a49d230f33ea40dc7a2525b8bf6b59185e7062a5a014d23b1ee08286f1221c63

Analysis

max time kernel
137s
max time network
143s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
25/05/2024, 11:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

71de92616ddc25b0ebc6fe6014772f00_JaffaCakes118.apk
Size

13.3MB
MD5

71de92616ddc25b0ebc6fe6014772f00
SHA1

8c214b25926ef75eee27dc56de6f7db71f67e683
SHA256

a49d230f33ea40dc7a2525b8bf6b59185e7062a5a014d23b1ee08286f1221c63
SHA512

a226e7c7974b56a8c61a17f935fb84a856c86ee40f06c439666d6125f661877004a3bd01de33ab5c8f3a85d505ffc878a53e2b2d2aa55a0bf87fba0ae060a2d4
SSDEEP

393216:meRXi1y7zrU4IOrHYNrkxmW8okJtG/vMx:mp1WzrUJOxMTIvg

Score

8^/10

collection discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 5 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/data/local/bin/su	com.bdzy.yuemo
/data/local/xbin/su	com.bdzy.yuemo
/sbin/su	com.bdzy.yuemo
/system/bin/su	com.bdzy.yuemo
/data/local/su	com.bdzy.yuemo

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.bdzy.yuemo
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.bdzy.yuemo:remote

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.bdzy.yuemo

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.bdzy.yuemo

Loads dropped Dex/Jar 1 TTPs 5 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.bdzy.yuemo/[email protected]	4274	com.bdzy.yuemo
/data/user/0/com.bdzy.yuemo/[email protected]!classes2.dex	4274	com.bdzy.yuemo
/data/user/0/com.bdzy.yuemo/app_e_qq_com_plugin/gdt_plugin.jar	4274	com.bdzy.yuemo
/data/user/0/com.bdzy.yuemo/[email protected]	4425	com.bdzy.yuemo:remote
/data/user/0/com.bdzy.yuemo/[email protected]!classes2.dex	4425	com.bdzy.yuemo:remote

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bdzy.yuemo
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.bdzy.yuemo:remote

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bdzy.yuemo
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.bdzy.yuemo:remote

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs

flow	ioc
41	alog.umeng.com
61	s.appjiagu.com
74	b.appjiagu.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.bdzy.yuemo:remote

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.bdzy.yuemo
Framework API call	javax.crypto.Cipher.doFinal	com.bdzy.yuemo:remote

com.bdzy.yuemo
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4274

com.bdzy.yuemo:remote
1⤵
- Requests cell location
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4425

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.bdzy.yuemo/databases/cc/cc.db

Filesize
36KB

MD5
22135567344957fc0932935687a43175

SHA1
1927fa36e7d0a8c11dfecca3ac7fa6df608a96e9

SHA256
035883fda4aae9579c3c39813799949793f1b2aa2813e7a9fdd34583099a071d

SHA512
d65e211a99efdfdd5d60e5fb3f923914ede37b98fef38a14355b00dc311b08432b6ceb715e6a1f8fc8c2f456e80b03dd01a55a888e5a7766b8a0e33316ef4bf7

Download Submit
/data/data/com.bdzy.yuemo/databases/cc/cc.db

Filesize
36KB

MD5
1b77217d803a7c04af9466680b92d104

SHA1
0cb959f4773c6730e8aed5746706c0f3ecb35c1f

SHA256
66c83ae35e997c33eaffe9c0557d98ee31931c18b99585a64eb6cc8f63d303e3

SHA512
39ea189895ca93855bb71b4a5447815e9373ffd39b50611ac172ae321ee7716fd4af5f86c1fd0d17e12b771f4016a86184620a7c5d07f57b88f017c4ce8312ec

Download Submit
/data/data/com.bdzy.yuemo/databases/cc/cc.db-journal

Filesize
20KB

MD5
8081d0fa196a30650312be96c5535c28

SHA1
9bd075ede9edb4e96d14370fa581f12e234f6a4e

SHA256
0e9b8103852cb00b24c0cc6b2502f66c358254b488400fce3f703b832be5c6d3

SHA512
ec81e4af36f893f49ff419e2b036f15fa6dae2e1ad407847d20f77ff40fbaff264e07aa334457077072a22cebefd6939bee598d99e7ab4488b0b88e8915a048d

Download Submit
/data/data/com.bdzy.yuemo/databases/cc/cc.db-journal

Filesize
8KB

MD5
1eeee7525da6e01593af980b419329d2

SHA1
61beec0c6ef0ed458a2b7191ccac56c20734c4b1

SHA256
58be40ba364cb9a6eb690c4101d522807b43b8ff97a82fd694423c2c1cbc42e7

SHA512
ad121499e2700b2a7718b6e06925a623e12c2e041eb14cd22957665279123e82e3a1fa907b9aa787edd6e7a76b037e1eb71c11cb7c927ed46c5e47830799d248

Download Submit
/data/data/com.bdzy.yuemo/databases/cc/cc.db-journal

Filesize
8KB

MD5
20d42c9ec48baefac5f8f7eb1ce1f4d8

SHA1
beb49686885b7df0afe76d80eaf0df056cb9d6d7

SHA256
3f44745cc74c3aae3dfa69529ead9d656e1dd3be864cc757d1bb730156adaa4b

SHA512
d96107b4bffe36e4406272791d99981cfcd872162dc20cce53ff39284641d8a770b02d3130ff6e3c414f85e76d7cd007ac785e8d0d618a5c6c819b68e28c6825

Download Submit
/data/data/com.bdzy.yuemo/databases/cc/cc.db-journal

Filesize
8KB

MD5
47494e2799a72a358d91d44e77cc08c6

SHA1
5d314c7119f04ae51fd3984105200b5219977855

SHA256
af2a55383f712cb02f9a64aedaa5b573adc2ad9b2f68a653df9386584cc0566c

SHA512
4b26fc777bc306eeb0900a4eb105fd5ad822705fe4c96468898e4e08e6dc7eae2731e07ecd3f1d0e58e46ad53b68bc0300b96fb01f99e3b8ffea3f41aaa39dfa

Download Submit
/data/data/com.bdzy.yuemo/databases/cc/cc.db-journal

Filesize
8KB

MD5
de5a63bb632ee31e14be8ae5d5ee2d05

SHA1
94d163d25415f2b3b27399381a67427d744228a9

SHA256
529688ed354d4a53d1080ff77e863efc9d440dafce79d0142117eca35dfec94e

SHA512
f9e02c1f8264f8e45d8a15080c11b87e52f283730391267e735045dab547c984f5c8ac3ef774d82d889ba45717f7783fbd7b783c7ebfe2e52201d1f88043cf00

Download Submit
/data/data/com.bdzy.yuemo/databases/cc/cc.db-journal

Filesize
12KB

MD5
ab52821081b62f4bb16db42f147c7c86

SHA1
b7b4365f106c53034b067bbcdfd4c55cf52fc733

SHA256
03a6471ac1ddfe092295986d203bda77162487189e4e49531d4ff5dea03ff60b

SHA512
32c5228efa8175691582bf80a37fa2111a01dd2c66638c1b154f146d484d837315dd126e796882f9ca12837a166fd7444f246d4d96dd47d83f26349996cc16f1

Download Submit
/data/data/com.bdzy.yuemo/databases/ua.db

Filesize
32KB

MD5
6fcd1230bc22e87947a7e1c083c92999

SHA1
2e936fa40eece980fe715e87ce6cfb89052c4312

SHA256
53579afb2e3006299a5542010e25695e807f6138a076b36b733a9568bb5aa08e

SHA512
ff56fad4580d939476dae6733662d70cb7c640b0ae9a679b004f3114d50e68a074ddea29ce94d631195cbb7c02216f83a326bd2cc37d7e328b3d4d6c3320fe12

Download Submit
/data/data/com.bdzy.yuemo/databases/ua.db

Filesize
32KB

MD5
17bb57268badc491266a2729e57b37c9

SHA1
ebcb029dd3fc1f70e210d93ab3086bbd5d39e3c5

SHA256
eda21e9bb4ad31e62a195d99b6e8e7f361411de6ae8f3049537055c8e688f837

SHA512
a4a6b7ef13c6d81777bd583c1a96fdfc735b7aae8fa67d9502807d1e150784abad3fec756af3f59a0f9086447b89ceed5fdaa726e67682915285beb6d23f2182

Download Submit
/data/data/com.bdzy.yuemo/databases/ua.db-journal

Filesize
512B

MD5
b0c16f102fe630d21063282dd2df30c6

SHA1
29df2eb27e1a408d4997508fd8ac83c353e059fb

SHA256
27d8a6782f612d61a30e661d83f93f092a7d505a73480dd83102778514549ab1

SHA512
991f2735637483baa42e5d8d4f301c809c6679dbdc4ba5cdd7c51a90e8651c9c10b04971de5fbe1c2e7909eab115207927fa4579b23dd883239de51112f32613

Download Submit
/data/data/com.bdzy.yuemo/databases/ua.db-journal

Filesize
28KB

MD5
4a5738275ba2210055579a5cb2b8f245

SHA1
8684e24b58caa38f49e0e3dc58722d542517020f

SHA256
16969d55c6f0e55c63c8e9a0c98011387ea74d1deb141cae8d781ef910a74eef

SHA512
768e58b37fb90f36df11e66494ad15f059bb7e0bbf7e76e17471babd8bf97d07b6c7974628a944e2f564bfb9dbb188a6192a3c03f32547eb48ea67edf2b95488

Download Submit
/data/data/com.bdzy.yuemo/databases/ua.db-journal

Filesize
8KB

MD5
69ddfa2ba49b95a747a286e52bda59b4

SHA1
dcb39dda66d0b4ff2be2ebc93e6d486a3165e29b

SHA256
90819db76a5838f936f7d51c10d27ce81485aeea1c077d966f53ea2365f12bac

SHA512
9e0b9391b29cff60d6c371ff75b1fab26a6ac9786bae39264385a2f33d97f04a482cddd7a76bbdbad336b0d975d3149f2d13e6088288a926bce76473b66ed0c7

Download Submit
/data/data/com.bdzy.yuemo/databases/ua.db-journal

Filesize
16KB

MD5
90cc867079a7f04b28e1f88d4a815051

SHA1
e2026ba1b5ba1bc53d06ab7a2ee217cb8d20803b

SHA256
0e3e206198f48fc93e8c49f296a140f0c27515e9eef8c3489253c4e4287640e8

SHA512
098b33e0370945b318cb95363d573fafd660cbefe9d55fa5bde0186cf9de1a4ee790d151f652c4542da47661786f1e4b01f995e816ad2db790caf6716f1656d1

Download Submit
/data/data/com.bdzy.yuemo/databases/ua.db-journal

Filesize
12KB

MD5
15a747de0550d22a4868a0e6f846229d

SHA1
913d32835906ead58505f557799de3f2e9589fc8

SHA256
52293deaacfbf9c0102cc45f393aa868f786ba4e9b60e44d08f33744106783b0

SHA512
83367a7df4f43d9723fd04419f275cda02caed3a128e000dac87f7be6ee4c9b94bca5d6c1f993f00663aa4f14de5db061306e681029922d85d3d1274c162960d

Download Submit
/data/user/0/com.bdzy.yuemo/.jiagu/libjiagu.so

Filesize
485KB

MD5
2c1a490890ff15348d2fc3815b2cfb3d

SHA1
922e1e5539c40ad5bed578a9cea9f076df02eaee

SHA256
4a272d3707e61d656a95d20b944a402a4ae39b79013e3a47a93c0faa3eefc6da

SHA512
3a910269e855c3c9a31e40d2d18d166d3c3dc08bb9b063e363be8e737181389e9cc67be8d9ef8d1a63ca0500d0d028aa2562e6fb979beb1a1cccf0fe4d1d1853

Download Submit
/data/user/0/com.bdzy.yuemo/.jiagu/libjiagu_64.so

Filesize
525KB

MD5
923b8ee31c75ca377e1ac020da438227

SHA1
99b5b703432874be9c4e712ec27b9af6ed127212

SHA256
2cd06ba005a0201a0dafd570ffcc9186b269c6027e62126a74c0b0b5f2ef65b0

SHA512
f3ddb07debe004e001d42f2ec2962e3c58e529aaf042d32fd6c6a606329fc9eb2507d272c4ca05bb75c4504a7c5f37843664c55e4e3f6d42457d7cffaa59447c

Download Submit
/data/user/0/com.bdzy.yuemo/[email protected]

Filesize
6.3MB

MD5
58cb1f9d65789e2ccb011afd3ec7da81

SHA1
52a95be624e7f01fd6170dd21d42e4b81962a763

SHA256
b35e498276e3810c5844209dedcd142f2ca2e5909aac7388ee04cea1c5122b71

SHA512
a6d2ad6748b9f5191e8174eb3de6352c0140afb6d2bb3b17e842c9381e24326e9ee94cd3d286d42d17a43ee537042c8a88d4c19a29ee36b88d9a580ee389ce50

Download Submit
/data/user/0/com.bdzy.yuemo/[email protected]!classes2.dex

Filesize
2.6MB

MD5
c85c8bc86fd226cb4a01dbd10c17a535

SHA1
8eb1e2a4ea922a11adacdb0b151a476d50ac9a25

SHA256
96804002d5fc4823bbb3973933fb4f6a1b09b9261eb66159753318b470ab2052

SHA512
c431ea853ba8fbfb5bae91cc60ed4ed09ad40e8f7e05224e2fe29a9fd34bf3a901ab8387cdf63de50f7af9c81b0883ba4c6394fbde3bf018f6a3ec4b3027754b

Download Submit
/data/user/0/com.bdzy.yuemo/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
184KB

MD5
278f41ab0778aaaa976b94db7131759e

SHA1
73eff9e172b24c8cfe35706a95d581b19a13446b

SHA256
6d060550ad0056cdd000ba50c00fc1fc8e96f590a8fe22c7b43bdda3ce61a77c

SHA512
0e1fa2acb8f8c3ebd990df430fd793ceef933350a16a80748b9ba6d3a5f8fc9efef6502685385502aee64378ddd977f93cbd74e0ccc732e503d62b06223657b6

Download Submit
/data/user/0/com.bdzy.yuemo/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
409KB

MD5
e760621eec4266ae00ef48ad1a7676d9

SHA1
5e6add4d5e21f8a9836e3d5db70b56b53822dcf3

SHA256
6d9c1159b59b263b8ee84227617e0330557f0d8a8844ea634b4106a9ae50e97b

SHA512
6687964975b0cccf6243942b727406c95b19a965b23d706dd26c9722b8e2e4fc6705020de52542ef7c2b7d7316b318ab6c4efea56d9ec004c3bee6ac976eb1a1

Download Submit
/data/user/0/com.bdzy.yuemo/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
8KB

MD5
aee999a400bf6fccc90b4011ccf858c8

SHA1
3e0bd3b29d95c038fbaad1b9d51545f4999a40b7

SHA256
cc58458a30f9cd6f6b72a1c32d23993ed73dd708d371e31d3b6b22dab42dfe47

SHA512
066b9a1fccd73de32cdb863a33b6110940da513f180fd234cc741539620e42959a17289dbd205fb5e850617353e27f2e20e337e7cba0ae42997a59afb65be2bb

Download Submit
/data/user/0/com.bdzy.yuemo/app_e_qq_com_plugin/update_lc

Filesize
80KB

MD5
cf2cea7e9b08ffeccdad60248f536765

SHA1
61f97840aaf57a7d1c9ce994a5176ccfcdd7188c

SHA256
b761bcedaf9a60a17270a5e5b5ac7fb2d333d66a7023a105e9c07c50eae55be1

SHA512
c24815df7cd1dba14a84805b4684e43d6d20fbbaadcdaf8e85ac533941ff1331ff78e697c240f401e4e0386495b6f311200c28d112064efeb9785b72edc79009

Download Submit
/data/user/0/com.bdzy.yuemo/app_e_qq_com_plugin/update_lc

Filesize
8KB

MD5
35f39ed2c2112ae129d8854c78eaa675

SHA1
4d4bcef79e938a2e7d4c67a82e1da369af65ba17

SHA256
f3968c6ee9b9a4da811179953467ba44e071558c297dc6dba2c46c378e6e3c82

SHA512
188b7e486023d0fc6780b487740df799d9d473ab51581ef73357691d48608e9aec5591b2b24184a98fefa1460924c38183e83cd23d859daae70096dce7cb7297

Download Submit
/data/user/0/com.bdzy.yuemo/databases/GDTSDK.db

Filesize
24KB

MD5
420c52b35f8d668f40da52c0ed8c676b

SHA1
a56ca7852255f46072c03177d82d0e7c8ce11f99

SHA256
ac01b2a114b5ad48e04ab84296aa491a14c2ecfe3a8b8a2849c5acc5c591baf7

SHA512
490c8a1808ac9d2f7462553584b0f4ffbb57fa0363fd1444d9f2396cc2a4fa9628a4d31b59c9193bf98fe0012f3d6adfed933d05b6d37a4b3c8d0d7c0b9a1a8e

Download Submit
/data/user/0/com.bdzy.yuemo/databases/GDTSDK.db-journal

Filesize
512B

MD5
9e451b288c75d467915c774b1abac5cf

SHA1
fdafcd3fedfe7605a15f34eaf4e4a6ced2ab14b1

SHA256
997179939567323995c0ae417528d10030ef72666779c3a032a25c29532842c5

SHA512
0823824f8e19a8ceeba631851477bd402dc4c99934a63b6c83d081f9038cbde184c110d84947454b428e0593f24b053f9fdee0488d1978e68be3055b7881a90f

Download Submit
/data/user/0/com.bdzy.yuemo/databases/GDTSDK.db-journal

Filesize
8KB

MD5
0389aeb97fad577a36d6ac93b0f0c93c

SHA1
f210062cd436786dceb3bb7d72aba113f7803630

SHA256
295b8675a72f507b7d0df499f2ccd273f76ce673dabe22b02f5b76e628881324

SHA512
0c4e527584944125091d8f4334d45ae7ca900521006e280626bdfc81adfc0dae08fd0d323b7955f206dc3ab2f80a284357b20d030a3bbaec2b34e957c316072e

Download Submit
/data/user/0/com.bdzy.yuemo/databases/GDTSDK.db-journal

Filesize
8KB

MD5
269f006ce7821524300cf45c3ebc4c5a

SHA1
03fb5707485ec994177a06372a8b95cb124a7698

SHA256
9d801348629a0b49cf7322d1a8c69973e658280e0b8257155a7047788e552470

SHA512
4e0552d7c9b69710fbaab19d49f2c5bc646d895c9ce868a80e7a16e92ab4983058af4557434cbf4e1157712067c1e299e98c09393b8401959aa2d0dd148dce30

Download Submit
/data/user/0/com.bdzy.yuemo/databases/yueme.db

Filesize
76KB

MD5
a3032c7d704422691d327c184a7ad104

SHA1
a9a63351006f5864040e0b655894561b26f0fc65

SHA256
039487634489c8ed438b3386a6f50bd4734f0d30e5575be3d021a958a00d9458

SHA512
b20cf707ec3b44d9b79691c3cb3d979afa22b94d22bff79631c62bfe69fbf7e78ecb947b03651da5cc204856aaea81b2cc649d6e5e65964210ca27a21a236ba1

Download Submit
/data/user/0/com.bdzy.yuemo/databases/yueme.db-journal

Filesize
4KB

MD5
2ac9797e7775494fae6556217555f0ee

SHA1
1ccfb361065e95cd4c69f2fe8aca0404be47fd16

SHA256
544ef0f9312fcb1a7696c97a7e3e57c043c594fc386438c05b127b22a2fa4d35

SHA512
36529280a8cd44864e1f00b4a04a2cec0780edf17b7770418bfe0ce203bc24965c5eb19aa69ad193964730dab27d571dc3cb93340988b6adfb68bc06746840ac

Download Submit
/data/user/0/com.bdzy.yuemo/databases/yueme.db-journal

Filesize
8KB

MD5
c4f1c647df54459f9f9a08ec6dc166f5

SHA1
4e80034a16e3456cfa70d21cc58acdf8a5becfdb

SHA256
dad1fb17cd02d6b37be28ffd1bbf9074708d6ac2079651f431e3d120758877d9

SHA512
18c240e49e15d835e193b18fcf26f952f4625a704001ebb44601773d5410ba5c88781b3a845e1254d19a200ff5fe3e234617d04515afe8712f115d4061b511a6

Download Submit
/data/user/0/com.bdzy.yuemo/databases/yueme.db-journal

Filesize
8KB

MD5
8af64b6e4bc1d266fef36ea21fcba472

SHA1
e1f902276395dd30b80f7493c3c8df3ca78edfda

SHA256
205ecaacf067086c810441c8b040fa9191f31f5ee0c7adffd1f53426fafef22e

SHA512
0b368e9bbef35e4f92829af8c24ab7ccf5fec1f988ba8e4d0f0e94d88fdaebfa26baf26223c9871505666ad4db5a191b59359690edae48a748344abac51e0a9d

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.ac

Filesize
40B

MD5
115de84a1f9ff3d8d92f9c553d2fce8e

SHA1
660082af89b0506cba40cac4bde54a1ff4ff7c32

SHA256
05f2ed9adc163d09cfcb3023d86176621737d78091e624dac6254cdd3ae28ab8

SHA512
4d9225c7e4c0c717b632ae6d9e47576c975c99a746bc9105b2699cf631c03305e1ae58bb28df500fb9fe27223b5e7f096ab427a9186c516e693a1718d68723ce

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.ac

Filesize
40B

MD5
10811c1ec53fd5aeb6c57602d34b50a9

SHA1
e92968bbeeb16271249dbba054a4003c209efe75

SHA256
f7ca3cbb63f99edafb12932a30444f27d62f66395eff498e7e1c6f707203e723

SHA512
480f284d6e4f57456d10f6258359c6d6afa1fab60c2f89a2c8a75705d19d0b21837dc9186d0eb862705d9907b40f0c6e40150a09ee107a9bff61abc14d539cfb

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.di

Filesize
348B

MD5
ed02dba861d46480a580f2329606ae21

SHA1
4427f2635684e8a6edd113193c88f550a0a0715d

SHA256
98ebfa16ab870850c5c46c75042b0707cddcbe7e078a075c7c4018ecfd1ce092

SHA512
babd4d0353baabb7cb005b79ac18cea20c2c8a742f34514db8645ea466559f95928449a1429249b35302b9a0cad7752437c831f7b20959dcc903239440675c7e

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.di

Filesize
28KB

MD5
f8df032b186b8daec21b955238836997

SHA1
6670b787d78d0391ca067ee9d89c1fc99ab248b8

SHA256
0eb2691193d5b1af9ae73ce1110ea204d7895f5a39d8d5155f6de13dd3d1d283

SHA512
97472fd05b640d30f6e8d2a722e57a1d670e77391506c54b8e55ddb6109a21acee6a74af8c5098467317fd9292460e54ddfcdcf46e44684ebe7798f7890bbfe8

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.ic

Filesize
512B

MD5
17038889a1cee39b061c474a4034dac2

SHA1
675f73b9d5f2d7435a2359147bbab50319873639

SHA256
354448adee7b66e323982a113f9eadeb8b21550fdca3331dfe3175ce533d911d

SHA512
97f414f64edbd16c2fc09f9d0f1eba44b52a0040603fb08356a15eaa53bd58fcc4ba0e88ee1f556fa04e7e7b7accfb54f286fedd6502ae332a66492d8cfd40d3

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.rd

Filesize
8KB

MD5
9fd3b053526b8ba85c88a1168c7c85cd

SHA1
31548ec47084665bbd23d61b14a4b740ba898dcb

SHA256
6da11ba3368638ffcf00e8baf8f69120d714c0b5964027969ea212246c3b3ac7

SHA512
fe02a610e8c41f02892d572d9415d131c3ee72f018d29c76b19bb69dcb969cd636dee646a3b23bbfa575ecf00f7b1b9dda115a1483d5385bab807b3fee13fb3a

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.ri

Filesize
20KB

MD5
dff1e3b67eeb50ededbaa1c89bb2324c

SHA1
cf821ff5319f46c259e58e2a80d44cb449b44d46

SHA256
94780b79d60694787793a5448d397e4269ab501d7c6ba7266966a5edf2c1207b

SHA512
ff89645976c3c3eb2713962d37b843ec821dd2f5ded5bf8227feb481468c857914dee4359cba11c41f60b8e0f607663988a6702bc6b1d04d0bd33a10901563bb

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.store

Filesize
81B

MD5
2a8600c912546b53ce29b4f5c16f82ed

SHA1
e9a4de33ccaf032f4997646715c1e9dfdd8341c5

SHA256
8e3b8dfe48c4a25da2a0672fb301ece9f22d1affce3bf9e1ef3ec5b15d3eb489

SHA512
49dc83d48367006a56816672c5dfc04d493dc2e65f0965ea70405de0a118cd56838465cbd3c0048dcd365b9c611b94c172fd54b937f853c0da8f23f7b1af34b6

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jglogs/.jg.store

Filesize
4KB

MD5
3b8a7726d4ff69efcc75ee0481d133c0

SHA1
f3fa62ffc23d18d10549a8727fc3b63737959c3f

SHA256
64e6863962963f036420a4d2933c943d14a24f3c7ec6b31d00c15a58e3a1c7c8

SHA512
c9ee879ffa7b4d5bd89143c4863440acc56717b210fff650196590d77aa2a51771a344c29132e8c48e8326aab5144980e99c4fe54a631b24bcbd5c5cd316b8cf

Download Submit
/data/user/0/com.bdzy.yuemo/files/.jiagu.lock

Filesize
8KB

MD5
b4f6b7bc4f767ac8b2d18942ba4a0596

SHA1
b6c48aa98df38e4de319545442cb9a937bf2be4a

SHA256
1e9c3809693a93842deae31c4c9ce4d152a181805ca1e09cff94cb3f58528c0d

SHA512
47d55bb2dee8e81a228f4b1202c9c47c112804d503208e0a30cb943b5903f3b0660c67bd02488d4877f463f0856e26423940fda74a933beeb21e5e6d444dce10

Download Submit
/data/user/0/com.bdzy.yuemo/files/.um/um_cache_1716638412164.env

Filesize
1KB

MD5
b2e81a148010f0ae325b7bdbf63a4eda

SHA1
9e25873678ab67863de32324d83367b849035179

SHA256
2e535e65cd036e253aa23d17fe230ee8139731b54c957bd4a6ea3af3306ed881

SHA512
f7be6f6f00eee6a900cefa2549aa091f9996bb1008fec39ab3feee6f59fe3d69574acaa38986186e4bcb6c826ef525b3f3112976628de6f6461aacca758bb493

Download Submit
/data/user/0/com.bdzy.yuemo/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
91f1c84220c4bf0f5babc3194a3c3229

SHA1
5f4cf4acbb1cb83f4a73591500d60518e592ef1e

SHA256
7e915b1896ab709cf89ea4aa287a3454e9ebfc1812442952c48e12b4d05046a1

SHA512
69a1d2a9134bc24f25d506fa6d1fd4586d6a1abd43947a92f46251a0462e2813c5cc571e89879d4c8f8c0f51c7ba8b043e946585bbafc6a34aaba6ac3ee496e5

Download Submit
/data/user/0/com.bdzy.yuemo/files/exid.dat

Filesize
54B

MD5
3fa8d1b99353014bd33a1bb4ef3986d6

SHA1
9a0e36f5073d54ba6669f139eb4ae23fe931977b

SHA256
6ad6b246c641216fd7a36a03bcaefb86959270edca4d3320cf096a835f99a78d

SHA512
388f67f6feb63882f233e1f4ff537c1211dd2b4247d3a64aff11220b018dd194cc0b5085e3f00924cba6fd0615fa5c9b529c3aef2142a79973c9c44bcad5986e

Download Submit
/data/user/0/com.bdzy.yuemo/files/libcuid.so

Filesize
8KB

MD5
5c56ca1716cbe13e1b5d6cb907f8703d

SHA1
baaf6a091ccfceabead39c2cd2d537cb623cfe90

SHA256
f200b9b42ecc7bc8cb17cda7bf8f3127080f3ac7fda301ce0fbb2213fc4bb304

SHA512
600753c90ec355428b6e12767b8bb7ee89570ba280d1d8b5013fc7fbc68ece35379f96486fe11b682606df94d36f977f52756fc5b1445210d2e5a37270d1d49e

Download Submit
/data/user/0/com.bdzy.yuemo/files/ofld/ofl_statistics.db-journal

Filesize
512B

MD5
d1a5341851fd3089d993f96e8ade414c

SHA1
e91169d25808ffa913711e31c21657e888a1aa05

SHA256
773ab4c3df9260d1a4e03d576cbe92b2859d718eb2e14f116a28f8af1e1022b8

SHA512
c4e01aecb0c02ef9936e254dde91fecd659b1c2acbe7c0c1fca13761b7582ce9afd8309bc39280381eb0c0cd9c09657ab5fffe22124db11b334c4f0a1175c3a1

Download Submit
/data/user/0/com.bdzy.yuemo/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
d68c4ddb4c90989901018f2290d99077

SHA1
14756a11cfeea3d798b1333f2f7332013f0615ab

SHA256
40b9cc9085b67bb8c78fd31be7a232bca8895b1dbbe5777df6a71bb85fb65934

SHA512
3c5cffbbcefa40339b32a8c52fbe548d5fed113194e7cf6278957b493ad967975d9fb1bc6f85af43c17a5d57288216c6d7b4944e48a5e552b607bc142c7d66a1

Download Submit
/data/user/0/com.bdzy.yuemo/files/umeng_it.cache

Filesize
433B

MD5
452ec1baa20307c1b5b5b94d0e1f3e91

SHA1
2ffd8c0acb778049e76c6bca115e6e9cf87d07ff

SHA256
d70bf3996fb232dc71c1a2c644ad812477b92e9e1d5fdcc10c1cda218cc6c1ac

SHA512
bf321e6ad033a3f48453b3474bf29fdb7b8f0516a1ce818841d22599c8692a779a24333c0e37b162a0e5f2236cf11b40618681d2f3d2e2291e9e333cac802986

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
801B

MD5
30a7577526c7f5f5a07d69405f71f122

SHA1
6187f58553d6dae2e455ff8a0999465f2d5c9081

SHA256
01162683006334fc91c41d873c79d9c22ddc88e132d8070ca042d7a5e19ce485

SHA512
ae41ea1fb9d5e091bb8a59d831a88495d908fc3146c821abb5d114a8493da58c850d9af99e142a66bd030511479402f9be3fee9a0fecffe258bc2392052b81ad

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
206B

MD5
2a0f8960416f09d515f87afa0c06aa31

SHA1
4e9e8f4a88a0594c61d1583d97b78a97cb6cd301

SHA256
c4c2379fd31308b9dbe81e4d3a6a42287d7e62a3112d8a9e257f57bfa6d45f9d

SHA512
9f6a512b30e57256f1e2aa4a431006449f33babfdb955730762723e2ccc4cadd887011f978e721bdd2ca3d347f02a142719bce76e01d727ed816f996e2d4ceb6

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
0a1b986c01d790f1658933b34f57b496

SHA1
cd4da159944e74eba6db1797c0c76aee5a9c02ca

SHA256
4e8a2b9aa31342107be49bfc48056a413d0d2af9b4bce7aa23a3b22201fa3a95

SHA512
9775c331a3060c620a5923dfd95f22361dbfd22d270805675b0102b7e471f265cb7699fc416e5924767affe8dfd5df40e35e94284e60fb271e7bfcf1ab57d741

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
96B

MD5
f510d63bae5ed10b93f8e89e3d6954ed

SHA1
b8357cfdf40a61e902a404af16ffccbfccd1af0b

SHA256
f74fdbcb79e502a9a349815f3d93ada1f016d8b7d542a4f7b4088f6d8d83eaac

SHA512
62c2c691cf1fd804d578db39fea803ac7d7c3f7560f9e196f74d9058b84644a211f89db518cbe3711f5ca1940ea7ae21497f28a7f4ceceb7f7ac67aa5be8a2e3

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
c17aee2bd88a999025a20c0b1d5a909f

SHA1
3c58776d9239bd886a8e635143a31321ab8e074c

SHA256
13aa9e2256fd70f7f49e41b0d9c9013588cd37df82ef362aab8fa040c49306c0

SHA512
fe2c2eea5e1cae787d609919f4d0befdfcb29bd53daa78ead5ab1d4dc91278f02c48264ec1d59e54c0cd9e4a00fcb0c6be19d421dd1c048c24ed745aa6b30da3

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
1bcd2834068c91a35786f73d2d2001f3

SHA1
5bdf4c3ed3cf78f9b48e7d6670c204c0b309ce39

SHA256
e3d0982426a3c8dfd8acc9130f5fa4a2271e2c34ac49dc9054799f937f920dc9

SHA512
8fdb615cdfe690092360d071f134b00f600e23588e990a120c6892b5806e3d5e16eccce5d688e5a777e18f305bba616d1137b0ecfe308ce55b3ed305d21aa65a

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
8KB

MD5
c5b41cdbac56c69e3996b3be45fce56b

SHA1
997f083e834ea6b89dbdd79c9483864f84c5aeba

SHA256
fa4c20b908c390b628d454424049685efaae6e60c2adf65c7d6578487fb33389

SHA512
0eb046f02d93d2ca9584748247efdaf5424b928ae5cda9d8584a76abd39c32e16bc67942912e20a004371ed8841df9e295636f31c2167aa2d2f5a270e1f048fe

Download Submit
/storage/emulated/0/360/.iddata

Filesize
8KB

MD5
9f9e5a975b361015f66bd2ef771bbb5f

SHA1
a241d53371fbf9ca5b887509f0f48446f98625d9

SHA256
8a72a00b34977283df553de9b48137e5bf6f5a48327f7c8262c7d76e4e1a9d90

SHA512
287d657223d78ff7a51fe5fd4d027748266cc718860a519824ee54046c0031ba0865e2a64865fead8ac56abe8bde3be8730e18d605ffa4d7a35e62fcacce1d38

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid2

Filesize
8KB

MD5
27bf4a0a60985977ec90012b37096a03

SHA1
6ad63e7405d93f6308970183eeebf5a0168f8c20

SHA256
87bf370832e301b2896554d8b493cf0ac3d46d171e3897e5200606d215855562

SHA512
9b86bd8629ee6d02c7bede8b840701456ee70d68471dbc4c92fa3ac48904635d5529027f7e6a00ee7c3256b136f1e43673650b4a0259457c445b2d73080c3ae6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads