0e8992e47bb9de7b1cb419eed84ae218453630129414518fa87d8ea3c780cd9a

Analysis

max time kernel
151s
max time network
157s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
07/05/2024, 04:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1f6115a851b79fdc6029d7930f2de99e_JaffaCakes118.apk
Size

4.3MB
MD5

1f6115a851b79fdc6029d7930f2de99e
SHA1

a405569c18cc1ff16a4ee269f92025e1c7007534
SHA256

0e8992e47bb9de7b1cb419eed84ae218453630129414518fa87d8ea3c780cd9a
SHA512

dcd873dc4302368062c3dc2260af6c8b44a9b3321777de732c2045c3af16a06cca205e732b14a41f6d2ea6d37120e1c53154be2eec0409a0d750048fc2ee155d
SSDEEP

98304:Lpg/qt9F37Kw27HY5OxQ5r2ouPWmmP+QMkcuvFDzIVTz9w:dg/qt9Fmw27HBQ54WmMbFDzuHu

Score

8^/10

collection discovery evasion impact persistence

Malware Config

Signatures

Requests cell location 2 TTPs 4 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.didi.cash_manager
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.didi.cash_manager:pushcore
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.didi.cash_manager:pushcore
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.didi.cash_manager

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.didi.cash_manager

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.didi.cash_manager
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.didi.cash_manager:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.didi.cash_manager:pushcore
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.didi.cash_manager

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.didi.cash_manager:pushcore
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.didi.cash_manager

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.didi.cash_manager
Framework service call	android.app.IActivityManager.registerReceiver	com.didi.cash_manager:pushcore

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.didi.cash_manager:pushcore

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.didi.cash_manager
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.didi.cash_manager:pushcore

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.didi.cash_manager

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.didi.cash_manager
Framework API call	javax.crypto.Cipher.doFinal	com.didi.cash_manager:pushcore

com.didi.cash_manager
1⤵
- Requests cell location
- Checks CPU information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4463
- ls /sys/class/thermal
  2⤵
  PID:4598
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4701
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  2⤵
  PID:4723

com.didi.cash_manager:pushcore
1⤵
- Requests cell location
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4535

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.didi.cash_manager/databases/hmdb

Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.didi.cash_manager/databases/hmdb-journal

Filesize
512B

MD5
1d094c7d22606a160ffe830c6efc2088

SHA1
b344acac43c0a04946da3dff6f7bd0f26ca85cff

SHA256
8e4eadc3d18db71b306f9ea7f220b01db402c854ff45937e0ae32ec7001f57f0

SHA512
1ea254cf2fd23ae3c0bb565c5b5cd09b55ecc669b3e1820193c0383ec58dd247ad782a563f484dd73b9d276c9b4fd3d99f8b5d56277b03d65d0b900d5bbb169a

Download Submit
/data/data/com.didi.cash_manager/databases/hmdb-wal

Filesize
16KB

MD5
0bef07ae192bb4e547b52076d8021b16

SHA1
4ea85ae5fbb191e4114163a0ccfb8afd5092a644

SHA256
d581164a30dad710d2b2037c017869210ba6cfbbc0dce49af3919bba91bdc14a

SHA512
95c33d67fe9b66be15c37c9a9bd4ca8116c3b6845a21b586bd85da3b3469f85dd5a45f20f6d21216be7586364c18e08016fcf0e39048b9a173af82d63855585a

Download Submit
/data/data/com.didi.cash_manager/databases/logdb.db

Filesize
32KB

MD5
63996f2e8377767e296b9d84c30fc0bc

SHA1
b4a5a3604e599f1103e36745635665a7852b62ac

SHA256
de74a206182304b3da7e4b20328e9de2afafdcdf1e35b04aac7186202ee01afd

SHA512
2825fb12528392853f193e50736226d2b8166abf20a78361fe4b4ca7ac64df424e0ba9e1dad443da39508642e61c048b37ded2dd1ecd7eb121d5778332529efc

Download Submit
/data/data/com.didi.cash_manager/databases/logdb.db

Filesize
36KB

MD5
a7b5debf648af8527d38065f285c6754

SHA1
ad8513c878ca1483a2472c7f8dfc8a416418517e

SHA256
0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5

SHA512
c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

Download Submit
/data/data/com.didi.cash_manager/databases/logdb.db-journal

Filesize
32KB

MD5
9d90b9da9367e759a3daa493cc733841

SHA1
8ca9ded67102eb123a68605140aac55456c3efd2

SHA256
18e72af2e69d148a070c62320e0ac655072ce2660ac374dc96b5e6d4b2c3059b

SHA512
f94da8096a2b66e8fc8e66dc69a40d358cb00b82e2909091c338d442eaac3bb1c7f479ee6ab40748fa9bcb3c5c34bb676f3c86466250c3525199d21a551d5555

Download Submit
/data/data/com.didi.cash_manager/databases/logdb.db-shm

Filesize
32KB

MD5
8d6c70f3fce1a1832b7dd90c8219f003

SHA1
1db5b95bbdd51f132477103a3c969ec748dca167

SHA256
8b830f4abfc4ff4dabb0f79999781d5c8dfd4c4f4661d68dd8ebbd0e9757117f

SHA512
7111ed0d5a8cbf3e8ff1d008c10ae2ccf787930340f3380f2392e915caf95364b5d42126a1ab7e23f987c60e427835cab80c429d82e610d8f0ee94829d9638f9

Download Submit
/data/data/com.didi.cash_manager/databases/logdb.db-wal

Filesize
48KB

MD5
66e9d6e3a73289da546eb41f959893bc

SHA1
75b21d475826d8331b2d53bca50866f3d0d5db15

SHA256
568a1942c0db79580c16364d4b4da65b4add43532b60f63a299e296151f12b7b

SHA512
1b49ad123c6070c12511f1b7d11d89ca1114915db5d555f2462b825cac9372bb126d6e3aa64c140c32c00fba7c26234bdf09e162c4961a7c7b6e625de33810c1

Download Submit
/data/data/com.didi.cash_manager/databases/logdb.db-wal

Filesize
8KB

MD5
3ce7a88a1bbb3c93ac9ffe59f45643ff

SHA1
7d2dff3bf72cc9031c9f2ec598b637fa6abc2e47

SHA256
04ea1c80794f9f0c65cb1e84c3ba4b834fe6377ef1fc4390738b7d757bf0f60f

SHA512
0d77af10c51b137f68c12a5a71bd92587f3a3da8375e26cb135686a0255772ee19b262a3b063a7a0776585db0da4d3482017fa102ec050554bc3e7623d401b60

Download Submit
/data/data/com.didi.cash_manager/databases/okgo.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.didi.cash_manager/databases/okgo.db-journal

Filesize
512B

MD5
2345d336de50945629d0155d77480622

SHA1
0aacd02cc598625f04626f86b1f050aefb165236

SHA256
71ac067fc3754b6f3bb9efe88c08c070c8bc2be90f916bc8e26383bbac5f1379

SHA512
88a79e7537378658d924c2aebdb68b853cd392852c97c097ad61853f7748ed4f45bb20d6b8a3ffcdb3c6d2846443f2a4268a87bff3fae94bb50553ec068aa03c

Download Submit
/data/data/com.didi.cash_manager/databases/okgo.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.didi.cash_manager/databases/okgo.db-wal

Filesize
56KB

MD5
67b78c6f81ef6d13c7f312c3b0616054

SHA1
8517309b239ac097d03a8cb9c4bab68c6782e2c1

SHA256
82904e71250ec21c1004dc8d018faea840346cb825d339d93b421c1a0387899e

SHA512
3d0c880bf6a00e07b1c6ff97cf2077a3e56bef04b2eaa9b5339392ed44aa267281d4bcaa4299cf1c9fac7c771e334ee3495086889c4d9abf5fa6b65a6022f37d

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db

Filesize
36KB

MD5
0adda9c85a5e4808f5b1b74c0a8591a5

SHA1
5048107883ab1e345af9cf2e6849ce46e0e612bf

SHA256
1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

SHA512
646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db

Filesize
28KB

MD5
e0e722a27f2c3731599c3950c422ae08

SHA1
e1fec61b8b10b3a89c698ed2e93e177fd7fe9965

SHA256
bc24df86a4d76f5a94416332df7caab45c8128b3bdd48e47401494cbb422cda9

SHA512
92e34ff8003bf6fb6e4d52c9bbeb3d5daff4518ae8fab7916897a6811f77856e0464759a869d2dc0599f5f2cf920d7fd871e3829808dafb1425018ec3ff94a13

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db

Filesize
28KB

MD5
1ddf626b353985d955200ba819d85ba9

SHA1
bfd0705031ceca067cd1d00f85c03fa26c2ec923

SHA256
ce6614d595b83b0f91399cbe156bd6690f5a26f19fccb8a725c65a1f452c6ada

SHA512
a34f76a36db7ca9713f6ab2d0fb76f3fd6e154139e1970affe1d9ad60dfc0a3ae2f4854506339d803603ce06cd73dab0bec62945f5c23391155701c790ad03d4

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db

Filesize
28KB

MD5
7869ad718ca57031582dcca05f90c08c

SHA1
52acc96aa9f6305dd638d6e0ad526df86577ef68

SHA256
96b57e2b28015ea7502f73a8cf6cae6d36931e9f45e76fb06272cb021fbb0d6d

SHA512
d3547efaea7a416aeb7b09a3a49b3f9f90e32f383d47ce622db46c1d4d4eeeb57f77325d8295ae9c793860698d8d15f97110bf3937998e8164fdaa6d7973048d

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db

Filesize
24KB

MD5
86f1938fdee3ebe24e28ea5160ce7782

SHA1
5c1cfcfcfb93f17b528719d9d99b114db3c83213

SHA256
dd72b61836328f109413194eff11b760dc63a7e58d348c1b50900746bf08dfbf

SHA512
32a81999b29c569feba98e0ac7cb56cf1f6bdfe9585fa5787f5fb69854421f97e8c119dd6d8fad9b3c263b0c28879c92cfe8240df2daeb2d0ee8544118587664

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db

Filesize
28KB

MD5
ac31d0969cb9ac71af59c3602032fc42

SHA1
eee441d1c91a6ce5788ecfd34ecbc4ed66d8754b

SHA256
54e33de3a0bab50779511d27ea1624cd9cbd9cd50f934856d762ee3c0daeb112

SHA512
0c373f89e55e57561615bf52b5fc35e731383899575b448a259e36efc61391790d3b288a377c26dd2656ea436a4091ec6c14e754bd6308212e56300b43f97087

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db-journal

Filesize
512B

MD5
cdc6050a0810e8819b1509d17181e304

SHA1
f8223752a700275df79bd07fc543e33bb9889649

SHA256
59e24567b590574c61ad03188e677d0ce6a0db845caa73dd94cb1e64b5551060

SHA512
3448dd79c8d1df83d171530e17f18280bb80aeb51bb747ef31be5a46a77b84700c1bbf1fb8b2097553cce736a637843012885165381280896f5a21d7ffdefd8a

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db-wal

Filesize
48KB

MD5
fd938e5c8faa60d6a6bc6b39ec8dbefc

SHA1
848bc1cb0ed9d6db9dc5339e0428dc3a0cd57189

SHA256
73311de0b1e98221f30eb8c708fc7f069cf257d038c9382bfa75728f4c584abb

SHA512
ebea377ea685187fb553e7c904d4edae9e3ba02edf6f711e7c5156962fe23e4355d294f361354765335ad418301647fcde59af24c08a2ef6145d5612396c6475

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db-wal

Filesize
8KB

MD5
93c8c8d5529a295760a3d29990e96691

SHA1
65ce33988ae56b04c01bdeb5d0407d968125e935

SHA256
5ca0bf0ee9dd6b9887f5901002384e5df1a5c44e79f4615e3260d27ae80a98b4

SHA512
f96e7237355be247f0adedefef1ea298cb1a394a5796568e5be7bd243609e4f609a5ba14cda9fdf267ac1f5f02b511e159e540df99f4dd49fee6bc370fb6c250

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db-wal

Filesize
4KB

MD5
74a9e09a2047ddbea44d29e75126aefd

SHA1
c446e17126bf9f72a56900a1dd04cee8ade45f9c

SHA256
cef854018abf80d579a31f58bbd32f5a2ea4534266a45ffe7034abcf70a6b6e5

SHA512
7e828860dde80f05469208e6670881243a4757af8cbaaa69fe21cf8589269756d837d6d7464fd82450e06ecfcb11daa584020f6b4b37aa6849c5602fdbe37f9f

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db-wal

Filesize
8KB

MD5
9b43d85c32cb18998af1646a8f1a3204

SHA1
d4d9241db37be4b3e8a5f1ee5047a9f417d5b8ec

SHA256
d4d1342e604e6b881cbb3559644d07d594fe724a13984a992661702140629194

SHA512
8bf17f927ee36616edc71756b887c52bf553e24d14204db3380de5d345e90b737497497f64527fc032a49afbf539738cc7a831e560c105f5612558225f192384

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db-wal

Filesize
12KB

MD5
29bf9256d751efc5c74bec1f67c23889

SHA1
e87d9569e6af7594f609c750741a8428d140bdcb

SHA256
ce888750ad6097c6421226d19b1cf32f117713755a35db70ee618fd40705eb9c

SHA512
d478d4941159435e634092f2d28eefa8a807f35e467c17c42ba7c2bb7525a759363341967bff1754695c15865c132513ba2b4385e38f5b96964502e0836ac0c8

Download Submit
/data/data/com.didi.cash_manager/databases/ua.db-wal

Filesize
4KB

MD5
480ea79f046be42a7b273f7e8a529160

SHA1
81a893e86c94238de56f3109e7e005fb80ae6891

SHA256
7edc2c0f58d65b3ed94a8d870d765b5424e0a23ee6807cc928c5460380adfeb8

SHA512
1e5cdea589b9eaa07c06d6efe81fe83c0b27501d2a6d7088d52abf7010a2b2a67228c07711fc20b4b854fd361b2bfeb6ded55d7202f76b87378234f3fea6669f

Download Submit
/data/data/com.didi.cash_manager/files/.envelope/a==7.5.1&&1.0.0_1715054425936_envelope.log

Filesize
1KB

MD5
1feb86c5351e17dfa82c25d04f77e168

SHA1
704f74270c669a64dcf89650aa7e6ce5c2928a71

SHA256
8ea1358d5f065b481d1544470541bde659e27e274b0fdb2a2fe9ffd08cefd571

SHA512
3f89a6f133dc7c6e81b2ef6d3b21a2fcda7c135a26570814c5874836aa13bd6fbb9d25054d92aacd9a33e9858324178d327c7988e265a7dd8b2ed6903fbb7e04

Download Submit
/data/data/com.didi.cash_manager/files/.envelope/i==1.2.0&&1.0.0_1715054424360_envelope.log

Filesize
2KB

MD5
34db191e593de7d53f9b0e81fcbc6dca

SHA1
644c0cbaa8af08ce143bd6cb449bef69f33657cf

SHA256
6442d40bae961beccd2f9df6f6f9f5a67ee80579be9bd67840d4bc15ccf92c17

SHA512
a934d0fbd5cdf0ddbfa5437c17aaacebed36fd991a18a05cfa0e13d2e73b420ef5e3ec2c44ba839ad9728eb9363fef3801f26d7de754089d05f151d709f8e291

Download Submit
/data/data/com.didi.cash_manager/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
3c000726d48c3d988a17e546b84fabcf

SHA1
b7726bcea46fb8907f4e21ff6258e9d510cfc3aa

SHA256
70c584a835fa58fd460825de89aa1d8b92507f05389aba31bdcc370eaf4b3a50

SHA512
960642fbc90d19decef2f47b4e5d3605071ba071d94aa7041114889505292b42ba0cdfae4cd313e4b15454e96ba324ba7cad1531b29f789da7a82c8f24e7da77

Download Submit
/data/data/com.didi.cash_manager/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp

Filesize
567B

MD5
c64c85ce49a7ff514ff7c49b0e652eb6

SHA1
3e8533cce051b607069248f134b90a862afe09ef

SHA256
3610f656706cb7753f3cefb722df8de629de1a2eb100428189b681009a9b6b1a

SHA512
c242f546a33438d6aa97021b0b44c620becf018ee4ddc0c289382888527749275a89abfb3d28ffafd6f1addf3d119689fec03d3bedf4d5971f94f01f51da44bd

Download Submit
/data/data/com.didi.cash_manager/files/a/b/5ad6cdbb45b4a14283563bba26a5e0b7.0.tmp

Filesize
567B

MD5
12436ef6403c4c663240af6b401898b8

SHA1
b87a0d0a8bc913d6005b63d525edd588212f0870

SHA256
aa3058775e11184de59cc1bab97a78b6133ba6377b72b0d8d192a6846ff4bd00

SHA512
a134093668a768d21008774e7eb82cd195c1420c232bc004a1e808f4f4e1766737c27ea86028dcd3b666e72e940a25b5d3c4e69f0872d8533da78f9b6ca45872

Download Submit
/data/data/com.didi.cash_manager/files/a/b/journal

Filesize
113B

MD5
0cf77f36c527abcba3e91da23011c1bf

SHA1
3bd240ceb6e24c9ceb3e2ac8cbaab6cec10cdfdf

SHA256
a6bb2d97757402adee9ec84cd2497f9e23a9408d3ac4f09f2d8fd23066cad0b6

SHA512
6e6e40d6ff7a2e539b81246e9176b4ee18937c9f7884592a91b7613f4eaa754c54c97dde39c6c7c81fbb6901231c3136a288c801bd3c654e58bf24a29112cca4

Download Submit
/data/data/com.didi.cash_manager/files/a/b/journal

Filesize
195B

MD5
79b922dc6c284d0b0ffc0e32e0a3aba1

SHA1
8d660c89d08ec9089a7124e24468b4618c95b51f

SHA256
2f41768d93d34bbfe7b70a6a5d206dd0cd3e1554452a59f4b7d8d9d5aa97e695

SHA512
a792b0472aea57caad29229c9bdaf91bf95697011fdb36b73add990dab2f1e5b9bb1b6dd4e57d1ce09d76fba37bd58a397039088d672c8b9037d1d2762f1a52b

Download Submit
/data/data/com.didi.cash_manager/files/a/b/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.didi.cash_manager/files/a/e/0120763907780.0.tmp

Filesize
78B

MD5
c4273e44da29a0246ce6f62ce806332b

SHA1
b6f763dab44e8e65bc90f372f0409fc54404f39e

SHA256
7324d429f6881cd81c8f190113626ee70cb457257ea423f376e2e6fc00f98de4

SHA512
365c2c928bdfe930e067387dd450567b8c73e063999ff728e99566f363268aecb2853c5025ceac0c78daa3648e6e2e0702b57864eade65a62b2837856debe5a3

Download Submit
/data/data/com.didi.cash_manager/files/a/e/journal

Filesize
119B

MD5
9d928ebc55555b814989056f67ac413d

SHA1
f23cec6820a4ef96c96222394e8be4d11d12b5b8

SHA256
240367efe413fce6d2b77355bd672b6be59baedcd57438047d4922986f1a8117

SHA512
fcc7fbbe9bced7fc386e7ee4d610219ca36249fe87847253f021dc55e1749d7e0dbb852c681b61622df291c79da20cd60785bc631e611d4a25ffff8470427e70

Download Submit
/data/data/com.didi.cash_manager/files/a/e/journal

Filesize
74B

MD5
f25dbb87fcfdc46e1141bdbf43bba624

SHA1
105bf44a7d873b24096ad6f6f2f46a73c4e5f2e4

SHA256
bc824d8aa9ac5219db9681b8195e8d9d7a5bbee2d3d7a4dba31cdb262f5afbd3

SHA512
5f1cdf58710b7dc658782bb83287c7d1902a611dada511fc48e5c95378ba5324ae4e91b92674b8f21c64b661dff0e2b31a32b39fb3bb70f5edb54ea58413b801

Download Submit
/data/data/com.didi.cash_manager/files/a/f/1715054482785.0.tmp

Filesize
436B

MD5
e01034052e204fe48872ce479a6f0c4b

SHA1
8e3d4ae1546b12216773bc4ad9c7d83c6a8559c5

SHA256
c2d81fa410682dd215bf9abde60957060b9165877534266d558c574d200a80cf

SHA512
c62aafaa8dd7d9ecc94f37623b2eae79336ec17435bae0d8473f57ecf1e409f41b900492d4e8173c2dea8099406df99fbea720f90e666f432bc2f29ace583b42

Download Submit
/data/data/com.didi.cash_manager/files/a/f/journal

Filesize
75B

MD5
4066995d91e71285133c45f48613665d

SHA1
a37ad95da320008e017445753620fbb92d6b95c5

SHA256
11fe5abe5fac4ce8cb3e51a31f22ca7a0a2de8f4295728685e2cc700e82a6713

SHA512
505e2c9abd79873b3c09de7e94f877f315ff59c3742f246f196a5b6a4fc3933e633f0ef77588a5e56aaa089b240921fc2d22a5e038fd818ef4ee371cd9d598d4

Download Submit
/data/data/com.didi.cash_manager/files/a/k.store

Filesize
32KB

MD5
917f994cb561890c0bc937e81f4fda4d

SHA1
8f7862a1b598cd1d11c9044425e04dca2d4ed131

SHA256
496c5510aebcb77112ced6f6a74729d78ad234105050ea03b07add2b67ca6e58

SHA512
fa723cfafd951b94b783a813aba12c88d39b3651a4a1745e16f1ae80cd4a1d5f7d7d052865afb56ae5aff017f193af394f0c0f446f10124e6e1d9e60a307a743

Download Submit
/data/data/com.didi.cash_manager/files/exid.dat

Filesize
73B

MD5
cd3ea76575076609663448889f170af4

SHA1
ff0e7ecfb2deb7f31d167739b8a15618be15be14

SHA256
06a504edbdf674ae5210c28d16c9c0bc0eb6931062839e60940b4a9bd485aacc

SHA512
fc1d31d560fcf8f9fd92bb2d7d83ac431743a796f75cdd918d6eaed00b6d1f6bb2aac55ca3b28cb10ba0d56015d22e1d94eb800c8da0715f76e76dbdd13972b7

Download Submit
/data/data/com.didi.cash_manager/files/jpush_stat_cache.json

Filesize
139B

MD5
6ec60806fe9bbb6b9433f3bcb76bcad4

SHA1
9397b4a23a65df7d37e626ca24e66e7bb5966eb1

SHA256
fd43f7eabd1c8ca6de3a3d387f376efda49dc1f7d6579fce8f421bbc43beb3ae

SHA512
64f8653c3835e234b5a3481eb6bece8e32ff0ab88d1234a6ba94e20f5a067bb98226dd3cdcb9c3a7e86d7a291628c50eaaa9a4b40deac78d19e94e241d7913be

Download Submit
/data/data/com.didi.cash_manager/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE1MDU0NDIzMzky

Filesize
1KB

MD5
3de63de9fa9e61a5e8b4440a7c81b9f6

SHA1
c982a8f86e35777a1750ce583da15a45c6de12a9

SHA256
f68a524bf11ec1d0c0a8295eb7512dea79c0f0646fcc79cd1b8a03192bcb7a9f

SHA512
9f061220b5ac59ee08fd2667a79b8f2430b895767adbba5972fd6885bb8b843b4e903e2c92a45242e2fef7a6081a9975037ffc571a3413c31f51b663bd3642a2

Download Submit
/data/data/com.didi.cash_manager/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE1MDU0NDUzODgz

Filesize
1KB

MD5
4a8b5aafb1f91971104e3b9edfd4e137

SHA1
a4ec12292d0bcab794c9ef01d5679d722fd88005

SHA256
ad71ec694327aaea6c7a0a60b9a3bc294a790270683098c641ffaaaf23d57fe9

SHA512
5192d38aece70b518e1de4f0dbe42c5eab04a0d76ec41c0c722034afd426cd1e3e1d8346a2b1b54b754b2b143dcbe7362eb2f3fc0e75ed75ad7dea9d5ba5de06

Download Submit
/data/data/com.didi.cash_manager/files/umeng_it.cache

Filesize
498B

MD5
1fd142ba5a08a26a1eb93d5ed1b132cb

SHA1
f53c70b3b8a21c33b635ed360ca4951536929ca3

SHA256
91821b4b9403033016083d17c2bd0b05c1747f567071300d5a3845a2f4287b05

SHA512
f04d19c0f7ab82f64d823692c5d42f8abf31df8b5698f23f4a3ace68ce87163574c905ed735701f2012d41b2ef116f5ba1ad45598cf145337ed907dec256d563

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
86c14e92cc0877e9e2063de96ed3bdda

SHA1
2e34b4458edda5a32b29fbaceed671d964d9ea6f

SHA256
2fc1f2b1d0aa0e34ceb868fbbd31a54c0deb37233d4f980d4f71a5a31e35c861

SHA512
5c8e2ece865340433271d9877128b4398bc7d8506d307c81d9e09589995bafdbd7ad7078e04693f2cceebc484eb0eb825d6419544e3c07d5926c6b49bd91204f

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
91c8441cef09774ef9f15d442a8b7a39

SHA1
4b69986ff3674cbc2553f4d44f24b26d669d6c14

SHA256
2eabc4cf4198f7a7ed001fbce073332c9af0ad4c2c067354d994e86deb216b8c

SHA512
bee7aa62377681d6c59989bca4556dd75c3337aa15a5f019cea8de2341e27e3384a2d8b7727bffdb71ef92327353c2bf6b12d5cb7031b0fd6984b2581dbfbb03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
436B

MD5
99bff5ce4ae486c256cd40cd4daf5701

SHA1
a77285ec5dcc409bcc3bf155f3d6a0c340299c71

SHA256
107b524e7a423e878cf1f9ce9585c280f54d7410e9cf22334bddccacf3c71f9e

SHA512
abd4cd4312e90bb347dc0d27bc9d697253b342498e45e34994a59ccabef8c1aa3181dc7dec21e9e95d07cb235cc578a24d13e3c0c5bd955e36df89dbb75ba939

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
037671dd216c6986a4866e49292c90f2

SHA1
f10c49018dea80ec8eb45cc549ba241b34d94a34

SHA256
95aa8aa2ab7fe2a966411acdbf785450511e7bd6bfe8789469e3681dc7aa1d22

SHA512
b915c6b7ed097d2169a37472690ee6b7409839e4385eeec1652b3a17226e9e12c793b56f45c395079491b3488b226f38997645277bafb6d26422c1d460554093

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
e3609038648194b79207fcb5944c62c7

SHA1
57aac369a5a11b628bd897c84d70987f92d70816

SHA256
683b3ce844a6f6511812f42605517e4aef7f8d0e7b64e507ed2dba83dc40dc31

SHA512
4dd8aaf504ad00d589a2c074f9dcc5e5f4dfb6ba30ec29bef88ae6ba8dc98460352655cde3decaac737bc59d60846a4679de49759a4b3f98f9b9b47e09c758b4

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db

Filesize
20KB

MD5
731fba9d21f23915576ea5dc2ea3ffb8

SHA1
d1fdbc209db8b71d1b4e5341e75b8cc88647146a

SHA256
87510194f38897a04cd1f80bd6fffc3344fa8ef21baa61de020a2e790a7268ab

SHA512
b643177cf3a30543342d3a521a2dcfce70df4ec450b040e2b61d8692bbed4b3cde2f9f304cbf496869b89455e3cc6a501e8ff720edbdf0f6898e6a5f31fec25d

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal

Filesize
512B

MD5
9ec0096bdfb932069030b2eac715673f

SHA1
5bdeff4b2d12f3b0e903964158735713c01be39a

SHA256
af9fa9fe350a2c3b81a8e6ca456d5fcb37d4182cbeec02895ee1df95c3e4322c

SHA512
a7bb13830dc409e02b5e2b4a2bd706b647d6fb73bcc6652baa2ea86c8be5f57323ef0fb4408db43479b7d424d71dfe2213bad688bcd8c137ba544dcb1f782671

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-wal

Filesize
32KB

MD5
e198a92a9eeee62282d1df7e9258b1a3

SHA1
a885b4daa675676505f1b73bf70f727ca603dbe5

SHA256
b6e026411aa0dd31672e6a3b85fd339774cc070fbcb5e54d0eb98bc4ad02e83c

SHA512
70fdbf1deaeae4b8a257facca61f135059978187b552c221e36a33a433e1dd341772aeeeb67b056a239b38936d276782cd4fd09c2fd6bf2e4993486ad461f50f

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
78B

MD5
24e39a8e56cebafef816c544db362ba0

SHA1
a79bd282c191bbd5f678acff47bee293d493b5fb

SHA256
191bbd9025add380e151589b8dbe4e059734416fed23470a6df35dea74e938af

SHA512
bb21f1b0135f002e467804185f4ecf0a812e562d2fb34109f01424988e585ab79aaf26abb7ae880cb4f5cce512e5514c758a8b17ebcf5d42f407ca5fd6d0f12c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads