4f77f298b8cbf7c71d0d9821fd8b3d153fe21a3b874baabea95ae73b1c477993

Analysis

max time kernel
179s
max time network
189s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
10/06/2024, 18:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9b8b2f8bd72c05f64f4b22a9afed4bbe_JaffaCakes118.apk
Size 8.8MB
Sample240610-wl2pkavepg
SHA256 4f77f298b8cbf7c71d0d9821fd8b3d153fe21a3b874baabea95ae73b1c477993
MD5 9b8b2f8bd72c05f64f4b22a9afed4bbe
SHA1 2df2de895babf1841ade9ee89e9d94c282c942b8
SHA512 6452a8dc2a64557ac9f0d940f46ec3e5ee9db24a1591176e225120344b07803320e5766877b710cd61e658ab898c6b042fecdb00b1dba251ae0be5e63aeaeef8
SSDEEP 196608:7fSfec/RSu+BqPRlszKDDXCNUhWboNNFlIIQvc6+0I:7qf3ou+BErszK/CNJboNNjI/n+j
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.cx.huanji
/system/xbin/su	com.cx.huanji

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cx.huanji
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cx.huanji:common

Reads the contacts stored on the device. 1 TTPs 1 IoCs

collection

Contact List

T1636.003

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	com.cx.huanji

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://media/external/images/media	com.cx.huanji

Reads the content of the SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/	com.cx.huanji

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cx.huanji

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.cx.huanji

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.cx.huanji

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.cx.huanji

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.cx.huanji

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.cx.huanji

com.cx.huanji
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Reads the content of the SMS messages.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5133

com.cx.huanji:common
1⤵
- Queries information about running processes on the device
PID:5172

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Data from Local System

T1533

Protected User Data

T1636

Contact List

T1636.003

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

krsdk.res

Path /data/data/com.cx.huanji/app_krsdk/krsdk.res
Size 42KB
SHA256 c92eaeefcbe1b42164812cceef72f11b686de8bc671a6ee5cef7d9d40f469b96
MD5 033677ee51065322939b50a4f69f95bd
SHA1 25529da7a1b59aa3e2fd495bba9a15280411a539
SHA512 00bde5343bbba6f364e0ea5b01e46f3df9589908313a2bae5f1ac43a957042e3339f5cf93116a0555fd592fd4e933ff677f060c873e1aaccc1d3364dd8208766
SSDEEP 768:EtveDiMu5GaOv5J5QzEsZp9PYdl354ykm1khrrSN52KqtKU0e45aUG1nnFxx6tjM:Ed5Gae29bc3+ykxrrSN52pKU0e45aL1z
MD5 SHA1 SHA512 SSDEEP

Submit Download

libkrsdk.1.0.100.so

Path /data/data/com.cx.huanji/app_krsdk/libkrsdk.1.0.100.so
Size 53KB
SHA256 d09b6695344a7fe639db35eb8d418425e406df5061aba7dace96270fc6ba7347
MD5 390e5936a3222f5e274b621c37511624
SHA1 b6e4ec9bf565f7e235b98ae9bb5a85af91137a7b
SHA512 037bedb628d4bc53730ae3e3d80145406c3f840bbfc8537f09594fb8ea46c7cc755fe937da6dfe59f0701a65361d1e9787670bff0751a3d8ea255d39c867c98b
SSDEEP 1536:Fyrd9IvwC7lfuWqt78sccysekBOQm2ylqXdxFiSWOtQ1AtQrWQI6kAshPbWGQJ7C:FkdNchuWqt78sccysekBOQRylqXdxFiy
MD5 SHA1 SHA512 SSDEEP

Submit Download

apk.cache

Path /data/data/com.cx.huanji/databases/apk.cache
Size 20KB
SHA256 0d4786c53413e130a0f4ecc3827098b9c949ff3525a69f70fea93b50737dcd24
MD5 1e62f0520ef392509fe40221532ed12e
SHA1 9bdf8629914ecdc795989ce505244381eeee911d
SHA512 e75465687f7b2bce855c6d20a56279369a1f3442447dc5006798a10e597aea7c79f814feaa934a32e21b772927487b2b113848c791b206800bec1ec3b0416038
SSDEEP 24:TL48K6g/QJQbgGszxLdDLKZrsyUQVGSEG:TUZNkQgLdDLKZwyUQQS
MD5 SHA1 SHA512 SSDEEP

Submit Download

apk.cache-journal

Path /data/data/com.cx.huanji/databases/apk.cache-journal
Size 512B
SHA256 591996b2764b79f07b76ab46e2c8d39137d8b90258847444d1534ea2b2931d93
MD5 390c32ec7538b9d49923e9c31229417c
SHA1 5fc1c4a32197fb0c30ae7fefc9e9f2f5d7bd0fe8
SHA512 3d704a6897fe6980e783dfb0eae4b8ff0d47c7085bb1e0cc1678785501ab4a771128ea508460980fe39f800b7fd692546b6e55236eb777312e0bd0415eae8e5a
MD5 SHA1 SHA512

Submit Download

apk.cache-journal

Path /data/data/com.cx.huanji/databases/apk.cache-journal
Size 8KB
SHA256 a3ee46b0d89d22d326b5689fc4904776b98f22abfc446c0f50b8d8bc00037d2d
MD5 18affe428f7624105e2e6ca191e0bc72
SHA1 1c1a26ed860ca4f8ab1d6228e79d9928ca095047
SHA512 065933a8104799e1c1ac3f6fe2a121772dec68a27c33430ecc43bdbde5563325b560a1b6d42dbe8ab126167221296c930aefbc2b10b5ed4ebc47637c1206a550
SSDEEP 6:7+/l9OSFn12/ng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKWYX:7+tEfqLiuWdwRmBEyPbJYX
MD5 SHA1 SHA512 SSDEEP

Submit Download

apk.cache-journal

Path /data/data/com.cx.huanji/databases/apk.cache-journal
Size 8KB
SHA256 94e3db6debb7a6b9907a0426b72c6d0cd6eb57db36ed56ec43e950d8e5449ee8
MD5 2870dc281d3e2d2ee7118d2dcf77d1d8
SHA1 01a4f343d71ef2662270dcb26bcd4c0ee1be3ada
SHA512 1aa464b46c209de45390344d2053fd5d465e2f78634a6286c17a2916d7e2941c312f368fca51fea40d3663696fa38d6a0123ee386a80c4bf7a83984ca9d9bdd0
SSDEEP 6:7+/l9lRFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK+/t/K:7+txBqLJdTRmBEyPbP9K
MD5 SHA1 SHA512 SSDEEP

Submit Download

cloud_cache.db

Path /data/data/com.cx.huanji/databases/cloud_cache.db
Size 52KB
SHA256 b77f7bd87d50df4d444ec1796174f540ad0a9262979ad26674e00b7fa0952bb5
MD5 1ce6d6842753d6f3fc97e94e25768e14
SHA1 4aed20f730e7c2791aaac649503d0def531d7d47
SHA512 5040fe6f2fc5049952a83bf84e487e7134c9755d7c309c15e09fd96bab6e41c1b66d8856e35f22b6ede88f50f7298dabbef23786a080b04d232efc83bfbb35cc
SSDEEP 48:TZFsINGVFdMU+DYpEVfsIjY0FwpSg/NvA0wDL0mBpEVfkeqS32pEVfoo7pEV8Sns:7wyU+vK/79Nvgy/pHC5d2l
MD5 SHA1 SHA512 SSDEEP

Submit Download

cloud_cache.db-journal

Path /data/data/com.cx.huanji/databases/cloud_cache.db-journal
Size 512B
SHA256 64d77b38c21a534093f491449e93b1118b8f10d52248508e470564f0c5cb751e
MD5 7ae1e36dbf9d91782eeec57bb1015f98
SHA1 78db62651b06c8353ffb5188ffcc17395ba408c7
SHA512 f50c3d60b2e9c64b91731a000bbbb4b0f647eeac366fd9348e03f1ebd84a00db057a7c69f72325f81e3156a92bb0046850a5c0769ccf961a8513357e997bd709
MD5 SHA1 SHA512

Submit Download

cloud_cache.db-journal

Path /data/data/com.cx.huanji/databases/cloud_cache.db-journal
Size 8KB
SHA256 f62b392c2838725f42c85960ad59ea93f0fad3e8af6c4bce7466a064a8f890d1
MD5 35f561675c623078a865f6580b80457a
SHA1 b6807a032c2023dac8405e76d3d988fb57b59452
SHA512 72bf52d7e44da8a3c07530392b38c596f0c611c884b8da5d88a0e63950ae9bd854e08dca09c14ba9b44909895e27151e5f3bdcf59f79f25ce88ccb168afa5c41
SSDEEP 6:7+/l9RkUHn1bWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKgZmn:7+toUgqLiuWdwRmBEyPb/Yn
MD5 SHA1 SHA512 SSDEEP

Submit Download

cloud_cache.db-journal

Path /data/data/com.cx.huanji/databases/cloud_cache.db-journal
Size 8KB
SHA256 3d26bc6a35fdba4e545ea3b4e7ff4cf0f09406c61d8462b49b748b64dffc71ff
MD5 c25baac9734ffaafb18ba04d5aa9f8c1
SHA1 b0e5e8b5e1b4cfe710d0bb305e6c6f6bd07c5ad7
SHA512 3a90ad4176e11475f28f6ec8cfa0eb5554681fb737f206b16be6f73f0a435a02a2e7cf74f3e48a0c10324bb631bd26b5b85596989efaff6f045c0836e183ced2
SSDEEP 6:7+/l9gl4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuK7M/4n:7+tKlwqLJdTRmBEyPbD4n
MD5 SHA1 SHA512 SSDEEP

Submit Download

doc.cache

Path /data/data/com.cx.huanji/databases/doc.cache
Size 20KB
SHA256 f06afd4ac275359a04f4bbd2aedd718738b97f14735686190c986f29282d49d6
MD5 967f4205f2526e55177eae4b6046f357
SHA1 388c62e50ab97910056d0889c7fd51a0e284fb34
SHA512 801ec9e76da27d3625dca385e863c61161003483fee6aed658eb47bbcddab0dd25f483210aecdccc3e7a399b3fc548787485df660043333c6875931ac907985c
SSDEEP 12:TLmQ+yNTSFbylRTKBVU94iGZ3RHussHxUczRmBEyPbAVOwG:TLvBG04imZrsH3gGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

doc.cache-journal

Path /data/data/com.cx.huanji/databases/doc.cache-journal
Size 512B
SHA256 6cf5210af0ab71f619f908109436fc7274c7532ffe399ea528ca18debb9271af
MD5 8a161816d7784890dfcb38d56500cd80
SHA1 955e9ab2ed38f238aaee0559d028449161073dab
SHA512 019eb282f3cb5328f86905f47cc15d669d5380cbe199d7f0ca1f5798674192a7162f4d787f04382b79b660ef67a4c0bf49e2eb873f2bd241b376f3214bdf7b4e
MD5 SHA1 SHA512

Submit Download

doc.cache-journal

Path /data/data/com.cx.huanji/databases/doc.cache-journal
Size 8KB
SHA256 7d655402173e33cd480d5e36a91812b732d77a2ab182db0531435d8789f29cb7
MD5 d872ed23f3eda6096f60dc615cfef541
SHA1 af8dcd181cd5c139ebb0bfc6a55882d25b956a62
SHA512 eb39252d752d2ace8ddcdfdb8ff07549eead511a23d569f4b35b8d4974bc8b8434d92c2ce87ae0a8880cd725295c889c1065d55c7ff09ff3caa9824a86c3d42d
SSDEEP 6:7+/l9nLOn1lg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8L:7+tFLGqLiuWdwRmBEyPbB
MD5 SHA1 SHA512 SSDEEP

Submit Download

doc.cache-journal

Path /data/data/com.cx.huanji/databases/doc.cache-journal
Size 8KB
SHA256 f0b70f6e6bd523d70096f103b56b5ad326cad454357d5a5838d09559442abe46
MD5 a12496713b3d26a41336aa0507b998f2
SHA1 d1e5a54bc8d8b26e3044a62d62dcfe13c04d1743
SHA512 4da470c8d233117dddea00bef1e041dbfc1b542b86f6063d5368c0c378c4d91472312a8dc3ac5134b343ef17889aa831421c9455b02947979e3cf8e8277e3a7f
SSDEEP 6:7+/l9nlGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK9/V:7+thl6qLJdTRmBEyPbWV
MD5 SHA1 SHA512 SSDEEP

Submit Download

huanji_downloads.db

Path /data/data/com.cx.huanji/databases/huanji_downloads.db
Size 20KB
SHA256 11f3c283ceb9c3895bbe9d5cfc8f9b8cfc2768e378990d3d4047416a899da2bd
MD5 94ccf7788709c05309101d8164dc78e1
SHA1 bd9138e22d0ab3e9f6012f408ca7053a4f3eb97a
SHA512 e6b62ab65b1499b42faa4f9d2acf3a8fe9621e5fcf78cae33dc3dfb8b428c038de858ed85a48e4af74daaac61aa91a0f27f4cc427fb47946e74b6b8acf4d50bf
SSDEEP 12:TLg48yNTSFbyKOBlUKkyfwYCbMbR9/HYewfD11PYfWJW7dbDoRmBEyPbAVOwG:TLfj00aZAfHLGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

huanji_downloads.db-journal

Path /data/data/com.cx.huanji/databases/huanji_downloads.db-journal
Size 512B
SHA256 11b4562fc8b64980326d5b6961b05df09d0c1bf1401d00f7425168184de14fce
MD5 f4d4aaaefd484808a40a5e807f2489fe
SHA1 ada7acb1c515b864e0396beb584ee9228d90d1e3
SHA512 1c3dbbc9748ca485dec356a2ecd95ac819dbaf5285bdc8150a0ecd1b934a49932660aba9067ac3150804bd57c331791c8c5166aeca7a66645eac97a5240f644c
MD5 SHA1 SHA512

Submit Download

huanji_downloads.db-journal

Path /data/data/com.cx.huanji/databases/huanji_downloads.db-journal
Size 8KB
SHA256 406469c605b7c35cf849e0fdd4abc84e6402ccd192d4aca29112acd2be474e7e
MD5 b004a90859ccb841e75cc7be5467c396
SHA1 ebc163638ae6464085977347109baf5192b0d82b
SHA512 e3ab555d9a96501f781e432c13deb6de9147a019e4494a942ae6962552b63581feec52832f93a9fe324c9015952366b536b0ea4c1e175bf5ed30edb856281b8c
SSDEEP 6:7+/l9/VlGn1H/pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKk3n:7+tdVMRqLiuWdwRmBEyPbJn
MD5 SHA1 SHA512 SSDEEP

Submit Download

huanji_downloads.db-journal

Path /data/data/com.cx.huanji/databases/huanji_downloads.db-journal
Size 8KB
SHA256 ce16c18b9591341007ed22edb9686628f9e2a07a3edd6a4c028c4d2c669ce08a
MD5 d090c3afe7e214a8ae6e79a028145d27
SHA1 fd5ea698207ac3d3918403e9b36e039b6f9e90b6
SHA512 dbcfff3c8becd3a1889b8b292748dd32db4125dcadfdbce70ca8fde6fa8c1ee2770299114028fbe6e3a7b16dec085666efda124345b4497dc89a24ee20562041
SSDEEP 6:7+/l9KPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKGl0//Dn:7+tcqLJdTRmBEyPbQD
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db

Path /data/data/com.cx.huanji/databases/launcher.db
Size 20KB
SHA256 46da1c599b5542990a6c52cb3d9ddbe04edc7996c05bd2b1cd9428fa12e65f98
MD5 96c2cdcd4215a40c991edb1cb128e413
SHA1 2c40b36e73ac586754cef8ec991a5dd1fe8cd9c7
SHA512 a43a40fe18220e7216f2bd773352efc4e47f15424e30aac4a13b5c17666847fb453ccb9c8eaa43f4a65f8d66a67a31b8746b94e8d905dac42010367de5ce7c8a
SSDEEP 24:TLgsh3O6g/Q8bCzpszxnDdXsgQUQFQHkQrS7G9EChGSEG:TMshONlmz4nDd8gQUQFQHkQrPUS
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.cx.huanji/databases/launcher.db-journal
Size 512B
SHA256 c086d8867bc1b6b712031c4dc8326816f8b0c425513b74d8d7241b2d28799d88
MD5 09a36ddda774068af388828b99e2587b
SHA1 988fc53dd5d2254be54db7ecf781e960af821f7e
SHA512 0761d6fc7eeef71f42262bcc29188182c375f7ac55e41e30fb92ddb1ad7e4614d1c028d211be4025219676ff0547d58e412c0e7ac12d9caad4d45d4a2c0e880b
MD5 SHA1 SHA512

Submit Download

launcher.db-journal

Path /data/data/com.cx.huanji/databases/launcher.db-journal
Size 8KB
SHA256 d42098dff502b68fc65de9d6954bdc36482e5daf635343c7220970e72c436191
MD5 0801bec3c4cec352efe4fd8d989b3f7f
SHA1 f84c1c50e1e748aa181952a39ee9aa0247eac5cf
SHA512 0f2272223ad1628dcb6132b114f43d3801200137a2e4eccf1b26c1b4aed4dd58c1cbea958bfc90ec02242b693300af96985231fbee54ba25a69c804d81dfc1dd
SSDEEP 6:7+/l97n1Yfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKt:7+tYqLiuWdwRmBEyPba
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.cx.huanji/databases/launcher.db-journal
Size 8KB
SHA256 52e57d4921069f5800f540e580e52c6899da891a290b86f9844b4dfe34b6095c
MD5 ae819e3f72a1fb705a685fd9a6af3f67
SHA1 ebcd4210302c9183eec5d5e0810fc1b2590b7e9e
SHA512 60c5c02b90426550e7d0633590269cbe548452b17dfb4ab01aea782da2808363c97100ba1f0e66213e2dd4936f006d00ad7f3415e598026f72b0bb49c0fa0afd
SSDEEP 6:7+/l96//GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKNU/Wn:7+t8//6qLJdTRmBEyPbFWn
MD5 SHA1 SHA512 SSDEEP

Submit Download

meriExt.db

Path /data/data/com.cx.huanji/databases/meriExt.db
Size 32KB
SHA256 81eb079b96cc23c9c6ce81ccf455b00c2076a46e1fbe7d7f2be6ce6ffda80152
MD5 94ca04606508d27ae6f116ddd9e7a010
SHA1 6c8e9b25689b71631803929cb54df2764f86f489
SHA512 56ce0a047ce7aea4e913dbcc5512521a66acbfb116580670054864a344497111a9a4f065729964483ed03a689e624a0231b359c928bc616029f14549550d5b8a
SSDEEP 24:TL80Ct/AAozKonQO+FvOrFmx3L7m/TGSZGQQT:To0ChpozKon7G2rFyL7qKSs
MD5 SHA1 SHA512 SSDEEP

Submit Download

meriExt.db-journal

Path /data/data/com.cx.huanji/databases/meriExt.db-journal
Size 512B
SHA256 a0d4e76875992613cf4e6870e48c6c3566a637a7117944508b3aa41a8b28468e
MD5 f20356c0394e70b15b4bce5b0d4fa40e
SHA1 2b0e0386327d5b7e9b112a8a74d7cec935237a92
SHA512 f92262a9225d1a0568f5bda6334686a00dc9d1dae5ff3f9c9f35040648ad69355cb9043719182ff50dcb55b4504c9a7ca72082f2b16d530a0aca07f910ba26d1
MD5 SHA1 SHA512

Submit Download

meriExt.db-journal

Path /data/data/com.cx.huanji/databases/meriExt.db-journal
Size 8KB
SHA256 8f731f466f9290af6c95543732335a01b7b527c26bfa8292164366914f00e0d3
MD5 2e581364bfde67be9fce48f736f822c7
SHA1 e797813145f86d480cea96d38953417119319ba4
SHA512 eba74b18534ba90f52eb29412a8913269354c11cf8cca64caca585c1abbf1e8676ab2f8ed83f333649f650f3b3d15c52995342ea84975054e60143d4b81adead
SSDEEP 6:7+/l9VSOn1wDg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKeon:7+tivqLiuWdwRmBEyPban
MD5 SHA1 SHA512 SSDEEP

Submit Download

meriExt.db-journal

Path /data/data/com.cx.huanji/databases/meriExt.db-journal
Size 8KB
SHA256 2c22c110c7029212b51c08cf060568bcb4ace59c98279d4a40d7b4c2ab381e12
MD5 47a5570f508db5fcbad3ecfd735731a0
SHA1 cf56b4212d417162da9a3d580661b43df00f31ff
SHA512 6a22c6e01ad10de3b3ebdb5c5dad4730e615238902e81361ee32f8855451fe3a46b62884724eca4530cceb97f1ca79ba49395ecc8b8b281fec576f17218fae74
SSDEEP 6:7+/l9cOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK8uy//En:7+tdqLJdTRmBEyPb7PXE
MD5 SHA1 SHA512 SSDEEP

Submit Download

meriExt.db-journal

Path /data/data/com.cx.huanji/databases/meriExt.db-journal
Size 8KB
SHA256 503d64e598f98e3c6b00602a9d2e7f865b9b698f9b36ad57844c248c47eb9287
MD5 d4813f1d3985fe03c37e0e9f0cb7e5d4
SHA1 7868baa2bb8e86957aa23481668c97046670f03d
SHA512 f2d14c62a833bf3564e40fd2ff62d44d5ef5693ba3fd9d90bc950085eb9030ca4f19ca5966746024cdc763456651feda10eb441f4cac64aac49a5359164d634c
SSDEEP 24:7+tAfqL5Ut/AAozKonQO+FvOrFmx3L7m/TGSk:7Moq9UhpozKon7G2rFyL7qKSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

qqsecure.db

Path /data/data/com.cx.huanji/databases/qqsecure.db
Size 48KB
SHA256 0863d52f62753172e568cb28b75329c2eade37832dbdd8d611fac727b265c0a1
MD5 da7a920cad05ca63f6ca5d2400da5868
SHA1 78795c6f61e5357dbaa6077a21c8daaa84e8c9bb
SHA512 b2163629cd33e26ebbf35ce2ee74e6c68ce9b32e29fbcd1076ddf04a4f1d8b80449fee88e9ea1006a200ef6805d369b0d42d256e9c22e0147b022c17db02fd6b
SSDEEP 48:T1dHOtKqYYeTihrXTA9ZYXyvRPEeOZarS:pyZYYeTihrXT6ZYXyvRJOMO
MD5 SHA1 SHA512 SSDEEP

Submit Download

qqsecure.db-journal

Path /data/data/com.cx.huanji/databases/qqsecure.db-journal
Size 512B
SHA256 a951b1ec06ba006f04c0e217720c3a0a24a6b64ca874d5445c4fe68505cb5fd9
MD5 88568d22ddc5bcd447581bee33f420da
SHA1 5c8495d4bbc7f0617c68eb40d983a55c36302fbe
SHA512 7b87748eec12870719e8aa2a15d34480dfd996995ed839d9205b0f357ec9c79ef88574d60e45890a1763961ba112a070e35af3598bb6fe22aa6a106664a5b710
MD5 SHA1 SHA512

Submit Download

qqsecure.db-journal

Path /data/data/com.cx.huanji/databases/qqsecure.db-journal
Size 8KB
SHA256 907f3ec2810dbbfbbec5ea5f97b078f0bacfc464422631bcd28db483d34193b2
MD5 c42c0d663415bcaba3761275f56b97ca
SHA1 9aa427a942b08f4d138cef568a3f93306bbb69cf
SHA512 43ef442332e4caefa0b9fd2074fc3889e0fe8bde9ed7e7275cfc1fec67bad75902bd3b0751aeb7a47d0f0814e701b43d110d28ed01e76c476560956b0ff9d6f6
SSDEEP 6:7+/l9+8Hn1XWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK/:7+t1WqLiuWdwRmBEyPbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

qqsecure.db-journal

Path /data/data/com.cx.huanji/databases/qqsecure.db-journal
Size 8KB
SHA256 56217b20f3f8ef6ee411645932f1fb70dddfa19346c3cac0347f1f38249831c1
MD5 cc254ab6a0d19a79ecc7a11fb73fb01e
SHA1 1a97c8e06a3834fdeb13f63e2f9e0c803b384248
SHA512 b04e035fc8bdf2e98a51d4dbb3c20bca7a0c42d45198548f4a2b2ab692ee2e99d9cfdc5dedac8fa575dfe9d17d9411400eca50a1807cca7b52a5b291fbe6e837
SSDEEP 6:7+/l90JxHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK+l0//YS:7+tYqLJdTRmBEyPbtqYS
MD5 SHA1 SHA512 SSDEEP

Submit Download

rep.db

Path /data/data/com.cx.huanji/databases/rep.db
Size 24KB
SHA256 64607733711528c51effe8d7f914c6174965cf37d8f027fb5569431d4a42e678
MD5 05fa1499c4902e76e1b33700ea1e17c5
SHA1 d50f2bacf48b24d7ebe1311000216c82b7d0cc6c
SHA512 9f402860be16dd257713858cbfc57df6ec666e8fa445a4b7a144ec573aec2eff27c03a65fab420a3378d45eb0f024138711b647841cd3f5c414a7cb4e9c6bd16
SSDEEP 12:TLxoCpPXJXxUfuAFYsRerNTSFbyKXlflhastAFYgxRmBEyPbD3OwGQ:TLx1pvNxiuAzReBsV9hptAiXGSzGQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

rep.db-journal

Path /data/data/com.cx.huanji/databases/rep.db-journal
Size 512B
SHA256 ce2f7498de693985f9cdf88ba7ab8eca9c4e5a1ea0de3fd81c60b210fb5cd2c6
MD5 38cde60fc77d4bc14867c7063fc8a7d3
SHA1 ab4a94dc2311c61e87aef5f2ac796fdb8b5c2f36
SHA512 bbeac1160a77f341a30bdbcc2615c0ebabd3e9886f0f820e383c8ae220323270a1e152264e5e13c206271c3d088e5146b15b3bb42f1228246117d865b558a915
MD5 SHA1 SHA512

Submit Download

rep.db-journal

Path /data/data/com.cx.huanji/databases/rep.db-journal
Size 8KB
SHA256 4aaa0217ed5eef686e1cd80191e007064c80acc3e6d95389c027edafd2ef05aa
MD5 ed1e676e0db8abf8ee7efa1214cdceba
SHA1 4701c595a3b387156039bd7d5bc963d171f23c4f
SHA512 59a176e2e905556abab9c08615d51f7cfd0555d568756ff7603d6f652be351e739c6695d5ee358da07d8064991bd9b1404017a446d3537a39ee11f0bce5e97c0
SSDEEP 6:7+/l9in1tg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK2:7+t0qLiuWdwRmBEyPbR
MD5 SHA1 SHA512 SSDEEP

Submit Download

rep.db-journal

Path /data/data/com.cx.huanji/databases/rep.db-journal
Size 8KB
SHA256 ba5b9fde989d3429c3a3e704a13be7d232b80226328f15c97fe705b98ecdccc2
MD5 55f2bc4cec91928a37c12fa52ee14d3c
SHA1 999538a160eb6972a54303f69474d0b525cd49a2
SHA512 3f9209116e7284eff868022fa0a8f4e9c4325fd484d423faa21583af9b2c5d6c35af13d06f7122063c7901562516533420614fe8a1d71aad5f747ba5819102a1
SSDEEP 6:7+/l9QFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK0El//b:7+tOBqLJdTRmBEyPbzMXb
MD5 SHA1 SHA512 SSDEEP

Submit Download

telbackup.db

Path /data/data/com.cx.huanji/databases/telbackup.db
Size 36KB
SHA256 1ed46d7761c82e6693e0f7339fa79905cec492c2ededced66c4efed286bdf796
MD5 099cae82f841f75cf684111860d37f3d
SHA1 8f75d3ad9e65303a0a64eb086a3e3a66cd9e383a
SHA512 1e97c30f0b27f624826e2a8418b3bc316bf9906285cc94ea50fa3bd7113a3bf2befe7d4ec94c8e657f51f3c9ad17488354bf0e9f5ac536b61c2912ae68f93542
SSDEEP 48:TiKaILVT3gSrp3PiaVxkvR5IJo4YZ7VlQkSWQhF2c:7aILVT3Trp3KabmR5Ia4YZvQlHG
MD5 SHA1 SHA512 SSDEEP

Submit Download

telbackup.db-journal

Path /data/data/com.cx.huanji/databases/telbackup.db-journal
Size 512B
SHA256 293d40481974f4bd5f5d19e8e0d20a5e66ca741281f84258a4e4c1cbbd9fa070
MD5 ac325ea5c19b7edbfa7d2b3bc9348449
SHA1 2568c270e9dcf0f5eacd282fa92ad7f18903b8ad
SHA512 7beabbf4261200871c8d88ecb41ee19b5ef9d313a2f5a6ab43ed2e898464b196a99e4cdda4ab9ae28b432868b692f2654fd2cfc1f2bb66963b24c11dd89c3231
MD5 SHA1 SHA512

Submit Download

telbackup.db-journal

Path /data/data/com.cx.huanji/databases/telbackup.db-journal
Size 8KB
SHA256 f36d7ce78e9b56b2fdd01e5e0734eab52b27bc012cc6cad47affedb21bf8ad73
MD5 226e6f745104bcfc37e0c2bf773e72c4
SHA1 31c9c0c49345caa1d00aec258328972f91b8486d
SHA512 e09330f37d181599296b989c3299fa36291666a6d5eafa3011a0622607422eb30520944c236c3752b2917d170b27eb11bdda8f19d15a1cdf44b473c9250ebc6c
SSDEEP 6:7+/l9LwOn1Ug9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKhn:7+tpwjqLiuWdwRmBEyPban
MD5 SHA1 SHA512 SSDEEP

Submit Download

telbackup.db-journal

Path /data/data/com.cx.huanji/databases/telbackup.db-journal
Size 8KB
SHA256 8ecd37d886acb5d54f82df366d7d6728374655971e02b676351290d85117080f
MD5 226d05f7eb406dfcf59bc7a9501cad2e
SHA1 5f70d0bf4156ac8ff4e9c61551b3e2c53573a718
SHA512 d01b0597eb91ccfdebe5bad35a4b380425ba09637d966ee9965fd76a51f89e179f5b2b077624452c1af64faf0a1fc75041c21b647cd5bcc2cb04ac209654daa9
SSDEEP 6:7+/l9KB/gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK9s//SEy:7+tMB/4qLJdTRmBEyPbwsC
MD5 SHA1 SHA512 SSDEEP

Submit Download

filesafe_db.sqlite

Path /storage/emulated/0/.tmfs/filesafe_db.sqlite
Size 20KB
SHA256 0b83fb8330f1d912d447d54d526c7e2a3128e0eca644ca445722698cc788d29e
MD5 0ff660436246d3b2a9b84289deeb4c43
SHA1 e34a24590f26660cafa16c6b30b8d3a90f381bdc
SHA512 4c111b051e4f58d3f26fe24fafd94f3106d064bbfedeaa37977a4b436383771164861b3a556a8e1d449e259e46f78d138fe5693ce809969cf0c6908708a3c20d
SSDEEP 6:l9bNFlq4y71ObXEp0hPLuqsQ9FqFAsseuW/igGkERX4PBX4ogLugMBX4suuKfpqw:TL88bEegtDFHi5HRmBEyPbAVOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

filesafe_db.sqlite-journal

Path /storage/emulated/0/.tmfs/filesafe_db.sqlite-journal
Size 512B
SHA256 0e8c655f35dc29fccfff1e211fb7a86807b5a715a7df751bd2bcfcf4c3f6bc5d
MD5 1a1a4809c14482abab6b5c094812cefa
SHA1 7497099c5c028f70709c15e79d27d647c44f87d5
SHA512 00c0b6d011c56730be8e08d2c0dbf8efc02a254cfae6366feecd59673551018014ebe63b5c17cdb5763f52ed1e93869e831aacb5e8e36cdc8ec085406e8642ec
MD5 SHA1 SHA512

Submit Download

filesafe_db.sqlite-journal

Path /storage/emulated/0/.tmfs/filesafe_db.sqlite-journal
Size 8KB
SHA256 de968fec161ff3d1eea9643d924a03aed4e16af428ea33aaf9354f206422438b
MD5 121d2a2357fce401fd0a6a822395f505
SHA1 d09cf12f32f9b3e7fc18cb8914569b82ad4a1989
SHA512 86f0b0ccb8ee8bddad405c1d627ca3381043dd79084a2c072af477a123b8daf196f4904b8194d42dd4a7471b731392c009b5d76dcf59840c6f0b3f8d1ddc9382
SSDEEP 6:7+/l91bGn1AIlJvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKuj:7+tcXvqLiuWdwRmBEyPbfj
MD5 SHA1 SHA512 SSDEEP

Submit Download

filesafe_db.sqlite-journal

Path /storage/emulated/0/.tmfs/filesafe_db.sqlite-journal
Size 8KB
SHA256 3c76be3f523783113115ec3c45f8fffe9afe2b13f4950204f97f22c33ba3899d
MD5 de8a9ae23b5061f8e484678a34843bd4
SHA1 e1b92da7d9bbdd77a79fb7cfeba8b1bc2ec6b911
SHA512 5dedcb8870cdbc576247147a9f0add009e2e508d32d4a027e0b6aeaa02575f698e7ba25b6ffa7e7159c14d3313362bc53e5cc550eb043f07b04d0fd421bc9c2b
SSDEEP 6:7+/l9KPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKu0//D:7+tEqLJdTRmBEyPbj0D
MD5 SHA1 SHA512 SSDEEP

Submit Download

apk-1718042509207.log.cache

Path /storage/emulated/0/huanji/.cachelog/com.cx.huanji/apk-1718042509207.log.cache
Size 900B
SHA256 4a72f2a0bfc2d4aabd8b5ecc817b425a80f255b4b97200a222d943afa3e83d66
MD5 68ba667b9d2ecddb4d54870956ffef03
SHA1 4fb714db10fca0c8f33c65ae1f58fd3c131d66f1
SHA512 71f979b9bb779b6065b80e5b3e1262335e6b06c0b6aa1b483794c218517b5d7096dbe1de4101f6337b8e0cc68156da89dff48a8405ab480db175bdfb8d6c6048
MD5 SHA1 SHA512

Submit Download

.device.dat

Path /storage/emulated/0/huanji/.device.dat
Size 172B
SHA256 7485736c536a2681ca4039fa62b8ea0e0e96d523c54733b48c159936aeaeae33
MD5 c8efa80b09468bfcf7ea264fa0c26385
SHA1 b3e853ca7b2279ea34c4e12a729d8a1d7446a57f
SHA512 b0d8630514f97184d3c7752a569266d6021dbaa4274236d5e47d83d94b0c5b26bbe67447faae2c01914cdecf6072fcd319861944cf6af133e6343d3c28bef19e
MD5 SHA1 SHA512

Submit Download

.device.dat

Path /storage/emulated/0/huanji/.device.dat
Size 172B
SHA256 1eb4e1fd254f2822cbc4ff4f4e73ba63b0aee2bdab0a150b9bfa1f2532fd78d8
MD5 cceb9d4977b57f4b884dd37a3061a231
SHA1 bfa5dc7447fe6024ae82bb4b49fa4f4094c2f11c
SHA512 5dc2e429a9cdd0328dcdb71622569581bb56258f354bd1cc48d80392dd6cdaf5f99ffe4bdd7f3bd63299b70ccb6231d545f5eb4725119bac40a8176b43a90b3a
MD5 SHA1 SHA512

Submit Download

.device.dat

Path /storage/emulated/0/huanji/.device.dat
Size 172B
SHA256 939b401dab447b83c3e2367d88561ae9d2bcf93996f486c84844724f8fcb5aef
MD5 56d581f2f805ab8a2a7f928ff97d4c8e
SHA1 847c450b7ca5dbcf445c28cb5d30ec4c693241d3
SHA512 51ed34f7df89ee51d6a26cd79e0b6ab85cb31db4ec7be0bf8c37481cbcc87a13b871a425cb5bfce1015c772ca5b3189baf7b80c49e085ba632cc601090e7f83c
MD5 SHA1 SHA512

Submit Download

.device.dat

Path /storage/emulated/0/huanji/.device.dat
Size 172B
SHA256 588a9d92263ba342647e57e5c6ca3dc135b332bb1c35ef1d453a47a817aa5b85
MD5 809a037d5f8393304198f0ce56447186
SHA1 9a01d71f99d413f4db8be44384418393eee95e82
SHA512 6c696f68460b972f485f75cbf58d5d236d72a337c9b5588409f3e38677d899e7dd176933e5572ac98f8ad06694b96da352de8e09de5e4a39aa0c83ea8bd6bbea
MD5 SHA1 SHA512

Submit Download

20240610180136.log

Path /storage/emulated/0/huanji/.log/com.cx.huanji/20240610180136.log
Size 1KB
SHA256 15bde10a0e7b0c306a0c4ccfaf3f04d819033fd4d26ede09bf7e1979fa1708c2
MD5 3c2f6236b8ff9b1e6656981c80190ba5
SHA1 f3c6b4de9604c87c182b407860758a312ed6f4fe
SHA512 095d9f014f5d708df6b5cc111c023c0cd07dfee9e2f2bd5cfa4acb02085ec49ab4188d4871a0e705432a643d9ae39dbee3ef416ef1d61b6398f4da84cc2790c6
MD5 SHA1 SHA512

Submit Download

.tag_conf.dat

Path /storage/emulated/0/huanji/.tag_conf.dat
Size 91B
SHA256 db0fbe8ac81106035de6fbf9bf04d091d2d4877bc315b256b0a8ea4e5fb235e8
MD5 aa1239824ed5582ceab0043af5c5f1d8
SHA1 bcf72f87dbc076f3f20e2d52c0548d164b296a90
SHA512 17bde5dece4fb3dd1fe00916d7afc6bbc48e2082ccc8cd093371d286662ce6f17ddef2ec7771880d987986d36711dbc098c40465a6aa5646023960f8c9bede94
MD5 SHA1 SHA512

Submit Download

.user.dat

Path /storage/emulated/0/huanji/.user.dat
Size 91B
SHA256 666d48eda64076bf890016a84aa2a0cc3e20c3de1c1450735ec586facfcbbe0c
MD5 e5b500cd8c1b90776861b5b5f287dc94
SHA1 c498f61b72fa575a04b21460636ec7809c09dd91
SHA512 5050130b9ce67f8fffdd12e4ab2a828096ff787ba9ee2c74df02790e714b9f679bbb326bcb706a6466fbb3dcdb433028961cfe8ee67f7eb95bdeb52a269ef497
MD5 SHA1 SHA512

Submit Download

.user.dat

Path /storage/emulated/0/huanji/.user.dat
Size 69B
SHA256 7a059c8c6c10e1a23e4d8a21522dad9ec54278ba03de4217ca49c1f4da3a68ad
MD5 eb99983cabb5f7cec2cc0bd66f53fb2a
SHA1 42aac3aaf99a1ebc2d78bee409e4466a8d15b224
SHA512 deea7e967675c46128110bda13537de369e4b21e6510d5579f253ac541cd32a9d59a7a868ed154867ac8cdfc0d27a9aa30231dc8a2a20cb5097497aae0d4e6dc
MD5 SHA1 SHA512

Submit Download

pimsecure_debug.txt

Path /storage/emulated/0/pimsecure_debug.txt
Size 56B
SHA256 869bbaa3301e0dc132e564c2e3daf096751cac5ce65064b6f5b4c15dc9c6ca33
MD5 79d30c05eecbaf2cc5385bb148929972
SHA1 3cc11565f7656c5c6a8636b2a4510ed2949dd046
SHA512 bcfba175e222dd9f3e7b8dd9f57733886e1f829f9a42dc2826b2015b92e0e2c5ea7116b1686de70330762711ddd8b8bfe31806504b016a712c7885ffbaad9c3a
MD5 SHA1 SHA512

Submit Download

pimsecure_debug.txt

Path /storage/emulated/0/pimsecure_debug.txt
Size 69B
SHA256 792ad595bb4fea34119cc7030a640bfc319203d9912fde50441b10baa20e8bfd
MD5 c1b9d0fd31fc219cbbd7bc834e5a3b37
SHA1 dc6e076e3fe3fb1af2a72f8d07d3f843085f9f17
SHA512 2ac6fc44e7cce1130067f3ba3ce9e62451e1e1db73e8e3881cb4f67d9aaa40d2abbec7d41294dc29e60563dfbd49b427dec69bf879788c282c85d74e95ab0ded
MD5 SHA1 SHA512

Submit Download

pimsecure_debug.txt

Path /storage/emulated/0/pimsecure_debug.txt
Size 50B
SHA256 46405284ba847169b4019ddb47be0c465ea36fc2ffca5c5847d6efa9f77d7fce
MD5 c463338e883501b5cfd4d5868dc653ca
SHA1 d915acc453b6346c4a300ebb930571470e5c4d33
SHA512 8bc628a756fede1d354d78279e0662fb11f37f2b6f51ac8b0517510938615ac26c44f6cc856edc64fa60c2486fe2973ac224b580a91d26655b6131160a6b4a45
MD5 SHA1 SHA512

Submit Download

pimsecure_debug.txt

Path /storage/emulated/0/pimsecure_debug.txt
Size 47B
SHA256 fe15b821112a1eae0315ffb95e3a6c67784a5a0f22ba41b48b4c8118e16218e9
MD5 0c2f8caf512c229651c1b489262f051c
SHA1 f95dc8d435c2778e999a7194baec741a322c29e5
SHA512 4d57e348e40df743926007a984a4a9aa2d018e19f8c097b3aef5e4d96dfe4dd55a3531b70ef8b2bf4ea8900e6539dcf0ba615c0261fdd2c76697f425742789d5
MD5 SHA1 SHA512

Submit Download

pimsecure_debug.txt

Path /storage/emulated/0/pimsecure_debug.txt
Size 82B
SHA256 97bbbd2abc95a4596093c14e4a734ffe961ba98f6862c448c87efd998598c6f2
MD5 a3e7f43b86426049ab00bf4cba0cf12e
SHA1 2491f035fdf16d924f18bc0af2379778663bcb11
SHA512 fa541019e3d7fc91d4b055805882ae16a18f17ebd18a8037f61139a3708bf10769273234dd2d40724f2dd9523ae29c6988b3bd17d3130a552f34973c45ca78e2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads