06d3297f90932e7a7d1d0ca7e8f6a77fc12a28d4b21b132c0fb6b8656d98df37

Analysis

max time kernel
174s
max time network
192s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
13/06/2024, 14:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a620c740e7446e18f120831438e73085_JaffaCakes118.apk
Size 13.0MB
Sample240613-sacphstcmh
SHA256 06d3297f90932e7a7d1d0ca7e8f6a77fc12a28d4b21b132c0fb6b8656d98df37
MD5 a620c740e7446e18f120831438e73085
SHA1 52d2c5933ac63bb3891da9310bd281929d479075
SHA512 65e08d3dc5d708ab15fded4e152db7639fec38962a98ec19af3c0a4762bccc77d5bd35d408b34a1efb60da85d645ddf45cec76da7fb667c2a08233da7965ae28
SSDEEP 196608:gVG7AJ95gcdWIiDWad1lm0NG9hhal4DgD6Bezccz+64KQTHOPKehTj0zVMt8BBT2:UG7ArXcWad5GrIS02VTHOP7hf0zm4sl
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.jybd.shop
/system/xbin/su	com.jybd.shop

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.jybd.shop:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.jybd.shop

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.jybd.shop

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jybd.shop
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jybd.shop:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.jybd.shop

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.jybd.shop:pushcore
Framework service call	android.app.IActivityManager.registerReceiver	com.jybd.shop

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.jybd.shop
Framework API call	javax.crypto.Cipher.doFinal	com.jybd.shop:pushcore

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.jybd.shop

com.jybd.shop
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:5195

com.jybd.shop:pushcore
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5295

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

_nohttp_cache_db.db

Path /data/data/com.jybd.shop/databases/_nohttp_cache_db.db
Size 24KB
SHA256 e9a78ad2c9635f9fea247de16332d5832df86abafa66ddadbe50b8f5af655e3b
MD5 2c4b845a03013e58d7ce8abd80b1348e
SHA1 09d3da2315f4909c219c436cfa305bc0b5249975
SHA512 66f61139a84f9a4c0c2aab1ccb83fb4bf84a8a48d44d8b69693ae18f722b98502de08216a89f27b530e1f8e025cfb9d5d4525ddb15e9b264360b325c3ee91801
SSDEEP 12:TLxPsmLGN9aEWTSFbyXfEKV4VEasMl96FEoBfRmBEyPbD3OwG:TLxPsmyN9aEW9fEwaEjS8b2GSzG
MD5 SHA1 SHA512 SSDEEP

Submit Download

_nohttp_cache_db.db-journal

Path /data/data/com.jybd.shop/databases/_nohttp_cache_db.db-journal
Size 512B
SHA256 0ff4e9107b6f0bd5dd3f8de7c5512d448d510d2181e4e91a39b183d4ca5c7a6f
MD5 caa13488981e0606b52b0fe26a489af9
SHA1 777f8c59e5744275a2bd09a98d16d5b0f80f0dd0
SHA512 de0f737698f4f50618da2c0e14a4bd340cfefa8f047e88a6c66f1dd85f6652ac4a738b6436d9504b3ebbfa856ff95f0bf4d658f947b46e364d25730f4764df96
MD5 SHA1 SHA512

Submit Download

_nohttp_cache_db.db-journal

Path /data/data/com.jybd.shop/databases/_nohttp_cache_db.db-journal
Size 8KB
SHA256 0e30f35043c20a3d0d2639468fe8f60a755d4e85ed1b5e1f46edbe2e5d5e4bcc
MD5 4143dc1898142d0cbbbfb13920eeba0b
SHA1 a3af98adb80522d51870fbe0fea336d599b37ab5
SHA512 e892a1b897e03cea3bde967109f419492c80f616420a33479b225692367d897da95f00dd1f89f1c884b5477725fe122fdfffbdb6c8d7ea7e5c92fd9f63e4c3b5
SSDEEP 6:7+/l9LOn1DRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKUt:7+tp6RqLiuWdwRmBEyPbh
MD5 SHA1 SHA512 SSDEEP

Submit Download

_nohttp_cache_db.db-journal

Path /data/data/com.jybd.shop/databases/_nohttp_cache_db.db-journal
Size 8KB
SHA256 ada75292301061bb4040b39698bc18405ca2aa6c80648ad4d1b5d0f72aed1a28
MD5 67db6ddadf46fb2e0ced9781933e91e0
SHA1 4fccd2f62d1b549ec89b03c56482ceea99cd37da
SHA512 ade4c10fcfc1b0c7b63481d79fb36f818ad879cbdf8d8052fa3a1d307c08305023dc76330e4cbec920cd3345b556c6601175eb991314d07c279a64b034e80315
SSDEEP 6:7+/l9haPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6u//Wm:7+tyqLJdTRmBEyPbLOWm
MD5 SHA1 SHA512 SSDEEP

Submit Download

_nohttp_cookies_db.db

Path /data/data/com.jybd.shop/databases/_nohttp_cookies_db.db
Size 24KB
SHA256 d0eb89463fdeb0a62e43db6094305fdae72131a09e030e5febefeb7cc1cc5da1
MD5 8b88d8ed6786b69e2bcfafd38ddbe5f4
SHA1 2d0e5db696a423e48d9dec06edb15ea7e1ee31c3
SHA512 f1ef59c1065199347615401ce91c20a90b30a9e3d434c09abdf121da985fb0146b0835570b74dbe2689f68ee93c98958dfd2550375d20efdc3dfb88c9d238868
SSDEEP 12:TLUMQILGj3AjKRqTSFbyEQkANaKl9PJXrtkYkRmBEyPbD3OwG:TLU5Iyj3CKRqNlPldGSzG
MD5 SHA1 SHA512 SSDEEP

Submit Download

_nohttp_cookies_db.db-journal

Path /data/data/com.jybd.shop/databases/_nohttp_cookies_db.db-journal
Size 512B
SHA256 c64d9cca91cc08e4629d05bf4a71c2b97fe098d04d1a9478a2b6eeb3961de7f5
MD5 9881c9c95da85be31e06bc72e1330d6e
SHA1 407a3cd79da3f92eec5f919d3d424b2ab62cf250
SHA512 7bcd2f1ed2ec92c51f3c22a94f2c215f55aa7b6aac5e541e42809e13c68f209243023e6f07af13a0b76d4fb84ffe7330a3a7cae135ff0c0ae613eba0a82f6c24
MD5 SHA1 SHA512

Submit Download

_nohttp_cookies_db.db-journal

Path /data/data/com.jybd.shop/databases/_nohttp_cookies_db.db-journal
Size 8KB
SHA256 504ceb6f4e6828a4cf69f5c735c71ae4cec4b3d7e575ff90e523d22bb517a2e8
MD5 21730a2ae37e4c1dc7b171ab0e466a11
SHA1 ea93cecaa81fe8abdeb2dd1e5681bf40ece7d8f0
SHA512 08fdef34254b44bd97a957da31ec9074a38992b5b6b80be79a1aa0bd2a7fb87339a57ac022bcb7c10c1b6091ce02c4827a754e29754d4c0195fba1138f05ae77
SSDEEP 6:7+/l9i0gn1Tllng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKMn:7+toXpqLiuWdwRmBEyPbP
MD5 SHA1 SHA512 SSDEEP

Submit Download

_nohttp_cookies_db.db-journal

Path /data/data/com.jybd.shop/databases/_nohttp_cookies_db.db-journal
Size 8KB
SHA256 1cb2dc0d4e19ccd46e763515ae525de426f5b0fd29d986347f928179d0486cec
MD5 a39a16041f347dab82c0e86bcb642982
SHA1 e0fb175f7b0bcaa2b4c7727d7c3237b047b6edfe
SHA512 809bab0f2198746bef51b473e0f4080fcf7b2c8b20d779dd6e585a1660df3548758ee6894b6aec48283d4df4b60021702d44235d7bc75fc9da183dbf3eb35d7b
SSDEEP 6:u0Uzpg9bNFlLdrlOERX4PBX4ogLugMBX4suuKHts//un:jipqLJdTRmBEyPbBu
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdbsACTIVE_DIALOG.db

Path /data/data/com.jybd.shop/databases/mdbsACTIVE_DIALOG.db
Size 28KB
SHA256 10f67c583154e9e7c4f7eb4f41018adb139003cb2bdd277949bdc188fad1844c
MD5 ab56f6acfe2e79a6c4f01613e622f9d1
SHA1 84a56731683306d2d00cc97b504b392bc3009f0c
SHA512 eb205a6ddae110853f5119e7f06eb508870b779474069d2e2a78258aaea9df86bd194cea6cfac1362c6eb7c03092b988f3302a9815ba13037df1f1f7ca02e463
SSDEEP 12:TL/3lzKIiT8KVIy9YGo6b3ZajGZW8vsIKWFopK3h9wpKIFEHqoysQ5pzzRmBEyPb:TL/3lRyi6bXvYqt2XFIYsQbzgGSiI
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdbsACTIVE_DIALOG.db-journal

Path /data/data/com.jybd.shop/databases/mdbsACTIVE_DIALOG.db-journal
Size 512B
SHA256 94670a8ba1f47782332c0f9912cbfe70c2bcf68056eeef15b1f55d0804f372cf
MD5 5a2876c65df4dd92238402173c8e01da
SHA1 49119648b421bcfdc2928b5cf4a45e5da93c9aa3
SHA512 f81f42493793b559ef8b931b408ee381f1c27f1c006ddd32424014053ac6f6e600edf9d22798a7a180c0f29f9129f37fd433c2ff0f2e58ba94afed6ff427d9a2
MD5 SHA1 SHA512

Submit Download

mdbsACTIVE_DIALOG.db-journal

Path /data/data/com.jybd.shop/databases/mdbsACTIVE_DIALOG.db-journal
Size 8KB
SHA256 29dc24b2924062fdbb6a9b9c8565cde1c8e50ed7416336863e7f55e0b3d625ba
MD5 ec55fb9393ca0413570d500b31d525ba
SHA1 6a507fe6f973ba49addc8aeb3b438e6d4ca39513
SHA512 a42b1cf26ef6eb467ace5c9982739d051e0cb78432e4c86046924a667881a05d5ae70ae5de331cfe62d0588653665d9506d33f763965e7e7a403a4cf2d14269b
SSDEEP 6:7+/l9el/gn1Sng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKD:7+t0l/vnqLiuWdwRmBEyPbM
MD5 SHA1 SHA512 SSDEEP

Submit Download

mdbsACTIVE_DIALOG.db-journal

Path /data/data/com.jybd.shop/databases/mdbsACTIVE_DIALOG.db-journal
Size 8KB
SHA256 e736523363b112166abba88668074325b9c440fd4967842c56c4c379ae6789a3
MD5 7db1b98a91bf2cc94188a7788de07e56
SHA1 4afe406155d3740a9400a309f913feead59fc7cb
SHA512 13e52db9136ee8e97327cee05811a5745c5cc70e1aa2cdd4d2b5727bf96d3ad66b579bf09c1a4708108cca0137b618ba737f543631be524996bb8d26f16b4836
SSDEEP 6:7+/l9hl8HPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKPqC/cQ:7+t/uvqLJdTRmBEyPbFScQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

pri_wxop_tencent_analysis.db

Path /data/data/com.jybd.shop/databases/pri_wxop_tencent_analysis.db
Size 44KB
SHA256 d904dc24f52421231fa085948bd22608d4f5a10d6090ae9f78140a8e5c760bf7
MD5 c3fe737dd72119d803372a8419d298a0
SHA1 8eed042ccdcce5bcab2734b12fb2d3f763b8f6c4
SHA512 4c15800b06d515b5cef7a1d932f547aa40563544fdf40b995c18d16553b7a888fd11ffaf4753d8ca1f71815cdc9b8e89b774c52556d3509bb116f126c3443afb
SSDEEP 24:TLV0n2J82cUO3vrOgSDQ/PoISKIDT8GS+GQeQ:TI2JDOfr6UPmlS
MD5 SHA1 SHA512 SSDEEP

Submit Download

pri_wxop_tencent_analysis.db-journal

Path /data/data/com.jybd.shop/databases/pri_wxop_tencent_analysis.db-journal
Size 512B
SHA256 3e674d8f3905fe76aa4841adef51fc4fcd3218c2cc5b8d7e4a424bcbf4e24572
MD5 470ff336d457a727558c58d26d4e74e5
SHA1 fab8ab44d2429d54d61f31865ad83f37b9940334
SHA512 705caf63d93d8a8084c69ec153df6d5c496df57c3ed33f5753be703336e1af05c97ee116f9a7ab97776415e27d61b456d5427ca3bd9246d8dff6e1cc76fbe928
MD5 SHA1 SHA512

Submit Download

pri_wxop_tencent_analysis.db-journal

Path /data/data/com.jybd.shop/databases/pri_wxop_tencent_analysis.db-journal
Size 8KB
SHA256 a05ee6e1caa777c10caefc68181cc6c32d3dac7d27597190bc1a6d82b008e6e6
MD5 d61f146775b797ca60fd347950fdff8c
SHA1 b6ec17531acf3f67232ca0d1e2af420adc82c528
SHA512 c8c784d1bccbad566e8f4089475550dae5d80fed9025591a362f0fd541099ca0ea35502fef6d85b7af1aae1a26e888597f2829a611292c192556cfaf69f9f6b6
SSDEEP 6:7+/l9d2rgn1Ung9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK5:7+tOVqLiuWdwRmBEyPb2
MD5 SHA1 SHA512 SSDEEP

Submit Download

pri_wxop_tencent_analysis.db-journal

Path /data/data/com.jybd.shop/databases/pri_wxop_tencent_analysis.db-journal
Size 8KB
SHA256 6bd87c56b9653012e236a86589f72f94954b3780c3bb523ee67b8a8a4093a281
MD5 c0b713bc2d3cd044cf2876a723834a0e
SHA1 f4a140e30c22c0fbe9c17ffae0acad63b7d3206f
SHA512 3c2d580cfca58795ead17c0d919c87793ddf8f6fc3eba7a7b900133d14510ce340beb8cf4f90312940cf1b99385883c74f9a942e1def1222b7f5a3abbc44d104
SSDEEP 6:7+/l9T4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKoy//Z:7+tFwqLJdTRmBEyPbiXZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.jybd.shop/databases/ua.db
Size 36KB
SHA256 c2c0bc8842203ccf1665dbb5b3333b22ae5a6ae3ef8eafe83e7f43adf32d0295
MD5 b7036131b84bdf2b66c67fde18d62308
SHA1 18b1e5a358d68c846495cab5cfef7c6679659093
SHA512 256bc83e1a516a58f5d1d024d27dad3c26723df0f96e0deca6baac86d84518000212570b06996a14bcbeadff05fed05125862aba2d4aa08c15a6999563dac067
SSDEEP 12:TL/r/ZapgPBuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPb8FOwIQQQ:TLToiD4PPvP/BlmqygGSgIQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.jybd.shop/databases/ua.db
Size 24KB
SHA256 f7efa02ed5dec144cf96b99f23e1d178308401b20ee3c4a2f902ffaf3b3051d1
MD5 7ddead06980a901997d9d5b900a517b2
SHA1 fbb2ad0bd4d5e15c8dc8db55987aaefcdbd2727d
SHA512 b2ac4e3a18b4105dbe06789b62f868bbce1b13a70bdcec82fad1974fe38818d1d25b807d96506f3388b0a8328c744baa93c9edd8b6270ed75c1280397efc9c77
SSDEEP 24:TLphoiD4PPvP/BlmqygGSP/hoBHBS467HBSHn:T9uvf8SP/hMBSHLBSH
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.jybd.shop/databases/ua.db-journal
Size 512B
SHA256 3334a518fed0479e76872c2d897494e6cab5f8490564be16b5a4f5525f0387eb
MD5 da187b1bd368361d218bc611c84421ba
SHA1 6ffb2ecb4aa8788c60dbf9ff532644c1c18fc3d3
SHA512 cb1c89d8b021d7e693bb5359ff775749578a9c25394b762dc1c88a3887534e3dce8f686b877f1f11a885729f76f0985e4a5fc73fc03b4f0e3e6a97c89d816918
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.jybd.shop/databases/ua.db-journal
Size 8KB
SHA256 08f1df7716f122697d07e6cb1a03fdd8eca27e8e2f908415c9a39e1085a89b79
MD5 73eb7feaa3711cec94fa4fb66cf41c17
SHA1 1258077fc7e53f181c999420ab315d4133b26479
SHA512 1a46facf66a7314a2e75491caffe84c5d461bdd46363b92dca36699480b86c1ba8d4fee790baf650f7f601accb72ec9bb89e5a3318ea83926e0f4f57c4085bad
SSDEEP 6:7+/l9QAwOn1dwxvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKH:7+tDwvqLiuWdwRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.jybd.shop/databases/ua.db-journal
Size 8KB
SHA256 47333706000f4af12c356149d4c484a5f05f0ee9d0f47fe8d4409832751b3a7d
MD5 2abcf1dde9dcd3c6c947b9b8555263d6
SHA1 7e2ec0062ee0621ae061515ab89ad95f363f0149
SHA512 d89e992929e42ce8eaef7dab7e6fe1f1b9b154dbe621cfc0440387a169820c0d3d12cb5d8955f1f7036a86fbd34074ef2551d82f88ec2b3e459bddc1d75273f5
SSDEEP 6:7+/l9AelGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKp2C/5:7+tSqLJdTRmBEyPbHS5
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.jybd.shop/databases/ua.db-journal
Size 16KB
SHA256 6a778936a1332cc121f258e859b801b73850d918f238089c40a7a00898728f06
MD5 8ea24a4a46cd171c7659f6357a3865e4
SHA1 17d92904ecb7819f4ff58bb78bb946fe0fa35fd7
SHA512 c62703f7decf4bf925ae976ed1b5744ae4b4addf95164208d1b6d39cfffc112f81db07297028082e134f88196ef129e1325232d7b32548b6f91923f9ce951fb3
SSDEEP 12:7+t7QYqL/r/ZapgPBuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPb5D:7+tMYqLToiD4PPvP/BlmqygGSd
MD5 SHA1 SHA512 SSDEEP

Submit Download

wxop_tencent_analysis.db

Path /data/data/com.jybd.shop/databases/wxop_tencent_analysis.db
Size 44KB
SHA256 cd76875b230709bd659eabf44ba5102060854011b4ec2ad1bf755c6f8d46ccdc
MD5 f5c4b4b2ad30e356f75e028c7caa66b5
SHA1 c9469b3214f03ccb8175a4cd9a40389d4ff634d3
SHA512 d0edde27361948882c1e806aba9fdd79d0e8e027c4bb306e885a2dea7433cd6ee481f3f161c310216cd0428c8984153f5ddc4ea02aaec61fd1b1e019f79b0d2a
SSDEEP 24:TLY0n2eJ82cUO3vrOgSDQ/PoISKIDT8GS+GMsB7sm:Tf2eJDOfr6UPmlSisps
MD5 SHA1 SHA512 SSDEEP

Submit Download

wxop_tencent_analysis.db-journal

Path /data/data/com.jybd.shop/databases/wxop_tencent_analysis.db-journal
Size 512B
SHA256 ca87137962b1a39e9506abf7e49a631bc48e638d9202ddbdc9d35b0bf79149fc
MD5 0b1d6660b75a520efb1393c4a3503611
SHA1 000a9b5e2ecb659e941448a819c86ef7be6c7eae
SHA512 c1f18ce56ddf63329be9399c1beb46bb6932b1ca5aba47d68a6de3c4df0500d750ca3e3fe040622347782f535b8cfd162245f51d262684fc8119a4aa0449f4db
MD5 SHA1 SHA512

Submit Download

wxop_tencent_analysis.db-journal

Path /data/data/com.jybd.shop/databases/wxop_tencent_analysis.db-journal
Size 8KB
SHA256 480a06332065126e3ee30238f60fb1f1076e6a1aeae4175664ad9f2f9f72dd91
MD5 2e079817a7c367f132b16d1cbe95307e
SHA1 3713973a803ef9694cbaebe7098ddc322392fd12
SHA512 8d265d44b9ffa474baf04cc776fd0cd2c53d348256a4f34b5b6a348b9a679cce81d8fad06fbd3be13a1bdec7d66fbc502fbfef86d1234155c2a3dd2715149c16
SSDEEP 6:7+/l9nYFn1Fg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8LbD:7+tFYRqLiuWdwRmBEyPblD
MD5 SHA1 SHA512 SSDEEP

Submit Download

wxop_tencent_analysis.db-journal

Path /data/data/com.jybd.shop/databases/wxop_tencent_analysis.db-journal
Size 8KB
SHA256 6671529873f2e9cd9eb3dd8d94782d9a191410be2b50fbd0a1937b8934e946c6
MD5 c65f382bab0afede25f7d341572f3379
SHA1 c59382274d8b4f9e2d948af61082285e7043796e
SHA512 8d8f38be224dddf585bb3bd923cce93505e9b06f2b526d9f0f8afb9323f0394f688ac7562ff47d31d5e9fdfc3af932b7d10df85e6863d25d68a478cf564f938f
SSDEEP 6:7+/l9F/qFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK1t/b:7+toqLJdTRmBEyPbM1b
MD5 SHA1 SHA512 SSDEEP

Submit Download

wxop_tencent_analysis.db-journal

Path /data/data/com.jybd.shop/databases/wxop_tencent_analysis.db-journal
Size 12KB
SHA256 fd15c717844cd10ce9e9aa6b50323036d308987d89aa280439f82d2f4fc7d60f
MD5 0eb8451ef6fa966dc50fc14b8f9ca5ad
SHA1 23471e275088fc8df2caa5ae2b71ed7dc2658918
SHA512 26287635c5985b1645fc91a8990e0c4e19fc920f29fab48c782cbbf1852629d28ae7edce1d45b74358ce3e8e53a7667be2e7ed29d943850e97a00035fdbf4a92
SSDEEP 24:7+tNkUqLV0n2J82cUO3vrOgSDQ/PoISKIDT8GSVk:7MNkUqI2JDOfr6UPmlSG
MD5 SHA1 SHA512 SSDEEP

Submit Download

22ba70d2-dddd-4b57-95dd-673d43505121

Path /data/data/com.jybd.shop/files/jpush_stat_history/normal/nowrap/22ba70d2-dddd-4b57-95dd-673d43505121
Size 159B
SHA256 092897d5578b52998b28433466918ebb8bbbd6b38416dacc40c8c55093193101
MD5 2bc7a0617a7ace2e42bcf2112495025e
SHA1 173c0b11f62c82fc0cd77cc91b1e97d103b6f808
SHA512 7d608768dccb6b4c68250cfb261fc2af70dd8bc31c22b77fd4e0aec8c98055e974e5c7e61fe7a131739a8d6c0dd019e49df23c69d4258018b948239d2fe39614
MD5 SHA1 SHA512

Submit Download

libcuid.so

Path /data/data/com.jybd.shop/files/libcuid.so
Size 109B
SHA256 141c23c8ee3fb0b0c85bfddb807c507b1ba849ed37a439f2d42d6f8f10eef3f4
MD5 e77e786cc130cb472b37782f929a4b97
SHA1 f20c4e601e5bfd62693edac9d6c806567072a3a1
SHA512 78b4881c2d001217b44f17600c0b0298e36b77be8c3567442a970fabb3448ee3ec6565ac20e99672d4ad41fb94d4a58c239fa4c64a5786bc03cf8d9a46b21bc3
MD5 SHA1 SHA512

Submit Download

tbslog.txt

Path /storage/emulated/0/Android/data/com.jybd.shop/files/tbslog/tbslog.txt
Size 8KB
SHA256 b7ddf7c17df8b2d57fdc434ce383f0fec224e493423a04198dd382a31eb8d8c8
MD5 3f03479f8fc98f5bd9d1136e88fbebc4
SHA1 e2d504926e463bee207109faab804ac3e17f2ca0
SHA512 8e0a2c8d7abcabc0551982c3b197f0bf6582a0ed4e9507b5bd5742bc1708ebf9b9f913e74309da8fa88197868e12538fbe50101732c7b9d6ec13a82d46e03f19
SSDEEP 192:0+mDknGNEepEx3KhgdPhP0djqXdF4bnOXEHDOd0ewcEJuyLckNNGK:CknwEepEx3KhgdPhPBtF4bnOXEHDOdRg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads