59e8210627dd8a2e9ab4b5de89c50de815aa42fd01a30bf1d8a4cfef6d6c6df1

Analysis

max time kernel
140s
max time network
179s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
26/07/2024, 02:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

723a6b7ea3021741277e081c6acdc510_JaffaCakes118.apk
Size

7.9MB
MD5

723a6b7ea3021741277e081c6acdc510
SHA1

54a0ac7180db6d1bfcb6ecb342efcc2ff1556f4e
SHA256

59e8210627dd8a2e9ab4b5de89c50de815aa42fd01a30bf1d8a4cfef6d6c6df1
SHA512

5cc3afd063afb5c41b96d0fb44b66b600a87bc857791a32d2af8a072c3b709f2032356c12ff46cea405deab0a1d02e1d9ae5c730befe3250d58a9e63e5be855b
SSDEEP

196608:TtuReyM+79GhUWkD80WhDokXEtMtSLnCxyPo6IEIv1OWs/QjJ:Zu195GaDDyXXwMtb8PJIEI3z

Score

8^/10

banker discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.tieniu.lezhuan
/system/xbin/su	com.tieniu.lezhuan
/sbin/su	com.tieniu.lezhuan

Checks known Qemu files. 1 TTPs 3 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

ioc	Process
/sys/qemu_trace	com.tieniu.lezhuan
/system/bin/qemu-props	com.tieniu.lezhuan
/system/lib/libc_malloc_debug_qemu.so	com.tieniu.lezhuan

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.tieniu.lezhuan
/dev/qemu_pipe	com.tieniu.lezhuan

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.tieniu.lezhuan

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
26	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tieniu.lezhuan

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.tieniu.lezhuan

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.tieniu.lezhuan

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.tieniu.lezhuan

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.tieniu.lezhuan

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tieniu.lezhuan

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.tieniu.lezhuan

com.tieniu.lezhuan
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4970

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.tieniu.lezhuan/app_crashrecord/1004

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.tieniu.lezhuan/app_crashrecord/1004

Filesize
228B

MD5
5bc39d5378ccbcd2444ccc81898164ee

SHA1
163b73a7e8ad87194054f54e51a49e1059a56656

SHA256
0e87f64137c748f4c5d333b1166afabc9faef44ab7460c596596d492607853e5

SHA512
4e27d3324041f1d9569df14860c96d8f0ea742e43740fc8633e68ad6ea264a29befdaa6aa039a398c5bbe79f24b5649dc34206d131982c903420383f5be49ed4

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db

Filesize
32KB

MD5
f9c4e494f67941d72b511ab77ca5425a

SHA1
cbe6b667a2bb6a29301b865088822297c10da9ba

SHA256
486b62c2cb29629ca43d404c958c1215a32c79b0a9748b557a5bc2b1b3c4f7d6

SHA512
f35f1d545cfc5aaba09928918e07cfad3f0e3f6b60cf1992abfa83f9175d718fc67983342b1b41d9d62d3545989cb5fe61af096f9cc3824126716e60ce84657a

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db

Filesize
16KB

MD5
a11c5c6883131b5b00ade7b5b5e82388

SHA1
c6cb7c0791814b789563ba1a81d2298d0545625b

SHA256
81341e92a5e90f80c42cc5e341ec102213b12c31dac8c8df17cc870aa5880f30

SHA512
872889b5275485f89f6387c346e217aa8f28e4f3fba13166f6726bd2e2ff18c41fec0a1919b0e31b1132dee0fec31e35dbf38084b9d23bd9e40cc66dd93ad19f

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db

Filesize
16KB

MD5
48154ca067a44d6f57d4a75918d5d5c5

SHA1
354ab88f1f4e2fe0c71421d206142a4d700a0475

SHA256
b6e0967ca033a0b72fd99b28ae581395cd1a23a523cc74d6370a636ea65f242e

SHA512
2affb0e6deff0c7cc93601b95eda322489f427f64f4e5649671ffd5d23b9c274a88efa23441e821b57ae6a4490e6fe3bbff8cc809225b3e208a084dd9dc8c6d8

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db

Filesize
32KB

MD5
d4aa9ece6328579081b1e15d1987d3fd

SHA1
a2b5afe9c0ee7967336d55116f5d23335c453878

SHA256
fa5140568beb67357c0a441eb4decc9b64a015c2d7c4ea441d1cdc32057dc6d4

SHA512
e018c93d36712de842cdd381fc58fd16acf8e975e89338080fae903b67a2224a8081e77318a89d906e9a5f3b3c596d66c9824ec4f5f169e8eaa52fa74d587a97

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db-journal

Filesize
512B

MD5
e8f312196e11a3e2a9b89ee178442ddb

SHA1
a10abfa4107181773393b135d4499ac06e4a4f94

SHA256
eddf3258c8427f71ae33cf329417bcbd18aed15c28c31fc2d996865fb5a5f39e

SHA512
b104ebd479fabe45157dfae02d7f678cdde9eef88a16d49012495e8583afc64da92946bba8b09b70e73476e2a44d240f556c96bd470177c34750fcc36c6f6bd5

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db-journal

Filesize
8KB

MD5
ead68725875ff114e9d46bb63812b70a

SHA1
bea959bf7e43d9aa07c3e8ff7bc6b2642fd5bb2e

SHA256
aff799b8585672742bbda74e491745f891f5f7561f10db78b258d13acb285475

SHA512
ca131a8d102773cc3ed45ce7e78fa0bae14e8c10cbd615e53c169675adc89066b70139d2e38fb7d7e13a7dfaa73c27c8635956b06239eb69f78d8be7b30802f1

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db-journal

Filesize
8KB

MD5
f244fae00a3bbbec0773481ec3f0820e

SHA1
77092bd1d98b923e7335d244ab27db77f96aa09a

SHA256
7e2470e191b8bdd87c5b403cee6a74aec5012a146f0f81d7fb70083a9b41c0f4

SHA512
4fdc135aa0eb8673b9db89012726e62897aa2b9e5cf6ee5f6bd9c9e9420d913fc1723fa55ebc11d406291a7ed0f7c4428275f810aea1bd1a5c0a693f950cb8db

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db-journal

Filesize
16KB

MD5
20e022909f17bd1345d4609781701f3d

SHA1
c3dc7fe1c50617c044d8b11eda65f0c04b0aa549

SHA256
4548fb8bf3ceb48905b95be504c98ab2cdd70c869002d901d7b5cdc43794e579

SHA512
f8b03ef9cd64eb97ba313a32617e79e31f3a01a7244f0f9e7d825e1391dee45b6cd10dc6ad9c52bc31d9c5d6b62df4f2d69fbd0093460698ad2b180b49f7ed45

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db-journal

Filesize
8KB

MD5
f5cfe35de1137c05b4b9df51a6280c2f

SHA1
bf4ccfb6ec2347887bf1fc818227ddc8db6decc1

SHA256
28fd6eed8e2de57c7c5cbfc1c121e41bc15708e884824fc6cd119e9bfb192174

SHA512
501ff034ac442ddef3a2a97cf0ea682ef5814a142c88ae898cb7fe115f24ce23f098516322e1c1880a0fa8bdf14036344f16d61c5d735c7a59cafb24582eca7d

Download Submit
/data/data/com.tieniu.lezhuan/databases/.ua/ua.db-journal

Filesize
12KB

MD5
c83cde68db476c5673038764d5c85d2c

SHA1
999b31dcc6b9900f9655aea26b5198b1e40800dc

SHA256
229448282fc65e0ccb0bb5d9a00b8fc6000a216bf8a43259f6244f082e74f2ab

SHA512
8671c58eb34a7ad40bcce37c593eae27bf6964783f2f5d75c988b770ec67a55fd90e46f5dbb564298cf197307d16133c286383ec9ccf21676b120b5364d61ece

Download Submit
/data/data/com.tieniu.lezhuan/databases/bugly_db_

Filesize
52KB

MD5
ab757919ea10084bcf1722eb11f3bf93

SHA1
a128e8a9cdbb58089f5e5d41f8894272cff88c96

SHA256
66370afa67062bb32e07f8fe36470903b86feb878cdb169d85596d17e126d27c

SHA512
7eaa278f8cf4d61f923a8cc0804adbb750c1c08819c73015cdc556f33cc1c6054d7ee856acaa6bebef4aeec4dc0301841fbf00b381d24ed910d2125043f75548

Download Submit
/data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

Filesize
512B

MD5
568c8aa6f91c5cbdf320429f1014f87c

SHA1
8adc2bb1bc3995bac106ba2ce1f4a4793b4fb43a

SHA256
0e54529e1565dce65e73ca27ebf6c1fd4a4088fe0dabc7330f5b7e0e642a1941

SHA512
e3889090c5ea3a382d709a420cfdd4b2b19fb6dc1b578d2b73375af253a44c24b567b5fdf8345ad817ad4f9854b4c34605b90c0e2e8458db749496fadf6df4bc

Download Submit
/data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

Filesize
8KB

MD5
9ddfde910307552e1d4566fa59914016

SHA1
a4bf529d9d18eea2c333ec49a5acc372b3669679

SHA256
79410a0937e1348734c8c91ca963af146e95ddca7df3f6a23392f7cc08709ab8

SHA512
73f0fcda12fffef386175b8db6fd8e0d4c23c64d411dfafb7f65c3e9a436088f030028e229523ed8707e14d80fefa54ae4d39e1be0927f042b33b1070e77f549

Download Submit
/data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

Filesize
8KB

MD5
0db15df9c1f73f42c27a126b888f8c55

SHA1
65bf170fb5771e747a6c09a3cd82297817e463fc

SHA256
2aa04c1895455b4b4148c1733d938055fd388a9b5925e0644267e4c777ea8cd3

SHA512
5a24abc29cb4b19de60b22da2edc01341fb9e3ce0b011ff28754cae582636875fb1caa08b6a561a2522bb11c749b9e6adc895578b57b6abd1f8b3e40cb79483c

Download Submit
/data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

Filesize
8KB

MD5
36ea2a663cd94475ae7cb7824ef65543

SHA1
d8da900070cb2222735d930a8a179165cb4431bf

SHA256
2fd0827199c0ca271db2ff1c33668681651c4daf2165646833bc5f96aee76399

SHA512
7e977fedeeed816ab7182cf68cb4b167cc84d62e4c8310112a775b60dddd8f7696ad55ebd565a5261e0165d342980ae7387845f9641ab3ba6fa57a6b181470b6

Download Submit
/data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

Filesize
8KB

MD5
88e50139ed6b879135ae42c204cb5ba8

SHA1
6bbbb527f38c10ace8fc449a3f62518d8c67aa2f

SHA256
885ea8d5400ee4b1aa5ffdffbef4642eca3d0b4f35202271e5ae625083f42dbd

SHA512
ef821f0f9642aa872ffe7c3918f778cdd5806a3172783533c1a6573439de3fca350fcaf7a03bc310057b1b3e173f6c7fea25c99027b0817642228a606fc6f4a1

Download Submit
/data/data/com.tieniu.lezhuan/databases/bugly_db_-journal

Filesize
8KB

MD5
2a2b4db9aa453ac596ce222000a2c959

SHA1
bb17301496878d6574306893b9dbe1285430a0c7

SHA256
4d370be98cb1905aea290a8f0b0bddc928a7be3bbfb22e819b9ed382a2b237fe

SHA512
a52f517938f6728fbb0dae78086523ea24fb4147de38042581a8faff69ae3ae8a107c8de4b290e296e2f926e9daa25b21185960841d45eae6a7c53bc11b7ee4e

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db

Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db

Filesize
36KB

MD5
67c12933d1e0e63d9801a6aa43092ce7

SHA1
b6936908554e4a1986b8eb08289e2d3545e8ff74

SHA256
abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

SHA512
db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db-journal

Filesize
512B

MD5
a744110896495d4029af93072a7bf9ab

SHA1
31f581e0099928c411b6de69d98b7024587d811d

SHA256
1dc3d7ac692fb746ac1e69c0104ef34d17a9052730902d0d71867babb843966d

SHA512
7c5a798edf71555de3dffeb629f01b84cd2928d6258e1494d164666d8ae7bd3fe1b5bf307c4f90146353447ba2a3729626f8b0976a954ada53955141603184a1

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db-journal

Filesize
8KB

MD5
a0df21dd0533bdf29d55c2c1bbbac109

SHA1
4944d0291d2b16bb980deaf185e14a45b3275771

SHA256
32b745240e65d7c9745fffcb80218c3dfdd6c0d366c41aab66f74128539976a7

SHA512
22cdd812031a67704b46496692cfc1e63aace4f5cb96052ff74d0050852decfcaace3f87d1d2ae1e208060e53bb42e06c6a2cea3b2a7a2e277a170b236f53e37

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db-journal

Filesize
8KB

MD5
22b4996949fa6a6c0ad5c4740bc8f0cc

SHA1
045f081e5a002b6ea7fa0d70b03cf635bf3f35a5

SHA256
7966da75ade406affb0e9bc32e7014e4d7c91d499535e0d9171423a07b4be65d

SHA512
72b86e4b74d06766e87f54a2071439a193cc00e1274adf662a7906f5c5d859306b9c2515a3361bf639f5c80296a14495dbd561841010c204c7f2ab37721cad86

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db-journal

Filesize
8KB

MD5
e1486b3608bf982c3c3adcebc66d14b6

SHA1
62dbd90df7526a6a8c80c2a02cbeabef3ae87538

SHA256
aea31e8a41e3d3808ab7eda66cb982c4c95376d994e2951e62efe79f43d07a99

SHA512
a1e0b9642cc5aa9334dc10f87fcb32c5af1d2b76096c87db3700863b9326fe4953e986c0966c8c16aa807a5f77c508a09d1a4948013e2b39ebe0fcdd6f2de27d

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db-journal

Filesize
8KB

MD5
9f65021fbe8d8063ba9783f7dcf6da7c

SHA1
c698495ef60bc2df44b584d6a0ed254f47ef49dc

SHA256
aeb0d29bfb4968b3370cad81bc3f027cf35843c7b5d4cb7797b6b458de166c3c

SHA512
3d331493b02cd2aa32faddbe17bb7335b6b575edad8928cea30d0eaa4400ed975f786f7abbf0dda54b6c832ae05f6fcc87224f9adcddcb73aa7995a5b6ee4192

Download Submit
/data/data/com.tieniu.lezhuan/databases/cc/cc.db-journal

Filesize
12KB

MD5
04ef95c202a06d6525349649371aa9ef

SHA1
a977d256e651239232cc27a6934b97886242f731

SHA256
8b88f674b3b071e8f974d94b3bf556e0788266ca74387c7107afdac4656d7f5e

SHA512
aa79bda75d0729fe92b803f8fc69d95d3d9d323d5289278c68c7a855ca85015d29f6474d1ebf0e6e8ddd7d432cc918e7801a68804227a87e270c6b4e3b33a16a

Download Submit
/data/data/com.tieniu.lezhuan/databases/downloader.db

Filesize
20KB

MD5
600d724a598424fe6a9e8c30f407c6bc

SHA1
8a4f9073370bbd3030552d7595192c24f7419e4e

SHA256
f7f0c3e8bbbf3835ed943557c570a78124755eea305d14a6e56340ff53ab30ca

SHA512
f4a411efab7a676378bd8196c7603de41d9c7bb2d67a37fe2fd6ba78fc261f8f981e68d56c89d12c0bbdf44eee477cfe9880c28e5f1c734f951a6640d4afa71f

Download Submit
/data/data/com.tieniu.lezhuan/databases/downloader.db-journal

Filesize
512B

MD5
c84d76cee05a275fa40e8a0c33c00a6b

SHA1
6804901c93626d72b50690614bc5f02267fa9df0

SHA256
1356b8aba4521c318b10e2000cb41249d197f007a4804bea4c4a913153f2d4a3

SHA512
d81afe9ff2281e99c87bed506acb22836bef7aaf4b4b23044baef6ae87e05fa3e2d32d31664cd11a12a451054a2485fb35b4d1007af56645c38cabbf173b6ca9

Download Submit
/data/data/com.tieniu.lezhuan/databases/downloader.db-journal

Filesize
8KB

MD5
1d39b9e3f2ee68384308aa4f41465460

SHA1
90acdc057fdf70899f7c14363d332bba9269c924

SHA256
696684ba986fdac8bbab106ee85d183d536dc87e9c480606132ef84975952da2

SHA512
d99bc503b3ec8eeb94a34390869dfd37cb4645257a0c8d893fa6349973268cc2f761c4247b014da4b24b0bdcf34c1be4543be37a99f51c3c9f74c3417e6a919c

Download Submit
/data/data/com.tieniu.lezhuan/databases/downloader.db-journal

Filesize
8KB

MD5
7c73d228b24f5404d733449dd4ef6724

SHA1
b40b07f461ff3d5efe7fd92d4022d153e83fa319

SHA256
cc40de8918cbdfadae3ced0edc47fea419ae812f3a3ba2db4e65837f2ee29759

SHA512
bd5aed0b1954eeb95da9afff1c32afd1d6d9f0f61ecb594dc24b87b3e3c1633672c809c99d20e242e9768816f8fdd3084395ebea3fc2eee20c7f3e3c90519ed8

Download Submit
/data/data/com.tieniu.lezhuan/databases/ttopensdk.db

Filesize
40KB

MD5
dfeb79846440c64da34c5a08d8055c13

SHA1
8b8c5612bee502554b916fcb3cb11be03c19cef2

SHA256
e34423f765d83a2048b50ac1d93b194e67a70b74c6bfffa3696f7500dfb22171

SHA512
6213782f6390df0a774384fd56b81f22f25cd1b954b7fd37d4b9b4799c5bf2cd5ce7001bec8f258d15d2dd907c07b75e4c9c107e84f64d9e7b680d76587c4e2f

Download Submit
/data/data/com.tieniu.lezhuan/databases/ttopensdk.db-journal

Filesize
512B

MD5
f3012b76e54ffba9caad25e5bba41e8c

SHA1
44b2a3ffb833c2993934fc43247509ff33026931

SHA256
65ac268a91180dc847ce4fcc10605e06450fdbe8510bd1365370b14f09ef212d

SHA512
2e22b0628aad8542293e4c4fc2cb5f3d27f42f9a1de91964a875530f678c47dc6db19c71cedadbb80c4558b6bd8882cd039667840f8886c7990964934ba92533

Download Submit
/data/data/com.tieniu.lezhuan/databases/ttopensdk.db-journal

Filesize
8KB

MD5
4623fe13d111af7ed456fd3874615f00

SHA1
73a6432f41639bde62c78dbafd5551d60c277af3

SHA256
ae8374b19f7ccfb7639684a07497f4b3666f16364367c81dd04f9c56a30af5d6

SHA512
65a7092880acca2f2abd093a788de6eadfd498ba12dd070601d79c6dab3bb7c37d0c602e041cfc240d125dcf4b0820ddd3d0b7e887897a8600e4f2aa046f0410

Download Submit
/data/data/com.tieniu.lezhuan/databases/ttopensdk.db-journal

Filesize
8KB

MD5
fdf1df087c09d8bd2f656c00de18503c

SHA1
57c11c0fa67ceb6437596254edad9549f6f00d26

SHA256
d08372ee226514034ca84f8c8f1f48fc95f4678d5b188ebd6f6355d8d6c50431

SHA512
b69698e858413c6d4b27da014cbafad03de578fd2cd719edbf423643663e30f22809661a6f66f161db9c38a8e200eb5f926467b1455db96c973c408edc366dc3

Download Submit
/data/data/com.tieniu.lezhuan/files/.um/um_cache_1721960578320.env

Filesize
1KB

MD5
03e1e6129eade31cb1354381dbb508be

SHA1
ede814a511da7f6bddd8fe8e68dcce3526e43315

SHA256
a390fa0980307e805b0c660647427dab73a8341e2eddb64f02a91dea416c55d8

SHA512
cf25c14edbced93bafbf85b6bbfb189c262ccdff42f564f90930b16c3db6312dd69394026ec7580f142bc46aac29b35decccf2499561d01e99fca1fa667116bb

Download Submit
/data/data/com.tieniu.lezhuan/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
fec3123f3462aada9a501c96e9577514

SHA1
f361bbcf6b5f9d50bb1bea2a08c06f68d57c3144

SHA256
6b9fb1c55773b432be048520733baa270792da4442cabcf2097c68717b61d9b0

SHA512
85686f8ba584aab9a9557043a1f42e0d9d31ef89750289b01530cd4d6072422227b890c787e84b94ef68f2e86d2240c4000007d8789d9e23b3fe9ff1c340a1cd

Download Submit
/data/data/com.tieniu.lezhuan/files/exid.dat

Filesize
60B

MD5
438268e65b90bf818ea3943fbeb70f28

SHA1
8c236913f6d0659d357f03b20304f517a37456e4

SHA256
8f81be9ae015288c46e6a7f6b10349a7d5b35abe268b644284fe0af7ace1e8c9

SHA512
25873d57ec678b521b376404be517e8cf67b858a61106f87c90d22e84df28eb069d72b2cccbc4e39f59a987e70ad4eb7f3037c6e8cb4fac16e95a4ee2a281b19

Download Submit
/data/data/com.tieniu.lezhuan/files/infoc_sdk/batch/86_cecbdd3a-c058-4bb2-ba47-aa634512db98_1721960453379_0.ich

Filesize
231B

MD5
e441d9175ae1c75b51215bedfd604710

SHA1
a9f3d137719ae905bb15a67aa8a2b2cbe895b033

SHA256
daa3dd7095cd67a9f1754a86f656768cce19d7c048af6b190c36ce88e09b925a

SHA512
40588f97baca55de1e9dabaea85d863658b48801ccac98e44804c92d596683d72a0406e0cd7654f0afaa2ef544e71d620e16a27c60be7221b21f1e4d4a75870e

Download Submit
/data/data/com.tieniu.lezhuan/files/infoc_sdk/urgent/83_2c05f472-ca3b-49af-9244-59008d306012_1721960453570_0.ich

Filesize
193B

MD5
113978262b704c5d43f7dc9ce2bbcd12

SHA1
78e96207d93f71296500e0d33ec447b29f15ded5

SHA256
9c5495dc8610c8d3d6cd6a49f96d618b12a087ac18c92d5cde0ee26bcaf8d712

SHA512
eb66b4ec83a009bff89c3cc192a2ca96b0ced3563618662f5c530ab3b250937a7d5eb42e8c06bd7d2be826e9a72b7474237f841edc1af164aacec3d7a4744de7

Download Submit
/data/data/com.tieniu.lezhuan/files/umeng_it.cache

Filesize
350B

MD5
3be27baa1645e55d79c36dc355896ab8

SHA1
bd08ca52ecc8fe5cf5aca06cffab9430f5e9d632

SHA256
7d755ba8ac8448b091a20db2ac25b593368741f625ad5e418c071b3ed3e18d9c

SHA512
4ec3a1ce084bc2e74399f5c9e56f2d4c014f5ea1af56e54be4566fc6f052f3ea9d00ffca41c096de70dec9f1eade44eb973ff657b46ec51bbf93b8ce04b14f69

Download Submit
/storage/emulated/0/com.tieniu.lezhuan/config/5ac714da7be6d534dd74c84a097f98e0

Filesize
344B

MD5
996e9b2de7d4cf13d0472c8ee4492564

SHA1
0919bbf01b7c467a69ab25ae3e19a0f1d1ea05d5

SHA256
a3f1af96b6514e59c510c5941db9173ca14b319827f4b4392e0b0f406a753d81

SHA512
8fef58443ed3a15d640a4bd6169f3bbf7484780a5e6bbb39a333e1b9b78ff243839dd27a68e51f723f5359ce5be9b08c81edf3842376318e5e868aa17767d4c5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads