6195fd96c37649ad45891e927eeb550698d0aa1cd59958109bfbf29d6fb26dca

Analysis

max time kernel
170s
max time network
184s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 10:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

670772656ba6f0599f8b55ab6906465a_JaffaCakes118.apk
Size

15.1MB
MD5

670772656ba6f0599f8b55ab6906465a
SHA1

fa1ddc4f94895fef328266ce428e9e7227fcc1ee
SHA256

6195fd96c37649ad45891e927eeb550698d0aa1cd59958109bfbf29d6fb26dca
SHA512

b96d27bd2f38f714811436df1a97b4a0ce3eb57aa20806507aebf8e3a6d559bad98b8df383359f1a70d4b5fa2576b786471ea8472d41d2f96f76d9fcb7d98a5c
SSDEEP

393216:3nJiN6wG3PYRIywrElnKbshM6KXZTrcmlUkR/64CaasJwImES0:XJigrQKywwln6sy6KxrL1QajwzES0

Score

8^/10

collection discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.jiaoyu365:channel
/data/local/su	com.jiaoyu365
/data/local/bin/su	com.jiaoyu365
/data/local/xbin/su	com.jiaoyu365
/system/app/Superuser.apk	com.jiaoyu365
/sbin/su	com.jiaoyu365
/system/bin/su	com.jiaoyu365
/system/xbin/su	com.jiaoyu365

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.jiaoyu365

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.jiaoyu365

Checks known Qemu files. 1 TTPs 6 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

ioc	Process
/system/lib/libc_malloc_debug_qemu.so	com.jiaoyu365:channel
/sys/qemu_trace	com.jiaoyu365:channel
/system/bin/qemu-props	com.jiaoyu365:channel
/system/lib/libc_malloc_debug_qemu.so	com.jiaoyu365
/sys/qemu_trace	com.jiaoyu365
/system/bin/qemu-props	com.jiaoyu365

Checks known Qemu pipes. 1 TTPs 4 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.jiaoyu365
/dev/qemu_pipe	com.jiaoyu365
/dev/socket/qemud	com.jiaoyu365:channel
/dev/qemu_pipe	com.jiaoyu365:channel

Checks memory information 2 TTPs 2 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.jiaoyu365:channel
File opened for read	/proc/meminfo	com.jiaoyu365

Loads dropped Dex/Jar 1 TTPs 9 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.jiaoyu365/.jiagu/classes.dex	4322	com.jiaoyu365
/data/data/com.jiaoyu365/.jiagu/classes.dex!classes2.dex	4322	com.jiaoyu365
/data/data/com.jiaoyu365/.jiagu/tmp.dex	4322	com.jiaoyu365
/data/data/com.jiaoyu365/.jiagu/tmp.dex	4367	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.jiaoyu365/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.jiaoyu365/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.jiaoyu365/.jiagu/tmp.dex	4322	com.jiaoyu365
/data/data/com.jiaoyu365/.jiagu/classes.dex	4680	com.jiaoyu365:channel
/data/data/com.jiaoyu365/.jiagu/classes.dex!classes2.dex	4680	com.jiaoyu365:channel
/data/data/com.jiaoyu365/.jiagu/tmp.dex	4680	com.jiaoyu365:channel
/data/data/com.jiaoyu365/.jiagu/tmp.dex	4680	com.jiaoyu365:channel

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.jiaoyu365
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.jiaoyu365:channel

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.jiaoyu365
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.jiaoyu365:channel

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.jiaoyu365

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.jiaoyu365
Framework service call	android.app.IActivityManager.registerReceiver	com.jiaoyu365:channel

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jiaoyu365
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jiaoyu365:channel

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.jiaoyu365:channel

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.jiaoyu365

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.jiaoyu365
Framework API call	javax.crypto.Cipher.doFinal	com.jiaoyu365:channel

com.jiaoyu365
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4322
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.jiaoyu365/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.jiaoyu365/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4367
- ls /sys/class/thermal
  2⤵
  PID:4485
- ls /
  2⤵
  PID:4513
- sh -c ps
  2⤵
  PID:4805
- ps
  2⤵
  PID:4805

com.jiaoyu365:channel
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4680
- /system/bin/sh -c getprop
  2⤵
  PID:4728
- getprop
  2⤵
  PID:4728

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.jiaoyu365/.jiagu/classes.dex

Filesize
6.4MB

MD5
f9d922368aa3b34aa8f433f2880684e5

SHA1
5f300228ed0e54965c3745afd046ff40b812692b

SHA256
96d39f052bd44e78746d364f935be20b45dc18ff7f95dc234dab3f40afed12ec

SHA512
1850958f0f30953df8c58304dd567083fd842a205291361c570a6a6059200e365ffc8d1084bbd3be9acdb19f71491971ad7fe74dbffabc95f867856ee25c1a01

Download Submit
/data/data/com.jiaoyu365/.jiagu/classes.dex!classes2.dex

Filesize
3.6MB

MD5
f3e528280a8778514f89562d988e5d24

SHA1
109cdb07255d1f5b52fb0313a40fd6fc6f8b9109

SHA256
880f086ca8d2f831f756bde68d58b9b71307180b0c660a13f7caca0c9da05981

SHA512
955f23f68332aff7080ddbd7d0338fedbbacbcdba843a011b4d5501a12162d77f2830f294481629e8048eb464dddf8c9f27948531aaad86a254aa53e11af4d6a

Download Submit
/data/data/com.jiaoyu365/.jiagu/libjiagu.so

Filesize
485KB

MD5
015df5724b50b4fbc6dd0caf7ccb817c

SHA1
980780e98c9958aec97ab7a0de8d28a4c5fd9429

SHA256
183990718a96d742bc6f1bb04c313e04db6dc62d445ecb294a7f15babd3281c6

SHA512
fda8f5343cac8102aade5f1aeac7c5b028ea5d8c92e3d12de92e1ffce30bab47a446f215c9cff7dd1e1bb88980ee0d27b5241e856719fcc1f6a5c25e062e9d40

Download Submit
/data/data/com.jiaoyu365/.jiagu/tmp.dex

Filesize
284B

MD5
efde6fc19d25115e44a1ab89a82a8134

SHA1
96e424ad879a08ed99ae8cdbd7576c17838c67ad

SHA256
48f99c97ce3eb5a766bd4572f7e499780442d35c63c9c1964e6440a5bdd861d6

SHA512
8a5b13601d1e7f81692efa601df030c839aebd4e4e87266a6e331db499de91dcfcc23ea924dd0b0342c74201df8d70947351a9d55071ad514e94044895c50293

Download Submit
/data/data/com.jiaoyu365/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.jiaoyu365/app_crashrecord/1002

Filesize
223B

MD5
b3c491f33bf8c1a9cea1eb3d00a19614

SHA1
a385e0e28b28ae05d6a108f9cb74ff53532682a6

SHA256
1604f85c737a1e90d48ac033f4b03ec7dc25a96f0c52204142ea327ced062bd6

SHA512
2b300d7824868d403d1451392281a67ad83f7b264bd7dfdf94995e52defdeea4713e63b0b25ef0cbc21fa02e3e4cb99f2959a64a2cb46ed503e08b700637d824

Download Submit
/data/data/com.jiaoyu365/app_crashrecord/1004

Filesize
32KB

MD5
1830c05b5a5e8a4a8b21f327356a9924

SHA1
a00fe798f1b0f5597214205de04006287c2477e2

SHA256
2009d495536313d8d48261a949713808123cf41d1937043df9b0bee362210f0a

SHA512
e6506cee84078cbff27904852557a7f463141003eeeba58fb09d7c14373c82efdf1cc5de0292cb4532897e4547457fb7ab450c221511a18b50beff0525f67b8d

Download Submit
/data/data/com.jiaoyu365/app_crashrecord/1004

Filesize
231B

MD5
56028ea8760569c2baed1be53c3437aa

SHA1
7c6d23213e6b3206f8228f776593f91f205bb172

SHA256
5ab42ab9730f38a80acfd1501ecf3052ce1a4c4fa7da4a359b66d20972e6a4c0

SHA512
b5553145c48c5295deae826799c8e2a567bca92e1661788c879a5864e146e6a18feeb8cf66fd40ad1d0e6e15e7c44e7845fe84a8a30327dfc458ef44bf9eaac8

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/02ffe73a253e683eeccd3fc096b5e28ba795b7ae728e16915c51b54d73ae7a8c.0.tmp

Filesize
2KB

MD5
f50e794bb45eaa4c781bad94dd7b1f0b

SHA1
1bb876847ee7c4dfe9d2a6527102129ef230a83e

SHA256
b8d9c703e35d805416321992fd7740ebf754813973482f8591a923ad3b04ea71

SHA512
e231a78f663fb52b15da3f8d0e428a2c019f1d334eff84ada20bee0c1b52275f43f26fa605a89cd659482833ea3e81f767d7afd4ea0754d760e33011134e3b5c

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/183334dca7bb68df7083cdf8435fd9fe5ae553612f4a94e6785925648441f675.0.tmp

Filesize
9KB

MD5
fcf0949d1d125192d798a55559dc522b

SHA1
d2cf9262413a509863ab134cce2f5f919b36236f

SHA256
4e3ab4542cbd5f186c180b3f9647379fa8cd4c8c40260f912aea415d06951eb8

SHA512
0dedf37bcf53b063a9fe95f9cb6ab3bdcd0aa4767ec83f676895def1fa628782b0aa2aa35a8bae8a873c63fcea1b2b94189c46676730989605978c0767131a69

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/1ef5bf2bb58164b7d77da8fba9406a8d05d6b5e57f6ff931772b107f2a850213.0.tmp

Filesize
30KB

MD5
3f6d4313c51c2d8689202b5cc844b1bc

SHA1
037949e6b047d49aeb89505cd464b6577be2f778

SHA256
50b62d1ece0354d0f6ec68f2ee31659ad61b77c86d2be8e4c66c500cd3a222f9

SHA512
7fccbe6ddf6a208a5b55c01c0506ddf7b6b014efd930c9223009ffe18026b4245f726bda5263cbb6e9270b07cd32e197194858a8a1aab3207570c57223d09e5a

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/356862feb2d23e0b8fd4ff9d15926c9a6d15b414a1c01df0943e0246330792f0.0.tmp

Filesize
18KB

MD5
c5a3823b30f3b6399d0816fa8e94fbcb

SHA1
1f546b0723b655a37c96fecd9c463ff6c7d01165

SHA256
e96eb25c0de153621af156097991c6ea7bcda7534f68fa6173497355c0142167

SHA512
2ff458af861fb1e3f3c61999367bceadca2fd0fff6b0c1009f26b0ae78c146b3f4a411f4ac8669421a60bbf701ce9d4ff6bd97653d672ec7ef085400c152c511

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/443c945d2de97699eb21a7b7256678da3b0022518214d0cac8ffaeb24f1cc589.0.tmp

Filesize
21KB

MD5
8f108253179dfdf6b1081ebca5ff10d0

SHA1
bc157cad3559eb6e5dcfc6591f41b197e7298a37

SHA256
2fff6642694d6a0fe8ec09f5f62251072d3757ab528675e83601c63991401bbf

SHA512
156db53e25c04e5669882cb62e7c64a3ea354331a1f8cbf90a0c6a42154961c5fe23b378402c95435f8608c42763c36227985164f2a0f6b32521c1319838cdcc

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/8acdc214949ec5542bc5843aac9dde7bc2e46985a06c8600e2c94bcb1e17524f.0.tmp

Filesize
17KB

MD5
cc283826900b5a918e24bc05df581cd8

SHA1
ae9daf61ea1309d09471c1bb6e64e20b5f7d5b33

SHA256
19ec833eb885f02872ce15e79b5d611408a2565284dcd30153992795cc801155

SHA512
d601a60b47350760b5f2c2b11954a7c828327197fcc6227f23bff5beba60ca56c97e997ccd989ab27de7c73b0c15804b06e8641415f7e77ee62bf2629f1e2da7

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/9e8760623e9146119e7211805c838db92d003dad82bbf272cab8fa5de19da4d7.0.tmp

Filesize
8KB

MD5
242b2945cee9b32e1460fc7ba6e4eb1f

SHA1
87cc5f7bfc61ebdd22207b80ce7fb28d57a7c26c

SHA256
03e8d5260c3c5613ff947164bd8fa5fd835e9ffdc244ed5f2027f1350dd79ddb

SHA512
c48cef25fee636861f95cd43f031b792b64618d5fa19e4f008c527e71983b464489c1d5ac57beda0869bdb12a19ae9f8351e71f931d945dd3b7b3d5113b7bdd4

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/c7ab90dec9233458f984ae6f06239ff59bb5e225fcdbc5059a7c980892beb451.0.tmp

Filesize
2KB

MD5
be2e130ac5f4944399ea520bb95370aa

SHA1
55e7b1e46cc0822b87924102d76d4d969bfb268c

SHA256
c95e360afcd38bb9618fdf6acf3f8d735ab9d52b8e58893dc8d0430fe3692af1

SHA512
c4109c1f6e7b9c38ffcd1a13f79e0e56d3d545ccf5a47052238a3e3d55f1514400dac82fe07bb88a53356593a4941c77e0700b7948ed9801bc46265cc04ae66f

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/eb7d99f8722fccdfb4617bdc79b4349bda352ad9aed7089aa9cb2788ee8ec45e.0.tmp

Filesize
5KB

MD5
d3c4664d7a863f8b940382aa8e434863

SHA1
903faaa22496e2fee85b480a7eb4930d701aa8a8

SHA256
7186b3b6457a3a9da5df4b824cf8cd35659a39c0650629c065ac0a3cbd2da7ff

SHA512
29c6e1eb545d7f7151e35c8dd6f5f5d021ada51f8b050ac782a29c700e2d50b57f1dd4b506b9454a543076a3a5ef60c00ab45aed495a56cddade7aede724e526

Download Submit
/data/data/com.jiaoyu365/cache/image_manager_disk_cache/journal

Filesize
1KB

MD5
be3df78009eb650deab8f46cb9eda0eb

SHA1
08fb66bf90344ce887ab3e8a25193f27b9792f3c

SHA256
b890bff81863c1181e542dd3e8856ed6fba45659abbf2cd4ba04171539702bb8

SHA512
e06a9befb293169c69281f9fae34fc7a2cd213641670e3b213b63abcab64637216793a6a68ba316b9f230f395a4af03009f9452c8853b90f442dbc1151ff3d38

Download Submit
/data/data/com.jiaoyu365/databases/MessageStore.db

Filesize
4KB

MD5
c43bcf3c6c7eb53963898ea6d95b1f87

SHA1
0a2961dd9c4d3dd52d8d54936c693ae0ec3d7171

SHA256
effc5b99eba54cb23ac4c2a63bb167dea416e43dc16fdcc9eb98b4cc09c15ef5

SHA512
3b281de03a1c801cf0e7cddf830e702d288772f5ce9df8f30ec3b554456ad4b5638155c95eac65b2bdb3bc1f7d9cb045018721d081128bfab70387fb4006d7b4

Download Submit
/data/data/com.jiaoyu365/databases/MessageStore.db-journal

Filesize
512B

MD5
d236ec80786e8dbc5fb59752eb32ae79

SHA1
90f67d454bda39be971dd2475ec4b67494f07185

SHA256
988d0a1430f5ee391b5b0d7befce04314b778f8763bcf3cde0547be18e4e4871

SHA512
4577b388e4f4bcf68bbf1a6c258b00aa673b0a2b73dcffacd6d8aeadeb0540c0769cb055488384262e5b905be47fc6920fca3a769f657ccf5992484718fc954a

Download Submit
/data/data/com.jiaoyu365/databases/MessageStore.db-shm

Filesize
32KB

MD5
c4c95bbb6ecd86dd91f13afad896a0f4

SHA1
1d213daecb4810aedc56e1e7dc1802fa92061670

SHA256
2875d159563cb830c07c8367ed48b7a15fe9612f076c402cc2b4d14cfaa01621

SHA512
22cc7923f754f09c23fd81a3cff0b569eb72761172076b897fb2a86e502f7551435f61c7fd253094d4e4518cfd5a7b50ced399831feada9e84ec7b542b986fb2

Download Submit
/data/data/com.jiaoyu365/databases/MessageStore.db-wal

Filesize
48KB

MD5
62787488ce53314c91b62e4e0c3281c3

SHA1
5754a872018fd3a466f957a8e75b5c3c24f575f1

SHA256
d90abe6389ad899822813ad3c86181515a34c06b2bd13a6c355b472804484ee9

SHA512
195b5bafddb5ed99324cef54c0e16662591242d3c0d4580869793c9a06600e82e4fde4439a9a0ceefef29903f84c81fad5be2faa5a0db31ed41678226fe589f5

Download Submit
/data/data/com.jiaoyu365/databases/MsgLogStore.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.jiaoyu365/databases/MsgLogStore.db-journal

Filesize
512B

MD5
3d41b3a9c31eb80c0004129095db42f7

SHA1
2f5c3281bdb86190df56cb9d2801aaeeb677cd12

SHA256
156ab8d0405e573f99ee328f21b30bab8607fa1054e24c6514cffc1862e26401

SHA512
fd61dff6fbcf421e09e1ca9eebb93bd49a7e4aff4d478029fe0b735131677b9670a4a0a2bc8b252ef2ef7dc4ef7e7d66a235f715379723bc4a36d9439e58ff3d

Download Submit
/data/data/com.jiaoyu365/databases/MsgLogStore.db-shm

Filesize
36KB

MD5
486e2bac2b3e9e1cb411d2838a4854bd

SHA1
81dd0a7537f4af319b830ae834908986be85da8b

SHA256
5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

SHA512
c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

Download Submit
/data/data/com.jiaoyu365/databases/MsgLogStore.db-wal

Filesize
68KB

MD5
9fcc31b64bd64bd523669d3b5cdffb89

SHA1
0da0dcf3a34102b4b7fab193150ac9383af352d7

SHA256
4c2bc7d2cb85fa79e1b28ac411c49bf0778410fa8be68539426102ddb6d1330b

SHA512
89697b7b8a8107d0c468c1db010e9d9bd80914eb18566c0ba63e67136a6a15f012aab1f46d5312e56e7da5cbad290956e3d576a4e4b7f0984aa2ef0a62c0d290

Download Submit
/data/data/com.jiaoyu365/databases/accs.db-journal

Filesize
512B

MD5
76dcbd38b1539f9abb66813b4d5a9ed0

SHA1
547d2a00d0aad8948d5b8e742c5bc7a4538a7819

SHA256
9c300be21dff8d72f5a4c26d89af68212ec32048f8a5df44dad87f12d783f38e

SHA512
6bf06c3186be4ad60e320481117b8cd3af69894855bcb28ee50eae5254737ac234a8700c0f2e9a7070ee4412aa849733d03d391991ad3b9454d6f723bfa4a202

Download Submit
/data/data/com.jiaoyu365/databases/accs.db-wal

Filesize
32KB

MD5
c0769d6320f024c112466b1d47c42284

SHA1
285bc111ac6316141122f83437e18ddbdd68ec95

SHA256
e78f0626ce027cb73b67d56a6cf3424de2fcb3eb10ba155caadb8334fb2db731

SHA512
beeb400fe41baec1907b86a161ceba61502ea66f48cf286f9f9c8a14f4ee5aae0690e5a4bf2d672c5eb218e400ff9cd52b8da13ceda93a4dfa3f3b09ad7c8852

Download Submit
/data/data/com.jiaoyu365/databases/bugly_db_

Filesize
4KB

MD5
ea751d0f2d5f46209908c0f2e2ae71a1

SHA1
af47b1f65a1cc51d9db12fa1ed6e42bd88f53784

SHA256
f65880bedc8eeb3d15b2badc97d5c7d6f08ccdd2375e1774d8f6457ac3f652a0

SHA512
0b96d94be8603d37e777cdd13e0a4395a6e820a21d2e1bb2c5452ba5ecd7a2cbf29e213575df1d504b99afbdd21e111b46cebbdfb703e8a90653c107bdf5180c

Download Submit
/data/data/com.jiaoyu365/databases/bugly_db_-journal

Filesize
48KB

MD5
5e45d6c7f16ae537d93be4c045a95f54

SHA1
317f19e3b5c80233103e11549d87c15070026c15

SHA256
30b68d14c8df708f96ce64e52f1b493d22e46d8017d9c18b9fb8a525bbbd1821

SHA512
422b63bc99381a4e83f9456d05ac9339791ae472e6f704f00e2dcf7104733d6338f194a6c1ed9d19c9644f9a5db12b367dcd1e6d1b62bc67e31fe9e7ea0c8a1e

Download Submit
/data/data/com.jiaoyu365/databases/bugly_db_-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.jiaoyu365/databases/bugly_db_-wal

Filesize
76KB

MD5
28fbedb4e937fcd4c1dc44f1bd8eee1d

SHA1
5fac055bba19f1132a6d1741e0ac807ecae5a219

SHA256
fd02c7f4792860c6bac7e2f8302cbd65216394f4195eb417afad41e888b21843

SHA512
6dbf1738c7818f6e83801610a4ea2926cb6a22177c7f7871723ede0446876014af54b052c48a501719bbfe379999a4f3a4aaf0d39694ba9d8e213c9928a57f10

Download Submit
/data/data/com.jiaoyu365/databases/ua.db

Filesize
36KB

MD5
0adda9c85a5e4808f5b1b74c0a8591a5

SHA1
5048107883ab1e345af9cf2e6849ce46e0e612bf

SHA256
1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

SHA512
646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

Download Submit
/data/data/com.jiaoyu365/databases/ua.db

Filesize
24KB

MD5
a6da32f68708c13ae8f9b2fbbeef36c7

SHA1
a1ebf5139f821a787adbd6402a23df4b624ebed2

SHA256
189133c692f3346f3b97f7299a17f4db8b45cd4f43e281547945a3ca1742baec

SHA512
988fd70101c3f9076e57de1f53110394c811002dbae445119ad09f548ffe1019702d5da820dc385ec1c17675d26c2133f30f27ca01186c7844af0e0d34d25e3f

Download Submit
/data/data/com.jiaoyu365/databases/ua.db

Filesize
16KB

MD5
5e5a611bf89ee7bb0183b8c0d483afa8

SHA1
4358420e8242fea3a51926bea71b3c3845922eb4

SHA256
994c4764c8c44bde984ed7fea92cd38e58053cfa378ce24bc6c3d9d3dc748e8b

SHA512
fe3ed383500214d323567ef3ef2edd14371f03226ae59aa2f612a610f9778136cc5d685ea6dafe79a4e982e94bf6b54a898c1670a7741d9c5a5ff7df4911256b

Download Submit
/data/data/com.jiaoyu365/databases/ua.db

Filesize
16KB

MD5
c88dbbe07ddd8b1f96659cc525da8bbf

SHA1
e81d447ae56eb9dfa9d5495f4ca255e5bf89a94b

SHA256
76099ae4e4d0e7163f6d35d62a02c3f690f806318a6a231e4b897c7fba3c0792

SHA512
0c25106729e604f0362bcae6654a4805904508b564c1972a7f1e2d37c85e8ad05f43b342ce3554f9d019acf06e81ca01144f3b11f6d55352399aee3420c9af32

Download Submit
/data/data/com.jiaoyu365/databases/ua.db-journal

Filesize
512B

MD5
d96676e9fd74acb6b6f9c326081f436a

SHA1
6652e8c38c0bcb28b27ede276fe4e0676c5795a8

SHA256
3ed14d6639c2c4afea74e9ccc4df792c42a9a354c4adb9b54ac6f96f77d74806

SHA512
a54d4761592c7bddfdbb325efa7efbe5ac8e185bef244a274e9cb06ac48f940c63a4d2a930971aff2500aa60f9f950ff5bfacfabc8f7bd0286743ed1fe01209a

Download Submit
/data/data/com.jiaoyu365/databases/ua.db-wal

Filesize
48KB

MD5
9722423f7b0b02927928ae079d067308

SHA1
19675228e05ac04c30bb9283231bcdeb7621c5b9

SHA256
d57659b72f5a47ccc43ee2361defc0915cfbba594d68d63ca8c5d6783a0f206e

SHA512
ed1c018a4eb9b9f6ee0fad269825bb70cf52f9654b8cda072be3afad179a699b4f734b52a803008635c71bcb5c7feb43aa5ad702b08b76efe1d323065315a74e

Download Submit
/data/data/com.jiaoyu365/databases/ua.db-wal

Filesize
12KB

MD5
a0ed9e04043726c9569bc1be4ea4f065

SHA1
18c8fae5507b4cc396e9bd6f0f21ea0a2a848181

SHA256
9a18d73cdbcb8a1f2752ca356783c0004785ea0fd935a2ac03aeaab38727eebc

SHA512
95f72dd9a668743d3c1fc15a84cdd48e5619ae26bc4845ce2b17f650446b85ecbe299d1f446dfd4e6d3ad5f75ea41d6877b6a801062e9450c0b06004492c8f94

Download Submit
/data/data/com.jiaoyu365/databases/ua.db-wal

Filesize
4KB

MD5
f0e878ff6627426fdb51f7993549cb2f

SHA1
9906b71b7e9fba52ee94217f8dab73be46287d4e

SHA256
a16ba1add6cfb9a389de7a3e52b7306a5c131b6b5527d0ef832e5438db3e49d1

SHA512
ee88da6386765b469899b5d44cabc682a8cb514c11c806dffba2a1fc4278d45b33f040b5ef1722a084ef2ce602edc3b0799a04174c875cb3fe8df45b5a63ed46

Download Submit
/data/data/com.jiaoyu365/databases/ua.db-wal

Filesize
4KB

MD5
052f59249af2d57aa4ce8a01f7abaabc

SHA1
8c679518bbb76206a0c2ac898141a66780e3e49f

SHA256
1b5cf96286ba979513b30b9805ce9c671f8c0651cbd70a7c812ebe04057eefe5

SHA512
d5f994ba96af05746dbefbf41d9ec9f32606ebf36c6b55de6efeb8d233021a97b604e313e9eda9db0fdd741c569b0fd45bf6d5472049ee57ede1a9fbc7194f18

Download Submit
/data/data/com.jiaoyu365/files/.envelope/a==7.5.0&&3.3.0_1716375614727_envelope.log

Filesize
1KB

MD5
2153897ebc3f498c451779eeea0f936f

SHA1
82178693c10d6441e0c81302adea259305384743

SHA256
2b61b9ba33f9012326cea927838ac5967b888ab284fac06bdce13a34d4079d2e

SHA512
1f341d2deeacd588c10a6d2642319e1e6f0de6717d525f496e35c5f854bb8b1571a7f7c95dda34892d8302131ddc512c151c9bb0947af54e69240ab6e351936a

Download Submit
/data/data/com.jiaoyu365/files/.envelope/i==1.2.0&&3.3.0_1716375612689_envelope.log

Filesize
2KB

MD5
6b440d199ce36a66eddbcddf3dfadcc3

SHA1
2d7a1b6f09ee3f369180f5319b7e5f43012ff61e

SHA256
77b34da5052e60553bcaca443830ab691efc7da9682f2ed48dc851b12c4ab9f4

SHA512
9081865fa36ab99463c435e83bda09a45859542f3e2d5ddb17049660ba3393548122bb3ba0adb5d80de644953f2d161b30adc2e05b6e4a844e08dd5f042628fc

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.ac

Filesize
40B

MD5
137ecd94ab1901c1f90547ec84dcef61

SHA1
1c3619d4185fe6842ef45e2831630869d66f6f13

SHA256
fa43963fcb5a831b115468859aa6f3eda0d6604b63b88307f354fc3158338e27

SHA512
5019bceb66615509499a10b8067f2994211f8ee8ed231376e79cd90611d922f4915c6e8794685f7947b7febcdaa3ec32aa14cb7af9f2e1bdcb6224d7588781cf

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.ac

Filesize
40B

MD5
15eec04c12da873c56c802e8ba7d625a

SHA1
0741be62fe6ae78b86aa7c97e3aac69583922a03

SHA256
48c6757a91c26a0ee176e8e87ee41c63272364e7146e700adf6818833366241e

SHA512
57a8dd43ff068acfa0fc6b465a4a300eda02e26aec269f63b4e1872719bbbc88f207b5563fd1392b190ee8c2d5e9aa0347e01436a2c6b82959498d4c11248e46

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.di

Filesize
340B

MD5
8c0208fb061a128d147988e2a9da0622

SHA1
aee134ae0981434d230d973f72a9288db8098a30

SHA256
9fbfac2744ed876a952aca9929c4663484c244b3b82d2f73d5fbffd3a979b849

SHA512
7faf38745ff428eee5ebdb27a3500ab52081d577cf57a41759cd5715f9ec9784056d93ad516d1697a3e111e77503208f6d7f2aadf7201d770a58ca7fe4444e31

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.di

Filesize
340B

MD5
c206a41bb4d89cff534940c10909daa9

SHA1
415c3cf75a08692a6f5b6116e623f2a9ceedc3a9

SHA256
9b1ce377bee64580f27c3efab99e727650ca0be959ee1873b4b90bbab1f8042d

SHA512
861220148e9338d5ab13fd68c462657cc9d60a953bb768479fbeb6c8519e1b2e4183a632f9f615564d7bdbee79b39e8cf3f01d073913bacf0fc7ee0c680ae4b6

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.ic

Filesize
58B

MD5
e127796b91618f7a49ebc98ef8962031

SHA1
44e6e79dbe3d0d189746eaf17f80db4203842a97

SHA256
f01ec2ca22f209991c3c560fbb0eb3606dcfc0c1862fe4459a538f0f5be76c45

SHA512
b228c8337ed932c223237bb6f65f967ff0c1efd52f4de5f9625d2af45118e8f003d8cf43df9c73ee19b26720f54a02773cd39506dc4c28deb63fc495ce6e83fa

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.li

Filesize
100B

MD5
c0da8b07ba7d6a89671c00cb41d867fc

SHA1
71af412be4d55a988f2ee05712d9ba536a965ceb

SHA256
7e5ad933f48016e5b9f2242f59916cd9d39c93b95f50c2178f5c824876d41104

SHA512
440db6a4064b623916befaf7c89e25f7f680ab81ba6a4c79e8a33c725c7b525b57c58e479302c98e9c70463d2e48ae387ef847ff6cd7cc1595d8dac1f49b46d9

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.rd

Filesize
84KB

MD5
f6fef0677c6ee35bf86c7b134b2ed131

SHA1
899d0f683a7c53c2a51f87c5f2533eab4b4c6cb4

SHA256
96595385b8fdfeab58a7db03b1a8037f07e5590246573bc24d3dfda18203fbc9

SHA512
688082b4f80af639692b316f2276f460eaa983dd3dcc87d9cf1691ed4f75536b0c25f9a20b7d260cd88acf8f03ae272bbd9352c19a97850f2ba52318132df232

Download Submit
/data/data/com.jiaoyu365/files/.jglogs/.jg.ri

Filesize
314B

MD5
f971b5f54b5df365d6e047841c0fc761

SHA1
6b397d4f25a3d67987e2d0c25fb002fd58791ac1

SHA256
26c3f75aa44916b1db55c526b17f17a320b0390ecd1f7a052dad8d92dd65928f

SHA512
b55ab81ab27e5892621d14221c41ac2a7c26e8a95b27c237672d2432c9d4b122e1bcf0fce6c5f54f5195dac099f549c4b886a0131ad6fa85a4b3bfdc63304df2

Download Submit
/data/data/com.jiaoyu365/files/.jiagu.lock

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.jiaoyu365/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
f2569b7d8fbb856939d9711062e9c5b2

SHA1
9452cbc79bbdbced091b94a971bd46f3118b5857

SHA256
5940194646b70a66e549939d738e2efb2e261790c3ed734c79e6d8997b7042f3

SHA512
ed5faf83c114835ae92ea570ac5f1a3b8e4dbfc8ecbb59fd1b2365550afb4a7e897850007a0dfe66e0e63b0f59d679dadc6d62d6621b9287e6356c685327a192

Download Submit
/data/data/com.jiaoyu365/files/exid.dat

Filesize
60B

MD5
4212fd25c25c5c639d172d5618839f9e

SHA1
22e25be8e3c876dc26b90e82812186a5075e209a

SHA256
35c1f9e93940d11cf14d2b0354c612a733f2e31557814f5b5d31a04bd9b455a8

SHA512
95bedfb2227bd73505b8b144cc3e406a45b7f2ba9bb2a8456bbfb5d0ce75629117ae0d398e20dc82c80ce0e079af1c31b59a66951059f0cab7dc864333a7ceb6

Download Submit
/data/data/com.jiaoyu365/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2Mzc1NjA4MDY2

Filesize
1KB

MD5
75983bad8ae1b4015962a2b01812c91c

SHA1
e11329bacf9ac336df97dfac4e565c88c4943439

SHA256
62fcb8e7d79226f6ec1927cf9a3a8323aaf7ef797366a73b6fdd097f1be769f5

SHA512
27d0d453d042bf00c78739346ab4679109d2bd2fb153e10d11d4bb623721c51bed0fe61b4fe23110e988c8728610ae77814e996e0b1db3700a6f68614b9b8c39

Download Submit
/data/data/com.jiaoyu365/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2Mzc1NjM4MzI5

Filesize
1KB

MD5
961951216ceaa6d9ee8175a4a2cc520a

SHA1
dd69401f7a91e546ffb6189286c926fa15217bfe

SHA256
281f8340f748748f8def954b78d2c7b5a2832dede4afc31e9026aa50505392f6

SHA512
4329f098670b22d0f8aac756234d9d1b8f1ddb19168d991fe6d2213eda538847bc49fed0fcd4013aaef59b82fa56647c3059d6ad7bb2397bb5e491edf822ac67

Download Submit
/data/data/com.jiaoyu365/files/umeng_it.cache

Filesize
498B

MD5
6dba96456762e855b5cd7803ee05bec8

SHA1
bcb01ba7c3ba23274bfdfd8d36bc2948f40630d6

SHA256
ac2f511ee3689195ec35721ddb076ee277538cd8378e15c487990bd731b4acd9

SHA512
a2b7c8592483dc9275ac1e4cb541bfa896320f099c5bedc5fe741b5d81709583ba4771114cf675478bb0da57aa14b4212187c9427e3db662623dcbb2b98a3fd7

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
b41c855e11d8782a3d81d13a86ea970c

SHA1
8abffc084f235dc9f7fe53e6535c68f48a21f456

SHA256
2bc43ce71717ff1a9046f41285109e4052673eb16f8c18bf472d223b17f94912

SHA512
0f2e06a34726861cf13d82e9d9eaf6fcfa88887c2d4e51bbed48d651e4321c7bd86fcbd1c7c28096d1c2b53f8c21b8ac928ca43b78cb00bf6ae9e002d9bf2728

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
677d078b3c9e1845797c8a408ff8fd62

SHA1
5cd5996853246feb853b9c65392aedd7a98f3850

SHA256
736ed6265d36f65d075431c890b1e9b8d1d9cdadb77d7bf1611e711413a6e4a3

SHA512
39cef0179c12e82bd3054b88ceeef858dc0eb7a470366c670ef07421907aa8b423dc6a46d29d4b9a9e515c46359349cc8229c3b4893bd6a0523b10c02f8fd9e2

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
213B

MD5
c5917fee0e197691433cc780f3c86e46

SHA1
dbbfef4aac270491c155e9f639627ece9fdbda5d

SHA256
3ea8f6e0d7e240594b03433290a6635efd4cf11959147b1f790d121cac537c00

SHA512
b8dc6de1126b18bef37db53cb4c4c0a1f10a746cbaf5b3c705047ace73d4523d04678cf69ce55ab3958cabad3301dd4d7d6c5957db8fe555453871b68ed8f40b

Download Submit
/storage/emulated/0/360/.iddata

Filesize
167B

MD5
2c16f8f4d6b5cd063a0f57fc4884606c

SHA1
46409e743fe95075095a184cabd4c18927d74bbc

SHA256
236b5da17e93fb7f9de42f4d6e8d5369f55e535af3741c944c1d1ff10e5ea2dd

SHA512
3a22d786a25f7ffa864cc5ac68c6b13b71fee226aa1aa6c6ec4530aecea4d3a0f67b47a37513e888a4aa3147fc3f531375fcc1ff54e07a7d615bb8f8af2d6aa4

Download Submit
/storage/emulated/0/Android/data/com.jiaoyu365/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads