a26d6464a303e555f0fbf09ba2c1328c2acdb8381da510ee6a16a3829430a01b

Analysis

max time kernel
121s
max time network
143s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
08-05-2024 00:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

22682f1a7d164f88df3ba7c891426639_JaffaCakes118.apk
Size

24.6MB
MD5

22682f1a7d164f88df3ba7c891426639
SHA1

d348cd0ae91c1fcab36a02c4998c56f1c1900aed
SHA256

a26d6464a303e555f0fbf09ba2c1328c2acdb8381da510ee6a16a3829430a01b
SHA512

33c4f197319eefe208f30b590596480ba6d7d225d157f6ead663173ce72f4abfcbdcf3326edef3c809731df0cdff73bae353a6a0ecde26f8ac2e86349bd2536f
SSDEEP

393216:DKmqaLwqQ8hAesHepT0S+MQe/zlZaCMQe/zlZ/edGBs0VTtusF52Hw0ZzCJfvm1N:DOakqBxT0EQKQBQKJJ1UsQZz2vsN

Score

8^/10

collection discovery evasion impact persistence

Malware Config

Signatures

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.gci.rent.cartrainnn
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.gci.rent.cartrainnn

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gci.rent.cartrainnn

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gci.rent.cartrainnn

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.gci.rent.cartrainnn/.jiagu/classes.dex	4203	com.gci.rent.cartrainnn
/data/data/com.gci.rent.cartrainnn/.jiagu/classes.dex!classes2.dex	4203	com.gci.rent.cartrainnn
/data/data/com.gci.rent.cartrainnn/.jiagu/tmp.dex	4203	com.gci.rent.cartrainnn
/data/data/com.gci.rent.cartrainnn/.jiagu/tmp.dex	4203	com.gci.rent.cartrainnn

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.gci.rent.cartrainnn

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.gci.rent.cartrainnn

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.gci.rent.cartrainnn

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gci.rent.cartrainnn

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.gci.rent.cartrainnn

com.gci.rent.cartrainnn
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4203
- sh -c ps
  2⤵
  PID:4274
- ps
  2⤵
  PID:4274

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gci.rent.cartrainnn/.jiagu/classes.dex

Filesize
6.4MB

MD5
c99b6ab413eb09a155c5f397f5ab4861

SHA1
e424f68c50440e7877f49ff840a8d8f616d6e8b3

SHA256
002e45c77803470b7eee64709e545f0e88174e05e7e023b7470271e241cfcb16

SHA512
b484ca18395b186d6bfc910d76cd81b57beb48a4147d430774313eef47f4a075b9360d0c9948c802fab87c04b943bf2a1c18652d0955ff68909d610a79b93641

Download Submit
/data/data/com.gci.rent.cartrainnn/.jiagu/classes.dex!classes2.dex

Filesize
2.3MB

MD5
9db06ae42792979e81e5a914b9e2ac29

SHA1
240b6fa745c0dcb43125464bdc8ef0418932a063

SHA256
abc8ca343182407f9a10f74286b8179ec3735474c8757a7bd96d7f5a6b470444

SHA512
cef0f05b059a075341a370f07f609cafebc846ec3a78f537102471b77d839640b297002902eec23e6f83eac1439450236c0c2b2c11f3d76db4b5d832bebd4d3a

Download Submit
/data/data/com.gci.rent.cartrainnn/.jiagu/libjiagu.so

Filesize
485KB

MD5
015df5724b50b4fbc6dd0caf7ccb817c

SHA1
980780e98c9958aec97ab7a0de8d28a4c5fd9429

SHA256
183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6

SHA512
fda8f5343cac8102aade5f1aeac7c5b028ea5d8c92e3d12de92e1ffce30bab47a446f215c9cff7dd1e1bb88980ee0d27b5241e856719fcc1f6a5c25e062e9d40

Download Submit
/data/data/com.gci.rent.cartrainnn/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/hmdb

Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/hmdb-journal

Filesize
512B

MD5
8e90c4a5e8130dc3a57201d0f5092073

SHA1
dfad2f653e89d711afc163ea45cfffbd0b9ff74d

SHA256
497dc61541f44acf03d1f0b02e3eabbb64acb9069d78c641f8434005bb905b41

SHA512
e4c909993cd409d72b6be1c6c04f81bed29e791cf0322f72b27bfd5aca2e49d09f6cf38ad7dcb690809522b8fa5fe243c856e2ce48d22f700523a22cb2c73cbe

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/hmdb-wal

Filesize
16KB

MD5
ddd8fbe9af1e70753718f5aa77ce74ec

SHA1
c922510284850b9f0c37e2b18c2bc98e82fbd6b4

SHA256
2700e328ad87398b4ef1bbf51356ae527c238a2cee29552a2f7837e84399741c

SHA512
77a633bf75a687daf71d27522b6dc4e6370add011e48ff0eb1b444a3c6b036afb1ade93c988aaafcb9619bfb42cbad0136cf5f3c68713952b2aaef6f44afc6bf

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db

Filesize
36KB

MD5
a7b5debf648af8527d38065f285c6754

SHA1
ad8513c878ca1483a2472c7f8dfc8a416418517e

SHA256
0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5

SHA512
c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db

Filesize
20KB

MD5
43e6fb71a53646f62a7aba022b253aab

SHA1
2a7ac1cc33bf44a50e9d897a26df401bc37a6dd0

SHA256
bac7a36c3aecb036179b30ac22edd26d8cece8218190e8b86ebf38273e5884b6

SHA512
7bc5bd42e8fe6507df04c2d94f3dd99d3665325c882bd6285ce2fffcc817731c89cc474521423c5455f01ca6607e213b79d9634c975126d4a99882bf48cad177

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db

Filesize
36KB

MD5
60e918a66670488ae5e111bdcbcfa95d

SHA1
ee81e2f5ad9a7301adfce5999095370e532a43d9

SHA256
0126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313

SHA512
1abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db

Filesize
28KB

MD5
ea8985a75b326163e0c57f365935a741

SHA1
65ffcd52aacf9bcdb776149626cfaa9c9556f147

SHA256
b096245a8bdabebe026ddc838db0b4f9eac5f0219101066b318c024aa3a50421

SHA512
a8a6489f1825e71a73d4d96d27d0759b410b78684c190511b2b98ed4741b18cc6d03412ac994bddadb862c5dbc433a2e7ac34419ee50d2b0179933a72866943c

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db

Filesize
28KB

MD5
959177b652430ececcad3cebf98ab4b6

SHA1
e10289fea59894e0f876657d735314b46bfb9f3d

SHA256
da3b572632962dc0e1536124c3eb87d509e05f72d7f734d81816593979d4d03e

SHA512
6389bc2c4092da1a7bfa969e6d855a91ab840a9b358b5205428fc5de5e8dc87c7369d925c16abda5d409e54c3c7389c9ce63b72376d0354a3a7815da310aa551

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db

Filesize
28KB

MD5
19d9a140951c56b6c1569cae45bbea7f

SHA1
6b38ef2e8c036064cc070034238c950ad3841a26

SHA256
fc2a02497d3a15ab7804d6b0e133816768664a773869aef97a296bb95a19253b

SHA512
fd2f2fc08880996f97c6bf4a86f3b98fe5590143468ccdb42c2cbee7a74de2952be20bc93a1ea2aacd8213c55f8b753b3be0bf594f01855daa15b279e5166498

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-journal

Filesize
512B

MD5
000e772a61e7a337dac5e2eaed42f069

SHA1
490f846f43264875652db0e3089e16c20b762b6e

SHA256
c06f4d6bd920d82fa98f14767381fbd82f0e3a55f57bfb46989ada6575dc420d

SHA512
7a471d6c29e7ed1cbcb1657ba095141a5def0c019c79d1f8ab82cf67283f7b84f60f4869dd1e5d1b4c2387b243813acabd8b54789bc5e3760fcaf2e293f2c3f7

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-wal

Filesize
48KB

MD5
d6c15299cbe3dcd5728b854991ca0143

SHA1
5b014ba8cd40822fb52fab5bbc5c34eb314914d0

SHA256
fdc021b49182dbf04f19fc8139ac19a17dd7daf89edc957f7bfbde0867781718

SHA512
710424138b0dbf494f6b310a74cd910bb8fd4b2fbe5ba918625205dbe4422b6a2a5fc631da53e5e8619ca8395470a0a0e8e6452b02e3b82817ab3923f1500c31

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-wal

Filesize
8KB

MD5
c4aaa7737d95710c5c3334e755d05db0

SHA1
d7b16b62bc91652bb7cbbd6ce8d02ae7b8534b32

SHA256
bcbfc0be7d6475ca57e0a63780b782c4cda8652843c0d8ee59367caf27d00b18

SHA512
7b086e8ea819875ddf824d5f00406ad6bf2d037e1386c4d311c7dc43745102c23e467d4f30df262a8660d13c8a0e277b41af38507335504d25818d3be6a3a0a1

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-wal

Filesize
8KB

MD5
edf079f9b06b7c2d33453ee2f7f0bd91

SHA1
b5ebbc2e331f75afe450bda3c86040d2c3be7148

SHA256
6db26f606ea866fac483176fba87e2417fcfb07f51b7481c8eaf61c8d3d43b3c

SHA512
6d662222c2ffa95f3c921f9aa99e863051fa9c58e66b559feceba0a0daa8d9c916fa679d6e35382bb7bcae4abd072afabe2e3752e0e319ff2436739226ab0c7c

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-wal

Filesize
8KB

MD5
fd40494550640fbdf4daa2d466f43391

SHA1
809009f491faa56841b3bd63638bba6f43600884

SHA256
989e6574c25b5b623a17c643d5a7713ff45bad9cabd5e48e32b5bd2524a683d7

SHA512
712ab82c91998602f5814321c11e054186ebb6b6c3aea8f0cd4c3a74bf2c0d50ac873f9e19f64929799c7d27904a72cdd877ff461210855bd6c919c80e49b798

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-wal

Filesize
4KB

MD5
db4e977f9f606e0ef2e54a5ab879fc89

SHA1
cc37b929a1a2707581688979dd7124b6550c158c

SHA256
0ac0a6387c2a48a55fd18f5c86f6609b9e54528386b43d9bd0636ba7db10cd91

SHA512
93cbe8392312c12fdadc367f8157f6038ff890f9cd6c51a60e635854268f3ed048a289e44d9e733ee1b6609c220a785437fac4856f7c1006c6751aca6078cc20

Download Submit
/data/data/com.gci.rent.cartrainnn/databases/logdb.db-wal

Filesize
8KB

MD5
d303e550b8b3b1a1e836a494cf12f3aa

SHA1
7bf64d452f6aee1b053444568264585605e3d65e

SHA256
18e8dc58a0fb2aed5b3f0b774322730bce5509343038b69188f5291cc07a4aa0

SHA512
3e130a7e2dbf9d9d7c0292d7fdd1ed81e1f63c4e0c809b9572afbe4fca61f8fb6306701751b5b337276fe16301713befb5204086f8a0cea8479736ecaf1e8703

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.ac

Filesize
40B

MD5
32892f8068460122525e08a25ba4d52d

SHA1
965906b0a359d72196f4aaf5daf8e8d8ec6f79ed

SHA256
dd66c4dfef0f18e4b2818d13b3add213b0f5718b94ca3868e144f475c807f51f

SHA512
cf845c5960c6205f5f60435db914de0cf74726906b9bd058f7e74bd55872308a8f148ab5d34e4cf1f84fa344781c0109dc1c658a83ab5c67f8b47f0c6e32402b

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.ac

Filesize
40B

MD5
03ed7f8ef0120d6a897cabc86ea9af16

SHA1
95d82a1cfbc1f6b6de16ac0672c34d5295dceca3

SHA256
5a9d51ed83503f2be8e08e73eea82e8823a1b1cd0e9b99e772bb6c13b289e9bd

SHA512
9c51698fd7d65f0ec05800e4f85705d1e44114ddda0e73f6d1d09f90b54ddf0d6366aedf79bc08528cc37922e0dd3fed76f7fbc15e51e4d3e79463821e2d62fd

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.di

Filesize
340B

MD5
b4faf3bdc0fc6712e657a7a834bdbff9

SHA1
032dc98da032fef44742f4e9991ee8627bf46bb8

SHA256
bc49a03144ed70976ef481796e1382c516a042ba56dfdc16fbb9b1c646c0dbb4

SHA512
247229d4ba89b75d2db666a14f5e4c10bad5e9b8ebe7f72f69166fb994ff56c73a7823770842764b1d735b61784fcec0f69fb188bfe9f6e853edec37a0eb30a7

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.di

Filesize
340B

MD5
2f785610c25f1d769bba9ed8afca7e78

SHA1
8691af1a2c21e76d64f8c4fa582bb9d3202741fb

SHA256
eab2f7e515fec2aac40497214f1772d2edb83fb9edf76ef849572313737d1aaf

SHA512
fc8ba37cb040780c42fedb4eba306543ad401234bbe9dc80f01b053f700debdaf516a0e188fe36f09cd463c3e4c57024028ef666d733c3bd8645fc06c90f4e3c

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.ic

Filesize
40B

MD5
a7627c6ed8775f6c004c7294af4cbf90

SHA1
da9422b20dbfd6fa9d5d17b31e4bf0def9c19ee2

SHA256
5d908e53d57ed88b1b0a2d19b7ceea0f2e58d453b71df8b57851e561faa9bfa3

SHA512
0589e05e62ff39ad658af06d491c42836790ef76755d66e5d0f17e7a677134daf233a2166333bc23001b00962f2d7d9ea3614d743927d6ee6017a76556d9ba8a

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.li

Filesize
100B

MD5
1368a30183bf3ea83a7e718be1628837

SHA1
02a0182c60ff5408c8ec97c0520a4ccaa90be94e

SHA256
cce486e4e1d12884b1331f4264d15f4455a3e7f252e537799920ea2046945a67

SHA512
19557c4df82e5b0055ae325020d8bc15d3ea275f9e4530d7d1e3c45dae81009e95f07d374387a66bfff5c5798b1433a1a0a071640f28318b2573a4681a7dccae

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.rd

Filesize
73B

MD5
b46c8121fac46ce6d54d6b02c9f97223

SHA1
28528d0668a75949388c8863242f838f6d31b3ff

SHA256
9a298c1fd325acd29442d0ff29b241b70af24be26891ff50fa72ac2c9b8267be

SHA512
e2b8a3fd7b9964e807a3c56e44035d610fff87de13d35a4c9b45e16ddcf538fb2b6a223b39e9abdb984be6ad71b934894191a3dadda8ecbdd12dae21a18035f1

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jglogs/.jg.ri

Filesize
314B

MD5
d34d7d14d333a1609ca328834bb08729

SHA1
38b34209feba89ce6288a73dc0362bd0f4246489

SHA256
dcdcb24cf3532ee8ae2af85c171e398b40fb77fb71be17a33cd4f6124f4027b6

SHA512
cdc6f5332ccd6558103c0c7a6bf1091dcb8022c4f5e91fd5e1db2102888c7171133182c6fe2f0146a204d02d497ec7c872f3afb8b1737aeedd5a65099d812c0f

Download Submit
/data/data/com.gci.rent.cartrainnn/files/.jiagu.lock

Filesize
27B

MD5
4b5ebe06a23f3cb4dbbef1a1ca34eb5c

SHA1
8e2fe94f73e964a343ea022f118e024f57813278

SHA256
86056265a4b3cef1fd0993124ec55d6eed5940db2a32f9f1a80fb4335432d142

SHA512
15be8d22b159a54cfe0f35d87145a9cc1530600bd8ec30d55253ecfa9b0868c8d118fbc7e7cd351e21738644f9209f974ca1885c111ab9c165aa703fb67d7755

Download Submit
/data/data/com.gci.rent.cartrainnn/files/a/b/4c984fe24161907e5b5b9423ecec3163.0.tmp

Filesize
564B

MD5
4d1faea8aaf8a7254634bf8a7ef7d11b

SHA1
a0913696b963aab56f1e5166ea8af26df3da8d20

SHA256
7e33fc2fc450f1da12bfde7488372cd52b7ed4d57d65d46f052f3176535bf8ea

SHA512
f4c5514b02a9529874009f14d62ffe559bea16eb5ce1a7ada4a2b062ef71995990f862c7ca2a7891313bbe244be2a6ef7ec32c460bcd7cb32cddbecca4b22bdd

Download Submit
/data/data/com.gci.rent.cartrainnn/files/a/b/5ad6cdbb45b4a14283563bba26a5e0b7.0.tmp

Filesize
564B

MD5
c94e0a56d93804b187677279b9678876

SHA1
e27c24e684d2d3fedff47353596c2e81c611a911

SHA256
0afce4399c239d7bc98a9bbec07d9a04560ae4fdc05b433afa0424f74184ecc7

SHA512
09d854dac0eee754aadb6eb3a4645b185aaaab44060f955bdabdf20a32547ca0ac478a51409ce862ae1019b7ab31b17b181f93abfed443bcabfb939bf27cfad3

Download Submit
/data/data/com.gci.rent.cartrainnn/files/a/b/journal

Filesize
113B

MD5
adf74c6eeb18424ae96792f31795a85e

SHA1
2a1791759434831de0bde90fb1016ae02fb44875

SHA256
9dfe39523699289bddc58b5d35346e131916607ca6cba18336133700429c065a

SHA512
e39604cf92527f820533f60fb94ec3bce2a75d5192e9009bf1218b6a570fe53c791a0d23860ffe33517431d00d7e98763f9c930992b68ef430a9d7f72ec0a5ec

Download Submit
/data/data/com.gci.rent.cartrainnn/files/a/b/journal

Filesize
38B

MD5
5e35c852bb1cd4d3321c28193e135856

SHA1
27b0569d4b298eeacb67d0399428c0eae5490b79

SHA256
54fe2f86841cff94835c1390c315464e40258c1b2486bda31251e99c29e9d364

SHA512
3ca12fb5e47ca8b77c75c23284719ee1aa8edad4d4124ccdb9c9e8fd21b2cdde4e4425ef9a6a31d41eaf0962345dd09ebea0664ad841bb97b9e70db1adb76fd1

Download Submit
/data/data/com.gci.rent.cartrainnn/files/a/b/journal

Filesize
233B

MD5
f4a98020a103b00e74abadae06f2445c

SHA1
87d6ee6ff238b968e5ae9dc6acf4f355cf9859af

SHA256
b1ec2833f6714dde2630971a9eebcd2c043b55652180dfa5b3d9c3570f108483

SHA512
75942fd50b9616e5034128b48f9fa6b6f757be238631a0bfcba4ced2704bf9d8cdc7963e88502ba23f6e48e7de924be0b9786fe044f6222cbed83b16bb53a167

Download Submit
/data/data/com.gci.rent.cartrainnn/files/a/b/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.gci.rent.cartrainnn/files/a/k.store

Filesize
32B

MD5
e39952e0fa7c978725c2a0f424ec1a49

SHA1
62eb801760fd4bb2037e86eeaafb3fb5dcd0bf10

SHA256
6f72a4796145a060be67ce3a6f6be8a574e74df3dbd157a9e1c893f7016426e2

SHA512
a0becb577561248dc736896376ccc64db070f05ad5a8f7165fab7f775f81c3eb1770823514606de1380d154cf3c2e3fcecb9b0b28f4f210b145a7cb5de0caaa5

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
18c40ec2f958eea5837d4feff251fe23

SHA1
240f3557d9ff86d0b2f07159b94e26fb19e2ba7f

SHA256
3c57f46fb897afdebb67be3614bf6e100d10bf0454f8af51dff4ea49effa7c73

SHA512
0f7cad6e79123d2d624755c8a847f0afeef74c5f02bea9aa16527a94185710e40769e1617a8a2813d159251fb9fc92a5c623b2934bed4dfe4dc7516c68f5f043

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db

Filesize
20KB

MD5
731fba9d21f23915576ea5dc2ea3ffb8

SHA1
d1fdbc209db8b71d1b4e5341e75b8cc88647146a

SHA256
87510194f38897a04cd1f80bd6fffc3344fa8ef21baa61de020a2e790a7268ab

SHA512
b643177cf3a30543342d3a521a2dcfce70df4ec450b040e2b61d8692bbed4b3cde2f9f304cbf496869b89455e3cc6a501e8ff720edbdf0f6898e6a5f31fec25d

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-journal

Filesize
512B

MD5
ee01532a7dad94395a2d33136a67fd05

SHA1
32869ec8fd27290c600358e89734db831318c85e

SHA256
22c0dfa49c199f6bba9f9e682a367c9de21fbe23cc0be01bcd84769375badd9c

SHA512
890cf31cb0969f648f8302240b2ba4c92e7559accddcbd71671837b516f981b972cd09f0d1767f4638532dda1a8f703530f746202b51ccb897295209e957467f

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn20170807.db-wal

Filesize
32KB

MD5
c6b8a72e773ec973dd85df3ed7d3f045

SHA1
085ca024eb0b84cf3b8f77a7805fdbfe27e01d71

SHA256
6e5fe489c6cb426710eaaf7a34d3b4f2d9e7428ec8492658b7f3d53725d527fa

SHA512
5ed4a2ab758dc94fb600c6645768822467cbc78740844c255337f6a2e36f5f83fe6be7b0c07302f3efff48452e7d863bf857bbdb27b51d9648bf0c16271287ae

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads