157d3f1be4493f95efdd1c4ac73d02a808e795f081df3a0aaac355ed4f51b187

Analysis

max time kernel
179s
max time network
195s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
01-06-2024 02:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

892965862ecf6dfba48e1c015ea063ed_JaffaCakes118.apk
Size

7.6MB
MD5

892965862ecf6dfba48e1c015ea063ed
SHA1

c5b2e0614f96da3ef7cecfb059bc8c49a0a54005
SHA256

157d3f1be4493f95efdd1c4ac73d02a808e795f081df3a0aaac355ed4f51b187
SHA512

2dd0e54d1a46a37e2b10d31ccda35f524e1a9b399c245cc51d18bd339cdfe53feca26b18d7d91e42577d413ccc91e7fb4706cddaaaf560372890b104dd8f52c6
SSDEEP

196608:yODloyE/BRqw/cR9zSTJRGte/zm5cpiYP4mGVjwPHV:yODu/OyS9GTJ8DC4YP4mGSV

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.mianfeizs.book
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.mianfeizs.book

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mianfeizs.book

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mianfeizs.book

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.mianfeizs.book/files/sllak/core/finalcore.jar	4423	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mianfeizs.book/files/sllak/core/finalcore.jar --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.mianfeizs.book/files/sllak/core/oat/x86/finalcore.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.mianfeizs.book/files/sllak/core/finalcore.jar	4335	com.mianfeizs.book

Queries information about running processes on the device 1 TTPs 4 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mianfeizs.book:iwanvi_read_process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mianfeizs.book
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mianfeizs.book:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mianfeizs.book:pushservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mianfeizs.book

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.mianfeizs.book

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.mianfeizs.book

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mianfeizs.book
Framework service call	android.app.IActivityManager.registerReceiver	com.mianfeizs.book:pushcore
Framework service call	android.app.IActivityManager.registerReceiver	com.mianfeizs.book:pushservice
Framework service call	android.app.IActivityManager.registerReceiver	com.mianfeizs.book:iwanvi_read_process

Checks if the internet connection is available 1 TTPs 4 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mianfeizs.book
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mianfeizs.book:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mianfeizs.book:pushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mianfeizs.book:iwanvi_read_process

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
42	alog.umeng.com

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 4 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mianfeizs.book:pushservice
Framework API call	javax.crypto.Cipher.doFinal	com.mianfeizs.book:iwanvi_read_process
Framework API call	javax.crypto.Cipher.doFinal	com.mianfeizs.book
Framework API call	javax.crypto.Cipher.doFinal	com.mianfeizs.book:pushcore

com.mianfeizs.book
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4335
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mianfeizs.book/files/sllak/core/finalcore.jar --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.mianfeizs.book/files/sllak/core/oat/x86/finalcore.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4423
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4894

com.mianfeizs.book:pushcore
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4563

com.mianfeizs.book:pushservice
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4624

com.mianfeizs.book:iwanvi_read_process
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4769

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mianfeizs.book/databases/.ua/ua.db

Filesize
32KB

MD5
da4e0eedbd3b705fecefc0d9bbc346df

SHA1
86f2dcdc7bbb9c3f27dc5e743c800c75a0fcfcba

SHA256
fb9c18ba912ef365c8a7062992a94dd1714c209ac2d03fe0a02e3d398c2fecfe

SHA512
694241bdd0be2ad3dc979bdeb3460d253a3f449e9dc6fa4d99bafde7d87514fc554e5aa706851f94ae0c59e38d5255c2062b5e0b35e3ec6b545084be6414000b

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db

Filesize
28KB

MD5
ad88b563565e43af9335356d4a3cc616

SHA1
50f5cd054542ecd94c8c45a3995526894d8b0c5f

SHA256
b40d3a79cf24e3ee594e4edfcbc6111d7daefa74b048b1c2c6b36f4cb692b67f

SHA512
75d9cf9fdc67cf3383830180b05d2694fb0934074cfa7c075fa08c7e28f4535e1811a6ccf3e037f2f6b3607c40aa49e8680cdb7c634796b9d944954adfa12d06

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db

Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db

Filesize
16KB

MD5
54c9e536009117f88d25aa9fdb6e002d

SHA1
5bfee3c15e0114a0b08f84d8c3d61b0e938c6f4a

SHA256
044b3996fb3aa87892004486a8ad4ddc9ec1cdbc944b44df201ed3c03a487c0a

SHA512
51279822521c729d7413f9bf99075da519708b9e7eb2d5f23feba709c671cbac23bd0ba82eb2ea5c9e530b4e16e69e40f6245b12641e90b4f114af31990209fb

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db

Filesize
16KB

MD5
4e2834b46e27284a5128e5d27cb74d97

SHA1
c3b41ebefa2bac2f8b5849aa82cf629f29451cd8

SHA256
6b3ec7ecc92f920c15c3177b6ae53fca96dd618f843f1052fd9f3578cf34abb3

SHA512
b243a4828fd7dd01e61961e8985867eb7a6a88028a60d95b0fd240063705be4f6ca4f1f8755e9cb669ace0a6af136e6ab8b75117921811ff151815af75c5bfbf

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db

Filesize
16KB

MD5
9a6f75c3a9ed936db8af22b9d2c6a2b5

SHA1
d47d9ddee6b69d432963d0473a433d439762c415

SHA256
d022cad528d7f2495aa806117f53493f7fc332ab388bef8abf55269148ed1292

SHA512
ef1e4f4e2d609f1f1ad8c39421bab1029d4cb7e504a1da78ee6e113b5fde38bc93dbbf0bad5b78902ad6c5592d0a301193a98561c7122fc081e8d00732648b7d

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db-journal

Filesize
512B

MD5
885a7e45e9ad5b307e9512198efd32d6

SHA1
c1495d679c489cae823f8915094c8f7faa7271f2

SHA256
09d5b73b31cae7dab2a3c1ddc6abd8fd267afaaba29f14d042a706d5f7a61508

SHA512
80152cb075cfc9804f0e9d7d088de10b804f670fe40a02c22abe26ec51585134c4f82ac371d77270f004eda9fe60734604e07ac69960c79c5633415fcf6f346c

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db-wal

Filesize
56KB

MD5
a6da9d9a548cfc6de6390861ecf7ff61

SHA1
6f2c07a0fc7c9e6f62f1d809219d71e44798f98a

SHA256
add87693acf6db6e8c223e0ef1b59b512ed130c44502d6a3505042f8a22f44cb

SHA512
73308e5118839fbdd7663c7731e0cd1ac0d0119b8c31a5b48ff270b098471ee2eac9aac3969cb0ac1bcd53cdd4050b9af7aa041cc5dbe410e533efe74e39e030

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db-wal

Filesize
8KB

MD5
ad706d1ce9d15f5b52155e0b568d994a

SHA1
baaea8f69fb5ada6c468f70ad68e7b5852bb3656

SHA256
6bc5774a6b5b8b9ee860150e66fa548339be76070684a72f578d3e950f9fbe22

SHA512
0a4454d26ae96b345b2ac264f712880850deee03613e9cf69ce1c7d3a27e538cf8bb0b5b0092c26369bfade5a1ab530a4aca90b8d62902fd928a617b1f2770da

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db-wal

Filesize
8KB

MD5
9e82fbd10dfe021a447e7e1d9829f51b

SHA1
df3522a2faa668b4fdcdfdbaf4258d2ecb36f146

SHA256
38e3acd594bb384cd2e82faa58a4cbfaf04de60b1754883c11ba2a67abf7ec59

SHA512
d676c2747e718e6165159b4cd3b147f8f6c679f76a3dd63443678d9caf93f8eb6831463ec59c62eeb7e6c5813a312e0e5bf1aac1424d593c73ffa945c01d6290

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db-wal

Filesize
4KB

MD5
23fb0a528d3ee14dc37bb55303fb4ec7

SHA1
b65a7757abcd8cac064e87141c0a8fadcc7b4775

SHA256
dec482a4ee320c0231a395326aa44b1e1f26333a436f350ad8a86c488aa0c281

SHA512
65c9e5a4bacb713dac910f11aba105edea8f062768d24a07ccc9e31e35415de343640a7b05af55717ab6c68ff4f902ae8ab7c0eaf401edb28ef912cbe7ebdf34

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db-wal

Filesize
4KB

MD5
312642bb6a0f6ff1ecfcb93c14f95b57

SHA1
1492cc627a2e8a764b0473ac611157aa87764543

SHA256
3b09adf1d700c27a47a3ac67124b852b4abaa0efaa655a8d1cea1b089fe0b0ca

SHA512
568332b0de01142719bbca3c4740be3e1c28fd766d57b583a6021dd31a876a1dbfa225ea18eb5b4ffea7f7e8a0fd6203ec680072624817e44968c718ce216650

Download Submit
/data/data/com.mianfeizs.book/databases/.ua/ua.db-wal

Filesize
4KB

MD5
763d39f07be5fccc6ee133528ff3091f

SHA1
3b0661dd15fdb9cd9db602c503151aed3db3f156

SHA256
cb783392c1ca46ef1ed42d2435e978bde74b15e3914fe4e53b43e95d8c074f0c

SHA512
1b2e85ee1a1923438111c81330051bcc3fe241e3c31c6613fd1210320665e3747125518c64a324b573b3e58eb983d3fad8dcf846a3a482ea85d922fcbd534a35

Download Submit
/data/data/com.mianfeizs.book/databases/cc/cc.db

Filesize
36KB

MD5
5d7ea1a23af19b4340cc8d90f28297d5

SHA1
4cfe95b23a9e98378d69c4290af81b51fbe76aea

SHA256
474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

SHA512
33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

Download Submit
/data/data/com.mianfeizs.book/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.mianfeizs.book/databases/cc/cc.db-journal

Filesize
512B

MD5
a1961b313fc7a71c0ae5e232d2b541b6

SHA1
66ac47fa6ea1151d1d1cc35c05234bbe3ba07e21

SHA256
1ffe2eecc32d908b0c4124b0081fa0dca0f296ffec17cfbd6e89435522153df2

SHA512
4662792c188f50f0dde5195adb0b74a931bb5b3264d6a2a47efe4d28d72f556f502abc1cc73e9c79830a9cba64317c031195b7b170e390a9fca6f61203736889

Download Submit
/data/data/com.mianfeizs.book/databases/cc/cc.db-wal

Filesize
48KB

MD5
2f3c468e7d901a1b7ed08292e326ef7e

SHA1
a7b9f1e825ddeeea91a9da4a4afea4b548ec96af

SHA256
397d3a0294d4d5e1568b8ffe1094cb34650e116ed7e7df90307cf5f7be059f3e

SHA512
8ebc88064176ef9f009b2ba37d9dccc51ee5c502a62a62c01658aaa705829353a063d5f9a8e572996945ec5afa84d567086706a7f57a3a6917af8114c5373143

Download Submit
/data/data/com.mianfeizs.book/databases/cc/cc.db-wal

Filesize
16KB

MD5
e842a524e70b376adf0a025d0ff8d358

SHA1
7761820893f83d7bcaa03ac07608d45a6111b39c

SHA256
f211b75b5b5e37ec345213b55ab238e628c535b7c7306ecda478cfe50e97e04f

SHA512
d32f50906ec3c38489a369f83e2630fa8dd266c5b0a1e692877097193f1fd7c6d91d1c0f91ebdd5cce0c031244b9b066714d9a114d68e9fc95e441b2911d74fc

Download Submit
/data/data/com.mianfeizs.book/databases/config.db

Filesize
4KB

MD5
c3b8b38de88d269328dd17cd14d9bb85

SHA1
a2880139472c22fd945fa60759c47c5eb26701d4

SHA256
8ccfea0779f08ddc10e04874ca598e16e2efb0e8e7313215dedad4ee5189539c

SHA512
d1cbe97c214d84cedc4687a3da54872b92474d81afd9350655d3392eb994f414ad5e618843b4baa20c5d049a22b4a681219cece99a26993136f763365c2a61e8

Download Submit
/data/data/com.mianfeizs.book/databases/config.db-journal

Filesize
512B

MD5
c8c203601a27250d5c18554b67923a95

SHA1
f0a8b258a97a49ac19cf4a450d6c3298e28906f2

SHA256
1c8bbf1e866c39aebe103f8d2e16177acdfd0a7045a91ba987e77f22ea8fd19e

SHA512
19e26a4c6828f036e4585a77e28112632de759d7c13db6a5a32b7b6db1b0f77e96f5023aaf56d3c424e55b4c456d4855e4505815744916849674aab19d3c0a33

Download Submit
/data/data/com.mianfeizs.book/databases/config.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.mianfeizs.book/databases/config.db-wal

Filesize
181KB

MD5
f54a86462311777fd33c9edcb9c96bf1

SHA1
750ae56e4572e54fc5b08d6d3f6a1dae603da02f

SHA256
53ef37cae305de8efbae683d1151ace265d8cd040830a87a5b56c45b22eedc43

SHA512
ce37a275424efaa63366110bf802911606869114f69a602c0676fead0bd7d21c3cd5c5f8c2efa8dc98fadfa69bc8221d5e8afb73fbb35aa56eb63b857de9a562

Download Submit
/data/data/com.mianfeizs.book/databases/freebook_comm.db

Filesize
4KB

MD5
9d09a57d94c3dc34299b844a5dd7e242

SHA1
6048a51856c8892f351e03db8dd74397016df979

SHA256
9e5c477e86aefe75b7d5ef615653a3201aad5915d9bfb41ccc2d9b4504c896db

SHA512
d942330d15b34230021176c809973ca3372954ea2ea60703a006d6311d447e134f5ee66966aac532246fa1ade61a5b1715814135414793a11ea79b7b50feedcc

Download Submit
/data/data/com.mianfeizs.book/databases/freebook_comm.db-journal

Filesize
512B

MD5
5ca722bb26f05f3a380834027c8def92

SHA1
7b261be9f8bc0307949691684f24a90aaad68588

SHA256
1e6036f71df7e538d71f9581fd5ec55c4808288ea742c47224a3f3da0c38d687

SHA512
9ca4b7ecd33f79d709e9822778c7d0500fb8b8edb30f7f407912d771962e8daa310c65028ee09476dea800458ab5f18ce5d42b76bc21dd339580a126c56937f3

Download Submit
/data/data/com.mianfeizs.book/databases/freebook_comm.db-shm

Filesize
32KB

MD5
47b64297c92050f48785986ae44493a1

SHA1
1fa7e9aaa253c400c27976c5eea0cffe100a769c

SHA256
aeeb47763eabaa9e53636e58d770c1215df650b4a73f6dafb1d8c051897c8447

SHA512
bc8d854268bf8c54eeb176577dca9a423c7eb1c4215a9cae11d1d975c40ab75526c435d4d7120bd69368ef0ed1c5b20fa9f4daf713faf657c8e5f64628ba76c7

Download Submit
/data/data/com.mianfeizs.book/databases/freebook_comm.db-wal

Filesize
185KB

MD5
aed07f4574840bbe6a2df9e6b412af83

SHA1
9c52f76f9c488fed7f1efa036f4e48d0b28d695b

SHA256
12d37cf97e788dd091173a1f471c167c6319b408d28b3fd7900e81f799a4aedf

SHA512
36b22b30024678467d9e43d6065c23b4d8a3feb9da7bfa5005178233f41c2288886c9b009032677be9470288fabb62024d74f1f8b20c1f2e11077e3c4580023e

Download Submit
/data/data/com.mianfeizs.book/files/.imprint

Filesize
1KB

MD5
71dcaea0818d8cdf7b8e2e17ad56f060

SHA1
974510a828e2450b64aad3864481065da3a48cff

SHA256
894e6947daa9edbb60b6288fc6ee772afaf1dc0c3826ed82ba5839c43acb9d4b

SHA512
ebdfd1b282606bf3e64118af0e942cf10defb67273683e8d5c3ab7ac3be8c0f32e9f3eba34b18e7e30c8e23aeb0446699af26741bfca6c0ecb01e2592d81c6a4

Download Submit
/data/data/com.mianfeizs.book/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
75e4178bb272d19c91da9bf28c6a6880

SHA1
877173b79e7298736d23cc0e47f4c310d388991b

SHA256
d1dc6ab16ffa068762c16cc2ce7a4d953846a618143d050963ab45511632bd84

SHA512
405d983163178b5880c90fabbea3abb5eff17f3b460029a95254903aa475c917713f4f52c6f9a69eaacc92cc10e2c791d1c704dbabc50b208b24e7c2c9a7ac2e

Download Submit
/data/data/com.mianfeizs.book/files/exid.dat

Filesize
69B

MD5
959ac9cf3dffb25fd813bfaca6af8846

SHA1
2b62b49d9d8b507234a3642d207feab051277e91

SHA256
3e1eabbb507e940062e72762bcde8d66eb7ebf44e3aa8d9fb5056d0e9c4fe1bd

SHA512
facc2f2c3b6265fe3ac10d37d116f8d052506bd3e37680c3ae0354911782538cf50659d057dad4332bf69999d469dcd989efaf51cebc1a0b75e51ff1c8d007ea

Download Submit
/data/data/com.mianfeizs.book/files/init_c1.pid

Filesize
14B

MD5
6a8eba9735752e0fb13f8cbd88de947f

SHA1
2952322c17fe0a05576c9e9f1f55cb268991b865

SHA256
bdbceb191473e3bc1203c8e5542c64edbdcae404a3845f36ebbc30e0ca63f92c

SHA512
6d05ef4ae4782dc98d70c568d5d1d9a3d9b93ffd61acfb6a742066e38810ca91170ac917c6a2749de751fe5fa5a68f6b6082fcdad557d474d705e2274ddaa8f7

Download Submit
/data/data/com.mianfeizs.book/files/jpush_stat_cache.json

Filesize
133B

MD5
3963f0592ce798cae8c0195e37d80192

SHA1
3eef523e0a2cc0d96d041c34ae2368eb43875815

SHA256
645b14cdc85426d219e045d41eb5d88138e7f1eeb1cfd865e057cdf63aa936d3

SHA512
3b78bbb2228f5490294019d2e10782c76ed8f58a11e1e297d90312d99256357b178aec727e88e324e0d6e0c82a03d3092d7cd6305f939e0aba65554d060cc2de

Download Submit
/data/data/com.mianfeizs.book/files/sllak/core/finalcore.jar

Filesize
108KB

MD5
bfb90b39e5bc95b42f0f92a044a65347

SHA1
1adf7a614f346d50f60ec9b73dd09826d6b3cca4

SHA256
f64daec9012cbae90d0d34ea6f7ea2afe80ce267a4182b2e52e0ab6f80593fbb

SHA512
0b410c6391fbb20ce6c5ab1dcd1387985062d8b1ab9c83b27712008f6d40a70689e124c6b304ae15778b09789c6603136dc326e94c5bde00e512276c2a1d44fe

Download Submit
/data/data/com.mianfeizs.book/files/sllak/core/oat/finalcore.jar.cur.prof

Filesize
557B

MD5
3cc4608be0a35c59ab80a04c599b6be0

SHA1
429c119340455f41e398a409dc95871399688d38

SHA256
d1ac7464fd5b8825d5abbdb5c52729203cc263018e2057405d11cb39b3556095

SHA512
618f0f13c5d36e87a6189259a297083b1e0b67e7ee5a718b0c32036a38883b5c37c73b56c19fb9d17f76bc3840779495074b7f162a917ec3e7df9c0cbb1e78a8

Download Submit
/data/data/com.mianfeizs.book/files/sllak/logcache/log1717209828155

Filesize
2KB

MD5
6cd6fbcf9a76123bd2ead362004f3dd2

SHA1
d24f0a371bbab74d39ecadb56ef5b78a394764ce

SHA256
f9d0cf4edeee735201005694221eda534b8e0e0562c718084fd00543c408ca6b

SHA512
fc50a47a8d3c77efa00d2689c9086666ebba45f5ddbed4108c267e7e0a076f5d254999c017b3d6be4003df5986bd99aa23775b8d0bbffec8031a4958c83b4a35

Download Submit
/data/data/com.mianfeizs.book/files/umeng_it.cache

Filesize
415B

MD5
5ab0e3b15867e0b4e8aa3913f43d9ce9

SHA1
8358ec8181ed0b48b72393d324bf07c1027393de

SHA256
59609d95e601e1e9cd5e13d23867558fea1df3a38eafbcf1b9cff6147b5d1651

SHA512
bb891f4f4eb1699d748041079c34f0bf7859e116b72acb8dffe810eb4dcfc5aadded68673a7531d3fab11166c52ac2ca9f95e6642f0908110a659346922f82cf

Download Submit
/data/data/com.mianfeizs.book/files/umeng_it.cache

Filesize
211B

MD5
6965219d5052aaf53aa27d2d68900264

SHA1
0a7e917f7c7920b0a20e596151eeab6f6c07dca6

SHA256
9839b57919c990d4b3ebf8698e134facba8f8cee36781ba10fee4ec1535d959a

SHA512
8e3a843ad593c28483cee9dcd361617fc726503938178efe87bc06404b21341768cf757a679b5119d59f0755270be5404afe2faa8c1aba7086cbcea8cbaf17ce

Download Submit
/data/user/0/com.mianfeizs.book/files/sllak/core/finalcore.jar

Filesize
250KB

MD5
c0078c1ddf9a4bf759362fd691c67a39

SHA1
b670b8bf7b8ea30719554e11e3f72506c28c7483

SHA256
809a8fd3fdb8fe05d8c1077dc6bb005023ff0ba8e90b9b98e719dcbbbc5dc15e

SHA512
614202d12a682fd3826846e54e7648b085ccf9432bb460213210fb2742f4bc6bbb5c7a294e4295cf5a26e36b954acb0d120374569dd3bea590beeff492c58283

Download Submit
/data/user/0/com.mianfeizs.book/files/sllak/core/finalcore.jar

Filesize
250KB

MD5
8373bf886e46c115ba70fee3d6065bdd

SHA1
87b8230d411f12b602d8817d3f8e618ec2b32f9b

SHA256
6e796e309af4c61c112ba210e9e02401ab7afcd9585a25bf8e325883771ce68a

SHA512
d417910dc826908be61ea6270401d85d7de91bb53aa87b370496d5c5ed30c48988e040fe40f11308859a1038238e4df81dd8be8d89ebd21fe3c7d075ea5722fe

Download Submit
/storage/emulated/0/.cxb/.cer

Filesize
978B

MD5
72cad2634d00b74ad0defe08070228ad

SHA1
ee0bd9748be858941627c1519113b418d959b843

SHA256
b620819a9c57085802f4883413cbde74af207e0c4215fdee6111abe3e3da4ea2

SHA512
5d782cba0b4fa804d5e3eab4fab5136be769993ae2b833b136d66ed2b83dc3fcb2bfbdeef3ba6d8083738973b87f5758ed3cd636e3a5c80d1a65a3e4c691843f

Download Submit
/storage/emulated/0/.hide_freebook/.ygzhang

Filesize
32B

MD5
527c83faa48d57b657c9d47f4047f8f6

SHA1
6b95f8243a648850b02e1df5ac150ab02e4aab99

SHA256
52deb846af63faf408f5cbc232f6f92ca0525b10ae9faf9bd6383075453503dd

SHA512
cf926a279c1b2ed1ea500e297fe61ce7ae28c521a5ab0592fc736d84dbad5e4d3f40e406f644b4e03fecdbd6ed6ae99089e9f9c1f560d340d19abc6d6d953f24

Download Submit
/storage/emulated/0/.sfp/.sfp

Filesize
118B

MD5
563e4d2cf75fbd138fbfa9a17303b6f3

SHA1
9a6eb180cf3920be91bdc568b3a4291d1646b55a

SHA256
6d41acd5b27819ca85806014d1bfff935cdb47eb56fcfb5a4333985d82de62e7

SHA512
40e3dae172572d3987e931354f3f0bdbc41b25b43c8e117b5d5e4ef2274a4273d3df2131fbdddfef30c97078f186372f4e0782f959a66370579af3d2af616481

Download Submit
/storage/emulated/0/FreeBook/book/80001911/.fb

Filesize
107B

MD5
cc10f3ce720e7601f3931d622dd13d92

SHA1
746c740ca7779ce3e177f6ca513834b3872648df

SHA256
b007d004612bbc37e76b141579a06fac98c363604ec445dac524b0f2f6cd1fd6

SHA512
a328d6e3dcb8c5b037830cbec6724f47602b67a62e1a3608728480a9708c2a5cd9997926cfc7ba12db101aa8a5cc68fb5dabd3dac0753b895fbdb0b3ca06a345

Download Submit
/storage/emulated/0/FreeBook/img/-2002406654.tmp

Filesize
14KB

MD5
3131779b413ac31a0f2d3905b4fe1a8d

SHA1
f2c857dd68ae56e55b3de670f08626051280bffb

SHA256
4b17d0c578ca1deb78924a2f84c572ad19df2748db831eb1306f9493d2baa30c

SHA512
1dcf8f508ad7a325b3235b4b0518f8d3cd05f52c344a9de53a716a42138d4b3a76d11182c7ce1c23e9368613d20832214e4b884e6f6b24e7cacdb1902869eefe

Download Submit
/storage/emulated/0/FreeBook/img/-281292385.tmp

Filesize
13KB

MD5
e3c1a1eb35faa5cbb2dab6b0f44011ba

SHA1
c347b17a28c95c213e48ceb1a1739f8d36033319

SHA256
23922a8b1bebea37fc5c47d46882468f8ccfae572d1750ea345693e59281dc0f

SHA512
943cc5ea88b4a04045b1cc014204bd1b95d326c868a0b2c45d63d135669a9db2949a014de84e2b1e50fc320dec273f2b633a525c6f297b484e89ab65aeb102fe

Download Submit
/storage/emulated/0/FreeBook/img/-308871807.tmp

Filesize
13KB

MD5
7d7af1018878524e8b121827dce2b649

SHA1
3dcd55b1b6707e9c84c926b6ee19f99491201455

SHA256
4e7b3d72d343a06d1a1fdc4f180f53c1d8ec24b89b7f80fd27154482012e77c3

SHA512
c83fad6e1fe50b90307719f7d93732f09723c189168bf04d2c4a5d84a25a29e1ff3337eacfd7db73e88f485df8027353cfebd2d24e8e5f200b36bcdcf321df12

Download Submit
/storage/emulated/0/FreeBook/img/-403070949.tmp

Filesize
13KB

MD5
3ce21f15f0a2115994b04a13329327eb

SHA1
585ec3e798848e231d037f258992d05255a9d9d5

SHA256
21aaf322c2b86c252bc5046729fd4b03e01cb4fa4bda82f95ea386077be6840c

SHA512
8a99886a45295ab5c037b41d3c19e0057fc20933eacd022097fef846307f456c8882887dafb171bcd4ba21cf8ad4cd65e318c44c86d1030f05ce12665ccd8342

Download Submit
/storage/emulated/0/FreeBook/img/-576146247.tmp

Filesize
11KB

MD5
f6c5b36a8b02649b9b2ca5e7aaf336c6

SHA1
c1cd4bdb036a7d65aff5f7d264fb2e80ac988d71

SHA256
0b25a5b5ae6923d2eb9af095b478ab857974e5f0e71b33c7e3f61866a6b188a2

SHA512
2a31b5dbc3fd62fac9b749543ca7d99bc580a0b0518a2c35ebcdedfc71a631c4744aabc47ef45bb413e1f92182aa4ea37451ca3a0638da0d81e34443f8f727be

Download Submit
/storage/emulated/0/FreeBook/img/1407953732.tmp

Filesize
13KB

MD5
27d514ab42ec1d7fe6d566d9f7078bf8

SHA1
3ec1dd909a7610c21dda58f7439c24b915b5d7e7

SHA256
5e08b1517d1576a3e75525d36379e4f02e501a9130ce4c961a1cdc7a171992d4

SHA512
b1d0066c86085d7b6af69bea7f7aee810b6a1424e7a2e91e778c2e240a7eb51777314121e4767f564890515979781c600a90ab028d5f9a7fcb68a9328fd63afb

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
e621b15fbbca0af4efa98e033c9d1b59

SHA1
c206b56193e9904f9a342125fc081e67b8282cce

SHA256
0a58bca271e5689d1cd65eac51db6b4cb57c8a873d2845fdfd3b4a72e439c66d

SHA512
ceef789cd6ce79a3ff18f632fe2c03c6b4fdb4d9f2d97f042f6d1261c4b8b417e203be0bff6a321dc7487edd9a60615a89c62f4d5a3c3dbef7cf4b55dd90f9f0

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads