aeb893e5b2b546e9f330b3a80e79999c612315020b8dd18b3a985fd966eea434

Analysis

max time kernel
179s
max time network
183s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
03/06/2024, 22:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92dd1b51436d6148bf480f38399efce8_JaffaCakes118.apk
Size 5.8MB
Sample240603-2pfjdscf66
SHA256 aeb893e5b2b546e9f330b3a80e79999c612315020b8dd18b3a985fd966eea434
MD5 92dd1b51436d6148bf480f38399efce8
SHA1 e2514578d20abadd8b0440e6360f8d5e010e7565
SHA512 122b6b3f1a0e80109c53334eb152ec7db764088719acd2a36007fbbd1b0bf5d14b121f667ea512575d71dd3cb467db06fd1c9801f67aa8773db40f358467e5ba
SSDEEP 98304:uLAYUhszDDNL2E3ZSu/ukKfzyUM/Xusmb4JyGph78sbJCOVzPhnbIAxYi/m860lA:EhJLyD/fsvnh5EOtBIWYiu8fJTuQjLGj
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.zdebao.zdb:remote
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.zdebao.zdb

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.zdebao.zdb

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.zdebao.zdb

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.zdebao.zdb

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zdebao.zdb
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.zdebao.zdb:remote

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.zdebao.zdb
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.zdebao.zdb:remote

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.zdebao.zdb:pushservice

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zdebao.zdb
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zdebao.zdb:pushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zdebao.zdb:remote

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
14	alog.umeng.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.zdebao.zdb
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
PID:4546

com.zdebao.zdb:pushservice
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4603

com.zdebao.zdb:remote
1⤵
- Requests cell location
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
PID:4759

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

um_cache_1717454786500.env

Path /data/user/0/com.zdebao.zdb/files/.um/um_cache_1717454786500.env
Size 551B
SHA256 00d2ee5708e82b38b953d782c96022e55c39f7ba1700fb9dce5fb9c57b03a7b3
MD5 20032478aec88f82507cfae7189325ba
SHA1 0255af94ecfe0a67219f93a868edfa9daed9071a
SHA512 83cf9fcca3d1da4bb13f09e042fd75744f7eec91024d6431c2f4275f0bed45f30d5d7f01d6fe8101d6320f1fc72804497b9fbb1c02cf540cacbf2b36ad7fa9e3
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/user/0/com.zdebao.zdb/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 8d701396fb482959902c82d008fc4750649c01de8bbf5a8d29dcb4e5af1bd846
MD5 6d858a6a4a03654c4162d11ffce89251
SHA1 e0a14ec93ccf8e364bb9c883dc8ff7ae2243b0be
SHA512 ca95c53a10465b18f075a2266e9511e7c8b5cce9fc27bb7d63cc8f6f44cb130fbd47a9844887abaec5310f52c6a256aa6489e0b409b5c2463ae536af03300ab5
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.zdebao.zdb/files/umeng_it.cache
Size 1KB
SHA256 f47dc1c8afa5ba922751aaa0ab350455a9bd5caca07de07d294ad3a9486b2fcf
MD5 7379870cb9fa5c89781805ddbbd41c09
SHA1 3ce6f1666edc72033e9aa6d8a2e8b32d6736fea5
SHA512 64324cc08c9e108183278d3bbfd1a0bd5079003f6a5098ab5109f8e613bca0388395e07cdd917792a7dd816ab29a41511c4df92632eaca670a8346673ab1a714
MD5 SHA1 SHA512

Submit Download

app.css (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/css/app.css (deleted)
Size 44KB
SHA256 f6de64a19f1d596773838c89c48de2d3f856103c1a59b004f025a6533640db81
MD5 49db3a6319f7350ebbe41365556f5a6f
SHA1 c5962308b8af2cd3d018aa051027b2edec81c106
SHA512 5176cb3f8fff0de458011bfad374051b1fefa60a793956d2881abdfd4d68d390c545e8d449343a2abde50268240b2b3a1e3d23e258169d961c3a7ff5d90363b3
SSDEEP 48:Tx0xopA/t379y/MS2yYxLexpaJU9CTZVpKxbWN:t0+pYto/tSCqLpKxA
MD5 SHA1 SHA512 SSDEEP

Submit Download

feedback-page.css (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/css/feedback-page.css (deleted)
Size 1KB
SHA256 3aec625c7c45f537ea9d37e720dc40817bc6cfdd3c18a4eac340b332399d17fc
MD5 a84815762dabb89863082e77f6b9480a
SHA1 19841f0992f03862794c83be099e15b03adbed0c
SHA512 9f168df58da6d97c6286252f41b61cb55e3e7cefb4477f5bc46d1a9449c966c0f1216672e3481f6ed2cb8cd826a0e644324e0a40065a365a1e208d73c6abda68
MD5 SHA1 SHA512

Submit Download

mui.min.css (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/css/mui.min.css (deleted)
Size 70KB
SHA256 2b520d57bc890e0b2a1783e6af6563a5885acc73feb9c372306e262afd9f2e19
MD5 d49f73e21e4b41ff1af5b0af914cd397
SHA1 74dcf7f0661f4f48f419535d7c5ae8d22b8af07a
SHA512 f0ba4b88c925f0e5f4008ad1f7b1a979f30f7fae8b6026fb4bbd146bf1e3d31aef138179712c0e93adf8656c9f9ec8bb3ad74540bdbb429743e72d29cd507b7b
SSDEEP 1536:z/wkDAw21nfGDZ/Ouv+OZpSDToYS1Yw5cuoZEb2ojug4J1iT/ABtFg2jrrlrwloe:QfUDije
MD5 SHA1 SHA512 SSDEEP

Submit Download

error.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/error.html (deleted)
Size 8KB
SHA256 2681d61ba9e961b7eb8405297c172cd8a00319f16f98318cc5facb9cd620092f
MD5 14acb6d4cd03da14b47fed1c5561e792
SHA1 e8fb3804ad87c97c24886817050048a677d57c5f
SHA512 441a4d39ecdbc9557e9af27c21ec21eea646ffa332a50e4c1fad660605d3c26fa6f386b561f6935fc5fe51335d8b726e370f505f99bb7c5211924f1687de7c01
SSDEEP 6:7+/l9An1Pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKYn:7+toqLiuWdYRmBEyPbfn
MD5 SHA1 SHA512 SSDEEP

Submit Download

iconfont.ttf (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/fonts/iconfont.ttf (deleted)
Size 52KB
SHA256 0e7f47344333f6f84f7b9cc5ac977916192fdbe34b3bcd4644218605062f4100
MD5 df77b0b2da8f3b2404e5330978ef95ee
SHA1 a9cb2dc3cc0f6446946542be43479b4fe375a0c7
SHA512 fe1126236bc604c990b7ed74638d25ee36345f8099f07811b8f6051901ba112946b3c342925c1b12cb819348ff6abc7d7f04baaf31f5e6672bf16faa1164edf9
SSDEEP 768:6jk/7EL0nXWAS494HmxFg3vPOLXHy7giK4bKM1nPamI5+:waXWASXdvPO2X5GWPtF
MD5 SHA1 SHA512 SSDEEP

Submit Download

mui.ttf (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/fonts/mui.ttf (deleted)
Size 27KB
SHA256 a9a9aea3e93f213107091b60e6da8c9de3183fe0be77179bf6800212a8b6675b
MD5 3b7cd9307c66aa50b374043e058c4b4b
SHA1 fe45d41484402bafcaf261fcb1bfcc5da83d393f
SHA512 b5d47322e70913a9eb7a1d17f253ad8fed4d4293f21bd04a48bcc3e05238ec3a4ceb8ed1aacc5fa4736ab05d80367701278a0c79a69c80a761207affd0e4d68a
SSDEEP 384:7wa31wO8diCUYonBpo8z0uY/dcX2Wd0JZyi9eyLu2df5+:D31wxiChonBpo8xYyX909UyLNV5+
MD5 SHA1 SHA512 SSDEEP

Submit Download

alipay.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/alipay.html (deleted)
Size 12KB
SHA256 6b243066e62696cb2fcea02272ea0bc8f7e8daa45e3eb67ff2b3fc1f2ba35e92
MD5 c605d021bbdf36247469010b626176f1
SHA1 9ab8e7248c2d294bd8e057c49fa74195ae53bc63
SHA512 4fef4bdecbb946079fb1ed70b12967dcc311d5b975d1764d57370fdac273ea912e60c843c99ede4e4193f85c6148629bf4b4d22125625f9605a748da3d15bf81
SSDEEP 24:7+tccHnqL6ivN0uUduRwCJAWfLq8w7qTQ3o0h7igzD1ZHtU/TVGSVF:7MTq2o0xopA/t379y/MSn
MD5 SHA1 SHA512 SSDEEP

Submit Download

feedback.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/feedback.html (deleted)
Size 2KB
SHA256 3f4dbe2c78ed92cff6a4cc507cbe9513e8a81313a5b110aa7e05a3c966c602cd
MD5 219a62347a4139e83145fcf86537863e
SHA1 22d0c21324ef7f9953cbefb3a12f37ac035c2e4e
SHA512 37d8daceb5f52d0f5a0edb5c01b51ec86e71f469431f7a53a5fd21ebcd6aaccd5a77b99e4a77ec82b0abdacf259d9e4dbcdd957333972d5a2efd85d608df65aa
MD5 SHA1 SHA512

Submit Download

home.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/home.html (deleted)
Size 5KB
SHA256 941ca7cb494473dafa1d673b916353ef26f84cfdd1b2fd4e02c88e46c9d72c29
MD5 482fa78792a6bc239f5e82ace1f53c14
SHA1 2dd9df850d00db75d34b84728988cb66e9d18aa4
SHA512 2eb1fa065891048a2b297c7fae6c8990e733d41006600eed5c8da05f52522fbe93edd4b5853525c522f55beab55b5b0b91186a11fa64a28714497a52e2b186bc
SSDEEP 96:7NwTzqHsXYVvQPNKHQPNKIyzvQPNKHtkPbgxZdJXFguhRzT2vHsNvdwBsysnNmJu:7NwTzqMkwNKINKIEwNKHuPsxZdJSiRz9
MD5 SHA1 SHA512 SSDEEP

Submit Download

income.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/income.html (deleted)
Size 28KB
SHA256 28c646a98fca3b32bb3bff6b16e1804300bd374395fb345c4d3135f827143ebd
MD5 0f1d016b72965660817257279fe6db8a
SHA1 c6df5e5df595298450460b93783f47d41de93da6
SHA512 c6200160aa333f7383ef48b3a8f0b94ec2e7fbb08ae8fa6df872a6e29b95457efae0ff9a0624e336369c69ecb91d0266ecdef94fb8d037ce94f99ba362a13773
SSDEEP 12:TLEy4LVbUD6U5SH+0UNymNRmBEyPbGtOwI:TLEJL1c6U100d2GSiI
MD5 SHA1 SHA512 SSDEEP

Submit Download

income_list.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/income_list.html (deleted)
Size 8KB
SHA256 0ca2fde1c360ea972ec7d7905bcc993b84f5b3250b6d8371e06680fabd2bead4
MD5 bc1ec996dc7df2c5756e7973c4131e1c
SHA1 892db33774d94a98bf81114997b4b4af43ebc000
SHA512 a7ae53b92a1f45c3f8b9d4cf5a556021c898efcac5cccd62ecc6de2fe4277b587fe29b35281751f4f10cea5633a317831863dc54d643065c9a84f51418fed5f6
SSDEEP 6:7+/l9Ign1w/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKl:7+tOJnqLiuWdYRmBEyPbC
MD5 SHA1 SHA512 SSDEEP

Submit Download

info.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/info.html (deleted)
Size 8KB
SHA256 4b545e3987231dd8b02d26fd520fb0a82cec5595116df92fd07587c6afd9dc0f
MD5 8e75268aa7e77468b955821cd97c05ef
SHA1 b17061c0cf8223ae1bd30376b5fd94af52fc775f
SHA512 3affadcf91463cccd45189e9f70335de30e93b4bf8f173defc05a16291522f2db1ff0e486e7cd6ffb030b4ef393a6653d0fff59d2e2cabb911e967376a82f0e4
SSDEEP 6:7+/l9uYPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKY//I:7+t0QqLJdeWRmBEyPbbXI
MD5 SHA1 SHA512 SSDEEP

Submit Download

list.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/list.html (deleted)
Size 8KB
SHA256 3a499c7b99c3ea8aec0861e688bbaac3dce190b74b26451a370847807d2ce5d9
MD5 31f31595b86c4af9a9bb48612690c856
SHA1 7425574f24fc5d614ca320917ec8c2b19dcdc858
SHA512 3f20c581c33f96152790b2923fa4432290d1d93af43eb25e1a2669f41fe026799e7bc48c0e1f3261eb1944ed1a5b9a153503fdb2437941757bb6eb4ef4a7ec4e
SSDEEP 6:7+/l9+4ing9bNFlq4ysetE/8H3gLu+0zYwIymWERX4PBX4ogLugMBX4suuKQCx+o:7+t44inqLZetEK+0UNymNRmBEyPb/oJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/login.html (deleted)
Size 3KB
SHA256 cea827cfcd374ae8888aca264141642d57971e619775e7d6c3f3eb158fcbcdeb
MD5 a49ec11f25413e8a8131e45142b809d7
SHA1 20d3aad42e21834779bc5c9993c77e9be0995511
SHA512 360e0a9ae14ed9e90c00193ae656113158be246a60196552a76653c70e00bb37a17459c797c2f717b1ab1b76c7dac44b882a30b64904b4a77f47632c9445f1b1
MD5 SHA1 SHA512

Submit Download

message.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/message.html (deleted)
Size 5KB
SHA256 7c4dd9e30decb04aabb37e5e27bcb41a76030f4621307b8e212e7b85823a3ff7
MD5 46834a0ffe48094bbb2a368b5397591e
SHA1 8fd27d651dbd38cc277e4d9fd047efa008773166
SHA512 8a81333cfdd54145c0c7b4a4cdffc24b6c36eb2c1d1c3062c75f8cc40d94340dd4818cded091b2cd067bafe1b190b0c7d26936b848e0e8a02b1a8f4585168d5d
SSDEEP 96:7biV5E5jhRW5Ali5hd+J0qIAIsgm3yp3Ne5jIgL4PSLkWkd5MK8:7OQbWjJq0q/Isb3qNI4mkWkd5MB
MD5 SHA1 SHA512 SSDEEP

Submit Download

myself.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/myself.html (deleted)
Size 80KB
SHA256 b6415756ec91cd098832b08baffbef01a9294312027318e92c765ffd13f0ab76
MD5 81a416795ad85900b4f6aaa10976fd8d
SHA1 01bfab1088f1b17a617cbde4aa68fbc71d513eff
SHA512 0ada7b344840c4c3c98b063bd3d03570f14af7724301cb0abdff3a59ddea2bcb3a2e28f385a877857259c1acff34d063ff5947668588fa80d93b66897271a340
SSDEEP 48:TLt5FkbdWuvWDrBuJDIiuSSyM150ZGIot2+3psPZYq6yS:R+cdVmnhS/Iocup+ZYR
MD5 SHA1 SHA512 SSDEEP

Submit Download

phone_regist.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/phone_regist.html (deleted)
Size 8KB
SHA256 6fb9cd8f4d0ebef00679967b0b37869870c3aead884179f382e2d94c11bd8814
MD5 e78344b520a303400d080585eafec1a1
SHA1 b5b917607ce1654f558ce40dc41d68f636104e08
SHA512 65a8fd401ceb7bf6976a514390087c17ef693389d19ab51dc4f25df94c6f0cd8b147aa88fb363b2d3873cb51ca1ee9e23dc53afa670381f164352a7e16753e4b
SSDEEP 6:7+/l9fQgn1Al/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKkJU:7+t9OlfqLiuWdYRmBEyPbHJU
MD5 SHA1 SHA512 SSDEEP

Submit Download

pupil.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/pupil.html (deleted)
Size 8KB
SHA256 aa89789591dc0b73e6cc379fd6e14b07876a524e9f594abc02976ca7a321ea9e
MD5 751ae7ca073e7367a60f5904d5379256
SHA1 ec200cc06bd406d3f046c47cbd24aff064983634
SHA512 e91b9c5428c10ea179e50ff35ff086e525c11afb8d3000c83a34ed7900a17b46143c23caf6b472a1b789b1617a8f3ed84e2a34d2850d2b71460d4090f5cea330
SSDEEP 6:7+/l9x2FPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKZl//f:7+tb2BqLJdeWRmBEyPb0Xf
MD5 SHA1 SHA512 SSDEEP

Submit Download

pupil_list.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/pupil_list.html (deleted)
Size 8KB
SHA256 bafc799400e4908b4d472366cb9e072f78a268c105bb69c73fda61ea4a932ddd
MD5 90cda81f67e0a73e1de86a7e60fab448
SHA1 ecb06bba51f5ce8a3ddfd9fbce0f172a11e1d1d9
SHA512 60072112f1d7b66c1fb0b1286f0277d55fa962709ac7615d4f8d397fdcdcf004afabcc4aab2ee05bcfbcc8623ba9f4eda2eb97841278bc53e57e939db3a7f58b
SSDEEP 6:7+/l9q/g9ng9bNFlq4ysKl05tA2nI3gLu+ROyDntwIymWERX4PBX4ogLugMBX4s0:7+t8/g9nqLZTo+3BNymNRmBEyPbbJu
MD5 SHA1 SHA512 SSDEEP

Submit Download

regist.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/regist.html (deleted)
Size 8KB
SHA256 a03928f6b77d300dd4a0e2945566a0c1d36611e83ad724929d9bec853464ab55
MD5 2ad56962d211b6d8c799ccb3fee658bb
SHA1 9dbf953a7e7f880c938c656e0d7ce50f4851ec29
SHA512 9c41492bae1be817d48409720bb3f1aee025159be6af32f363507ef269ef8fdc19b006114e9bb457f8c4a106123a849405da1e2769143763b60ffff3596370e6
SSDEEP 12:7+tpqLEyItlqVSPD6U1o+3BNymNRmBEyPbGSY:7+tpqLE3Sq6UnTd2GSGx
MD5 SHA1 SHA512 SSDEEP

Submit Download

template.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/html/template.html (deleted)
Size 8KB
SHA256 674909161a0094e38c83c4e04813248644f5347dec382eb44b1544772b23ba4c
MD5 55a4ce63855d12b05649c4fd96168310
SHA1 a5796d108f662efbe5d006df08e1b3a6dcb0d280
SHA512 5b832e14d6fb5e2b4afcdcbc01e77515986578b4012bee8744f6f2f09d11a2a118416bdd746883db98ea96ba482f449a26eff3c0874c8fa7e1b45c38b8b9786d
SSDEEP 48:7McqgtibdWuvWDrBuJDIiuSSyM150ZGIot2+3psPZYq6ySmX:7dGcdVmnhS/Iocup+ZYRmX
MD5 SHA1 SHA512 SSDEEP

Submit Download

65x65.png (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/images/65x65.png (deleted)
Size 2KB
SHA256 a69ade08c04f240a6c095195c745a54f4aad749341e4c14b5fbb42f16a9ec190
MD5 f31c65493ee86cfa7b1bda53944dbe98
SHA1 d00c4c58ef9b8b76e5f2f174da6f1b469f2dc670
SHA512 54e5e3da87e25697feaa0604cff7ee76876d8a6bfce6c8959238002f5a262a563a295055084ead2e4fefff1dda69464e2e8147b6a3e192e971a443a8c94fe6c7
MD5 SHA1 SHA512

Submit Download

bg.jpg (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/images/bg.jpg (deleted)
Size 70KB
SHA256 ecae0867860dbeea1f85c2ecdb87308838530760057e36e07b167547320ebd0e
MD5 a202d5795144438d902dd3d1776836f5
SHA1 f0ac45a201f5157cb3c63ddd26818b7de7fc606f
SHA512 8d8b82dff912332ebfdc8454a99a9d44e788081f2cdc9ebab3cce650db2ffe0006f04fefba057f1196f5b7e0b561f4ee2cc9ad2ac3a09270e5b017c8b5325e5d
SSDEEP 1536:czMToRCHHRYti87eatY4hE1L9PypJZNvVAJy7Y:6nWYbiaW4cLMfAg7Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

loading.png (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/images/loading.png (deleted)
Size 161KB
SHA256 6497474fd3ee3c0a8f46a7a78b7e28f958ac775ad60e62d96c1ebc4a164a3931
MD5 199bb2cc21ca8f57ae3d94522714b043
SHA1 203fee65f9ce23f29f4a44309769287206fd77e0
SHA512 492582e7d50dfc3f98109f1e010d4aa565237b9e2ff782a66df27ea6abb405674e975ab9a771aaf1192e5fad4e567d68e4746acdfb0ef501f68c70109792bba1
SSDEEP 3072:pRTn5ehs+tRd47q51oTMrBteLTPu1eavwPf95yRulv4nL5CSLggLxSE5wdGr:n1ascL47q6MTeLTPmCMQlv41xL9UE5Pr
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/index.html (deleted)
Size 6KB
SHA256 9838fa199b7878a990bbaeb2479a5c68ed4fa1695f5382f84cb3ca453bd716ae
MD5 83c0b9d4a9c689243b722ea9447d165f
SHA1 c8eddedc70c96a4ac6c4541b6718416470e0e6b2
SHA512 e45f6438ac3a06301e9e576e65b719f2db9b5e0d7836ec15ea246acde9348a881b4aad550330c1f5b7eb83ab5fb90659fc3eefaabe0a9aff9b5b9992d110082a
SSDEEP 96:Jc02hwTlNM4uyZ5395HE5U354U5lBZ5Xl5h+5Zg+g5EI5lwZ5i05Wr5VW5qO+O5m:Jh2WTrw7z4xKoeTOD
MD5 SHA1 SHA512 SSDEEP

Submit Download

app.min.js (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/js/app.min.js (deleted)
Size 21KB
SHA256 12e669d86e9d4625da7574793fb3b69c51b4afc087f00d97da40f18428229a9f
MD5 1c97502896090190ae071c4d359d0e5d
SHA1 7e93a7fdbc3a3ad5e8c6bb3a25a84f688137043c
SHA512 fd11b300df7447cdb2440720f6510dd38a71ad03e3f198f79eaeff9b1875a9ae70e5adabf6033f8a08b324328cc0fc9ce4880a32cd56b0fbd7e1eb16eafc9c59
SSDEEP 384:PwU6vW6gJOEeiNXTMgZxeQmywy+YHe7h3plAi7mY0MRL4kx/THjJ7Q:PX6vZlwLh/w73FP0MRL4Mk
MD5 SHA1 SHA512 SSDEEP

Submit Download

mui.min.js (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/js/mui.min.js (deleted)
Size 102KB
SHA256 bff2b71ea11b3195aab3d4155ae762ee94bf94306af47506a04fc868ac730ce0
MD5 0a14d58f0055502613e4fc23a2ae4c59
SHA1 558bafe7844fd2de337e917dcce0976fb01712b3
SHA512 04ee078043b1124dbdd9dfdaaa6f78b8756c0a00ab939bfa175ec2dbac571a5ce058935715a815cf6f3d7d27bc050deb519621b0ec02a664b505bbfe124d8f09
SSDEEP 1536:aKQe3K3IMRJrGJNMbXSTsq1tt6b4Uw6AVy57lbj7lo47BwCh+pXZbTA44PW:wpXSTsQJg7lbSOmDZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

update.min.js (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/js/update.min.js (deleted)
Size 4KB
SHA256 8869b5caf81b904236ff35281e31c77536586d97504de824d68f8695fd208381
MD5 de99ff338ed7ec02f663dbad67fd33d0
SHA1 ac8ee7d93f63f4979ba2719702fe2c0cea8a01f8
SHA512 dce69fceb9d0a7b5136ae747a838c6fbd49e4630987c752d6775534119a9265a923d0c391d4ce61a0cc8e1bf556dc41a53492ee8d8f2e5064cb716c5e8d480cd
SSDEEP 96:94g13lYbi/PeroBrFVDL1uOCW8h0Gjrw1nRFTEoeROM:9o6eroJDL1r1RxcT
MD5 SHA1 SHA512 SSDEEP

Submit Download

main.html (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/main.html (deleted)
Size 6KB
SHA256 4c42338b07de4dead478af364db0ff376a26aa7ebb2155747616cf1548d4729d
MD5 ff7c8fc82f39002ac7ee06e1b9adae05
SHA1 cf446d31a53ee4abb8bdb5a6543d2210f6681c57
SHA512 bcab21f3c19250ef7188ac72c810b5d4931e43451a0f8499994d62fe54cb5c43e786f07060d6b55cc86c5ebe0a58f7a18361c9d953b746870050f801efde13e5
SSDEEP 96:HUYn+xKjWHsGWzl4ohQeUHUGbjROOpAVkSXFNeIZiESIZDPe45H:0YHWHhWzD6Mx5SIRR
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json (deleted)

Path /storage/emulated/0/Android/data/com.zdebao.zdb/apps/H563AFF9D/www/manifest.json (deleted)
Size 1006B
SHA256 8102441b975c9ce403c70170d2fad015648a80f96870868f8e55ff07a51c1ac8
MD5 cda27669da66248f2e2fbe7133b94c69
SHA1 a21295fcb66752ccec4db123a4adbf524c1ccc1f
SHA512 8293d7fa19e1b29acc0bfa1f568ba4b071606d398bdbc285714335cee08f29571742e97f90a4d8937706cf324d5d8334db8e611b2f49bc9faaee0ef19c8a01bb
MD5 SHA1 SHA512

Submit Download

conlts.dat

Path /storage/emulated/0/Android/data/com.zdebao.zdb/files/baidu/tempdata/conlts.dat
Size 12B
SHA256 f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93
MD5 8d80bc8ea90e9cac010d3ddf97bda5f5
SHA1 f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07
SHA512 9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7
MD5 SHA1 SHA512

Submit Download

conlts.dat

Path /storage/emulated/0/Android/data/com.zdebao.zdb/files/baidu/tempdata/conlts.dat
Size 151B
SHA256 fb9e4a4ae06add9bd10e7ed31fbdffc3a956ef5012ae039810e4cef97ed018b3
MD5 ccbd866af713d5918bc8fe0fd734d992
SHA1 80fd962d940c4e2f01b7bcc79f928337dda2233a
SHA512 6bb7fa7e30667414302f8bf296afc93a96cf9d61bfae7a34e885679b2e8bf0aa7934848798317b491bcd8e2a6c7ac06c2edb93760dfaa74c0e9f7860afe73fa2
MD5 SHA1 SHA512

Submit Download

yoh.dat

Path /storage/emulated/0/Android/data/com.zdebao.zdb/files/baidu/tempdata/yoh.dat
Size 24B
SHA256 f0f5049c51879dd7da0ce4a43349b5b34ce053d072a0ca704f62cf22ba4a8412
MD5 a936690571e9104e1922dda4a0ba5bd1
SHA1 65f49c57edde2f96be2a1dbdfc3f7351f1e66554
SHA512 3be1c3693963aebdfc04e86b1c820ee0ec3cf0b200e6a4788ef1141f39fd6c2f77f4227247ae4affa66c0a6c027df8466cc0dcec1e67ebfb953e36bee97de394
MD5 SHA1 SHA512

Submit Download

yoh.dat

Path /storage/emulated/0/Android/data/com.zdebao.zdb/files/baidu/tempdata/yoh.dat
Size 24B
SHA256 9d908ecfb6b256def8b49a7c504e6c889c4b0e41fe6ce3e01863dd7b61a20aa0
MD5 1681ffc6e046c7af98c9e6c232a3fe0a
SHA1 d3399b7262fb56cb9ed053d68db9291c410839c4
SHA512 11bb994b5d2eab48b18667c7d8943e82c9011cb1d974304b8f2b6247a7e6b7f55ca2f7c62893644c3728d17dafd74ae3ba46271cf6287bb9e751c779a26fefc5
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads