d8e3522c497722efe67add2b33b1a7686e00d976bb3749ff64e3f3a0e63510e4

Analysis

max time kernel
176s
max time network
186s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
05/06/2024, 10:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
97e3afd871e22aa25530d6f57ba8a31f_JaffaCakes118.apk
Size 20.8MB
Sample240605-mnmtraea64
SHA256 d8e3522c497722efe67add2b33b1a7686e00d976bb3749ff64e3f3a0e63510e4
MD5 97e3afd871e22aa25530d6f57ba8a31f
SHA1 f9ad4eb601f04da462d20f3671901778e8e9bde1
SHA512 8cccd87f0a242b0a33df63cd2e8d42105836918a5e6f8f1dfff6df902797dffaf811c516a77d08de8c17bf38e468dcbe4414ce5df966d09679149bf15bb520e8
SSDEEP 393216:FV7xxXRWSc4KM+KULHaXVJgy5n2sUgD6YbTyI8PnkUt8BXIPMNW+I:FV7vXRWTfM+K2+VNRNDxtTRU+I
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion execution impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 9 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.youpiao.client/.jiagu/classes.dex	4505	com.youpiao.client
/data/user/0/com.youpiao.client/.jiagu/classes.dex!classes2.dex	4505	com.youpiao.client
/data/user/0/com.youpiao.client/.jiagu/classes.dex!classes3.dex	4505	com.youpiao.client
/data/user/0/com.youpiao.client/.jiagu/classes.dex	4633	com.youpiao.client:ipc
/data/user/0/com.youpiao.client/.jiagu/classes.dex!classes2.dex	4633	com.youpiao.client:ipc
/data/user/0/com.youpiao.client/.jiagu/classes.dex!classes3.dex	4633	com.youpiao.client:ipc
/data/user/0/com.youpiao.client/.jiagu/classes.dex	4840	com.youpiao.client:channel
/data/user/0/com.youpiao.client/.jiagu/classes.dex!classes2.dex	4840	com.youpiao.client:channel
/data/user/0/com.youpiao.client/.jiagu/classes.dex!classes3.dex	4840	com.youpiao.client:channel

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.youpiao.client
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.youpiao.client:ipc
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.youpiao.client:channel

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 2 IoCs

flow	ioc
38	alog.umeng.com
173	s.appjiagu.com

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.youpiao.client
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.youpiao.client:ipc
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.youpiao.client:channel

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.youpiao.client

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.youpiao.client:channel

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.youpiao.client
Framework API call	javax.crypto.Cipher.doFinal	com.youpiao.client:ipc
Framework API call	javax.crypto.Cipher.doFinal	com.youpiao.client:channel

Checks CPU information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.youpiao.client:channel
File opened for read	/proc/cpuinfo	com.youpiao.client
File opened for read	/proc/cpuinfo	com.youpiao.client:ipc

Checks memory information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.youpiao.client
File opened for read	/proc/meminfo	com.youpiao.client:ipc
File opened for read	/proc/meminfo	com.youpiao.client:channel

com.youpiao.client
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4505

com.youpiao.client:ipc
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4633

com.youpiao.client:channel
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4840

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

.jg.ac

Path /data/data/com.youpiao.client/files/.jglogs/.jg.ac
Size 32B
SHA256 cbd965ad2c0cddc4a3638613c4a3ea96f6687ac051aba0139ac6bcc194fd91d1
MD5 255468de98db828ed6425a4e39e41963
SHA1 d4d7aacee078fbad251f5b9fd5855ef7d63ccd06
SHA512 87676ceb1800b4e18a361c0f9f5873b752ba52ae5527701390aaf390ae35605735ae1f7934a751855c0bab51e6bb53619885613ee86bd9d462609438a5cd1e83
MD5 SHA1 SHA512

Submit Download

.jg.ac

Path /data/data/com.youpiao.client/files/.jglogs/.jg.ac
Size 40B
SHA256 c8d84db231de4166088c3e7a9e344c607b18ab261cf4617b0a0bacad6ea5c189
MD5 b15017cb6a470ba1e867a4627e7d64c9
SHA1 a71942b73605c8042632926fc1f33a8c10a80aec
SHA512 2abc95f4d0b980a4fd741fb8ae89349b12eca5867fc63a01133afaebff5351e93ba2f3e622e6cfa84d55fc88703caeefc0c35d450efc8f798793f94c73396a5a
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/data/com.youpiao.client/files/.jglogs/.jg.ic
Size 32B
SHA256 1f12ce998f9866825f70d1b30a865fff1719771c44d10402bfb0bcbcb19f74ee
MD5 93dc9c17bb69f4563c7bc5105a652f62
SHA1 fafef87d3a8decd76687abd461222ecf0e6ac6f8
SHA512 d2f8df849ee6a9246d004b08f396f6e50165a698403f9391d3d631f1326763028ef6cb265ed37993fa78fcd9fd7228608256d872692bd37c983f50631cd1e26d
MD5 SHA1 SHA512

Submit Download

.jg.rd

Path /data/data/com.youpiao.client/files/.jglogs/.jg.rd
Size 32B
SHA256 cf63071c1a2435c544763f475dac07c5b3b4b6dd41b44a8fb70f8c0093f8fddd
MD5 e245d5457bf8ad31d7e1df060075b468
SHA1 a30d37fc340b3e0de91e664681938c1c06d073a3
SHA512 3ad9c23c11ae5a47d9aba4d0e0315bc84ebda95bd6afdc3ffe42c1e68bd4c2c32ed9d5628640ab693e60b28a8a11c2f20d73ba4a4dc84a8126a77d0ef11dda9e
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/data/com.youpiao.client/files/.jglogs/.jg.ri
Size 307B
SHA256 d6fc094df05dc0b796879eb8f7e95e8858ff83c5d92a6ca66ed77387dbde95ff
MD5 ce5bd0beea60333e8745715b6bf34548
SHA1 e044f0fd7972d63807c22958b15073f7bea76dae
SHA512 9b54b08c095ac09d72d0d97a81bc7760be363ff4196cbb3ab9d16ced20d11779983f49ea172eaf789a97fc8d7624e2adb61383a53daf3b12ddbe01a27753c271
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/data/com.youpiao.client/files/.jglogs/.jg.ri
Size 314B
SHA256 9d73bc078992df1f0f63f34c95931cb113ea6912186915ece795dc6dd76ba632
MD5 6e5b5fd481a159a07bece25ea8268cd5
SHA1 a87b8900616ab40bf9b99e549b181d71a73f590a
SHA512 126a6a204e461ac515c4fdf29760095af31195210141dc0e3e7bed3371379d54c88c5c9d95b7d9196aae476856d8c8650ecb6ac1f6769888ca00ab634a492d7a
MD5 SHA1 SHA512

Submit Download

.jg.store.report_pid

Path /data/data/com.youpiao.client/files/.jglogs/.jg.store.report_pid
Size 36KB
SHA256 f2434b69ad5ddbdeb3796b9e34fa428cf6fc31bf987dee42c12816e3632a128b
MD5 7c0b5c6d1120bf3635cb815eb5e29f28
SHA1 cbb58092e164d3d098e750a608f3833f85a06476
SHA512 151d69445e8311fc78f40b5781e2e1f1d631e879e87a08d1076ac69d7ad5bbb8ee017fa4d5be934f9eaf1cd3a0aea87c40be405c2a601a845820d73705ec7a36
SSDEEP 12:TLXSSOPvEFT0fVzjJ0zLVkyts/fuQ/k1zdvBxBb6RARwFTbOwNndRmBEyPb8FOwI:TLXzYVvJ0fiyts/fuLBzbx6JNGGSgI
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jiagu.lock

Path /data/data/com.youpiao.client/files/.jiagu.lock
Size 27B
SHA256 9590bf3293eda1b4ffbfc82bf1745da6e882467b9bb0b195790972b3d63d0895
MD5 ce15621ce5e69064fabf4e13f677be99
SHA1 a51303ef3cf3cfb773cf679a39ac3b5f84f99d14
SHA512 efb4c19a66a9cc166ba5ef9b2d5084b66743acda701a2b2eb6e899a8534626233e6aa156ef384a949f96b6e2b95c89d94181cfbc9fc44906c74485cca59bccfa
MD5 SHA1 SHA512

Submit Download

classes.dex

Path /data/user/0/com.youpiao.client/.jiagu/classes.dex
Size 6.1MB
SHA256 49031e3ee68b4a9a18ae485000563a2c9432a1d2bb1e9c1c5082c43831154732
MD5 1884848c4b33cc09ad99d2640dcea846
SHA1 61609baa98fa90a3f590ebc9dc7c79c310a4cd02
SHA512 7b553ded2498ee167fb1d7d7ec742e5d602ec19db403f1f5ae4f3929083cceeb2c63361f0708812030a75f50f0affc4ea6db5d72330a76acf66428e50df5e55e
SSDEEP 49152:gsSxvjwZNcdvG3LDDnqdJlkocDEKasjXMbUJUFz1rh6HXLFSi0nHkmR4c:hkcmsDVocEMUz0V0Hyc
MD5 SHA1 SHA512 SSDEEP

Download

classes.dex!classes2.dex

Path /data/user/0/com.youpiao.client/.jiagu/classes.dex!classes2.dex
Size 6.3MB
SHA256 a6e23ce764c0609cdc5e582e00be57db65b4f058245b43f111855b06a9df270d
MD5 f886c522571a0a24bccf447e437f0d20
SHA1 d1151f41d120fb1bb7594f44bcd070a81ebc7868
SHA512 33812442b7537dee454d4bdef7ed7577ca51524ef63f9075372da5b58f440fe177a0de65251294c10274c51327709c8dacc7baf4010506a8f6df82ea65d5aa2f
SSDEEP 98304:T/Utqqb+qY6xohORbA+hvfAexM3Jo9FYpAzmi:TU/NwravfA0ii
MD5 SHA1 SHA512 SSDEEP

Download

classes.dex!classes3.dex

Path /data/user/0/com.youpiao.client/.jiagu/classes.dex!classes3.dex
Size 465KB
SHA256 aa2bdd56f023764e7174ffd37f9f640298283ff66bf2e4151ef39b92ba7e8777
MD5 13e1af2e1636a36481194d5ae4cb300a
SHA1 730aede6222faab8c0c87d27827242b40aecba9c
SHA512 8b21472dcd72600c2c5e0ac9eb40a4a274db3a21352be5992aad68b8704f5538e63f105d4f977dbe5218cb7b736d92dd80b04f1fca93b30183022951aa07f9c0
SSDEEP 6144:DrPZL7qnsVpYN1OSp8Uen53Buw6COMn4mBcCJrUNx9T6fmg9TAywFdEaZDPUBtT+:DVLpvCKba6jygCFaDgsw
MD5 SHA1 SHA512 SSDEEP

Download

libjiagu.so

Path /data/user/0/com.youpiao.client/.jiagu/libjiagu.so
Size 475KB
SHA256 df060b6cb1c952bca38170839ff8e00f4bf885e0cb94e6620ea675d98d7283df
MD5 9a9f852839ab6cce8e1419ba5fe209ae
SHA1 689c9c5ba7ffffacb58c81fa116bac75d1f25743
SHA512 ec7af869302896cb5e13fc7c7a21790c90814242dc05542b5965b620833ac3e5af2e90bbd621bfe7b054f17806387416869d8b3d61e96f00d14e1b2de884ea22
SSDEEP 12288:qxL4fCZt8eBsCeIXrso1lYatIboP1fcfn2cCjalRcf11:qxkfw0irgatZFcfbS
MD5 SHA1 SHA512 SSDEEP

Submit Download

journal.tmp

Path /data/user/0/com.youpiao.client/cache/image/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

MessageStore.db

Path /data/user/0/com.youpiao.client/databases/MessageStore.db
Size 36KB
SHA256 dce84c997a194f37984f80104369561d32bbb1080fdd54458b1c230b993e3ed1
MD5 c14c5134e2f737d5e5a3e9248f14bf1b
SHA1 8978814a05669113a3f96a4b10bb384e48943c9a
SHA512 9aefe0aef05adf77d2d247559f146a18a52e5519b8604c07ddb4803bf7f3550713cf0d603ea5ba1e79011da4a6c116a14c76a2dafbf2f1c342d6d151d7050a41
SSDEEP 12:7+t/NU7X2EkamDfVcsg1jWuQUmKiayaA9HlApc2o/0XyNTSFbyc34wyACumRmBEC:7+t/YPzmD6ZWaJyZ4M0yAN9GSgGJx
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.youpiao.client/databases/MessageStore.db-journal
Size 8KB
SHA256 55922d1e8db5b13e3eef8540a41b60e268affe2d81d1af0854eb6cfb746c81c7
MD5 1c32041c8e7ee78f15c794ed5207852b
SHA1 feb346731b1b7c089c4ee22e44a6ad4aaa0316ac
SHA512 7aee2b01a694fbb43702e76774afa0d83c7b4fc11a7405682ac2c408d56bbbe219300ee07d8c2c1e5430de1deb69450e5f73022f2796a7d8594ac224f034077f
SSDEEP 6:7+/l9nrgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK8h/lnM/Jn:7+tFr4qLJdeWRmBEyPbXlsJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.youpiao.client/databases/MessageStore.db-journal
Size 12KB
SHA256 3f1e3cd2bbae3529df316ebe16196e13be860828dfcb2ceb3af220a190d5139d
MD5 7deecf79b4ca56d5d747f0eb8c9b263a
SHA1 1a13ebec61cd126356c36d95e00c247424a8f5ae
SHA512 4f7f74c7493158724563b65d78b74f1b7c8d2446bcaf9bb7784e6b3709aed4499505ebb40d2f3b16c9e0bec21fa0bf73649007b7c6a8e44b2e1c35de4f0c4081
SSDEEP 24:7+t2EIqLGi/UPzmD6ZWaJyZ4M0yAN9GSa:7MdIqqyRvZ4M0yIoSa
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.youpiao.client/databases/MessageStore.db-journal
Size 8KB
SHA256 788f0421208108ac5c35bb4b9613843cb4b5fb7fb9a624f004c372bceab7c3d3
MD5 c56873276b7c7da4569baa75dd37fe61
SHA1 1f15be23e1540daf1318d2fd7a02cec1a77598f3
SHA512 0db4d7680c8d57d5c1652ed21341f4fbbf2c8101bbd3157df9d0b57f050664a5b6142fee1f20ea18e4b45a96b84f6da9028e3c2e823c789ecd9c7ba4011a01d5
SSDEEP 6:7+/l9KOuHn1ybWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKS:7+tEZLqLiuWdYRmBEyPbp
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.youpiao.client/databases/MessageStore.db-journal
Size 8KB
SHA256 d39e9155fec88f7e6310e3495d042ed3b4122f4a77daf95f46b540e02335528e
MD5 c9e90e2fd509e05e06666834c7c63e36
SHA1 7631510b78e406f857357a294a6e100b770b287b
SHA512 ba8d3f831ea20b507403cdda9e7ece5411cc36f7c2e299ad4adb3eebb16e5062da9b5792016382394da311931ecb2d8348af08dea5a015192a638e3df4f3b6ce
SSDEEP 6:7+/l9MbHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKf/0Y:7+tGvqLJdeWRmBEyPb00Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MsgLogStore.db

Path /data/user/0/com.youpiao.client/databases/MsgLogStore.db
Size 56KB
SHA256 4087524ad761d0669a39007849311b2b0a32c1a62d0a7ff04d4a77d702bfe27e
MD5 a860ba3e3a648f73fc11269ff9ea9c16
SHA1 7167faf1666bdb05633e945dddc3d6af6c35fd0b
SHA512 279991548672e18e99522e1402ab96a3b1887a6ccbfa350cab5c5f5096807beb647b9cef0a5668755798f8032e243aab9ea5f1cfcd934671153d54fce48ef8c0
SSDEEP 24:TLEji+931pd6O+Rn0H46Dgn8tN8X48XeqS8XRu8XM8XMWlsl4qSlXmlIl18f8Dqo:TcF33QO+t070OCJfhF8GIUWZw3RS
MD5 SHA1 SHA512 SSDEEP

Submit Download

MsgLogStore.db-journal

Path /data/user/0/com.youpiao.client/databases/MsgLogStore.db-journal
Size 512B
SHA256 3a9cf78b6a6434aca9b00969dab3715b24f810566e3fee94fbba694f6c52df52
MD5 5ffc3cd6df9e4b0ca189400a7c39cf2e
SHA1 022a79bc2de61d8e1aec20c0ca659241ca21e389
SHA512 97a801a1fbe32149c692807e340d8bd512bd7860d9b072235d4d5a830aa9b6276bb1391996ba9143712c17c78e2cd5b0276be5359710725cb45fc6f80dfd4416
MD5 SHA1 SHA512

Submit Download

MsgLogStore.db-journal

Path /data/user/0/com.youpiao.client/databases/MsgLogStore.db-journal
Size 8KB
SHA256 111b4f5304e3f7f77c571d1b3a5f95f451c0029315a69d9a00277d15cea13d5c
MD5 1dc516afe9c8cb5669137e1714af5534
SHA1 e8e47455c2976948a27005f2eafcd7679135550b
SHA512 51301e3c2038073310cad4d3ac4e4b82d0ed8c443375fb7fa0cc066adaa0d9bf0806da0bff8706909a26173999b952a4a891bbafba8b3427c75cf33b4f094705
SSDEEP 6:7+/l97l/gn1B3ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKe:7+t/UXqLiuWdYRmBEyPbd
MD5 SHA1 SHA512 SSDEEP

Submit Download

MsgLogStore.db-journal

Path /data/user/0/com.youpiao.client/databases/MsgLogStore.db-journal
Size 8KB
SHA256 2fdb2a6c95e6838f718bded143d02ea21e6f89ffd39c23186eb47720fb676426
MD5 ccca05f705a65db624b2ddcdf77304f2
SHA1 002f663f3f2803496ec0c29b5d4010648df420f1
SHA512 7b748e934bb5d38ea0b18e0282555d1bfa6e551b9da5a88e7cc36d1a3a937920fd3dc4f8bc483a08e686153dd71e5443c7858218e2fedc11f46e704e5d766bf8
SSDEEP 6:7+/l9guPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKo5//g:7+ttqLJdeWRmBEyPbbXg
MD5 SHA1 SHA512 SSDEEP

Submit Download

accs.db

Path /data/user/0/com.youpiao.client/databases/accs.db
Size 20KB
SHA256 b4ef8a71919ac4b6ef9a895a991b527f5c3316fd6204eb815366c9614dc71f00
MD5 064201502ce25754236b3b5c12e24c65
SHA1 e2c89961dcf8306440bc99f7b058ef4680eacf0d
SHA512 3f5af9d3e7fbca1c0a3f9ad5a8d8d8e1d3b3e3c79cfda89b6baef007aeafb4ec5738626fca1f682b73b0305a94a4e2bf17c0bdd4fc7fbacb80ed02c7affa44a1
SSDEEP 12:TLgEB//UyNTSFbyBh43R90Ef7c7VDERmBEyPbAVOwG:TLgE1Bqj0W7yVD/GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

accs.db-journal

Path /data/user/0/com.youpiao.client/databases/accs.db-journal
Size 512B
SHA256 d0f41565fbd77a2be885915cc59d410128ec2b479d28117f263029f1bb5cc69b
MD5 ecf3906bf33667ad09f82d2b2bb8300e
SHA1 ac873718f25dcfa9c8b0f5f5504dfe1e1c465256
SHA512 eda5598d7b0b9b6ee8558adf51d279cd8f262d818cf55e74ca3b14587a297a41001517c21f5527c1cc69cf7a596797d38af9dd9f7d96d55093706534265f16db
MD5 SHA1 SHA512

Submit Download

accs.db-journal

Path /data/user/0/com.youpiao.client/databases/accs.db-journal
Size 8KB
SHA256 8d7d5b01d482cef87a74cdb7579b1eeed19f891b6b6a3f3f2e0cfce00d9766a7
MD5 19d9eb2b2e3ebb879f3d88a6cbbbdf43
SHA1 f502909f6cfd536a26ce6c0343fb2e94683743a6
SHA512 1c6a939bb8a29f176668f7c099f5a8455da5ee63700ff5b3d3c2b2da653396d6099154df7e6d517c1549d30e4b3c005f9f9f342221be37ed9efeca80e06683cd
SSDEEP 6:7+/l98n17g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKkn:7+tQqLiuWdYRmBEyPbT
MD5 SHA1 SHA512 SSDEEP

Submit Download

accs.db-journal

Path /data/user/0/com.youpiao.client/databases/accs.db-journal
Size 8KB
SHA256 faf85c66fc28a55900906b98980780077db5949d7e87b0f0707209b060c82b0d
MD5 e06c05321630c3a9fb95150cd4673d2f
SHA1 615de41dabbb474587d2778d6d3c605478cb9fe5
SHA512 a530905b388cb79145b8303931df80fe061e9df265b997ed7e6fa04960d1f5576d501df39a60f18f3cb55e1304f6f76a88b128728412b515152b676ebd5a2586
SSDEEP 6:7+/l9KPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKAM/zn:7+tMqLJdeWRmBEyPbQzn
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1717583898403.env

Path /data/user/0/com.youpiao.client/files/.um/um_cache_1717583898403.env
Size 641B
SHA256 b57a1b59548184d4b3d1008f2270531c70dca1d754ec961a98683cccd8a1c0bc
MD5 0db29f0b5b7ea637a3831301a973d4df
SHA1 836c999a276f8df87945a058a5afc2e37560ce97
SHA512 c46e6d894ab5c864a1ef76c9cf32086bd427d9ad31cb9611f9be994a74bffc926c7b9fb82cb425aba7eb82ffe1efd441a330eb04a1750f08c89a9bd22bd6dafc
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/user/0/com.youpiao.client/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 f0b9688be54880ee28e6ae771ff3d778c0556fe36f00db0459dd7db52a2899a5
MD5 d4a0b905825eeca6c30a1b9b4ef5728e
SHA1 be53da179cdca6f04ad2f8008106945d2f9686ba
SHA512 55a0bfd0fc9ce8befb72dfc2f1b0899f23c9c7d25447a0e81c1830612811caa0470ffa6297b48d785bd8fbb2b75c4770d57fec0f6743d7aa8801444850930b85
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.youpiao.client/files/umeng_it.cache
Size 352B
SHA256 b364ae8c63dc85d07794024e80db129e0cb54a09daafcf98dd9a49459fba588b
MD5 1572566f60619917eb1767a519663abe
SHA1 80f90fcc488bdc07744e4aa4055c6961b4a43cd9
SHA512 dadb597da11eef7b09fc5dbcf7c64033b0a052671806c4f9657a0e19fa4941cc1e7002d8171d904e4cb9c602a9534a28c9870baa24d9edc6d483fa736fa1991a
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 2b24d75e2e2ace597a6271a2cb603b382357cc994963aafb0269cd015a42d0b1
MD5 cd2ad301b321f8062853c5ff18f8fe8c
SHA1 2901bf72bd8589db78bdb8ca5a682a9cc51b9151
SHA512 e2381d84271b9a677a4dfabd893e98eed7876b5b675bf1f9241de82e4b0f66a078477193ae9a860de27799a125dfa91c7f79a31012f4e2e17cd3771c39d24357
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 213B
SHA256 dd3876702447dc8048295c95e8c0c2b53ebabacc90961ca6fc8f29cc0a8f24d5
MD5 f98abefeae860a34fb910378b3513cfb
SHA1 df2c27e32fe211809e17c5d6670cc9c14f12f488
SHA512 03d260b7bddd5142c209ad7130babd00ca3daa41a186c47cd045d0c638500fcf15e04ac842e4768bc0e7d30f8a6c8929965929c17a33b8107574aa90c46acc3d
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 37a0cc1152bd8b057dad2b2a7e64d1305060913823394039f264ff8c15fe381a
MD5 247503ddcef7219be94c255d0999664e
SHA1 445d55a946c76226f5d3c27cd8a285d5aef3f330
SHA512 9b66921bdf8942f702b72b591ee58f61bd1ff73c80bf96da4a5b0459ab20f6e5c9912f881e4500abd264064f07ac371e53849c7a183cb2dd1a1d8d32b65c0080
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 167B
SHA256 098ca4e3df0d68593e881d4a64c0b9602281c3e220382faa7ba368b9a8efaf91
MD5 ca5f92e1cf94b961bd2ae18934f84aea
SHA1 df34ef20631a416d6c43f41fb308986dc4ae4284
SHA512 a67e03753277b23ed26ba605210d5f13add39c3cf25d258bf42f3c7e8355f776d6f1266a19a74e736c0c534cd07b37a8a40f7175962e8284e0fe8e986cdab1cb
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads