f329fb291f7cbc5e14af91c7667f4bb44207df4f4755a7345e0603cb8374e08f

Analysis

max time kernel
178s
max time network
184s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
24/05/2024, 08:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6ddc07166e1a11f061fdf35ea7ea47a3_JaffaCakes118.apk
Size 7.5MB
Sample240524-j7c7waba45
SHA256 f329fb291f7cbc5e14af91c7667f4bb44207df4f4755a7345e0603cb8374e08f
MD5 6ddc07166e1a11f061fdf35ea7ea47a3
SHA1 cca498b0007f795e62340180df134963523e2df3
SHA512 358cd858e21efb8407cba49a62b6b43a7edd63b0eda260eee6aec89c4e58c44673f7eb74ab1db286b2c819e8dc612fe05d9e6e914fa52aed47e34ec050800d83
SSDEEP 196608:uyz6eWtLXVI3zEytrS4FPbmHWJBCiWg9a7PjNkz:uy+eWFIjEeBFPbFbCiI7LN+
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.bbs.yg02

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.bbs.yg02

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.bbs.yg02/[email protected]	5118	com.bbs.yg02
/data/user/0/com.bbs.yg02/[email protected]!classes2.dex	5118	com.bbs.yg02
/data/user/0/com.bbs.yg02/[email protected]	5250	com.bbs.yg02:pushcore
/data/user/0/com.bbs.yg02/[email protected]!classes2.dex	5250	com.bbs.yg02:pushcore
/data/user/0/com.bbs.yg02/[email protected]	5317	com.bbs.yg02:filedownloader
/data/user/0/com.bbs.yg02/[email protected]!classes2.dex	5317	com.bbs.yg02:filedownloader

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.bbs.yg02

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bbs.yg02
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bbs.yg02:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bbs.yg02:filedownloader

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.bbs.yg02

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.bbs.yg02

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.bbs.yg02:pushcore
Framework service call	android.app.IActivityManager.registerReceiver	com.bbs.yg02:filedownloader
Framework service call	android.app.IActivityManager.registerReceiver	com.bbs.yg02

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bbs.yg02
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bbs.yg02:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bbs.yg02:filedownloader

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 4 IoCs

flow	ioc
32	alog.umeng.com
72	s.appjiagu.com
78	d.appjiagu.com
91	b.appjiagu.com

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.bbs.yg02

com.bbs.yg02
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5118

com.bbs.yg02:pushcore
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5250

com.bbs.yg02:filedownloader
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5317

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

libjiagu.so

Path /data/data/com.bbs.yg02/.jiagu/libjiagu.so
Size 482KB
SHA256 8455632be7bacb221468c4daab2f9b5ee33739f08b22244ff81a36a02bec36cc
MD5 f380717bd1e3916c7b697fab8d46c5d8
SHA1 04f51f0d16097214e38be517d93be44cb0603a88
SHA512 b78fe11f77d2c0ec5b36850e8cc3b955661b31641405233c8842b91205e44dc16a30d7fc1ef18dde1b066c1b98959ae9c18be5472413d2b398b7ab6a6b52c07e
SSDEEP 12288:1U00fCZt8ej46h8oQaik5P5ci1tUDTDakfmpjcjkDGaT:1UzfwJP8oQgRZ1S/avfC
MD5 SHA1 SHA512 SSDEEP

Submit Download

debug.conf

Path /data/data/com.bbs.yg02/app_tbs/core_private/debug.conf
Size 101B
SHA256 a6fbbd3054cfb4c6f2819e70167573fd5be8cb911e3b04139305d645a3a5173c
MD5 e54000c75c1b3bd61f2cdcc176870634
SHA1 dd2cf603e630a209cbd4d01492555551d513fe9f
SHA512 bfd1bc16b130284532db7cd17548e57487e096d5382932008f4aae36edeade987cc15c85c7be0144301aa15b7d9cad76179179475c9531b5dcc9b9130a0740b5
MD5 SHA1 SHA512

Submit Download

h13Tazv_aHMQUASUJwqx0swtLFU.8464474692458026136.tmp

Path /data/data/com.bbs.yg02/cache/image_cache/v2.ols100.1/98/h13Tazv_aHMQUASUJwqx0swtLFU.8464474692458026136.tmp
Size 107KB
SHA256 aa60efd0d29af13dfd257ee1e3548a721231c6c53339f9bbdd23e73def6fad0a
MD5 fb67a3872e9b1f327e499dbb1f198a7c
SHA1 d3280c96e865207c80a4e66f4749a34f40ef3e40
SHA512 eea1b3eb40c1d82334e9cf8bcdfad72538d4afbda028b2b17d4b2b9bf3c7cca185963d82d7503d7b15b99220f7871d424d31acacfd9d673f5211b9e73d84556b
SSDEEP 3072:bGkDXOOb5W5ZMVnqpO89CD8jEyAFx1jnMBumd/rHJtGcoQnb:qHOZH7YEyAFx1bMJd/rJUcoQb
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.bbs.yg02/databases/cc/cc.db
Size 36KB
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
SSDEEP 12:TL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLd7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.bbs.yg02/databases/cc/cc.db
Size 36KB
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
SSDEEP 12:TLgRP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLt7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.bbs.yg02/databases/cc/cc.db-journal
Size 512B
SHA256 18997495d0425126fef6bcfc8769ba64fb0b2b03b8087eb690771e3dc13c117c
MD5 9ef3148033d55661d77a15cb672b5f4c
SHA1 f0dabc517f7d02cfbd323ac8d9d7ccdc2dbb0cbf
SHA512 ef9e467e0ce32dcfb857a464f9e1e9f698109b8fc37ad91219721a6ac99427d96cc6af298dc53c761bf0677e31b9ca9fb61c573a1b4e6d21e0e8c65fad5623bb
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.bbs.yg02/databases/cc/cc.db-journal
Size 8KB
SHA256 875afd79f56752b1406afb1eaf38845becb08842b2b889d28bfe77f8c4daa8d4
MD5 90b3212dc312b92cff86d4e7b674bf45
SHA1 a2aa46c5928a467f01adbaddc624ece4560b6833
SHA512 9ba5ed071550a701b5e07724452422940d9360211afb04dd3a4b11f3e4e55fd2cd4c3d0f439ff2ef9425a2745968879f19f1a228a2f8c2c9869eba78406d1c7f
SSDEEP 6:7+/l928Fn18N/pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK7:7+thAPqLiuWdwRmBEyPbw
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.bbs.yg02/databases/cc/cc.db-journal
Size 8KB
SHA256 fb0b76646aa51f332ece77b8572463ef5af8e7614153b6865263c54faff12300
MD5 fe47e591ca68a66edae918a9104eb422
SHA1 09e750dd2b63866744b9e5dd4ed531fe080072c9
SHA512 87a51e9a65ee42a1fdb2bc49f35d5870c91a40dca3dcc3b367e130576d5431e1b277bec9a1a266e0e89da04b5b96398d6af041ce835f01a043b9b533a8fcdd5c
SSDEEP 6:7+/l9a4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKtM/W:7+tcwqLJdTRmBEyPbBW
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.bbs.yg02/databases/cc/cc.db-journal
Size 8KB
SHA256 801ab20185ed286955f77608ca36a1cf3ac5b57840fa3f16a12d4bb1309c348f
MD5 d7e0ea6693275283760477a1dcc6f23d
SHA1 0061275886aa0171ec6edefb4e11c34a7aa72892
SHA512 02cbb1d25edb8b7b23e7c489ad3b687b6bf6784a5d3453eea120aa21e7deb9141f2392909016e181a7a63b0be168816f8b60860a84f9672c4543365f2125f545
SSDEEP 12:7+t/FK1qL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyn:7+tdwqLd7sL7yot3BVrHotGGSj
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.bbs.yg02/databases/cc/cc.db-journal
Size 8KB
SHA256 8771169ae51d3b44801288083b369d9e0e234540b02eded6bf33d67b34e3e865
MD5 e6861f5bbcc1092daa496b0738197444
SHA1 44d838370ee8d34dd97476dcf5fafc8a90cc70bb
SHA512 2dc390e888415fbbeafb57a5ae108f052ef359aa315567d9d1d77fb4d753af88fd4f16c3db09045c64f0b0f774b43118f176d122b2df50496295aab6b2c34862
SSDEEP 12:7+tRQkfqL+/E6P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBP:7+tRQcqLpr7sL7yot3BVrHotGGSXJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.bbs.yg02/databases/cc/cc.db-journal
Size 12KB
SHA256 4fc6cca35ed7716563572330733e71d1c9cedfb54bcc832e9aaa51040468a2f5
MD5 369f57862f25617f01f04ab6a5519258
SHA1 7f43137fd1d6eb4fd6d13001d3256241b5a4ae95
SHA512 595caefe1254d14336f21f32b91c273880dee113fc895864d8655d78c27b06262bd538e0276339eebcff4d345ed42449bbb95874e3060616e6fae3af4c9d9471
SSDEEP 12:7+tdWmctuutnqLWEOVP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtX:7+t4NbRqLEe7sL7yot3BVrHotGGSq
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_weixing

Path /data/data/com.bbs.yg02/databases/db_weixing
Size 12KB
SHA256 0a9630e5a9f712ba8b0816ce443553288537e29ad92cf071f9c713496854ab6d
MD5 7741319185f1960f6fd9fdc35b37082f
SHA1 157a0d319cd66e2d4f6828ef466ebf0fdb382976
SHA512 7576e28231ac1fc4f7d1e8e3d5a1573bdfc1fc50986935a6e0464ff2cff23d1c39248d0e77c918fa5734ca15278aa75ea3d8bfe089506e3c65079c75d012a6b3
SSDEEP 6:l9bNFlqhKtwlOERX4PBX4ogLugMBX4suuKTqiOw2:TLmVRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_weixing-journal

Path /data/data/com.bbs.yg02/databases/db_weixing-journal
Size 512B
SHA256 c742865262402313bf9d544e63450ba0e00daa4a2253a9d42f8eebf7159364ae
MD5 73c5a56c07f7efd9c4ff6fd2a749999d
SHA1 a9e66c558f6915645ced2169d44bf1120599b2a5
SHA512 b21d1d3aeb4eaf4481c330050e4d92437a289168cdd7bef356389655ca034ae2db9ff475f0d9b81f59b849a8b165e41fe28e6f4152ff3eeb70cdf498b413c5bf
MD5 SHA1 SHA512

Submit Download

db_weixing-journal

Path /data/data/com.bbs.yg02/databases/db_weixing-journal
Size 8KB
SHA256 cf9bbf1e121ce04a2acb11a711bf856d3728a6dc69ea35ea855389b0b3048bfa
MD5 edc00b0722b0647e250233e5ad5f55b2
SHA1 39d77bb5f983ada6673859a4498f0d657cb80f32
SHA512 af11e2391b18ecf653c19886365629e34122aac3093629a3a72bed55e11fb8c9e62d9f9821f4574745140c399f79996742d0f947624c0f38102dd6aa7b9fa626
SSDEEP 6:7+/l9Tyn1mMFg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKq:7+theqLiuWdwRmBEyPbd
MD5 SHA1 SHA512 SSDEEP

Submit Download

db_weixing-journal

Path /data/data/com.bbs.yg02/databases/db_weixing-journal
Size 4KB
SHA256 d1cb6c0ebf5d6db8b58085fea3d50581a280e2f5c4da420265d01edcd610e982
MD5 f95c6864c4d2786d942ac0a89d2897eb
SHA1 f25b409c1ef84faeb233626e774ac6eb8984e55c
SHA512 9b6064bd0323734a7b93c476491339b8b2a9652a3a5d05b9040b0a606a06d73eef37e8a50277f942b48762d0c5575c7bada610ba25869c08e0fa39ad2f80aa47
SSDEEP 6:7+/lLpGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKi58:7+tgqLJdTRmBEyPbT58
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.bbs.yg02/databases/ua.db
Size 32KB
SHA256 6816412c6245ee7bfae83651c49e18965a96ddd23930b9c1235791137d43d58f
MD5 173a7e74566611ce6825510830ca2bca
SHA1 27f956275e2246235564c6f17d45deea80a8f55c
SHA512 c8f67fa1c8edb58cc810a33cf3afc0ab91052bf126fb3c0d9085da2805fdb81571bf8c7205ac1a6711015ab372b484124b7489f164658622833b8b88fdb096a8
SSDEEP 12:TLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbV/OwQo+CgaPp4Razt0PP:TL6K4PPvP/BlmqygGSZQodfp4CuP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.bbs.yg02/databases/ua.db
Size 16KB
SHA256 c2ea5fe08f02cbf1d3a998bf7206a6610f545b768cfea6461a1277ba262a4af3
MD5 e92f0a84c73a4c041856d79a6016f0b3
SHA1 d5e1bca613e9cf16c520e3cc55022991a400d9dc
SHA512 b51deceb35332c5590efefca7c5c2fc14c2e3044588f9f90e97e542a89c4064bd8e4d1ca9d654e6e2d471f1c9081f4e6daafcd097fbbedf3d9b293553f046bf5
SSDEEP 12:TLWXOJuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/j71gaTvo7K25vfAJjHx:TL/T4PPvP/BlmqygGSP/n1TZoAHR
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.bbs.yg02/databases/ua.db
Size 16KB
SHA256 dc50d6a398e125a7e7944a955753abbe9e49980e04acfd136724488d8bdea4fb
MD5 50c09d319e3f8f3c07e0c1213af9cc54
SHA1 06ab61e03e68b0b1bddc43c52404bf6c4a5da9a5
SHA512 9edda7186547a261a69c28253d24faa07a4de7ad71200ac14c3ad15da2efd0430005a34403b58a97bacef26552e09e984e7cfa4e76184510f814665479b53c62
SSDEEP 12:TLzNuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/bXXgaTvo7K25vfAJjHM7e:TLr4PPvP/BlmqygGSP/bnTZoAHLBII
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.bbs.yg02/databases/ua.db
Size 16KB
SHA256 74280457b3fea208a33d6cc55e8845aa4855fb7e9a3c09976304db468d07e4ab
MD5 e89a1eb443f711f72394d7ed40562a19
SHA1 d25af6a0ea5c79b4e38c2ffff2b8ba89df00ddf5
SHA512 d38d548bfc87c772608b50aec8ea73f74bebb2f29e9b4bad9412efa0bcadd09c544d9bf13a94a7afb0602e38ae12a1502cc4d219c0046f17ea42642fa937a3dc
SSDEEP 24:TLb4PPvP/BlmqygGSP/aTZoA7Iz3FNyII:T8vf8SP/GkFdI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.bbs.yg02/databases/ua.db
Size 32KB
SHA256 06398f26a4313f8cb4dbd91ce8a367f9fd3635a4cd380716c96ae90d9b3a3851
MD5 5d13d0408c4cc85b51c979bf1f75f9a8
SHA1 36ad596aab0a08ff287fad1e24365e69642caa65
SHA512 696f55c4eaf1b402699382a411cc571aa56e01a3b915f3a68fac0af6d59e667e49107234b450d376ca7da8bce6a8c5c431e0381fc719e075bea122bafc678b5c
SSDEEP 24:TL6i4PPvP/BlmqygGSP/FrudTZoA7Iz3FNyIyFqQ:T2Hvf8SP/FrukFd
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.bbs.yg02/databases/ua.db
Size 16KB
SHA256 66f8928fad56159abd620802e350e3172525a5669dde0554047ddcd797e4150d
MD5 d3e2b92c11c1fc7378b51e09375b7ebd
SHA1 bf5495b0b74fb2aa8caced0f5afe73ea314b5531
SHA512 ff29f09709da0161faa8b52fa50b1482a1329da47e372b5e215af889cdc8f1dcb1d96a97c8c0b74d7159504105108e223bea243f3b3a295aa66cab16eb18ee38
SSDEEP 24:TL0Y4PPvP/BlmqygGSP/PTZoA7Iz3MqCBn1IyAssPz/:T8vf8SP/bk+BnubPT
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.bbs.yg02/databases/ua.db-journal
Size 512B
SHA256 afe8aae082ff5ec691457bee1acf22d25077f7f302009932292198a25cfdd43d
MD5 d63fb84c71879e08f6029a75bad3fd62
SHA1 867ab18b994ab2b80750b729a6aa78577a6c4777
SHA512 e78ccf703421892de806f05100258332c65cee83cbcbc715d9c1b6a1107eb5f9e4241c74e06ef6134a7e08b5cf1771d89cc85c032e8602410b02b75f57542674
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.bbs.yg02/databases/ua.db-journal
Size 8KB
SHA256 b205eb67620064b2d7fd3c4e021fa203341f445d597920da51ca4849841031ea
MD5 29430c56a2f81ec52b539af0d4da83da
SHA1 1e30ce9b8e3576cd950febd7d19c1db8227fd8e4
SHA512 94b2899641c3a752122dc1cbd15fc20c65e5ed1473de08b9fa9fa748973b5fda5258fc04851cdcb6fe560f38143d0f20a8fe812cb7f9ee286f14abbd53b0a4eb
SSDEEP 6:7+/l9Gun1yg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKT:7+tctqLiuWdwRmBEyPbs
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.bbs.yg02/databases/ua.db-journal
Size 8KB
SHA256 93a0790932fab5912204419acd26ab0a87dba77bac95fd1a4140334b55293224
MD5 16215926f24a455a85b874ce40b746f2
SHA1 a32d8e5f3aa25868e55ef8ce1ea1b7b2d7b9827f
SHA512 33fdeb1fdf0105b021bd974408171bfcad62f5eba7177f9848a79ede9ced08c9a23b84d588679e85ea78264d38726b87612183843ffef1edd6939be9bfbac265
SSDEEP 6:7+/l9THFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6l//8b:7+txHBqLJdTRmBEyPb1X8b
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.bbs.yg02/databases/ua.db-journal
Size 16KB
SHA256 561afa39cf2ebe67f11dc5f6a483a880de1495be29fffcfb93eb40d8b0a16e2e
MD5 41769a7af5f7461bc9ac3dc07b9b91b9
SHA1 1a800c8796ee8fa8e7a50428d67491c2fe5585ca
SHA512 445319bb9cc12bdbc6736bfc80e7284edef1c7ac2fb14726b32665447b0e10b8429d5e5a71054204b614bb53666a415d2e2b2de74a2ab07a5192a846ea4a678f
SSDEEP 12:7+t7MYT+qLseuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbU:7+tAYiqLb4PPvP/BlmqygGSU
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.bbs.yg02/databases/ua.db-journal
Size 8KB
SHA256 9ff72ed82332d6272bf45e4381e5c39493f063dfe8dc893864c753aa87d5c5ea
MD5 876b470bc195f6355d15f12112ca998d
SHA1 daeedcb4237e12551327cd16b52d366273a269c0
SHA512 32732b6e9043b107626e3c4c6fbec9023d94655bf7841e977b493798a191d8a7c2e4156c534fc7b65f06f708ba37b0036a0163d86f1c19b59669d6e3c00b927e
SSDEEP 12:7+tOo+CgaPWqLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbQ:7+tOodfWqL6K4PPvP/BlmqygGSQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.bbs.yg02/databases/ua.db-journal
Size 12KB
SHA256 590318eb5b29bd3736a3da6bbfdbcb9a4b17c3ddf5478441ac0b8ab19b16c76e
MD5 3f68e7b2bfc7e07d05b785c227701581
SHA1 5047640149ee6a4ab2d539ca9caa936d1f7dbb91
SHA512 5b3dd629e06ae3d125a33c36f17150396c710f72a146fcacc98c0cfa4e6a9cfee691342bd3dc7c7f179d8455429454a8751daa7e2e55eeb00cc3477a22e15971
SSDEEP 24:7+tM6ijTZoA7Iz3MqCBn1IyF/qLr4PPvP/BlmqygGSuRqLL4PPvP/BlmqygGS6:7MBifk+Bnueqsvf8SgqMvf8S6
MD5 SHA1 SHA512 SSDEEP

Submit Download

.imprint

Path /data/data/com.bbs.yg02/files/.imprint
Size 934B
SHA256 7b61ba2e675fc788f9f792148810b346c24a21eb8ea9eee5346717bf33d941ac
MD5 65cafdd543292a2803882a79dc7e3e08
SHA1 d300e01ae4f79d1f2d4f92113c93504e3a11acbc
SHA512 6bd14e893c05fccafa420cac89f18c79feafdd123a2991171f82489380f9d14b5d4721f66048dbdf519d019d2dedd907a9c1a3fe96b908e0eacc28ec6740ecf3
MD5 SHA1 SHA512

Submit Download

.jg.ac

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.ac
Size 40B
SHA256 e0a60c3839d7ab31480e9f224ecea657fd7632961a6dd170f555102c4ffd4264
MD5 faa5fd319923aa60f60b7af0039f3a03
SHA1 468018cea65b8a3b7cb110e11e0c32e37ad45d55
SHA512 5f8d5f121746654e9f5f2d712bc7ca7b1896f3902343acc771373b2fdbb67a0e9f1cfbcf52a8397b6d721da3f4e77be2711d154f818132fd761db41e23637b4e
MD5 SHA1 SHA512

Submit Download

.jg.ac

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.ac
Size 40B
SHA256 035ebefd9aa26f8362efbfcf6f0621927a3697b2f8586560a6a5537c17362d66
MD5 15f50c4c241c5b1d258320c02e19d6df
SHA1 55f5fbf8933caa9d1138227f3d89222105321af6
SHA512 884a8eaac221ccf7bd7637f6b1910f52fb7ef84f1088c7ae3468f50f6246708a3b31120f14d241d0ebb7028712e68ac9857f21e5526c38adee6bd9fd4e6a9a21
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.di
Size 340B
SHA256 6e67066f330a65b9c67d406d87feafba821f7004892e9f1632049871db166ea7
MD5 4a0d74e14a246de85d0136d2d10e6212
SHA1 a23d1784fd6062f5d9c71f851049ce9de8ef6ff3
SHA512 f39f7995305cf35915cf985fa54d7981f24e3a528452736d31270b5e2c6ac3c389e4ac4f2103622eefa879a3eb81aee4951fc3d5d26451795dd6b38fb69a6bac
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.di
Size 340B
SHA256 ed298c9733e46c4467d2eae70cdde58d7470eeddadfbb0d83f97dbd0638bfc8d
MD5 27d0997979033946898e2856ff829615
SHA1 4849592d423a1a5dfad25802a9622c2193db3532
SHA512 952498442a8d5d60c5bf3dc076319179a208e5a73c74952d04143b60d761b98eab56721c8b1db8af0648ff71845872cee9d0876feecd20981734f28a00decb95
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.ic
Size 40B
SHA256 39ff1eb84d0e61052e15e62a904c59cbfef3733a2a4ec07e0fc125214d4d2b25
MD5 282b0ec86a1d1fc709f1810f83cdff27
SHA1 ee3484f3a62f95927bb86ba3e3103a6afc10c2b7
SHA512 7d2a62ca400667a70dd4d8950ea81de03063d33116c474cb98a3967c9a57e5dda42e775e9a72d22f4ba9fa2191c9c5b06b4fc368f6977a58bbc28840225d3531
MD5 SHA1 SHA512

Submit Download

.jg.rd

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.rd
Size 8KB
SHA256 c477b6901912d62bbcc51e86380aa7f8a5ea55533480cf991997a6bd0659f167
MD5 4529b79c93f9bb9ecb1dc02e41b64cc1
SHA1 8fb101de2db8a3643f90c2691f26808c94f89317
SHA512 2baa0825462c45698c0b676926e1aa90383314ba08c2a010cb71babd2d7845939594ddcdec3d4c60d6cef1e5a9adbb338b105b555975b73bb976563d0696852c
SSDEEP 6:7+/l9Mn17g9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKcn:7+tAqLiuWdwRmBEyPbL
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ri

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.ri
Size 24KB
SHA256 7a473d00b47e1c8447d497b3dd18f8a6ba5a063e0761dbbe648ba530a74fa24a
MD5 0e97f0e9e1b8390bafc82e8c85a5eb25
SHA1 3b4ef2af5eca55f2cc08753a4432c3acaef4d573
SHA512 ef1518ccaba219a40f85218cb31d8c65ab0e7647fc92ca648b0b811f6acbffd6e2d29743490c4baeb7fd1a694279e1ffb04afda3b94c93a459eaec8bb87a93dc
SSDEEP 12:TLxBVOSuO7Ezy4BckgqlYIkBr4BALi22YcDxKYZgRmBEyPbD3OwG:TLxFuO7EDckgql3kBgALi2MDJZDGSzG
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.store

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.store
Size 8KB
SHA256 25070ccec0ae388dd3a631b98e8e9091a69f53df8ff80e1097aef402c297c136
MD5 3a2690521a6dc80a9b335d413f2c4962
SHA1 6107bbe2c35210e69c59da3bc28718cfee2eb653
SHA512 b8bcd745ad6c47c882a63405670f35d99294545e5a03427abf0335b4e4ed5773a9eff83183bc93853bdb875cc4ac61a3f48104cdbc5cb62b4517e9c891222544
SSDEEP 6:7+/l9OKgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK8lM/We:7+tMK4qLJdTRmBEyPbflsZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.store

Path /data/data/com.bbs.yg02/files/.jglogs/.jg.store
Size 127B
SHA256 18e7fc5a173ca12f262824f2a517b807d1a7ef60677d1c18ea4916e6813101fb
MD5 edf014ae7fd7545736328bf5e7785b6f
SHA1 66b9d73f7672270c156edfd43b0f271791c26e5e
SHA512 f2efdf67a36898ef635b26cc34ebe874f3b3ba841c9d43b6354341c0831d82758df9e7679568cfebfb0bdae632ce1ca97eac91ff55031bda7e55f449c17d4433
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/data/com.bbs.yg02/files/.jiagu.lock
Size 512B
SHA256 7d51322c5774968bc1ba78eca7ae48187f62e43f7aaceef5e0047c0f9599c0fd
MD5 c5d6b5d2c4b017e3b999432108213aad
SHA1 24fde5c6ef13d57d311f2f7f2d21cabde8215abe
SHA512 e7ee7ae1a0744446e2585e0ef6c3e013b1304fcfa79fb629178d5637a53eac64547f9fe15de30d003be8be501c180c0b90c665f4032fcfc22c80203f9d90c5bf
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/data/com.bbs.yg02/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 4211a99af22abbd0e63fc29219325d58e88d043f5cec596022b33518cfb1501f
MD5 3f006930340afb040a75e796c989dfef
SHA1 3da985dd07d5679e7118627879f4d8e6434b8f57
SHA512 85b09049970e28a34ece1de06410e3b7b1522b9594f2fb2ec9979dc84316e9367c9495466393f5fa45be44614e1c51cab074c9a5a1dc9e0fdc471248c6778109
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/data/com.bbs.yg02/files/exid.dat
Size 57B
SHA256 aeab79ccbb0a728fd457122be05aec7f54f635b265b9c8ab35a25aa1af4342ad
MD5 e3290e5497ac57ff2af26689e0aa2d92
SHA1 fb8774ad6dce8d7f01f46089ebf33cf6f5bce993
SHA512 3d35107e86bceb3691d1c011ff05b89f53f7e61b2e6c23c5003dcf1f3900f323d8f2b585237e84e9b6e8e1f2415aabca4f3aa300b3a8046b7985d372f00c8943
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache.json

Path /data/data/com.bbs.yg02/files/jpush_stat_cache.json
Size 132B
SHA256 1f981269a144328f2ae52a8dcec528ce7dcd79c7daa1e7acfb7dcb255667feef
MD5 cdfcb38cdf7610e6936e701696b4d7fc
SHA1 fc03b996f6853ed05ca7ccbcccd901839a503563
SHA512 2a0be3807b7d8acc3fd28bfc9d4291b13a63fb649336dd4ec7e06b43169be29288677dd8af3b5e24d2bdddd21e65db5d4d10d23dd7fbea1bb95cf445b55ea863
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache.json

Path /data/data/com.bbs.yg02/files/jpush_stat_cache.json
Size 173B
SHA256 febc6ef45b4709267ca5cdc3de94d503aa457115ffdca579a9e10f9b5382ecdf
MD5 87ccc10e1953f08f2b30e543082f2870
SHA1 1b1523ed50bb639d5505e566a4e7b788b91aa173
SHA512 40ab8029b8e842d9524c731e9b4dbc41842d46dc0c0da7f43ee40b8d4448b2d37c85b1f785521c44a54f2646b1d9ce911739107f86005536c59303ca307c3452
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache.json

Path /data/data/com.bbs.yg02/files/jpush_stat_cache.json
Size 217B
SHA256 a1b53d6840df7ac8d28c326d1c3f89ba00e70a4cf35238b7ba1100efb58d4424
MD5 58701cc9a613bcc42a6066bc92d75e22
SHA1 92da4d5e3e1ea464ac66767e34e473a7d80b535f
SHA512 b1b9477a4347c6bbd815e86426b54a395bd4c31b060769a074c9cede298bee3166e5c77a8aa4ce887d478d7a031b95da4e47d4dda099586f8954eccc70692776
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.bbs.yg02/files/umeng_it.cache
Size 350B
SHA256 e9b19daf023c61c32e3a040160ba3f33b15577fa2aeda5e8b0d2aaf66084d502
MD5 2f0d46710eb7d883980b80c2b08e2f8f
SHA1 b5a7031c690dcd68926efc50961c28b07fed158f
SHA512 2bdd7baa57155d546b8369658880d78f9d9021bb31bd0d44f184442dcef72b0375fa8a4e427610ea4a3a78995d4ea1346dd9822f4f557700c8977967ecbaac93
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.bbs.yg02/files/umeng_it.cache
Size 178B
SHA256 d35c8d3ded83924a262360994447157cab81c638541fe87aeec1104afa62c5ee
MD5 0e2ef01e78d1c5f11625242d5ee60ce1
SHA1 385f62c2198f9e9f998fe0bce3065b3db67787a6
SHA512 1aa0edb7bcd3a18a4015d33abd5c411f7a9165ba3213f3ce3061924a4f69ade07ba54b8c67599569cf8a83e1045324d3cd79eb7941f54903ff40fbd299439922
MD5 SHA1 SHA512

Submit Download

[email protected]

Path /data/user/0/com.bbs.yg02/[email protected]
Size 6.1MB
SHA256 077c2fbebe645f2869479f20e4055dbb64ed3482bad057f827b09c3c7608d164
MD5 d8483d973010eac4b07d8642faf1e997
SHA1 d3ddb1a5866a87ec5e7ea428526499033fc94032
SHA512 f668b6573301f02ffbd60028c50f8b0c9096c428bdaf19f37c858d520d7d1c55444944c77e9801ef5d4423ff4f9cc5a9344319a52d34f91fba7dcc4266ab1e2a
SSDEEP 49152:kmOC5qzynazRkEK627bxcBl/bNe/QWUJ1X13LDv9EK321C79P7AYl:knCYyna9K627lcJe/A133qK34+9d
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes2.dex

Path /data/user/0/com.bbs.yg02/[email protected]!classes2.dex
Size 1.4MB
SHA256 603d12519055c24144c01dc4570dd450dd3807b753843f77d3c55949949a2ffb
MD5 7e90f1b9a446cd90ce8a70688575ce61
SHA1 3a9300bc8d2d6c5e8c926158689a2c76d5c61fe0
SHA512 740b7f2568e23ec6da2baeb9a560463e7c4ab49368209f92bfd2532a0cd7a6b2f4fb7e3728f6de215b5eacee3d91af2b428d70befad9a14e026a6e631decbef1
SSDEEP 12288:Zoy8JeXXuHujU2pzFei0+MYjcFyq5rxEcyW9hnpkNJBhS65CM9ImLwj3MTvBkQE:KvHPwFeihY4q5RpkNJLImLMMNkQE
MD5 SHA1 SHA512 SSDEEP

Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 1791c5f5454002077984c63583696568433d761a649c001f251170c4d89c9a37
MD5 011b5f6d00a8595d088bb681aa7b6ef2
SHA1 e4fcfd86c6b26a9bd79b05194f34eaa6f745fb92
SHA512 b5594a2bd792ccb34cd35b448d00744d23833087da46c888a056fefa3cf09d1f3549f375bea643a8d03ef810551ab87f82d74b815e9916e657478dd2e10ceba3
MD5 SHA1 SHA512

Submit Download

tbslog.txt

Path /storage/emulated/0/Android/data/com.bbs.yg02/files/tbslog/tbslog.txt
Size 10KB
SHA256 98232f78de646418999a04faca2269acf90a6f48d8031472c881a20daf888011
MD5 a206ea5442f652720aa3c757cd6c4379
SHA1 5863c4f896a54faf0727bd69541310cca5ea0ae9
SHA512 ebb4a12a0ee31e178ce8fed09f27ca7f95f622d881107ac11bdef6326edb427eae6a7df2181a3a4ebc9f6de443c7d5b88b7878a0a6a0f26fd3b92131dd2f93b8
SSDEEP 192:TZk1twlWmFG0lXVErPYwPxNx9zNGplrY3:9smFHCHP3
MD5 SHA1 SHA512 SSDEEP

Submit Download

.push_deviceid

Path /storage/emulated/0/data/.push_deviceid
Size 32B
SHA256 4d8a6a747825523125d27ff11c81adbbd27996722aad6ed8a0ba0b8bcb4159a1
MD5 096b9135e6083b8777d3847ba9a903a6
SHA1 6617fd8be93a0c1ee8014e7ef84854d7daccb0f7
SHA512 ec5547fbecd0c349c29a3aa63990d14a094f1f98a1033b2ba547847a5a0f3b03a4970b442888ef1873caaba121d50be06a6a7403e9a67ffe3f98a6c2c8069cd6
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads