915bdb9ecc4e20df3c5e0a028ea9d940d1dccc84c49629f7e9c026afb5aaa087

Analysis

max time kernel
56s
max time network
149s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
03/06/2024, 22:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

92cfbbd5ad2f01c83a09aaced6ddb5ce_JaffaCakes118.apk
Size

16.6MB
MD5

92cfbbd5ad2f01c83a09aaced6ddb5ce
SHA1

a86a7976ff33caaa4ba735fba7287371529ae8df
SHA256

915bdb9ecc4e20df3c5e0a028ea9d940d1dccc84c49629f7e9c026afb5aaa087
SHA512

8ed44fe87e80f12c986b01250145a2f26e74b67df7fc19028d6e7ecfdea71512decc3aee9cafd8e7e3b82ea6e28bcae979604df5abafcf241a97055ab2a27a62
SSDEEP

196608:ADTP7mNIomSYbBExltterxCwO65tffKWokbKCJ3rGbYBWmIP0bFmrVOiRSc8:GTKVx6ENtZYoz+3rnDIMRmroiRM

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/data/local/su	com.jie.lockscreen
/data/local/bin/su	com.jie.lockscreen
/data/local/xbin/su	com.jie.lockscreen
/sbin/su	com.jie.lockscreen

Prevents application removal 1 TTPs 1 IoCs

Application may abuse the framework's APIs to prevent removal.

evasion

Prevent Application Removal

T1629.001

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction	com.jie.lockscreen

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.jie.lockscreen

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.jie.lockscreen

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.jie.lockscreen/[email protected]	5113	com.jie.lockscreen
/data/user/0/com.jie.lockscreen/[email protected]!classes2.dex	5113	com.jie.lockscreen
/data/user/0/com.jie.lockscreen/app_e_qq_com_plugin/gdt_plugin.jar	5113	com.jie.lockscreen

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.jie.lockscreen

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.jie.lockscreen

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.jie.lockscreen

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jie.lockscreen

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs

flow	ioc
15	alog.umeng.com
17	s.appjiagu.com
27	b.appjiagu.com

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.jie.lockscreen

com.jie.lockscreen
1⤵
- Checks if the Android device is rooted.
- Prevents application removal
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5113

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Impair Defenses

T1629

Prevent Application Removal

T1629.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.jie.lockscreen/.jiagu/libjiagu.so

Filesize
485KB

MD5
1da618896802fdb4b6f17c92703424f4

SHA1
b48aa81ac014a5a7f6e95e618e4f951ee12d34c3

SHA256
2cbf986b5e1357e00347d75d6f631539c0f368208079df36bb44603ac4e6973f

SHA512
620a06d8df24597467318582a12bce45e2e2cb66069ffbd6fa27ac5a164c58398ddb9c2348e6ef443272a22ca85fcfa03439d0f0f22109a93708d562e0737cb6

Download Submit
/data/data/com.jie.lockscreen/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
590KB

MD5
a20b450b9eddfc89b600595f52e69835

SHA1
8fac99e31e63859f9779ce28e526b7a7bd5e1033

SHA256
cbece95c97f4e62939f1623c2cbdd9c3271a6600d35d756a0cd9795bb264b690

SHA512
c135b78fa9105bcd61807c52fb3bee327bf000b8d88676be69f6128062cc53fcb2ebb866e8cfabfb2afb3fc96b06ca9394bf60648eec7e783ecdb7862bd45a59

Download Submit
/data/data/com.jie.lockscreen/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
180B

MD5
0fddd6bed2bbdb1d9e283824f83e8e8a

SHA1
7758b58ab7b52810e09ed2d725cb959d1bfb2ead

SHA256
4c8ac02deacf9ab7a4ea1ab1d237ff3d4cbffb30b9ae13c5057323b578e124ef

SHA512
3a6d9d4899b241e10ae06e72ddabc1560efb1891dde3f497be18448ae8c9dfc2911a59b3820a3e6a0d21507ebf0793b6ad0da829a2943a2f3b78ada730456507

Download Submit
/data/data/com.jie.lockscreen/app_e_qq_com_plugin/update_lc

Filesize
4B

MD5
dce7c4174ce9323904a934a486c41288

SHA1
e117797422d35ce52f036963c7e9603e9955b5c7

SHA256
0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

SHA512
d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

Download Submit
/data/data/com.jie.lockscreen/app_e_qq_com_plugin/update_lc

Filesize
1B

MD5
0bcef9c45bd8a48eda1b26eb0c61c869

SHA1
4345cb1fa27885a8fbfe7c0c830a592cc76a552b

SHA256
bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec

SHA512
91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

Download Submit
/data/data/com.jie.lockscreen/cache/cache_an/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db

Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db

Filesize
36KB

MD5
67c12933d1e0e63d9801a6aa43092ce7

SHA1
b6936908554e4a1986b8eb08289e2d3545e8ff74

SHA256
abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

SHA512
db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db-journal

Filesize
512B

MD5
08b597430eebc01b817d273e968740cb

SHA1
d546fbce8909b723d2a44311ed7a120a2a5ca588

SHA256
c27748f9176c9568798ffeaaabdc041d79a90dfd17fc8522a8260cfa7878d645

SHA512
455e8693fe87aaae96b81930488ca5359ca240fc773135ce82f269fea3047d30b16fa384458fe096bed50189a0f8b06c34dc15847db59dd94092d28f934b11e7

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db-journal

Filesize
8KB

MD5
911a867866f43ed5b81fa3c09e0e57f1

SHA1
659ab0c0ae5df283851b945a84ede9accfda09a9

SHA256
c04a3a898c9eb8c1dd05200897e7211b4f64b447c007ce2d1f4cb06696d6d604

SHA512
ae3a185dd60616cbb4d3dd7092ea718d1cbeca561594d915c33ad0035cede0ee7c8aae8c26730684188311d74aba4fd8984fa525814f1443036001019f02f178

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db-journal

Filesize
8KB

MD5
adcea11ba265b7de3c608776766d34c3

SHA1
2b353b335d29dfc47309d8b2754d05149a6e13ea

SHA256
0defb25401337150606f4e398cca3afbc947b1e9d9aacb85ea68d1e9408bc2d7

SHA512
da5bc2f1caf1eccf5b240fb30d9e53329228a45fd8e0ebc623f835d910b7b71f684a66ccaa1dcb6d51d643ab72f930c3a1be747cf40a342ad07187c2abd0fe3b

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db-journal

Filesize
8KB

MD5
da15cc98d28f01f80892c2484e2481a6

SHA1
a215d4fb84e37731eab33c6e90eb3fb1f6289ff6

SHA256
0d5720b22d248b150a37008a04289efd745b2f71a71c8bab75c3d5f2c1baf689

SHA512
1ba6d64d288d1a6bbd44d4fc33a009c65132f1ff8436a474be999796940fb36cead6fb4117d58538834efc07dd1ae7263e4f52adb91ceff67f5d50dff4e7cf37

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db-journal

Filesize
8KB

MD5
476e3b316c9b5ee52ad81acf9e1c9642

SHA1
3c126875b4c2f56d39f534813905d144c5c4b707

SHA256
765e9cb595deb4bb7c2669eafa487cc8db9a453ad4706389c0fb8da12decfd4f

SHA512
1aba07934c168659fb38d31b850c0e541df34730a3b542c1ab945b71d33cea231275d89d06cfa54bbeebaa0e0c05141a2ab4578767176d682f5d30d37c7a0dc0

Download Submit
/data/data/com.jie.lockscreen/databases/cc/cc.db-journal

Filesize
12KB

MD5
7112ed2ecfe51385584e3d4fcdb995d9

SHA1
494ee159b569829e6a0c98444bc3d6957717ef95

SHA256
6103838cee7362a296b6b52f8731a18bc22eead79638f75c5857fe3c54aa9c61

SHA512
97a9d32bda7ec791c39b601f32d66d15b2a885bc44cc83f2fbb401efcebf21e29c7c85f42fc9e7c5f438dee6b225b62bf6e75f9d2fc2a8be49183d6ad3f38e16

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db

Filesize
32KB

MD5
8fb5aaaeffc71e973691ca1a6b1c3a72

SHA1
8dcc355796a4545d081f44a41209ed8c810cb10f

SHA256
aae11ee17503809da5dddd75536f8ab151f2da1783353e1d7e73a1e7bda95671

SHA512
daa75b2ec337166e0f8939d1de756411b67c1a2f60a0cc80fe9d0cc9d55a3dd7f0f068f2d59c0b391f9d9f0b6f547fb7a935bec270eb1a4ade65a4c8c7197eaf

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db

Filesize
32KB

MD5
38564ad4c73e5619bc2264b0c44997a5

SHA1
e55f6fe1b20347ad4cd58d77af0b0feb149f63d0

SHA256
1820a909a310bf7bc4ddaab6c8be3954dedd53612749f7bd08fefbef31670ec8

SHA512
30d84731a3d8380e63bb73227623e86bd779476474269f252abe546028531c77658573874444e66b862ea049724e93a9344b1d4fd9f26c0fe02a79a4079a9a7d

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db

Filesize
16KB

MD5
4759c74432c951c2e673131c0540dc26

SHA1
0f7fc47fca3e9969315c83ea7d18b2357a09a307

SHA256
fdc0a1eb2469f80b597a8360945e5e127aae527b3e8dc346a91cb428070163f5

SHA512
b1cf4c150dc7ab1dcfeb4d6ef0beb3b40a7254a9ce7d281d89b5a6e33b7fcfe2815fdcefa9771782839caffa731315d0766661940b6774ece5ed53249b0ae4e9

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db

Filesize
16KB

MD5
39ec243e5684ba07290bcb12985694ef

SHA1
4cb280ae27be06cce13830d32be6f1d8f07947dc

SHA256
080e616b773410e1e97d5380345a16edc19630734fde837cb254bca5492232a5

SHA512
f587c88e4deb381f2d0b0b60b4bf42d282d2535f3398ad72061e38426eb47d788516007c2b92aecb6ec29ed02c07c85633d907a2e8972bdab8dcdd204ee1b080

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db-journal

Filesize
512B

MD5
b6f0d9141c567005b066d0ad2deb6caf

SHA1
1d48be6453cfa1199c9899f8fc85609e762b880e

SHA256
757b16325039442b4c4ccb1672fad0c74955bd2fda6406933ac4c5fb19369961

SHA512
4d73cc967cd255aa1bb6460ae8919e8d9c2f98649c4c91cb579297becf96b230263bd0dc0a91c20d821d74972d8c32b464781d23a89b864014d5e6a8430156cc

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db-journal

Filesize
8KB

MD5
35470e716a93a2ed2a5768a733c4211d

SHA1
dae9219da3e00d3521e81c5e6427e998dea30dcc

SHA256
4dddcee1092120e99690c854849ac2371faa38804cc2c51077f71692aed395f2

SHA512
73a4ddcb7d3dbbcc34fc6521584620ba23ce2ad4948f59fcb333f1b0f10ff2061b14df577d4423e513d18bed8a3faee96948dd88838f9c068833bb2f5d3eaa1b

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db-journal

Filesize
8KB

MD5
9a347acc805f568dc4677610fc88973e

SHA1
726c1b6e7ca5abf4fdd759c463ff869e78607190

SHA256
f6135801bf702fdaad94d8264033cbfc0798bf60836ae858e27431b7383ade00

SHA512
524c608976c055cbd6fd36cd7f239bc8ea43d35e5b7acf2b124744fa962d0fc1f593ea135916aaa27581d4e018cf57030258035ccb6e186600fb98bb9d697aeb

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db-journal

Filesize
16KB

MD5
59669fe6f439ace8b8427b049181e5c7

SHA1
da2420789123f19418f8571770d82285c450e5cf

SHA256
e9682fbb279c08b804ee3d02044661b188ef2383ff1ff879cf72f34986670879

SHA512
ad6b82442860a37efb30c04c354dca6422e75d61a686fe689ff607aa2ee49ec7c7ec2afc57a73ee3290ed06cd3d2d4529b2ef56460ab8f81e334edd083d3b478

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db-journal

Filesize
12KB

MD5
e274a1974a96e9eafa891f864f4562b6

SHA1
348b4be51659bb02c15c485faf430f24c7d61fc2

SHA256
5b44c86fe97ebd9c198c2e7b4b283b59118fc964099a4dd99e110dedd85c7a51

SHA512
32b2146600e849ba4e13ffcfc6555cb8837ef9d66c14d3e494f0c48439c7e825b1adae0d9985d235b63341bfb979a54c7028aaf17ee9b8dc7c3341083783f57c

Download Submit
/data/data/com.jie.lockscreen/databases/ua.db-journal

Filesize
8KB

MD5
42f2b96d2158a0a3c4fc1bfe254a0b5c

SHA1
d6c1c7d3263648d1ef951ed19a080bdd026e0bcc

SHA256
810057dab71fca31011395f5968dc4edab2c937e0ea33ef0862b444c333779d1

SHA512
da83e174d375a0c4519c9b5e0760960d9e0e4ee65fc36938b2ba6ef77b511a28830589200a65c95dbcac532c270a6032e3b21828126c11632cf482dc8771e597

Download Submit
/data/data/com.jie.lockscreen/files/.imprint

Filesize
920B

MD5
e8dba9ec249886679b46c9c01b337ced

SHA1
8eaf695b58eb0c3581243d0b84dfc1d54411e3b5

SHA256
0e0bac1a614ce84988fc4dd94cd838f2c28bc68607088042ddcfd064e6af809e

SHA512
44226c35ee80b5c391357e91b22c5fb7555ae6019988bd68d339e257c5403c786954dd512c2c4b62bbf7bbd758a8797322ca8c7ba704c519f14ebe9ee227df8b

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.ac

Filesize
40B

MD5
2264ba849931de46ee644d3ae4b1d7c8

SHA1
a2e93b6d0088068b59eaed4f49d5492f11579326

SHA256
7bc14941e201b37dccf1f9c0c99fc2b6bca0ece6d25a6e2cad1f7c4175e95769

SHA512
5936da1d6de15201cdbd311aafd7da3dda9e8c6f72d2b632876a645e47f5aa897b2e42b81ad83eb753c62312b4b4d88cb87b2d5c5f4e522952813e9d41212a2e

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.ac

Filesize
40B

MD5
f521e87782b01ba4347a8f791c4ddfb4

SHA1
c271e61c126da8d46759133d5b35e6111e874c88

SHA256
bef23c7606686795e512bc807ef321a98767136555b0d53f9de6b6a2976abdc2

SHA512
08a85bad5d8d49c82c7158ff6dd842ccdb315bb29035a12e25dc48895b4a5d1f3ef6474b42e13155fe1419ec6bbc9ff556cd2cae6d591dcf424779e3f88304aa

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.di

Filesize
340B

MD5
edce64665c057f4059584853f1b5df28

SHA1
296a58528179a3b05d7caad18449d453d5a1210d

SHA256
73586c4f45727ede1c824f04c25ed029b97653a9c9a18163758772e95168da84

SHA512
6381aa0226d981fe426a27485ad9c3bbf88be24ad066355f32cc2794f0137d1c9c00c9e88ff6c8b1654cd7a6a83ff72323e2e9ef443756f7c1f038c874ccca0e

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.di

Filesize
340B

MD5
bd40d74fb393b8c32fc74da215516b7b

SHA1
972cde2ae36e0e0958975ae4c28122ea3a95f37f

SHA256
366b56ef508d7dc9f81d536ebd5717c9141d8316afd501536d39bf29f84b0ad9

SHA512
3348005b0fee44cbd9e4852b594ead23f542960d6fc4dd1e1f4ae3169210864a361352fa7041ddc7d00b0304424d8f99b4e844e44464d5c5d9e7a5c8ca8508ca

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.ic

Filesize
40B

MD5
cc8c3365313c65378a881ff98fbad432

SHA1
7f4f00f968ca9cb10c0cc9c651949ec778decc93

SHA256
eb90a69476907d45c66a46ffef65dcb163cd26373df4ffd876bf7f82cf7133e0

SHA512
5d00c23168ba8b7acd0785013b165e68e40a2a73dc17d3bb9452d0826db9bb314883764699e4b0153a1809023849fd2bf5eb92ae5a9b8835d3d348099a063455

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.rd

Filesize
32B

MD5
ce398931ad4647e7596ebd626e4ce06f

SHA1
d79ea5c2d3197d61f8622ff0b770c34deac10d80

SHA256
14b711b9ebf17321b64c38e490541d404472b285cad6efb440a704a9459fb136

SHA512
5df350c303729d9f1b3fbecad4bbe4b12e5d201af71f37a215305c895673c92ced417b53e4c5d204174200bb871e023b3dec2e676da63fabf4ba9a35421b6a5d

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.ri

Filesize
314B

MD5
98a7dd797f1295b88caa3494bc7005dc

SHA1
7f64c4d2449ca7b8fa18870c9afa10f6ba98c9ea

SHA256
340f13e4b816fa8a7c752bb9c8e43e66199ac458984f7a01129fc03ec0dc0df9

SHA512
e7593941748ffc95b42cd17b7779b654f4fe397825118fb7a6498ed6b97eb691c34cd72cbb85e9097b76a342f4ea59b788eb1f743de94bc31025a33029f762e2

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.store

Filesize
127B

MD5
d9e45a75cff7f5d78ff62715125b781e

SHA1
22f862dc7bf27bce153d6a1f0f2092a6c5f8c541

SHA256
729e59596220ae5b6d789da2e597b982c706baaf82e1de5d001e12c3cb009cbd

SHA512
31dddb595d608705fe59530e04b8450283909f3927c5a57c7475151a72e4a92111f70fa579fa6aae062d6cc34009d16752d7eb46c48ab9f8a1f36f9e5e790dc8

Download Submit
/data/data/com.jie.lockscreen/files/.jglogs/.jg.store

Filesize
32B

MD5
448e391c59eef34ee1defbe4dee4c41f

SHA1
df1f890987371d7d8e6963c68b787856e42bc146

SHA256
55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549

SHA512
ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7

Download Submit
/data/data/com.jie.lockscreen/files/.jiagu.lock

Filesize
27B

MD5
e47f0612193f6b9cd4d1640f8b6e9285

SHA1
441aafdf90bd96ddac758e55ddbdfd4a2c8b84d2

SHA256
f2fdffacf2fc93d8adda30fef158adb4101651d0e631f0469b6da2987ca0d8d1

SHA512
fc668b2ff00c4c4c0cb39a493f76a185049974b32da6b84782b287bb44b2c673583749ba76b9ef673dd43dd3bca29df2d2d2b2ec4cb0f120c742eb63cc91cba1

Download Submit
/data/data/com.jie.lockscreen/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
95dede0bee73dd7620774e3bba6ff886

SHA1
4dead5d7659df6dacb6ae288e533a29d02318c14

SHA256
a9d254378b1dc58c36ad0162662fc05b3e069d4731e57841bae0e41f3b10b373

SHA512
c3149d70a6c1e7a8b262e89300420c17cf70c50d7880d8bb3655dc067459ba52e8973cb07ad7c4f7279bddaa1f1016fc40449f9cbfd76708f8186062a0392e1d

Download Submit
/data/data/com.jie.lockscreen/files/exid.dat

Filesize
52B

MD5
fae6bd8394df4fdbb3ee0da21aec411d

SHA1
574780ade40d8a06f474236755d144eabd99b2ef

SHA256
28bd7cefd686cdc14969a8774fb04938f13279904f5bdc17c429ae0d23fdcca2

SHA512
bfc4f4c22c943e0915775761a018de61c54c49912d593a0c1ec97fb4b6bd59a75890e6e592ba4cd4b78a407152b8acae4235f72050f0dad7d1d8db84df47901b

Download Submit
/data/data/com.jie.lockscreen/files/umeng_it.cache

Filesize
350B

MD5
6f11a8ec3f636ba874014d650d370280

SHA1
39e60bdc249262df58dcd3578aaa3dac46dc9613

SHA256
c1fd149fc1cbbcae1ddea7339bbaf799add3c0ee323189f7fe05be3701912fcc

SHA512
39b4bcdb4f93b2c577cf73e449159d2f040308281fbea1ebe35648ab3d94fb865ff268f847180d598b8b928568ddbb7a659304cca65148801dcbd3ba6d3074ee

Download Submit
/data/data/com.jie.lockscreen/files/umeng_it.cache

Filesize
178B

MD5
3ee7426b23d0506a6092f199efb45c64

SHA1
5335f1a88d54e6b8c76f1362bfd66456ec081f06

SHA256
ca3841d24e725a3121e226cfba65c744021463586bfc31f0c7d4d50aa2ad46aa

SHA512
7da36a6e3724dc86d80dad281b481bab3ff0dedb956d8631c64863dffbd76e5b5f2095d9e6bb04672880705ed83c9780f085bedbd80d77b2083eb6013dd9bd8f

Download Submit
/data/user/0/com.jie.lockscreen/[email protected]

Filesize
5.6MB

MD5
453b6adb7a00e18fcff12278c70ec8bf

SHA1
d6127446bc59a5cafb23c550f92e53ef8c928966

SHA256
8768c2bac8c8b46fa2a345211ef71ff25b02be003ebcc7506b784acbfa80aa29

SHA512
0a3bf1b2a8d1dbed25ff7464486d56fa06c8568034d224cd1528741442ec224cc20483e87877187cc6becf3a43061dc015b3bdf8b00337282661c4f62e38af8b

Download Submit
/data/user/0/com.jie.lockscreen/[email protected]!classes2.dex

Filesize
802KB

MD5
279c6bc57173dd9d62b5f91ee6e16560

SHA1
5fa1e56e70f4ea0a62c9373b7ae744614db0276c

SHA256
ac74d7768cfa2d22b3a316a31009a35d13b8bc8c7ff0b6d35ae57aee319a0e75

SHA512
016580796b780e8cb76f382f080bbb65e2d6a62b534d0c82ec1d1b5b81520ff06df1589abe289608cc5fcbd1609e824cd9f6ffa7c4109c96d1029b777bf74eeb

Download Submit
/data/user/0/com.jie.lockscreen/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
844KB

MD5
3e22adb647163c2fb7a9ed27d5b0de22

SHA1
26ef654a96871be6c8474fa12aa0a45ca8380720

SHA256
cf8aa48e762886905513b2d9d793ac6fdbf3f696adc95f4de511dd53c997e25a

SHA512
5f5f782fd4c271a7f962e72db01e4d0a4e18883e74b8f8c0c637fcaaa5b569ef37190343fd66f0e5fae319627632360150ffa0d86968d5a9d52ae15f21f89ee9

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
4c4c5285293d5141f582aefa4e038669

SHA1
e01852a72e5a8e6f7d63a21426b515118196047b

SHA256
36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731

SHA512
097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
58638c0742bf1352a5f8706e1470793c

SHA1
2443d52725519ac3ce12ff01cf5f30a8554b5f3a

SHA256
e93b7d94af126bec90a6938b33e3908ce29350f9492a25f166234f1b001985ad

SHA512
592cd535cecc56b37b3b59ace18dab4cabb39e224853c55e1ccee4b9c16c06acab7f5daa6efce07bcbdd2bae95e8fc00cad6eb363f96b1b4b0214da8d8e2449a

Download Submit
/storage/emulated/0/Android/data/com.jie.lockscreen/files/tbslog/tbslog.txt

Filesize
2KB

MD5
9e20d9814b4e1846f8c0de9cb7446207

SHA1
486d4a9876897cc4990d5e95bcc2d146435a049a

SHA256
bb8a97208a465c3e0d4128d02006568507747fc339139bcabf711c025b19a2d4

SHA512
f648f76c1edc1ac80ed999f336c30b3a5ffb0c1c06afee366f244014f0080be920e0f0488a041a604e91d313cbcb36187f46ff7b396c50448ca6d5364b6ee47f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads