22581f3400e4b3b5088c317

SHA1
d61efe2cd045dba78a13a7f1eedbdc6b8c4e30c9

SHA256
56496ac57c3351cc91b793d077b985756bd2cabafc06506943ecae17978a10a5

SHA512
65ccb3d0fdee48bd4832f87f491f611da232c573ed53c930c947e054b647250a29a962a85f2df5f78b80a09bb1090fe558d773524a7c1ce9c352bb3c45601bff

Download Submit
/data/data/com.zhongxu.jiashequ/files/.jiagu.lock

Filesize
8KB

MD5
9db9f6e2405c20b4309a20c7ba43c71e

SHA1
7d217229d6c298b5fa3d5d9bcf3fa25f1f8c792a

SHA256
c91ad4d3e7c7a3db97ac181751da55b01fa7c7e14ef4c72bf91e75b6944b5686

SHA512
a3c075b51cbed8a21b4ef4a631f6470b78da713de086e5ba30e1d98097e3f6b7f0f4ac5d1fe67c268de0f4ca1332f06b8a213ff02a50a8b04ba84b61de5b7197

Download Submit
/data/data/com.zhongxu.jiashequ/files/libcuid_v3.so

Filesize
8KB

MD5
2fa24f9c05b0ccf2ca034244e9c3e907

SHA1
d1cc11d52cb79bbf163c1e0151cb249b1b632d51

SHA256
9f7e493d710fea33516191803dfcf35399e54e27e1be631464ee6267c42488e5

SHA512
fdb7aae6a87648fa8aff7a22ac7d8609443e59fdafb52b05c0efa8936c986bd83297beae2dd4f72cb8535a0d83b068716c4ed392eaba5a271bb05c48cc6cc6f7

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/firll.dat

Filesize
76B

MD5
ad523039e2ac27e67196951f3d71295b

SHA1
aeb73e6a752e327746f4d6ffaef0ec00c75736eb

SHA256
cc8044f17ef66518365091d621b031b873b87dce379cf6e3f13eb5940e85b43f

SHA512
4e571530a5e391fbca1ace0e7ca6b5858619335828121b8534b3fca8fd5ab198cf7e7a2c82acce5cfae6c70e3524a817a624ccb3c04564fb7fc32e61efee7bfb

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/firll.dat

Filesize
16B

MD5
dab536e32bcc994b139c3b4331f82066

SHA1
0518a09a0baf8a355b169333fd62a23d16cbecc3

SHA256
52549b9ee6a5d71935827122e184e9d03331621678d22880c6f33b04e3d11cca

SHA512
72143e4e97ce2b457ae1003f8bd1d146edb4d3fc121181d854648947681e7901ae1f4bad41e846be0c1cfef28261ec811699ef5d0938847d5e8b49559fc9b88d

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/gal.db

Filesize
28KB

MD5
69342ec3abe2dc4a4e6c0d58e17732ba

SHA1
7112801298e17f71888eda44541ba3ef2bd6df2a

SHA256
9da3214673851aafc7aa824f03bf0b23acff5ddbbbf588ee66f79b888c0bd3c7

SHA512
c32da28a6b4490261a36436f799842ace74d6d13f6978cc8e1285a7f11d4fdb99c959e2c7e6820c4f98f510b1068a918e8ff556c23b25deb5ab2cc33351869f5

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/gal.db-journal

Filesize
512B

MD5
37cf387ffc1f47442b9c8e89b7ef24fe

SHA1
8af7d4030b4c5b506e9118a922a9c987ab4bb5e9

SHA256
1320b47c49521eeb8d72269c93bc8f01c04ad9a419c875ddd3fe2296bab8f380

SHA512
83332618d38f65cb555c3302992068383175ab0dcf9d536bc0ab7394243fef241e524171fd7e88188925d039758aae18d9f41f2042332553c0a23b0e6b996f0d

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/gal.db-journal

Filesize
8KB

MD5
ccfcdff3ab223afa27640e16c88ebbca

SHA1
58c6844c8916cee46a68478cf210ec3849a00caa

SHA256
3baa4d89eaa98430fcadaa7642e213dd09f6c5204198acaf0fb9d135f07afe55

SHA512
938d46ba7fccb3d519f15b7d076c19eaaadbb6315ed50f1d98c6086dc556080939c70826048ba287a4979c9fa770f276265a0166550d6b16dc03d9ca8737f5b6

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/gal.db-journal

Filesize
8KB

MD5
c99e2faa60566fa99af5de83702eaaa4

SHA1
6bd1816aaf40f20fa72d826fe2fbd7f2448e835f

SHA256
7710fcd76fe683ecbbd3cfef1c54b303040a992a60610c7ffaabcabc33c22025

SHA512
a07a680493c395642653c14ffd53e8d72b4ebef8b74b5ced4edc4260ec324c9a4ccb6b474e62296c25b84d75368c01b212481922a15cdbfba21529424551717a

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/gal.db-journal

Filesize
8KB

MD5
af23827c3e8a67344bc2b26f1a376953

SHA1
a4ca097755aae4da933b8543db0dcfe86b366794

SHA256
4327f11e759cf5f3aae58e4e1caeadc59f6adce52c280a64c789f44d351cec41

SHA512
bf26481b9ad608b431d32aa9fb345d74ebf7793ce53215ca5aff1bec13eef044fa7900f2ccb14e97b4eedac3dafe15a0b4196c96d81ac666efbb28d9d84da043

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/gal.db-journal

Filesize
4KB

MD5
5250af754291c1c7bc1f7c5c28850f76

SHA1
9e44d191efdb3b0636f0920c79c55a84a4037401

SHA256
b9f9ec0f098c42c8c36a75e0bc3279153dcb66ad8152466fde89e2bd152b56d5

SHA512
f2f1cca19e2258d23265fb9b842f89d976392bcf8a96889f6fe5299c956611330739f14b382efbaae7557028a4a82c2af357ce93e96743d547fbc21fc2946070

Download Submit
/data/data/com.zhongxu.jiashequ/files/lldt/grtcfrsa.dat

Filesize
206B

MD5
6d613136def26031e18f3f404299bb7e

SHA1
14a7a4a3309b932512dad59dbdb35503845e60c0

SHA256
58e28d4defb46364dd0057354a4a89f8cb726d3b696c632de04b1a707803be18

SHA512
89ac70f36ec3117b631a56d43700b4d034d6d269d4632933fdaa8cd9675c57af1df95f15271d0b45b796f56b4f89ec3d6bd4c9114d7cdd24e3a25d30e24e7ca0

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_location.db

Filesize
28KB

MD5
49eefa442e55be8652c7c3c5f28d912e

SHA1
941ef7e65d47d38dd5f47084663f4fd7f57fbbc9

SHA256
63d7b59dcdc791b5d1380a1d06b9e199f6136965dc21a887efdd0cfac9d0a1b7

SHA512
b6c9d8a985a865c43348e34d94f149e4b552359d9afc7f5db660535ea107fbbdcedee542b9bfa018f1881c6c021b1e9bd331debe9562dcdffe2f8b3655d2d3c7

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_location.db-journal

Filesize
512B

MD5
98fc559bbd502f3a65f640f1e4342a20

SHA1
d78473f4ee2df12be4c43c1595322d19370983a6

SHA256
f161afa17bebcbed6e2cf6201c34d60975d2935041c0550b0031fd06ee87498f

SHA512
b45019d41520826ebfe4c3ac6f31376efcc0ee5e632ab3be4641b93c94c3b5f5c4c7209abe4c998eb48640a833a7ebf125468a1ddf44a936bc0a9f1a834a6fef

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_location.db-journal

Filesize
8KB

MD5
c034b59bc9ed4d8be154c5c1af6c4f69

SHA1
24bd16682bfe34750eaeaacc7e6d78d56c5abfe4

SHA256
774a32670baf46ca08e0ade8b17dce67924886a471d9d894a42fd231a582a204

SHA512
c5572478a526620bbe9d1165e9ddf4627aa21629ea37a19ee2fb8e6377149f3432543c22b7a14522c329df11eac8be1c642e741a9b0bda30710d52cd1e09b2c6

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_location.db-journal

Filesize
8KB

MD5
003ea0dfd62ec87cac48d3162031c86f

SHA1
c44831b67b8c4f72de44ce013919e8e8346078da

SHA256
2c153ccef965f18491116cad7e7a9e406b5efee1531d51c3e06c2c97eb9f8302

SHA512
cd671224e6735d0e858830c506cfb6fc46765c67c2ecc39258e3b637d33b57e96d62ef0c93c3c922edba04e5ac3af9239cf3454ab0c0bb95af602f9217d88925

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_location.db-journal

Filesize
8KB

MD5
18cab1ecae92013f4a5a48ca04e5321c

SHA1
919c67d2454acefa0b60b72ce5f3d98235ad0fa7

SHA256
8e12eea305b5ea901c76b782f417e8a7072a46a3f5801226bb5385cb7a358d41

SHA512
874c92b305c4b9d67481b344da29b0c697cee4c650c4885bd29f8055f2c6bb35a92017460822310d6e95760b0c0f194e82e1f245a9b235b4001f65f77b005986

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_statistics.db

Filesize
80KB

MD5
744ba4d6f58e22f8f82d56a50e4b5373

SHA1
535e389f9b7f2e0d14e550fdd00011dfc255e0b6

SHA256
8b47d5b310d68b6911dbcfd7ecda4d7131351f66365f81db82f2979ae2f53592

SHA512
e888ccb7fc6722eaf8fb6bb8370c55f9eaab299be08db7c57038efaf945569b62b7b6b2dde5169044c5d60a4a9a9051ee7a7c2146153aa7d22d8b7c8f3310055

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_statistics.db-journal

Filesize
512B

MD5
2571413408f2246959829fbc6fee789d

SHA1
e4a0af39e7c1ec5822c692c781e78fabce5e6834

SHA256
c2e858a307dc170362f4879e215faaf7026bc8bae8bcdd2d0b15c5c1548da902

SHA512
b8a1746780da9704a9f0677e7c2ae2585ec5c3bb0f1e2d528c4840f7c8f157cdd6bf148c97cc813254452a609742adc93972ba82501cbdd5d554e166eb8027e6

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
40d6e2f91a4f6869289bcc8606cfe54e

SHA1
38fa5f5823f57b059ff2d42efc9e9260600cd75c

SHA256
ece4a575969a827376c0be3d1474ccbea72539f6725c769fa83720af0114ca37

SHA512
fa503058afcab13b5d62016520df6e1857d3207639c8dcc56dfe9dce13ce275869444db85a29f43e9968e6cfbcc0389efdcb8e6a69f35b360fce56802e1a8dbc

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
b1e5c4e834b43e972178583890083403

SHA1
8cde447ff6868578ed8dd7bb9b6bb62669fecca2

SHA256
08411dc09beece45318a600b48f8afcf88c69e88c59927617bad5aee63d3f0c9

SHA512
3e01462fa2f3a9e01780d1079bc3f80a63a537924d8c813097e62792f3df7512c9e5898d61501b9d9219ba22a2962760134799837407e473b128fbd57e5596d0

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
54f0aa74b186a80cf450e650d669873b

SHA1
ec22bb273c2352149cc24b05c0374d38eb14eae7

SHA256
0ab81259766fd4de3105aa0fca501bad26368bda822e218765271922703420da

SHA512
65cd15bcf8c9ba9d2de8bf706e5c1d6a5dc6afaf666980f0703b65a4b75e07a5f707a1490f44923c6eeeae3d6dc0f1c58886e29d8ea59d28066399668aef6444

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
4bd43159267f80fc30581798b314fe4a

SHA1
3f39ab727314d26f66fc3fc06412f5ea2105f4ef

SHA256
a575e92fc3229a9a4fc651d0155e5e5293ff4e3c8bc2aa5d78897a6f1eda4493

SHA512
695d4fc8c0400280db081528e76a219d1a1d9ad5662330ef686d4c55a3ce4db9b3a04ef4a0f94fc3cf5546f4a55825fcd2f091d09f544876a8ba1366065c3407

Download Submit
/data/data/com.zhongxu.jiashequ/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
82e6de9643b955de83e92c89d7819c6c

SHA1
6045bb63daf07fa0107d01705c2748bd69a4a247

SHA256
ebc92e9f602b103607a570f2967ef323fcd60916a62b8a7f35d7c755c3e710fb

SHA512
ff8abeb9927f23dc79b117b4ba96aa896e8bdc363efa96748684ea4430c2cdfc0600de608dfa6b102708ddef406543894d739e8af0556887335ec1f84841f8fe

Download Submit
/data/data/com.zhongxu.jiashequ/files/push_stat_cache.json

Filesize
8KB

MD5
f450c718bc2025244729641b67458d20

SHA1
89fcc6dc27649eb3b7b483497afcfdf1b0c92458

SHA256
e1c2f8ec6f9de8bab29d62351aa6b4ee0590245897f971b8764b06ee42761b65

SHA512
7c39bf86fccf5e0d10e39c149131b94730140d4b4b35f420a10eb28ade1349e15485a92796ba064bba9784f6afc2ebc48106d93226d9e653044f7392dba2f89d

Download Submit
/storage/emulated/0/baidu/tempdata/conlts.dat

Filesize
12B

MD5
8d80bc8ea90e9cac010d3ddf97bda5f5

SHA1
f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07

SHA256
f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93

SHA512
9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7

Download Submit
/storage/emulated/0/baidu/tempdata/conlts.dat

Filesize
157B

MD5
8296eb39638f92eb196f4c5b28cce1a0

SHA1
2ed6c80b517598f0fd514a4d90942614c6e5e2ef

SHA256
b29fd9412fc93b92737820c93aaf185b30c00b10599834811997524dff7b5fac

SHA512
3780152986905af41553c5aa878026c7134fb2b94fbe36d0eb2007a7bbea8f43ef52c599f9226de8f6495e0da98c0fa64f91f95134c9ac8313600f254864ee20

Download Submit
/storage/emulated/0/baidu/tempdata/grtcf.dat

Filesize
801B

MD5
7c366ea8f849e91e3f0f3093867b5c33

SHA1
88bb005e5643134f8719895233047017afe39800

SHA256
d759d062f4eff809dc55ecf5cf8693b0e062bc1bf3301f11d907f555852b20e9

SHA512
4575109c6e7330735b5421dc6f32abec26c5e9a92fc6ceb5b0b0f360ff97ab42f6001e52ebe63199d17ad27c053deb04b26e18af0025c0462886c9576c1d63a6

Download Submit
/storage/emulated/0/baidu/tempdata/grtcf.dat

Filesize
2KB

MD5
452cded8ddcfd4fb429d8374c92f7781

SHA1
dbf0df134782b37bda4a56978d88b2f293633ec1

SHA256
2ac266a4c472310d4866cda11cb51a09ba5bf5c70658de738b5536550a160bb4

SHA512
3475f5de5de838fb103589d06198f8a1b89c4b963820b8af93cb3120849b1a6ae74568fa2f0f344942ec22a1dc1ec77b7113c489ab6684dc7abc122d63dd8a39

Download Submit
/storage/emulated/0/baidu/tempdata/lcvif.dat

Filesize
96B

MD5
1997c3980cb5e979f30e45b047f90707

SHA1
5a364928f06ca1022fcbf8a6d84b74853524ffc6

SHA256
d8df267bd01d7f7c8251da7abd544de104afa5e4111245e1ffc35f61191cf0c7

SHA512
3a9a32c1d2dbfcbd4144bf4c7806d4fcdda84ebe4546b93caf15c903aef4ce65182720e88133fdc2658d156150dee5a7f4c0779144c3a145e1e825f7c98e49ec

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-journal

Filesize
8KB

MD5
a0a0791ee0f2cf40195e17512cacec94

SHA1
b9dcab7577ef87f2df3fccaf7e05f399df76cc56

SHA256
e9fd354c4fc67e318247da48dfeb9ea4b0588cf2b1935bff8883eec89ab89e6f

SHA512
1ada831f8675849b8317fad288b8ccf7084cc50af38e51bf5f01c02d76896d0d39101161d3ec26aacd7bb08e4ea6fb71d9e073d22a02892c1edc2278477462f4

Download Submit
/storage/emulated/0/baidu/tempdata/ls.db-journal

Filesize
4KB

MD5
e30a3a16f50e7513f23769a7358907a6

SHA1
0f0606a3c5097bda2ea6e01f87b5f4f7a9663f25

SHA256
c7c5d62f3fd35d59674395d29d2fc29eab096132f53eae0baf647ffc7bd70753

SHA512
5c742b17fb5277f19bc8504c311e6f06a7c929947b7996e7f8896808a613f3766fb1091a00a39274f01332aa1defdcc7b4d03121036ccce2e62d38d56a72f4fc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads