a6bb0a1880093c14aac97821dc1149f98bf61400060f1ad282d4a0da306db109

Analysis

max time kernel
156s
max time network
164s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
11/05/2024, 07:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

336f89c323d8ca4edaa636a59a5662cc_JaffaCakes118.apk
Size

18.0MB
MD5

336f89c323d8ca4edaa636a59a5662cc
SHA1

6e90d965a40a320536130bd026153e6c6585d7b3
SHA256

a6bb0a1880093c14aac97821dc1149f98bf61400060f1ad282d4a0da306db109
SHA512

9992275c4ceacf3cda7f01d00d85ed977d8d8b9b23450fa776da19aa462186cef919a8e6fca1cf18a8ff39751cfe7e678e663578b70c70409569499ebaad3af1
SSDEEP

393216:+NKMf1mAplwBcHUcd+r2tF9Ya3g7gf/dgSRYe3uu:+NKMf0ApyqHLF9Twc2SWeX

Score

8^/10

collection discovery evasion impact

Malware Config

Signatures

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.xgbuy.xg

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.xgbuy.xg

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.xgbuy.xg

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.xgbuy.xg/[email protected]	4774	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	4774	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	4774	com.xgbuy.xg
/data/user/0/com.xgbuy.xg/[email protected]	4927	com.xgbuy.xg:pushcore
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex	4927	com.xgbuy.xg:pushcore
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex	4927	com.xgbuy.xg:pushcore

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xgbuy.xg
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xgbuy.xg:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.xgbuy.xg

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.xgbuy.xg

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xgbuy.xg:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xgbuy.xg

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.xgbuy.xg

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xgbuy.xg:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.xgbuy.xg

com.xgbuy.xg
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4774

com.xgbuy.xg:pushcore
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4927

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.xgbuy.xg/.jiagu/libjiagu.so

Filesize
486KB

MD5
50750315eef281575611bc425174b939

SHA1
acaff02526d7b4c257e00002ed09af364f66a401

SHA256
c8d37512f73bef5a1c1b060676cdc6d508a8d8dd36f2438f5d6353c9b8524bef

SHA512
60584a993992a68e8d0a53be705e3a9d52fc126df26b9bdcf80d14e659f1d70bceb926e0a99a69fdf40f1c09fd61aa52c2d2c008ee5c3ef59af5922a75161ea9

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]

Filesize
6.6MB

MD5
af40ddebf367d3418c410ba2bbdb34a6

SHA1
9a5c0f557da523fb37d3ea9f1dad84e45b78b8ab

SHA256
fd4c1d3b24b0138f6f355235f35815ff43de7e73e5029854ac0581f6d5b4cb45

SHA512
6ca004321a8ef7f6a08b5be12833971bf017ff58c753ebe73d682abcf5633f084b9b1f5c3453432894f8ce8c9b306963b345cc0d6503450667d9ef66d3ac0ae7

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes2.dex

Filesize
6.5MB

MD5
56a56032a56816197231ccd2c1447841

SHA1
42b24c7723619c5bbfff5625ee1f4ff7a9afb34a

SHA256
920b1975141f98268ddde30a18db00a3c92776c8472763640b06009b90ccf039

SHA512
f47a2ee1f15a58887d5158bf141277a7d6488fcd31a9c85ca0d6706a4252433b812e8a49e956fba313393ac55333bee777394d300e136d489a484f5e883e3165

Download Submit
/data/user/0/com.xgbuy.xg/[email protected]!classes3.dex

Filesize
2.1MB

MD5
63eb01b23dce33b6abd34b5693031ca8

SHA1
870abc96ae069aa034b1b647244af5465a881ddf

SHA256
3798ad86a5974af83d89bc71f1737c1747ca4561beb07f74a214675efab02629

SHA512
eac344e6167fc50acfca60a177bccf404cd0eb595b0b3e948f88af21ac3d7c14a49d0d7162bc5ef529b9107132c8ac3d0242186ac1b0ac231acc31e8f969311a

Download Submit
/data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/8629d67571a4b27d4ec7af580cf1e40900ac4eace93076b6c452f349c85d1b5b.0.tmp

Filesize
106KB

MD5
7459aff7652a92bd0f6067f2d6e82f00

SHA1
df17e66aaa9218124c14a31c0b4830f1e3d85bdd

SHA256
57c17ee898ccd959646b900c6d4f21645a96ae816134de1d067ad1c776940935

SHA512
58a15b84a2a49e0bfd07ba29d3c0a4590c67c83867e11664ab53519b54afaf5e95266972ea503b4c480df4971dd138afaeaab9c25f3d4747aeed9f8211bdabae

Download Submit
/data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal

Filesize
180B

MD5
182067b170a4dc745a737ca596e5ebe6

SHA1
f603c087af581daa1d035e19a3127ceedff7070d

SHA256
ea9fada0aa0710ecbfd3754498ea65e9addcc3fd3aafbc49b87d558816f076b2

SHA512
d849f7dc9563a2a6f5759d8ec9d462daf89797b83e4fd4608ec2bd21c584980fc60f7b7f0076005ba66009876ab19158399e6fd41c0155ca3b4a4d990da71023

Download Submit
/data/user/0/com.xgbuy.xg/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db

Filesize
20KB

MD5
ff17cc409c4010e678b90f776b282642

SHA1
3666ceccdea98dc7cbfbe246fea4331bedc23739

SHA256
4297012e7e2500554902516778c6e5187b79a037eca24f4cb5bcaec91b3bc58e

SHA512
fe7bc40f7730a5d5e244bb79c6b43be5f20ccfb39e1c5ac56cd40a7b38880bd852691308d38aa35b88c5eb6e75255bf92ebadcd5de69d5f26153b25a60455f3a

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
512B

MD5
9ddf6fb6c7551b30eb2a14f03d90d465

SHA1
210398702d488c606dec66054825329ff29cb106

SHA256
ec8df0885d2fba5f1d4d4dad8842623ce593f4479cd8ac88ca575f3e43e55264

SHA512
aaf647fa08b1927ebef34efbc8648764dcc3e8c53a99ba172de5467049fe0d595bdfdec41b8a9a5ddf1f7fbf3189216aad62186f7ed05492d049e0500070d383

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
8KB

MD5
184d7985f36dbff6246cdca8aead6d95

SHA1
cb6bdd555d31648c3bad082b6df82ea4508ae0b3

SHA256
c16e3a5aa42087897d6928153e0aca987323fa37147dec4b88abdf804a4368ba

SHA512
a8e4d05274431c880be2544ee0bfe5a931126cf522a0f669224c5ec5143c1a81e6c218f4d4b8b458a2ca53141224cd14dd6446d5234ddca90d5e9ea0fa1c32ad

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
4KB

MD5
5c843778d5c51928a0e1eced43b2d22b

SHA1
a5a9792b822b250801c3c8e89e4b6d6978c9af06

SHA256
c6b916599fef412cea73c4a292b0c472bee562b1528dadd9c568a978cdfc97c9

SHA512
c3fb0331e5f951ff382d2b0b194dcb80f0f95e155e2fc941152633170e9a666c141b0d3aa4d38c7ad2dc7a0d0a86cced20e47664a7145aaff31bc42256b626ff

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
8KB

MD5
cb31dfbf4bf4b1bb90530056006413c5

SHA1
a8ab36def5efbe419ee646de9de6f1fe80c430d8

SHA256
746dab7e365b0802c182f6d6c55c0046f745e0a05d41a71cc8124f3dee6d0df1

SHA512
4df5d63417b964fe0b9d0ded303a824d9d6aa347fa802927b61dadb300ad64e40bdc37801385632648f3352577a036442f153080e6187f0eb17c714c3efda05d

Download Submit
/data/user/0/com.xgbuy.xg/databases/Reyun.db-journal

Filesize
12KB

MD5
d3d6f23aea977676d5f4fa47a54795a8

SHA1
ceaa13a503504668ed671ff8fe04b0db77286d31

SHA256
d441e7bea2d5a11dfbcbf4e7b5ccf8ce2990fc99fa7ce977db5639d0b1900cf8

SHA512
b5f0ce90ea4f43eeaee6a9c41429e1b29a6c7277d2d365f19e5a3051142ffbacaa8a8d70585f74ed3186750b2cea993db9d30cc112cb084f421654ef26743fbf

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db

Filesize
36KB

MD5
70ef8b7bfcbd2f80dd7837abded6123c

SHA1
1bccb5cc1946766b16b6b03acfeccb9f24b84d4b

SHA256
9ea1e18616dfea9076b4793e0e24e95082a5bec830fa63b0e1c72e6da5f23867

SHA512
dd60125057bf2152d8eb90ea8e892a60c62f2e5fe2f90ac4078bbd0f8a573419567158f862dd6ecf63a8c10f01a61eded700dc780654cf0f29ac6a0ffac29dd6

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
512B

MD5
e49e1ed9e51d00da1322b2a6737f0a1a

SHA1
68ec61bcab0eca30834ae78efa696e75f9ac5ce5

SHA256
49e88e70de48ca9785ffa0b2f5d0c3ff9bab627f9bf1b5ae57664c4295499eba

SHA512
946623ccadf25a8e70c648ebb73e9133574a28b0c7ac7e86081ca0b10324baca502f776ee6764de219ea31cbdfe26ba7b2db71a6328fb89dd5401800bcbfabef

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
8KB

MD5
9486ba60c6e03bff45f45a014bdc5de3

SHA1
bd224b1cd79e84e9354b71efa5529dabe54e4f5f

SHA256
6cedc72e0f5547e869e1a523c8c4e53bed6c6d1c26763fb1ae4c36b4b5e6f3b2

SHA512
de4c9544f7207ace9895886db0e5a1c044c66b1ef58d8fe89aa88e07a20e06ee1f10bd9e5a3092d37bb859f733f5fedab8c4bae213e94b95fb67a80a7c95e30c

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
8KB

MD5
8ce8ec9330508121ae422d8b36538e09

SHA1
e3e4baf714e00b07ce678419850e8a06c08f01cf

SHA256
df25e0f1e4e5681b35e9cf1f64d0dd39c3978d57a71a6c8fff7726941706d903

SHA512
b895583f1cba61533520bd3f5f91c9d38d84084bb4a9b65f45bd338f31facc8205122a3cf07182b0b7ac73e806ed803c2e2f2d704b6105a68a94844cdbba01f3

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
12KB

MD5
6df6a37f0efd8a07a6dd23a559e0a917

SHA1
80ca2bce43ca46db11beaf98358b0286855c60fc

SHA256
7e34ac3d31a27f232f5621b267cc0bab535a05147b9a65687220c5d21085b384

SHA512
d9c76f388615efe241a54d5eaddb7102c5ce59f38f53cba1f2ff0bee49ef633144a7cdcac8c308cec2452886ef691f9023dc977ff29be0788f452b8d7e941777

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
16KB

MD5
ea367c5148a5d6a3f4aa996f54debc19

SHA1
49f136bcbce7cbe53054286f287a386b4250dd90

SHA256
29a5a598227e46aba1e1bf8db83b4f799806cb53442f5d286ef0cde5a699681c

SHA512
c8b01316e198f450564af7ec1d8feb2abb0493d8f7b8554723c39a177d9f99153c54a36ae8d25aaac5433a4eefec7c76572378af95b1f2689f2a2ca7be44686c

Download Submit
/data/user/0/com.xgbuy.xg/databases/ThrowalbeLog.db-journal

Filesize
16KB

MD5
4dd8f050ec6b2c1adf0d7a20b8cc5b82

SHA1
f5c0c873c2f4cdf16733e54314aedc37d33fc34d

SHA256
5662aa2b6f4edf64d3351d26f7a09d48bf87e15f5259b900e6a53ca562fea645

SHA512
39671278f0a120c67f2375c43efcd26ebb85933b641f7b20c4d8a4335b0eb158a2faa41441309c8c8705e04497fc031a5e3e56e74cbde343bc60d16c8fe3951c

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest75702133129031869404956114669332541266

Filesize
28KB

MD5
fdf34ba4711371fbd182475d36242c1f

SHA1
8309860a829aeb9d2bac81f42134477aac48f9b1

SHA256
2b179a65501adce59871e6a830111373aaa3caf465d6c02295c4dbc4e0cccfcb

SHA512
fe3e478205a4c8cd97f174cac5a27886751a564c15d436e38045081cd18d37258f1d1dd4fa7daa836d77cf32f179d7cd013acd4e4c5c40e8b570b4970b312f26

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest75702133129031869404956114669332541266-journal

Filesize
512B

MD5
cf72eceea9c6afb020c3d38507e335a7

SHA1
e038f32730bb54c0099e8bf3677f806bb9d9664f

SHA256
c412879e9df07c7358dd65c5447a84e9fe1e3873498507e0eada720076f6dc5d

SHA512
503b5036361b8b54732eb741a18e105e6fe52d90bef4441660b6f88b02c7d34759944d4721b3d7297a5dc3a856b0dd17a6a25511baaceb1def7d4db5eb4973b4

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest75702133129031869404956114669332541266-journal

Filesize
8KB

MD5
03a6af4e9f226554b14c67713e98cebb

SHA1
5460d2b054ee18442bcf8e13d84c8c6a6db91e59

SHA256
c5514b1cfa3fa3b07d24275b2d4913f674f3d02ef5f36e3d56001e826516a7e9

SHA512
ee30a5fced94eef04eec34a5e02262c259fd2ff72620696fef24a288cc910ad8811f316af2034a821a9778f275aab4dd3fa26f3d16662cf4f11715db58e30f1a

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest75702133129031869404956114669332541266-journal

Filesize
8KB

MD5
65e7ec44235b357f806cfdd11e288d42

SHA1
808db2731e9696f1b08b3405af073bb5c10c3f1a

SHA256
92213773862e1364594c1a50125e21dd27486d99401db108577e789e67a61597

SHA512
f3f386f18105bf408779b5b7e7fca2564eb6c31f611adc785f9abcbfc96c04fc3082536a35b4cd2d97f078195e688b66e3877e37825106b192c922040291bb74

Download Submit
/data/user/0/com.xgbuy.xg/databases/je_1000_ISME9754_guest75702133129031869404956114669332541266-journal

Filesize
12KB

MD5
5a0303bdb002da707d807b426c5764e3

SHA1
135ddecbb6881d5371bc391b94ec9537991ed8bf

SHA256
e57a6a557bd4e2de09aa51f83135f0254a12ec3658861f9122ab48d71a1a5b96

SHA512
c3af74a47cc2893cc35689806f93d73d11f51006354b8bf56f50fca3a0ef72e71c1dc54d17e8b467dec74d705947c051364d3143e6c2d7f8c8323da8bb67ce5c

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou

Filesize
44KB

MD5
7f61f0a05a365d9aa2e5b8d5cd82efc3

SHA1
4e408d3ec1f551c13100a9f0971afdfefcf08083

SHA256
afae33aa9f17ba323576e9a6e716496a3317cd85271dd5f4b38f7803188ab9c8

SHA512
1d9686d1ead2aa4e0638f61653297c7f9a5891fe7cdae00bf98b5bc14e9749e44f1ddb0a97754a32dbeba1732821f273051a2b7e0a3f1cb4cc62779feed2801e

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
12KB

MD5
9cdcc5e8b29f3667704c171a74ef401b

SHA1
c44b2c24a03d1faf5a170ab5305354860aa1e395

SHA256
44b15f6377918c66ec9893053bfb79b48007170e4d6265da53b068be20612ad3

SHA512
228662a0c2c808e6e9c800fb5b7f39802ea4ab79a58e4758e0cb185cf4eb4383e93208023f7a5833dbbc8986b659105481ed26c231959c582c345a90b71c67fe

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
ff709affc807f727a7b0d7b39800a78b

SHA1
c9c9b445458b5c46d01d6ca4d5a480ad0609345a

SHA256
1ce83e6d89c8850e659024c41c9c0e6cf4c7e8e19cfaf52b68ffb03c23b77630

SHA512
324ae52d26c268770b5e0aedceb97596cba72f3d90594ee3fdc641831b4651a7cc5472d6f847c236834556ddd6f841e0b5a4d2d68ab5f107eef6d575ed0c7dc2

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
84daee81b8e433a12eb19d3df62620eb

SHA1
523b8c39665c6dafedfe55ef003daa349aae55ea

SHA256
043b6c6ba46c256bd3b6b561c6c4f955b59f9d00ce25029814f9b4bcb1a71209

SHA512
cd6d9eca6d4d11a0f30c6e7f69b5b613855a75eab4822d51f6760e955180c360a10af6faf7455e0557fda539de5bb1490563a686f631a63de286f2ca4d404786

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
12KB

MD5
97121d5293feab35486e9e649fff8f1e

SHA1
7a9701da2f5fa6ae11ddd2c856af83debd9104be

SHA256
7a53820fb6add555d8f1a95996b415483d6553dd24828b91ca0bb4c0e3c9b16c

SHA512
e699b787de193a3f5f363a15830b494ca1be9c091ed96eae089ebf87220c2c37cb1b428ffc87f0252e153fab499502552ffc5707be61c2efef7bd5facf2d78ea

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
39cd9bb90cc295995a944be3ff33f67b

SHA1
6bf33cb28eb81550074647f2e8fef99821e4f0fe

SHA256
7c2b7f670f7343f429aa8da6cf6a5d5621bb6999a44fd74d2c66159b4a071901

SHA512
85a43ab32f37a65db04b764a9e866ef877f691f1a842ba272e772f2b6f0a2588e90e43d8e195e90f9f0435dc2ad43fab0b398eeda51dc63ffb21656668debf59

Download Submit
/data/user/0/com.xgbuy.xg/databases/xinggou-journal

Filesize
8KB

MD5
2540f8f3c1fed124e469610878b2f5ed

SHA1
cd7292809088d81b9589aa10ee8c8e4e2d82d3de

SHA256
1325232fd1e5b14fcdcb11cc803d3aa06e3216b158f190cf14a6256e96ed5068

SHA512
d111b7dbac586adb9935e74d86e6c189178d22bfe4bacb6a2ecec52ccbf83e64791620910ec616fd3544274e317d40f4aaed0e3c510fe52a3821211646423e3e

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac

Filesize
40B

MD5
3911ad10a2d9a4f7ef7a09639a1b8cf3

SHA1
d8d5dae863fe04bef8d987202e25e065efce1e1f

SHA256
0ae3380b0712c9bcbb362bcdf7b72504b9e495fe2987cfc20aec121977dba19d

SHA512
d58dc5e805e0e2d11a79c725285dbb3f75d351d456c87ce79439af68c3a6c2506f5814bc16f09fbf16462c93f5c781437a5bbadc4d48977782899ce9d741dec8

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ac

Filesize
40B

MD5
81024874f926b0c0c9e613997c9370b1

SHA1
a7b4c37570f3e5aa7bd575d0dbcc71ff9079a95c

SHA256
da5ea38fae9a292777936eae50a76aae4d2a589550448aa6970383e44aabe7d6

SHA512
8ae3ca2a1a4ea6c514fffeb911f4c42ff173433a7fd82980193d883196e748e458e83ee42051ccbabfa7f49792dabbf1eb8a72fea3db16c2f157e7ada4182830

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di

Filesize
340B

MD5
bde329754a20552a2c5d2e0838b101d7

SHA1
6e48023c527d9f6d51ae15a54dbdc74dc1645c86

SHA256
826d215029761b4f8ed9aca57bd04a1d9a9d67084df02c5dd9ea2342046afb8e

SHA512
c7502140443d11d77b9c9013b38fe2d2ef04758bb0308a3f642b4e47f4d191b93dd1c17f65c5802138333349fbed334c6f5c31ee0bc8edb23ed26a92aa152dfd

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.di

Filesize
340B

MD5
63426f1ef39ff4330a6b24c78b3d73e7

SHA1
c104775292c2d7a0288ab636f5817498b83d41a7

SHA256
02d3a3b5c5f9f37517dbabe3bdd77ca9645167e03f3912ae6eb62330fae5a043

SHA512
01e3cc5b8a51240dce715a5ab6dfffe23eaabaa5107b570b7b5afa256de999cad1c23d6ab5da4020e2313dc3ca43a06179f35f0851b04901cba88c1913d56cbc

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ic

Filesize
40B

MD5
1bd86b90e1b355f123e5ce8c93c3de53

SHA1
bee5683d6124650c8be0b3740ad66e771f29b178

SHA256
3ba28c4fe20d74ea96f6ced27333f04a01e03c50092717eed1b6e30152a8d152

SHA512
6ba3d7ac2b9da3bb2f7ca50488782bfb9f12a38bf17debc4f2853a161551a932885bedaedace0ecd3da9777e1cddbb407ca2360c13512b1b804bd6242e767abe

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.rd

Filesize
32B

MD5
dc2e848be2824acf32cff8ee979e58cf

SHA1
de0d519b548d2290385fe035f031fd2c4a61a0eb

SHA256
77b8a926e64d8810db71b3d51f4cf37b68037d0d91e5ea2940872775e8442a23

SHA512
52d2e8441548718e5a13c0521a46b15ee7d6b93039edd4f3033852240a63bb4361e238b6c7020725eddfad0199ccfdb7496f8e47a3ef6116e5d0bf067f5b46c9

Download Submit
/data/user/0/com.xgbuy.xg/files/.jglogs/.jg.ri

Filesize
314B

MD5
1e388499ba4aa7d18cbfba926863fe80

SHA1
a7f48b44a4ed64175ae4bc6679247f8b5d8e84c6

SHA256
d3783c81a43ef7b4e7d3a40944cebca7e912046160129db272cefc110c688900

SHA512
7d4e78fe9b7d93198f7c6d5fc7bb1a9795f1dec2140fae6c180cd81133aa9ce6c73828ccbe45f08988e7afbf6d138f6356bd5b60f51d890b888f3b3a1f4e8378

Download Submit
/data/user/0/com.xgbuy.xg/files/.jiagu.lock

Filesize
27B

MD5
2d405664101391ad88870cba56d91159

SHA1
6ec0d7aeef42cda2b3d15163997d02dca307d1fc

SHA256
348e3e36ace72076823074a066f259f936c9c5b42d1c981b56758029bd29cc44

SHA512
2a9936f58dc40d06360ffd2a14eb05c57c52f6076f46c9e20a745f45113586bf65ba6f4cd524302346ed8361adc3f6a28cb0ebaa6a75162751130f7544f9b145

Download Submit
/data/user/0/com.xgbuy.xg/files/Mob/mob_commons_1

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/com.xgbuy.xg/files/Mob/share_sdk_1

Filesize
23B

MD5
8e24e79baab91c4d0604eaa9006a0cb3

SHA1
e427afc94a4b957a7096f73e395a10ea404c076b

SHA256
65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

SHA512
45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

Download Submit
/data/user/0/com.xgbuy.xg/files/jpush_stat_cache.json

Filesize
119B

MD5
a5198c7cf90204ee97fd1f99ea4f21f4

SHA1
483f579c42d156557cfd58ceb032ec74d0d0c3c1

SHA256
ab17895e75a8dfbf11ea00551ef144bbb6552144f168e52eca12c6ffbe59bba9

SHA512
b3e85bed2c1761d1d810344ba1896d289718e0d2445280c086de903ba59a2e8360ecc8fa1179e738338dcf9ba27af37a0ff05da5047af59b4a9b99d3875b23c8

Download Submit
/data/user/0/com.xgbuy.xg/files/jpush_stat_history/active_user/nowrap/1bf9fba2-c6df-424b-ac23-5103b2602e25

Filesize
159B

MD5
de80603a6c2a1d63d3025402715dd8d8

SHA1
c1d2188eafed237b677aa3b323ea4669b30fa63b

SHA256
e90d5cf53f14520ab4bc5e390e3f1766a2f7e26b220fb4808eeb89fdb1eed10c

SHA512
b1e97236f9e4ba23a1690a902fb4b26db3ac49013e5d74887aae5d0adc2ab9fee03e650f9c87a24f9357917ef8ca1648d249651be41010c4a96daed1d1a2d084

Download Submit
/data/user/0/com.xgbuy.xg/files/jpush_stat_history_pushcore/normal/nowrap/70a25dee-b88f-472f-a752-a2f1a015076e

Filesize
187B

MD5
79ef1175f01743165ca02e4cb397ca68

SHA1
800472ad1e91453fe421e08be221bde0ac44e64e

SHA256
90d050302f009791854d0025b1b83c8772bb5a4d6c036b16b7ec54e39f224ca0

SHA512
23c2c2af04a045b4d1d1b40a6a0997d81e98a084221b46b0b37a0b76e6983e2d0e4c93593b4e2c9f7eeef1170988acebda4013ecde5f06c38d0085225233b289

Download Submit
/data/user/0/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE1NDEyNTA3ODU1

Filesize
1KB

MD5
530bcfffa25c04d8a6d77ee9c35ef6dd

SHA1
377c6babd1ebd29cb980d0b7d797b77b81ba7d9d

SHA256
ee6e9acf40953fb0d5c866186ff7ae2bb2ff2bba991020a69b60698e31511b41

SHA512
7b7c91b3fa32bea4dc177fbba33d07192b4494f256a78e965dc4aea51296a9d7336c9341c68fe449df42bfd8404c49ecc3822c30daf198e62a3d7e90c95cf9e1

Download Submit
/data/user/0/com.xgbuy.xg/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE1NDEyNTM4NTAy

Filesize
1KB

MD5
48d89d18b30bd1fc204f742ee11683c8

SHA1
9c12074f1b21c2cbd2c326ee6d38ba7d41ce9d42

SHA256
f4a9270899e3350a4f3b935a6afd57f3661aafba21f6a9b87693f65fe3a24f38

SHA512
0b7e75dd385ac892ba0fa392f84f3b7f9a710b3b0787479aeec3f60f639eaea5fea864acf3bd50652c737b72e1875919415c9b3ffaccc6eceaecd14505ebc1e9

Download Submit
/data/user/0/com.xgbuy.xg/files/umeng_it.cache

Filesize
350B

MD5
1232c428f9ccb267016787f2741f383e

SHA1
6a39c538d04f673f212d310694a0858933dc2b28

SHA256
7321b6434580f8ff0531142ceacbbe946f6d4790b9ef1773fb97105021581d1b

SHA512
fbb987160c231d111a00ef1161dde63dde046c97db753d4f63f27977dc187a613506ae6e8ecb22c152a9ad5644b2e701befc906b15d04324948f839d1bfe83d8

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
f800f42431d231770916fd3b15174931

SHA1
406adf09582cebf41cffc20534ce715b8e71e6d5

SHA256
1a6358555f8b408bdd88201bde7214029aaaf1055e38c0cd489d115cc71d54bf

SHA512
3eca2aaaa4431ec9ff29be4439cdad3e2db1e404df7c105c0ca549326c8aebb969b863f9074aad55c8132f0c7edda114ccce0cd143e0dbd48bde75ed307df0af

Download Submit
/storage/emulated/0/Mob/.slw

Filesize
66B

MD5
19402718bfb1c685a726b4e1d846ad98

SHA1
02a7e30044a67085f2f1da24e16e4ecfede65b72

SHA256
079f790e6a1934a94542559f53a89a824aafd3173d956b6019291955aeeb33d0

SHA512
25254318c22cfd301c8bcd479f45797d502b6ab5f14265dadfa3d87b4dd1942a629d3cbc2f0b600cf73b4fe910e3773432f56a0a7b4343e280e20c5a6af0320b

Download Submit
/storage/emulated/0/Mob/.slw

Filesize
28KB

MD5
063624b65dff1397bca8dd40c72ba6dd

SHA1
71e6c35926e505297d11f5a0784a1db7034d87a6

SHA256
298c8e5c7711696e8daf380b7a7dd941d368ba43372d43b028798590c0d9ec25

SHA512
3d7d91a3935b5a581a76b025846bd3d41a3f79dcc6f10bb694db9915c892bc83016860e379273580dbcad34b1daefee6de06c48212feac753f8a7e9e51aab5fc

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
03fedc6fb6ff56ad87267a965c555f99

SHA1
cb1afddb9789ecbd33cfb14c305fb7dae1a5b471

SHA256
a2568bd7a607a8ebc73e435207134ac77192ab8578bf9a557fb12c9ab3128b77

SHA512
94ddd1f5f9b9dff03e3f508bfc2abc90faa838b97e2a9ec47a5d1aaa4951b361a77ffb79a2551d69ec599439d9dd05aaaa5acf1870e6c61001e1630818101b69

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads