f6df58fa00f9913e97e5a26ed83ec1ce86207aee58e27f437f6140c3e09336e0

Analysis

max time kernel
179s
max time network
147s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
06/06/2024, 05:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118.apk
Size 4.4MB
Sample240606-fsntaaab62
SHA256 f6df58fa00f9913e97e5a26ed83ec1ce86207aee58e27f437f6140c3e09336e0
MD5 9a04fa0ff306c68a73fab66a948a9076
SHA1 6d2cb1b467e4909541a06cdb72d202db3b9fd447
SHA512 f2152356d2a5f199080ff9928916c9d65a0713abf693b7edde36b2c4e7fe7f9b455e8e11df99792342eb945088ed5e8610c6df7ce4dfdb1b7a8266fa821a2183
SSDEEP 98304:XRIsnW35C8dll/6YqLdsvINMRA4llxk1PYnGiLbrHOIv6xqk:6aWUml/6rLC3RA4rnN8d
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.secretlisa.spbeidanci
/system/xbin/su	com.secretlisa.spbeidanci

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.secretlisa.spbeidanci/files/1717650742105si.jar	4364	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.secretlisa.spbeidanci/files/1717650742105si.jar --output-vdex-fd=49 --oat-fd=52 --oat-location=/data/user/0/com.secretlisa.spbeidanci/files/oat/x86/1717650742105si.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.secretlisa.spbeidanci/files/1717650742105si.jar	4284	com.secretlisa.spbeidanci
/data/user/0/com.secretlisa.spbeidanci/files/fspbeidanci.jar	4397	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.secretlisa.spbeidanci/files/fspbeidanci.jar --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.secretlisa.spbeidanci/files/oat/x86/fspbeidanci.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.secretlisa.spbeidanci/files/fspbeidanci.jar	4284	com.secretlisa.spbeidanci
/data/user/0/com.secretlisa.spbeidanci/files/spbeidancioc.jar	4474	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.secretlisa.spbeidanci/files/spbeidancioc.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.secretlisa.spbeidanci/files/oat/x86/spbeidancioc.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.secretlisa.spbeidanci/files/spbeidancioc.jar	4284	com.secretlisa.spbeidanci

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.secretlisa.spbeidanci

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.secretlisa.spbeidanci

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
17	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.secretlisa.spbeidanci

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.secretlisa.spbeidanci

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.secretlisa.spbeidanci

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.secretlisa.spbeidanci

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.secretlisa.spbeidanci

com.secretlisa.spbeidanci
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4284
- getprop ro.product.cpu.abi
  2⤵
  PID:4311
- chmod 700 /data/user/0/com.secretlisa.spbeidanci/files/txRes_1.4
  2⤵
  PID:4331
- chmod 700 /data/user/0/com.secretlisa.spbeidanci/files/txRes_1.4_Exec
  2⤵
  PID:4343
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.secretlisa.spbeidanci/files/1717650742105si.jar --output-vdex-fd=49 --oat-fd=52 --oat-location=/data/user/0/com.secretlisa.spbeidanci/files/oat/x86/1717650742105si.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4364
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.secretlisa.spbeidanci/files/fspbeidanci.jar --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.secretlisa.spbeidanci/files/oat/x86/fspbeidanci.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4397
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.secretlisa.spbeidanci/files/spbeidancioc.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.secretlisa.spbeidanci/files/oat/x86/spbeidancioc.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4474

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

Beidanci

Path /data/data/com.secretlisa.spbeidanci/databases/Beidanci
Size 9KB
SHA256 c15fd5ce5bcbeb4af31119048b9fa9cc1aed10a98bb08772cb9d9ef106a57a3b
MD5 47c64c8e9d9085c3b26fff1356409854
SHA1 1b2169d910a95fa291656582844294feb5286e73
SHA512 74082aa21809d02c000f968d04665e4109895ffa9c00bcf4d293456a4fef532d5d0c649cdad6e0990c3dca45d009163ceba5aefd87ee8c5adb64081795cfff7d
SSDEEP 96:CvjZtgahDRm/5KZ3zrzCf4fWCvjZR+eFahDRm/5KZ3zrzCf4R3fjiRGi6:CvlKe/vl4eFI
MD5 SHA1 SHA512 SSDEEP

Submit Download

Beidanci.zip

Path /data/data/com.secretlisa.spbeidanci/databases/Beidanci.zip
Size 1KB
SHA256 0f3dd02d186ec4d7ea0729de1754458060870df7e782617602f2593fe3329192
MD5 6cb6f003629267d2d460753fb41d80a4
SHA1 b6514451ca9be19076273b71f809a4337dd48544
SHA512 588de443f79a3a949a94f0601ba2d699b5fb38b8d45f180ca097faed2c1f7fc1eba425b631e881db1857df8d7a61930e73b3ef432f2632209076c893fa39de70
MD5 SHA1 SHA512

Submit Download

ciku_01

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_01
Size 295KB
SHA256 b553b2d979371f0c4eb65e9bcf77523077649326e94a660ce7b565275126456a
MD5 44aa865c69491b8b3974b1b0c9d4de10
SHA1 448b2f112f43e6f83767c9f177ca5c7d99cc0811
SHA512 d3ab93146f5bc82f3a84860126b943184f637ef874f82e9fa83186c1b598aa86eeaedfe758629b3f03cad6a1ce239b6a90bf86e3e69e5f55c836784efb1f24f3
SSDEEP 6144:wxKYpnG3ij43jBTcHSr8jUxnJIvgRCko4DUC7:+KYpnVj43jBxlxnqIRCmDUC7
MD5 SHA1 SHA512 SSDEEP

Submit Download

ciku_01.zip

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_01.zip
Size 152KB
SHA256 8b9d586b3029c399bc6f8a6f5432116d9f5c60d4c2feefd337510b78c13d3246
MD5 374cae7393095ac4d2baf5a259efa1e4
SHA1 e140620677ab9fc8189679aa0c61715051cd1ab1
SHA512 1ab6f3296723737f0a83a33de3f176b2af1da461d191bca071ab6b84eb4ae820cd2a857d1f00461887bdc6f043800fb8abd10b4014c877ad2106629f178d7a4f
SSDEEP 3072:+S7QrJuOFjTsuxijx9Hdf/TcvOAtYRrsjWl3tuWopfr+55E7CouNin/:6uOlAugjPdfLcvdY7tqfr+5yGouNi/
MD5 SHA1 SHA512 SSDEEP

Submit Download

ciku_02

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_02
Size 578KB
SHA256 970ea47533446af5f537d54f46758412e4f98c3f839b2892f06258e4ef9bddd2
MD5 526ebd2aeff81019eac3999329d23331
SHA1 09bd6609fe26ecef7c4d5efee4af6dd3a56af24e
SHA512 9fb6799a32af22546a6ee4b4c8d11a1d95acab1d9886d7b629539eb784013e38969911c6ff1c3096260e898b72f61ac63501f5053706d6f2029aa9d42105c3ce
SSDEEP 12288:umKow6v5bRAto4nZspUwWO924+q2+WaDxiZ:hNw6v1RxO+uwd9250WaDxA
MD5 SHA1 SHA512 SSDEEP

Submit Download

ciku_02.zip

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_02.zip
Size 301KB
SHA256 1bfe609c6fb53ebb8d3503642211e46a7cde55185a975f628093b506ed0e9909
MD5 08f2a107b3938a92caac2c0cf01c16e1
SHA1 8dfcb16890c9855c51c01b8977f21aab0700f98b
SHA512 3212cafde81e51f05122a7e13342a79c9e37968bee11ef2dba533f3b69eee2684c8230dae39d4be90ae1246178e05f2395ca412c7488ff95b0d2fba99c998d9c
SSDEEP 6144:zKipeCc2D/XYm+HCiC5NNhKLnXzXNLdhEnlxQmR4jD/QmTkb4jpscy1ABkVNk:zxptc2Dw1CiwN3eX6/QmR4jD//TkEjKS
MD5 SHA1 SHA512 SSDEEP

Submit Download

ciku_03

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_03
Size 533KB
SHA256 a857718f4aa726428daada5603fe495b8f51bf79721968bf2b2e9813a7693596
MD5 fe299553901228c643829ca2be311fc0
SHA1 5771904497836147510874218cc45e5526a2c897
SHA512 0574f1c0618672c5b125141169d01244ac5b7e1985f7627dd5cd3004fe0632c003a03d02d6caa51d3d60e83872e17648fee6d49f8219320fc376a6b24307a87a
SSDEEP 12288:3vc+n3BAzaJ+TSrn+z1Zek/L99Gz8GPForvHzeROZPEDspt:0+nu9G+z1Z5/Z9GzlarzeROVED8t
MD5 SHA1 SHA512 SSDEEP

Submit Download

ciku_03.zip

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_03.zip
Size 283KB
SHA256 631e486b8a8c43ad5e09bdc236624129c03e3151eeb7824fb328dd7cb06a8844
MD5 86ae6d32978d3482ebeff8dcd2eeaf20
SHA1 05d5d07e25a8baafe224b60b893be10eb195e1dc
SHA512 4fa3fd1a0e675194cfea16dc30170835535ee8220e7a77bed8e96a9f78c45aeec41f8e1594ec0e7bbba47bdd5689039df21cd196d17e4788718cfcac09add832
SSDEEP 6144:xoHQfoOtNBUulc93vRX5TtCqJ2922cs01tPbjq0J/dTpl+/B6Aoe:xTwgKvxvJics0rbJQ/BToe
MD5 SHA1 SHA512 SSDEEP

Submit Download

ciku_04

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_04
Size 470KB
SHA256 5b52ef70fb0d0eef1bbaf4610b9b9b4cf079d2ad20a047da236d15e97b0fb84d
MD5 ec39a7f745a0dc7aea2c5aa9847a3b1c
SHA1 0f298f1da859b3278bd1dfd07786d74d5d09d28f
SHA512 c623f6388053af9bbc11fcb74b61e71e39201c55dda75ad1f968400d68897ce320495d6f53ee72995f08a0fc2a71a25178d7d67f369f86da99e55ca10660095f
SSDEEP 12288:TWg75OtlnETEQD1a9YtUVbP25O0ILRSU9+eA:TWY+lnE4QD1a9Yt+LRSe7A
MD5 SHA1 SHA512 SSDEEP

Submit Download

ciku_04.zip

Path /data/data/com.secretlisa.spbeidanci/databases/ciku_04.zip
Size 248KB
SHA256 a7bef9a507c559cb3c663258080454ab6d5140411a2cf81992c7e62881ae39e3
MD5 498302d86426858cdaf567e940a0d2ca
SHA1 ed468b5ef822e0af969c86181dd943ca62486088
SHA512 c941d42f50b2c36771cb9cf1448c4423ea92effb22744910d352642f1387da8b6f3d82e5267d8117adeda98ad196fa4951936f86cbf574d1c7563d32937999e7
SSDEEP 6144:4o45tnxZKF+7PiUSYwPSCKABck5Nwmkyl1uCQvWjafhB:v45VKu5aqCKEFN3L/Qv4C
MD5 SHA1 SHA512 SSDEEP

Submit Download

database_local-journal

Path /data/data/com.secretlisa.spbeidanci/databases/database_local-journal
Size 512B
SHA256 5cd6d338dec844d29baec03180bec455fa3051a867b523689fdde5d70e6ad328
MD5 951364ebfbd71a67656488f94a2d6143
SHA1 19920ebf714fac920aaac9c995d71bd1122ae881
SHA512 26d977b146d910d04e1af6981458fa2aeec4ff78b54d322a6998fa7bb785246fe3a07b365796767511ce0667d3eb3846f9989be50db57c296e14f467b66a0d6c
MD5 SHA1 SHA512

Submit Download

database_local-wal

Path /data/data/com.secretlisa.spbeidanci/databases/database_local-wal
Size 32KB
SHA256 1ad5178b352672c70f672c46edf4d0cb995f7b5d6f7183bfe9b26d45bd8cdf1d
MD5 974f918d7f3e44f6592e4d7180ddb362
SHA1 1a15c93f489d34573b7ae9c1eb204d14a0ab0cec
SHA512 9e6b13b28089d5a48d1c706a76f2c95186a9842a9d6b2bdf66689174ce4c85bc1a8787678e598e275643a6d41511d8db2f9fa3aee0c32e67c259381a5729c9c4
SSDEEP 24:K5zyGSP/7klWRysyb3j5Tkd0O0a8K3yfeGSP/j:0zNSP/9ysW3j5U0O0PKiZSP/j
MD5 SHA1 SHA512 SSDEEP

Submit Download

po_download.db-journal

Path /data/data/com.secretlisa.spbeidanci/databases/po_download.db-journal
Size 512B
SHA256 0b24e21422ee286fb6a2465f71aa84f67627452cc76fff0761a7e7ee8b1e63b1
MD5 df3e3c9ad785fe3ba20d6b15d476b59d
SHA1 80e3630e70907952ba8d2b4e754be204f7cb688c
SHA512 0c6a630d8b73e559ab4b1c6b34f0093511d33f159ca373d7c6ed2fdd6f16524076ae1d7dbaaf2778bec4bf931108075918b5694fad94606b1ffef5148815cc0e
MD5 SHA1 SHA512

Submit Download

po_download.db-wal

Path /data/data/com.secretlisa.spbeidanci/databases/po_download.db-wal
Size 32KB
SHA256 b35d7cbe2dc5d9c524f628a08e5ebe06cc0b190cc7e256257625276a1e33fc0a
MD5 bb04e5db097148eaeb1b9029417ea86c
SHA1 eaf37ae95d9394d7429757a5b835d5b17beb2ccd
SHA512 930a14b6196a86a30991b65b1eb41dc186ed167c4e105269965c4a43ab5a9efd92295375ab571dd69080860300b25746967bcb6cf99627ece079b014984960b2
SSDEEP 24:KguzyGSP/cF0q8l8BzkgXgXmWlgXBvGSP/b:NuzNSP/c8tgQXmsgoSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

tencent_analysis.db

Path /data/data/com.secretlisa.spbeidanci/databases/tencent_analysis.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

tencent_analysis.db-journal

Path /data/data/com.secretlisa.spbeidanci/databases/tencent_analysis.db-journal
Size 512B
SHA256 f0bb327422bffebb231c4605b18fe92c504571e9085fdc95da11567dfc41ff14
MD5 056af69756274b87c0a7f0ca80ad907a
SHA1 5d2f4513163dc410193ec75bbee22732e0325bfe
SHA512 df94e78b7892a1912daccaec906cc162c8685556cef0075e70f9b30ebc03535257764294e823355b4be7a432b361876156621e003e825a8ca04c37525f200576
MD5 SHA1 SHA512

Submit Download

tencent_analysis.db-shm

Path /data/data/com.secretlisa.spbeidanci/databases/tencent_analysis.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

tencent_analysis.db-wal

Path /data/data/com.secretlisa.spbeidanci/databases/tencent_analysis.db-wal
Size 68KB
SHA256 3e45f7d357241084999caf98cc4ee1e3492bdeccff379f0f93a4291841665da0
MD5 be3cb44c781abb95a031b40820b5dc16
SHA1 74850f3fafed5616a4ff1c0c2d768018fbece28c
SHA512 c0764fc246675ff994de4063172a2e2e9738a3d009a7e783a9c7dd33c6b3bd689a448d5da04e843700aa77f6e16e51e7c8017f047f8b5719c89271ef55c11608
SSDEEP 48:HzNSP/CU0/Ofr6UPmlSP/ME+1bEnORl8J+gF:T0PL5pJPJnTt
MD5 SHA1 SHA512 SSDEEP

Submit Download

1717650742105si.jar

Path /data/data/com.secretlisa.spbeidanci/files/1717650742105si.jar
Size 74KB
SHA256 c401e8a12c528af1e71725cf285f591d6d7d3e97d796eed14ef4b0e52ac9a1d4
MD5 5dd4ccc940b1908a0a2af19570c2d3f2
SHA1 29c6dbca86bd9ed17cbe83ac0953ff857551a8f5
SHA512 befc5e9d59c7870f3657006b4e0ad77136f0c528a5cc97c909c98f15e55568a60d0b18c2d6c01360992a3ef210d00c4e7c8cefa62d664495e6d3059e47f250c4
SSDEEP 1536:AkJjkUsF0sIMuevWrFIxLYJMsF7NtuaJ7tEMqmr21FCh5VSeYBCoHOtBAIDyhA53:AkVkesI9XmLiMaIY7eMqI2/DeYBGuvAJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

fspbeidanci.jar

Path /data/data/com.secretlisa.spbeidanci/files/fspbeidanci.jar
Size 189KB
SHA256 3ed027d118986a0be08b49e74215e383cba2461c81625f1b2e49cb837876fb3b
MD5 8ac06f2062272289e993d6550fc3231b
SHA1 1ba747db80c4aa22f93d3e618f1ccfb07a3d436f
SHA512 9bf3eeecb8bfcd29097881cbba8f1f53508d000076c3d2f1273d37ae01a4d10e2b76ea254f849ad326cf4ac0be88f569fee03bbb3184d285cc0baf1f328d63fb
SSDEEP 3072:YxCKXUFwogv9cHZkMUFSpmiO+ltDS6Y2zR8f7eU3dk33try2YFog:YoUUFwBVc5kRwm9+ltD7ji7eU3dm2ZD
MD5 SHA1 SHA512 SSDEEP

Submit Download

mobclick_agent_cached_com.secretlisa.spbeidanci

Path /data/data/com.secretlisa.spbeidanci/files/mobclick_agent_cached_com.secretlisa.spbeidanci
Size 201B
SHA256 c1d868449d3c80c7fc630b9ff85acfc39bd27c0a05a63ac0343ea226087a21c4
MD5 216c87a37589fa3b044314fd4f1d0a0a
SHA1 886e6515d876745eeb7a64dbc78d237545d981a3
SHA512 d7e3f6b1b5cfdbc487feffb6a3836135b23900d5b615e595a3b1158e38d76d58b164dadc673b91d295ce8d5fa5c5eb34554a59e6dc916cfd40e9b505b5d94f46
MD5 SHA1 SHA512

Submit Download

spbeidancioc.jar

Path /data/data/com.secretlisa.spbeidanci/files/spbeidancioc.jar
Size 43KB
SHA256 b82da74f1dda0e6514836028a105cdfeb556d1c88bd6c1c2dd4a66b1974606ee
MD5 aa5d5338a48713c765f6173453f43daa
SHA1 499356cb1d33200e4ed8f6a7faa1976f83469991
SHA512 76e92e283475c48293f379c90897fa097af34d23ca297983ea4b45eaf65a1f810cb1caf1cbdc85aa42fa3e153d40785a973f895959df4c96bc51505e3bdb05db
SSDEEP 768:B3tFaCPLIkzgZlzCJK07xzD7p6LBkC+WdfGrg6woDIaT+ZXl3omclEvb3Sq0SfCk:B3tFaiU2UCIqFYH+MfGU6Idzca0wt
MD5 SHA1 SHA512 SSDEEP

Submit Download

txRes_1.4

Path /data/data/com.secretlisa.spbeidanci/files/txRes_1.4
Size 206KB
SHA256 3cbba048529b856ebc8901ed8f419eeacc8438eea8934b537fe7263d878cb49b
MD5 79922b13de8aec7af235bd83a95416d0
SHA1 6833dddc87b2bcff686a88c5a86b036f34e5a305
SHA512 5535ad0704add0a4c37a2bdb2c216cb979380fc5897413dcf1f1b248ef01860fa7707e3cc8a368e5028ef332d722f1c3140039b5f0b299c92f0bc3b727e1a701
SSDEEP 6144:Wb1AEPYQAViIm6tco4n1LtPenKEc9pbyrvXaGJMxzX74hBcDGn96I8h698ClqXP:WOEPIF3tco6HmKEkymv
MD5 SHA1 SHA512 SSDEEP

Submit Download

txRes_1.4_Exec

Path /data/data/com.secretlisa.spbeidanci/files/txRes_1.4_Exec
Size 9KB
SHA256 ca906cf8883bbdabca09ef349460cae4ac0ad2f7e711f663b59198c179418e07
MD5 374429aa9a5b24cda34cf6eeeb0d008a
SHA1 1fdd3c098bf876644470f6b54d47979234681d88
SHA512 615c13ce14a149d2793d2f4a5c6b768a7bbded1b8042455e17f9ee68503115862dc1fec4658bdd99ba065d4cda05ab0ca9171e90839c4cdb854247ea9033a216
SSDEEP 96:4ZUkmX3QaR0fBkjCwoPmXdZhW1hkbZASVbEASGsw+DO6ftWnYjj8F:4ZUJX3QVkj9oPmlebSVjSGsw6O6ftls
MD5 SHA1 SHA512 SSDEEP

Submit Download

1717650742105si.jar

Path /data/user/0/com.secretlisa.spbeidanci/files/1717650742105si.jar
Size 165KB
SHA256 650bd1d3c2837ad88eec890c4ac836783d673bd728f76d314f41ab07e41d948b
MD5 436c721f8cc0ae8a1124d5b830cd632a
SHA1 42681f06f4f5e291d522760f9f39ae04f638c26f
SHA512 c3e1deacf8985b52682fe06ff9d7eded537d63249b91df64452dcaab7d87488ff68d52235590e4fc5825a3b2babe370a316c432e8eb65a624e01c78d0b351501
SSDEEP 3072:lWKeV0ra+4yFKcv1zA02I/l/uBELu1ZPxbhfiXHchuCMHsTssFiMvNPTS:lPeV0++jFKcv1zSI/l/uBzYHcsHDQNPm
MD5 SHA1 SHA512 SSDEEP

Download

1717650742105si.jar

Path /data/user/0/com.secretlisa.spbeidanci/files/1717650742105si.jar
Size 165KB
SHA256 426a5c98090ec39a34fdfe0bf22771d43b7127b34f9272f7c4e141b0ba071ff7
MD5 2ab8d9db28ef9170a61fcdd9ef1f50a4
SHA1 4bbb0b42c318d8d1009f84a32e6b4d1cbcb16e04
SHA512 986db41ef45f7db63a2642f7fb4382472a009d435ea08f578d10c6871012b2cc2745f4695e3c33f911faf7a6f3cec45ac67f5cdeb134527225e0b65e5f20765a
SSDEEP 3072:lWKeVp4k2VBhUDXnjMnwIKPTjP8WjVlouPUgxbhfiXHchuCMHsTssFiMvNPTS:lPeVp43XhUDXnjcKPTjPnjcgYHcsHDQw
MD5 SHA1 SHA512 SSDEEP

Download

fspbeidanci.jar

Path /data/user/0/com.secretlisa.spbeidanci/files/fspbeidanci.jar
Size 433KB
SHA256 5d562189f4de7672b0c2ec39be5acef5beeeb7a6e8585dfd7db8f9df82fbc54e
MD5 5de2af45d9426ca8fbd3ac4295fca887
SHA1 86421587af04fd367bb586abae00e72c01afc389
SHA512 6faf601badf99c7efb6f3dc755d5e61affc3724eae1041f93dab552787c51b41d95c4d4f483713cff065ba6ef49922c5f967a1f650775dccee2cd2adedb1dcbb
SSDEEP 6144:Py3pvacPFnGwOpa5g/KH3MTk1K8QNjYLI6KFN:653BJ4aHH39kk
MD5 SHA1 SHA512 SSDEEP

Download

fspbeidanci.jar

Path /data/user/0/com.secretlisa.spbeidanci/files/fspbeidanci.jar
Size 433KB
SHA256 d3b8a071346f1c9aff2fccec3917563e750779ca9275a77e47172413c6cc2743
MD5 bc09ed1f551bcf7c6fe6f36a850b1eac
SHA1 4e11db46f9adee84b870e41a92c26c3c4d9cc4f6
SHA512 d71dfb24570765ab7822f7a73084b7a30ddaf5caf7890e6f0a306af1f847552b5357b2d6f4f5dab043eb61f9683d03c5a7635065f7e92844dd6a86cf838d6b3f
SSDEEP 6144:Py3pvackrzF0TIRbRRShx3MTk1K8QNjYLI6KFN:653izOI2339kk
MD5 SHA1 SHA512 SSDEEP

Download

spbeidancioc.jar

Path /data/user/0/com.secretlisa.spbeidanci/files/spbeidancioc.jar
Size 114KB
SHA256 7b6dfec2509183f21f12a5b8a5f72703149b36921a2f3d04d0200112b1e5659b
MD5 6181cb0b031215596d7e212c33d209c7
SHA1 8aa2956b5ce973ded1bcb222a6a8dda8937afc95
SHA512 54e4d3c06984712c32a02c2d890fc844d313804c868bc1e7dd40c2966b491498c2a632094fec71978520bdf01c1ff0163da204141581ff1dd354c1af65a669fb
SSDEEP 1536:wPhDH4ZdV5i7yu3dqRxbRk2kL3Ns3JYOLHnHfsBd21:oHKdV3u38xbRFk7Ns37HnHfsfu
MD5 SHA1 SHA512 SSDEEP

Download

spbeidancioc.jar

Path /data/user/0/com.secretlisa.spbeidanci/files/spbeidancioc.jar
Size 114KB
SHA256 f05aed2a9929c5bef23b0fa7264b00128e18ef4d8454abde40c020cf252bd903
MD5 a0fa9a9b28b719ca92a0390522bba69f
SHA1 1cede768c5afd705cf2c40b6bf5451c9316eacd0
SHA512 ff96792a27101bb959a133c4bcbed57a9266e3717d7e5323371a0f898b88fdb7ae35ea86c9a0b6f4a3527b0cdfb1c9093ff6a42025feca5a134add576383e3dc
SSDEEP 1536:wPhDH4ZdV5i7yuZhjORxL3U7f49JAMDoiUHnHfsBd21:oHKdV3uZhmxLYf491DPUHnHfsfu
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads