d707551b54a38aa5a3643f2f5f227748b460e0dada2e6489c59742af7d035481

Analysis

max time kernel
150s
max time network
161s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
12/05/2024, 00:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

374f465d676044a2b67d5959727bf8fd_JaffaCakes118.apk
Size

16.3MB
MD5

374f465d676044a2b67d5959727bf8fd
SHA1

88271fa0e16dfbbd0b7a9e02254a5caf86e598fa
SHA256

d707551b54a38aa5a3643f2f5f227748b460e0dada2e6489c59742af7d035481
SHA512

d661ea1a59f3d708a78eac4057decc4e6218c491f418b5fe3b5c4d48bb6753f6cf33e61c1426b02f3ed66e9e374b27eae4e2702cf0d553149b6ced2c9ec4de34
SSDEEP

393216:ViJueap6H9EahLaXGgQ8kOnrz1ppuXeUXabw0RIsIR:4JYIHOalwG/8lrzDpuXedRIsw

Score

8^/10

collection discovery evasion impact

Malware Config

Signatures

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.yxxinglin.xzid480

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.yxxinglin.xzid480

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.yxxinglin.xzid480

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.yxxinglin.xzid480
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.yxxinglin.xzid480:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.yxxinglin.xzid480

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.yxxinglin.xzid480

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yxxinglin.xzid480:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yxxinglin.xzid480

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.yxxinglin.xzid480

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.yxxinglin.xzid480:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.yxxinglin.xzid480

com.yxxinglin.xzid480
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4813

com.yxxinglin.xzid480:pushcore
1⤵
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4848

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yxxinglin.xzid480/databases/ua.db

Filesize
36KB

MD5
4a8120c91e3143b2db43971dbc77cf8d

SHA1
37c5700d35059c4e0a718ced73b3d73ba5d2b277

SHA256
1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb

SHA512
465cd282927e30a0a894a75ad261feddde5a31869c8cea6b548362afce08fbb7cff7a784bd1d62c3e4c95916ce30e758d3919dd4cdc13176f29d68c2620c185c

Download Submit
/data/data/com.yxxinglin.xzid480/databases/ua.db

Filesize
24KB

MD5
d8963a88e3de3bdbb1df97be5a77fcd4

SHA1
cc29a76869aebd1a6463942ae96da4fbe24c8327

SHA256
9e1f462e516a49c18556cad07fcdc1f44d19b597e59694ab8a0cb798268ce334

SHA512
28a407be9d67dc999fcf4a5e0dad91c839d4a6fb78410b90304890d45e5fa5a1b7f424e8978ef4f4dad6d2e83f2a53d150a330b08027fc1a0c7e6cdf26a7c3c7

Download Submit
/data/data/com.yxxinglin.xzid480/databases/ua.db-journal

Filesize
512B

MD5
55697ee94b6a705b497125b057f798b1

SHA1
177df128b11b6f7255479e1ebf658fa035576273

SHA256
446ab8119418bdc6b21285aba50c960e8a91bd4007e9e897d1f2a7af346d23cd

SHA512
3cf7e38c6693fc9d861534cc5920fa8427f559929f886e5930d17c136e2a31970d2bf2fa928e029c8835a3446a9a7c0b8e180ff3d79fabad92ae53d682a90274

Download Submit
/data/data/com.yxxinglin.xzid480/databases/ua.db-journal

Filesize
8KB

MD5
2b92d8ecd068fe3ac5cf2fc087ed4955

SHA1
21098aa50d94ea682587d4897554d691b7cca92b

SHA256
4983d4e370d80c2e96e8fae02cfb8842ac7a717a675aa5663f5d9c182f514f1d

SHA512
eed6afb1d599afda6c04f0085ebbccf968ead162a1691a057644e1936286b412a8a0f74d0168fb8ceba1ca44c1d1c88607b0c82dfd0a6e415db35dd92a7b37c8

Download Submit
/data/data/com.yxxinglin.xzid480/databases/ua.db-journal

Filesize
8KB

MD5
4ef5923bbead15ab7fdd18a7229d01b4

SHA1
0ac471b5b29ee1a0cff346d10a03656e31ea43f5

SHA256
bf8928420e7f807e90e7857bce4489bd200b3640a1fc8ff2467baf8e293f61fb

SHA512
9561957a4d5012d0b45614b958452733318373d7499991dd562584a0c9d57daab2eb558baea70317f9839942b445a969ac07df06eedd66b6769846a6d437844a

Download Submit
/data/data/com.yxxinglin.xzid480/databases/ua.db-journal

Filesize
16KB

MD5
5c6b3072352f0fa508d7edbf45deb7ce

SHA1
5ae2ca6e6b464068d588ca97557fd7b2ddf83a1e

SHA256
226357530d39dd734562efd66c37ed10ef914a0157dbdf65b842b2b3e90e44ad

SHA512
8ece4e72c00b4fd1f125d36437ce9147116a4a3614198d238e267d48dbdc2acd4b3079568d48e42d72ae53158bd992aa269be16d0a3517643a05defd8bd369d9

Download Submit
/data/user/0/com.yxxinglin.xzid480/cache/image_manager_disk_cache/e0da0f87434a39dcbf5d2f30664132f8b9ac9c173b521cd35672c40855e6aed1.0.tmp

Filesize
16KB

MD5
630ebb8fb7a8877a637d554d0948f91f

SHA1
8955988f7cee566fb987c4323720d8a3288c46c7

SHA256
56282d62ba103cb0200c60f011e1a276dd3e0766aa5e77c0093a6e241d5fb04b

SHA512
1a6da2e23ad882df2a7fea48d32bbf8ed63af4fb0ac4e762ab20643495f333390373ffcee966f0678a32a1bf8ac4ee70a51381e25d9b21ea03908c408041ebde

Download Submit
/data/user/0/com.yxxinglin.xzid480/cache/image_manager_disk_cache/f407d8abeba0e1befd5fe1e22c7bc46df412db4f990e9b50fd4f2c21d66cc60b.0.tmp

Filesize
56KB

MD5
d4c33037d78270bd69906f1526c47ca2

SHA1
c5b5cd22f0d4af12e67be34184282ee409619a46

SHA256
676f560b8a732eb9e838d3c0d2ebe6f8c5260ea922919d95e0b3d1e92cdcf08a

SHA512
f323c65255ebc68844d949db4000dc5928137d056073b559f1675fd5082dda6718e8fa6d6fa9af0bc57971933fd0ca66c5c97f5bf3fbe785a33fdfa5e26e4f16

Download Submit
/data/user/0/com.yxxinglin.xzid480/cache/image_manager_disk_cache/f407d8abeba0e1befd5fe1e22c7bc46df412db4f990e9b50fd4f2c21d66cc60b.0.tmp

Filesize
32KB

MD5
cee973e5e66bbdcdb54f61b031101007

SHA1
1853546edaaaf4889a8b798584c42d8fe37d57fa

SHA256
1b449181d4279316dbc600a7a5f99cff9c3c29af823b3b6adcc12f7ada0c8eec

SHA512
f67f994811f55c44e2468e461c15d599924bd476478408c4559c06203c0bb892cc00a40c41cc62a74daade2347683cb10cfbe1d87b3e2f0f00ba51a7af987c55

Download Submit
/data/user/0/com.yxxinglin.xzid480/cache/image_manager_disk_cache/f407d8abeba0e1befd5fe1e22c7bc46df412db4f990e9b50fd4f2c21d66cc60b.0.tmp

Filesize
16KB

MD5
6032a1bbd29e95c1225659b0c53ee964

SHA1
cb12284c54267e03f6c7ab6b55078312798c5f78

SHA256
5865b44f75bf5703f3c094b45f42963bc08e4c54705316ded89ee80e31d50b96

SHA512
dd94fc58327d4927c634014db20a0b5862849829f0ea7c8bff34f0b401651c43325e0d4001cd87d6571f4a8bbc83d06d9cedf760b706267fbc02ef1b2611d3b7

Download Submit
/data/user/0/com.yxxinglin.xzid480/cache/image_manager_disk_cache/journal

Filesize
746B

MD5
0a051e5fb8d2ac621b70ed6af6b2c17f

SHA1
39a9db036e0146a465b26a54b33238f85ac05fee

SHA256
2ad3cf0642cb732b18431ae93f1426ab0864481a316dd73c3c9ab7ad4373a199

SHA512
17eda7d4fc8e45bbfcd9ec0f63caf7829d6c0d3c6e3cc8cfea77f1137037d86901c9c19ac86f3f5c0794da9888a02bc45a335cde1a232cafa5af839b08fc357d

Download Submit
/data/user/0/com.yxxinglin.xzid480/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/user/0/com.yxxinglin.xzid480/databases/RKStorage

Filesize
80KB

MD5
c15c52421a3c2f958187cbc81ebd9db1

SHA1
53993a943721b88214007885357799cb553de136

SHA256
f9a3ab7451b7f1babf4e757a47aedba447c7a0d15a4edfa7ca01d68d99c4a6a6

SHA512
091ea4cf25ee546d8ff9699c105df99f9fe362011616e304bc585ab4be8c578adb06c0960acc66eae7029967eed1745ddd0b696e071357050fc81dace7b287f0

Download Submit
/data/user/0/com.yxxinglin.xzid480/databases/RKStorage-journal

Filesize
512B

MD5
c6eed8737167a4faef4875862c7e6479

SHA1
6fbde04a5816b757723d16b192b5e7feef276484

SHA256
48fc88780ff7ab03d6d500381f18bfdb1917242d4d543c959a284824442586e9

SHA512
8f25fda66bcd1485781be8b276385052d6e6b5683eb6915fa63e7f3c51b38efbfcc91e51e1ac95d4d31a9cb0595ec5758ea3f384e9a8de71347d97c7a67cca17

Download Submit
/data/user/0/com.yxxinglin.xzid480/databases/RKStorage-journal

Filesize
8KB

MD5
6f466c26b6ffd27f8c15acf5c9af7f24

SHA1
92765016acee7d3ac6cd56afe88f2a311d82626b

SHA256
8ca715a94d6ec4c88f110e0de0019ae7175aab2ffdb9256326bd722bc53fa1ae

SHA512
16587a66da0162ea8fb86558459d7c93ceb44b00448f18de961e09dc7b24d3d13d98e29d64e417818a3e9ac7c2f30e90e112149c207639031977d986fb6bb473

Download Submit
/data/user/0/com.yxxinglin.xzid480/databases/RKStorage-journal

Filesize
8KB

MD5
3dde62c33bd116aff142998c528ce103

SHA1
c1835e6216645f41dc6e905b9539219b0f44b473

SHA256
5ca325e11a6a02efa4e162aa2695d9d507cbbbca9d8a726e8a7135b6f30c0c46

SHA512
7064d80addc3909e2c218ab0a0edf5ea583aa4b4ad1714aab690e5e64c38619db558f28836686196b6b07f9369f033161302e9086dde3a68ed500c287d20c128

Download Submit
/data/user/0/com.yxxinglin.xzid480/databases/RKStorage-journal

Filesize
12KB

MD5
bf584e0adfe09b19dc2b81c5f2c86d95

SHA1
c6eebb8dfd2bdf372796478eb582dbf12e8fb5db

SHA256
4f8358197471ae84cc5326d8a83b782026e388d8dbe64ffa1b82eec83a86df2f

SHA512
0ef745e35c5f21780eb2e32e1ce6bdf1df0ce435c83844f04fdbb88d7e39b807d6b0a5345e3afbba6a774cd76fe4ff50984cfcc056da6ca5990b73ad59b846e2

Download Submit
/data/user/0/com.yxxinglin.xzid480/databases/RKStorage-journal

Filesize
12KB

MD5
f16a21a424aa24e6cbd54cddc5681c17

SHA1
246c4baae82edb61d120dfcd27302c9570036ac0

SHA256
f8fd00b214e472e11c9abd9126a5cfb30bfe3a2436f2ed854554409097e86762

SHA512
9936b8ae365cd91b54bb3f362b5feaa486177cc28f13a58f318b51115ab7deca225db0b23024b67623ba4aa35feb4273308cda69249f6a5b95ed203290d72f20

Download Submit
/data/user/0/com.yxxinglin.xzid480/databases/RKStorage-journal

Filesize
76KB

MD5
2676e02ea01a233f55c68277e6898ea6

SHA1
02c2b73abb3c30758a24872d131a311b8a3eede5

SHA256
d3c761ef637a340ec78badd52d24446de1dca2e6d66e00927a98d1d3fa02ea38

SHA512
727f2473e74a45bd2f5ade3b07561d3f5ff772fb8f3b03c6553c8e48c686a6700cc4a98d6c7fcd019b3d853046c5ec0d3768c6add867882a029f15132bbfad39

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/.envelope/a==7.5.3&&1.0.3_1715473744006_envelope.log

Filesize
1KB

MD5
c2d65800ff6b4e8b7613a8258e5e485b

SHA1
8d9763398618a69aeaa1bc363734588cec82f5ed

SHA256
86896fd2243d362b96dde96527ebfbccfa152818ed4e67201de47cb2616b219b

SHA512
8eb7d8035454f9806be05c88d007e4fe74a56c9791730a9118052133fcf9eb899b85d05d383be1613fee78cd552dddedc0ac842e9b355b6df1130675f802a140

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/.envelope/i==1.2.0&&1.0.3_1715473744719_envelope.log

Filesize
2KB

MD5
4374d4253fe6a95b4e57f9cbd65d0aac

SHA1
f4496be8b88a55e5ad79694c003c7fcf510466d5

SHA256
69939a6835adcb61b03365d1acba32fc3735ab7cc13328c1890be41829db6f9e

SHA512
f7fff68fcac81b52b96aa474e6edd8b69232c21591b8fd72f53f81974cca02f3af4ba9b099787ffa28920e36df7a90352d74d9eb170731456eb06b39daebc5ce

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
3e6b67f89f31b793dc886cc8198430d0

SHA1
ffaedd06900dfb4c9db7f1ec883591be08e5fa75

SHA256
2359d5b13ac3bcb9bfbb7c09d5c9304773f9cfe227ab33694bcfca46ff8d3502

SHA512
77b96ef8578f8c486f61d14129d208766b3085afb25234fe19fb00059b73225f97c00031532ee40013ba3e427457ecfb0a46edfa0bd032a266da6cf0acdc76aa

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/exid.dat

Filesize
64B

MD5
4b94987be0a93fb74f2dcb1c1cb47569

SHA1
00628288838d077b6e274ce48691c6dfe9d60082

SHA256
b571b0cf0a2a963ae80b01f077bcfbd04fc4815c06ad8d5903e96c30146ac114

SHA512
67a65b498cb4bcc2b1c62c75969a696bc26b88bf468505b1753b8704561be077bf1ff52dd2a08c077accfa27232d9702912c247023e12ef88e21a5a36c9376ef

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/jpush_stat_history/active_user/nowrap/7b9d3b7d-c42a-48b8-abae-9143c3ab88f7

Filesize
159B

MD5
a7be8f73307f9857d4f7239f022dd5c1

SHA1
8ddf5b419e82bbf614ee411bd233237a28e7fddf

SHA256
226562a6bfcfd2cfe7fa5f2f82bd30dcbe73d365c340c1d32347d981ac311698

SHA512
a2245b9468523c6ce7ef0edea91b47396a575799be113ffa0c9b389fd676581e9eae5e193ee5e161131d474b3f67c5d2a094c1a15acf0bbcfe0620ce84897aea

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/jpush_stat_history_pushcore/normal/nowrap/0a013509-c8fe-4f81-9d75-3954b8e1cbf7

Filesize
187B

MD5
26d43e8e3be7e1f46cc3ec96ec40a78a

SHA1
fc51ee83277376f2001b94aa8ee1e946831b765d

SHA256
b22c29ee080c534b75fb8e047f2966ce1a986dbfa7064a3b1a239a1362329069

SHA512
ba1b592ee368b1eafbdc86a3bd918463e9b1226623ee49ffb891b4fc77620e946f9d9cc81d70c92c5a6060eaefa8429845fd73365dc8b2905ab691dc316db04a

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE1NDczNzQzMjg3

Filesize
1KB

MD5
b2af588707442f93075788027360fb86

SHA1
438d18bd6a41e2e77bcde2b3d8f653d4950399ed

SHA256
a7ada839767bbb80809a138c8ccdd304d2f46d75f05032353fea8771d96474fe

SHA512
a7b1fdd9e6d2b15a511dfd4dcf19140430c3df478195fc7b3a82c8d76cfeac279fee3a08ccce9215934160a8b65680e239f3ee51923f534227ce48f172cb720a

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE1NDczNzc0NDQ1

Filesize
1KB

MD5
23953a4adfabe7a86cee7aa72d42806f

SHA1
4b1e1a275b29083a8bf6189bfb015c947bfe4054

SHA256
5943b4b7bee41c53cb7068b6ff0701006b8016a439ad3be9f263c030837754be

SHA512
0c884335b9abc944e0fa75e8ea9685d5cb1b9995b75ea123c86da7480b00750f39680aeb7fd9f9e0205abb657ec9c10f9be9971ebfa39831aad5f93f86820d00

Download Submit
/data/user/0/com.yxxinglin.xzid480/files/umeng_it.cache

Filesize
350B

MD5
9d93bf860010beba98d70f58dcad7b3b

SHA1
aceb8258c2e58db7f2b9ed8f9a551b4adf0f3832

SHA256
61f4a67ea8024d6655e94bf914fbe456581caaa10cf5a7ec43392447d67092b6

SHA512
a4f1ba40493349813d024aab9875e1875098910c7a71d0134a18a2949bb46d2e81e315829be791de341b5dee0bdd40ea1325a242ee4c504119658fbb411a1d82

Download Submit
/data/user/0/com.yxxinglin.xzid480/lib-main/dso_deps

Filesize
204B

MD5
1d65aa00fad39561c85f8837fbcf9643

SHA1
ae1220abe21b835cbbe51c9a8c29a642159daf68

SHA256
99f5bf834b42dc440f9e098c816e4ca813b0cc845cffe71634ef6cbb5c36d42c

SHA512
e7271aec1dd58727a58393251e51a6d819ec9e9f84741759f0bf9e81c513b0c0a9bd6a836953be819628d5f07408dbe0b1f609e7d99619e09ab82dfffa49eba2

Download Submit
/data/user/0/com.yxxinglin.xzid480/lib-main/dso_manifest

Filesize
5B

MD5
c06857e9ea338f3f3a24bb78f8fbdf6f

SHA1
c5a0a2529d2deb60fec041b4fbd722a2ebe31702

SHA256
957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

SHA512
29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

Download Submit
/data/user/0/com.yxxinglin.xzid480/lib-main/dso_state

Filesize
9B

MD5
bf8feae6664953b133f31827c4d76db7

SHA1
7e05dd62edd704ef6214ec2fbab0fbb32d969193

SHA256
84ba4bc68af8f591dbd78998df67a92a8e11e8923d925992ea8fee9abc6cd615

SHA512
daaea951178d37e447b3737de33ea4e5985823308dd8006db76836957e5fe4757f6fc15499e3cbdc9d113a907cffa0bb0fcf34e85212b335d648233a66a49860

Download Submit
/data/user/0/com.yxxinglin.xzid480/lib-main/dso_state

Filesize
32B

MD5
daea1f14332bccb6028af29f131204a8

SHA1
937fa283ef1ebfe3deeeb6ca7286cb0c506a26c8

SHA256
e6642e3f93f6ef57b19c940eb28d858a699cbd1bbe0601af4cf17611cb86e094

SHA512
136a3314e537a839a0b2973bf1af520116d534e195da9b5edcac2af0473b0625864c3553ae7d56d37a59acde68c27a4af5f2f35f5241150721eda026909c59b9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads