93e159245485ca5daf09699bd2244a64e96de475c6e24721b0b06ef00f9657cd

Analysis

max time kernel
149s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
07/09/2024, 02:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d0e28255ca662506e1072cf52ebdd225_JaffaCakes118.apk
Size

2.1MB
MD5

d0e28255ca662506e1072cf52ebdd225
SHA1

e322d8bee03d612835a7d36f4310107b00e05bcd
SHA256

93e159245485ca5daf09699bd2244a64e96de475c6e24721b0b06ef00f9657cd
SHA512

041c971227bfd0fc7547fd53236abd25d0e7f143b2e0ca7c62583f081c2c53506a9fc02fe307c033424a9c85f7e255fe214fbcaf697386d143a2d2156d23f55e
SSDEEP

49152:ZHA8D1AUBp7xbufjxFvkwyCIeM9UMpLqcn9xWuQm/KkUuY0:hAin7tCF8lTd9DpbWA/nUuY0

Score

7^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.dfcgle.xldirltf/files/jni.jar	4220	com.dfcgle.xldirltf
/data/user/0/com.dfcgle.xldirltf/app_oiuj/zkl.jar	4220	com.dfcgle.xldirltf
/data/user/0/com.dfcgle.xldirltf/app_zxlk/bvfg.zip	4220	com.dfcgle.xldirltf
/data/user/0/com.dfcgle.xldirltf/app_zxlk/bvfg.zip	4220	com.dfcgle.xldirltf

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.dfcgle.xldirltf

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.dfcgle.xldirltf

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dfcgle.xldirltf

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.dfcgle.xldirltf

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.dfcgle.xldirltf

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.dfcgle.xldirltf

com.dfcgle.xldirltf
1⤵
- Loads dropped Dex/Jar
- Requests cell location
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4220

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.dfcgle.xldirltf/app_imgfile/d_adwords_bg

Filesize
1022B

MD5
4b9b64c9dc6d13733a9ac3320ac9f53f

SHA1
a02218ada2417dd85a3f3a22db31d30c150440bd

SHA256
35dc398b4409f3037ef52c21e4674a283e1cc0f71894704a4583752b91fb0cf1

SHA512
b819d1ca851815549bff946c1950539db7d199b3b04be0f6a6aadb1602225e895ac7283c525733e9e421646a6f2da2b732ce3cccb8461e93574c04e5d64b31b7

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_appsc_an

Filesize
3KB

MD5
58dae109b45c2378d880225e9f746240

SHA1
e67b37d47c009a11c9b365d38a3692f6e67c606e

SHA256
afc834307f4d1bb9eaba3f3ed85aa32a616ebef7b32b14ba234926312ad0f2ce

SHA512
ca3c5caffe9340d2a39e84c8e7e2ad495640338a6d1d6ecafb4b935578b334fcbfdbbdbdab983c7b6559387cfd197cd8fd33c243d6c06eb9368c6f7e4ccf76cc

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_arrow_down

Filesize
979B

MD5
db45ab95930456e6baddab4e6fcbe712

SHA1
fa0c152e3afd7fa7026b0f688a3c6ea2c27b53c8

SHA256
5c3755a2f79003a4702ee79232d59efad418aa83e30b2691256a44457b0c602a

SHA512
d658b23e0687867f44567ae4dddb1a01cebab15508032ff7336458fa226e592db84217c852eaaa2132226cebd4bd7f74b8144a78aa85f77e979a7a1f104b8582

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_arrow_up

Filesize
970B

MD5
20c4a831398dd9ebd8dba380a2e7857a

SHA1
c6db26860686a65f5f402d29d98b358630c10e40

SHA256
03353442682b665da8ccb439ac22407ed53cb499266361581a818d3b267b356d

SHA512
85ca28c7eace2766c4a5d8c8b1df4dc81cdecb241e8d129b9e43ebdcc2f3c7385aecf12afd02755bba850c19260f07635199ca606f32a8ea0d71355f64e4e423

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_bottom_bg

Filesize
1KB

MD5
ffe93c95f1ceef187397bb763c992ccf

SHA1
6b082b7f6c55acd0987611b3b9a5aac9a5b06d67

SHA256
06dcc9066f53227b50faa763aed62944dc8d5a1612beba619caae2b1a81b42d9

SHA512
10693e4df14b0212798817d20cde37c88226353f4389968a81607fe7420244cabe2fb2074627e5194ff2c06cba0cb068598ab5078c0dbf8dbe4928f86ced6161

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_bottom_btn_cancel

Filesize
1KB

MD5
a7481cc1f04ff397669d5313711676b9

SHA1
6a8a1755f8bae8c1c4236420de731ac5e6479df1

SHA256
7bb0b4de65d49b7256c1083332005aac1f40eb496fe16996657721570b427c0b

SHA512
6cad2566cc0c5b2247a2309180659a883dbdfd7e546c75bdb0683e3102ccc833d63255a5776a466880cba7f7f12666c493e84043c8512ab929dbf357c32609bb

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_bottom_btn_install

Filesize
1KB

MD5
6a976eab4bd6a204fff19f363a3e0fad

SHA1
7815e2d7905bb25ecec99c6491e05e498baefefb

SHA256
a2520bd431de7d71c9453f9e808369c694b1214b4d13759fc0a08d5af681f796

SHA512
8f0537ebd9954fe5792421f15e499c71e009d26aeac810672e8d3cce982c4291c64917ca36651f4c7f33f4bd32480c9eb3ee6ee7ffd82d2e08d8147d850ae285

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_btn_install

Filesize
1KB

MD5
135b4b02c06ce896c0289c06931523d7

SHA1
219d7fcb9a47b14dc724030a5b22b00e4912c419

SHA256
7bc734fa69ef36df3ed4d3926657a52eee7f8448842586a3320804b7f86c47bc

SHA512
e9ef72d8a52cf365cc0d32d6ac9d333b3fc116b70e87d4279249efbcc0c57bae2951c4c6ecf2e675ab37f6ebc4374898cf75ca3ac11aa3286136b6770d680fa3

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_btnbg_blue

Filesize
1KB

MD5
cd03c81961866339359a8862cd420751

SHA1
4356e958c4b333453a187b13cfb8e4951e85b5c1

SHA256
5d81cceefef430d84abee2aee1a655e975e638eb6e90d9edeaf70df18f761453

SHA512
29c6a83607ef938c8d74031781008075f9e29f28381893ce565d0d0e5e2193657264deb7752709f124bac8a7625ecda18a90763f8b8cccd48868105fde62846b

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_btnbg_green

Filesize
1KB

MD5
b61c2cbfc113d3080881c1a6c805de7f

SHA1
8bfb29fbebab3ff36faa5f6d19bf7bdf57608dad

SHA256
740a7a55675de72a6d165dd1aea7f15e6744f08e5131c2abea7e6e02ac4752c9

SHA512
7cb6ca09b180adeb87552b9b814ec50723d2f8e909a5aa1c3c63526bfe90043c0f6f97696b0e40d33c045a6d7f4b4df711ecda2a93839b9409f69c84491b3151

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_btnbg_orange

Filesize
1KB

MD5
144bfaa9628bdc547f92dd8ce04960db

SHA1
f60797400afdb88cc1a7b26eaaf5c18b7d34e3c3

SHA256
56707731bc7b76b806d9db7ec7e73173d0ba7c5acf22c8c040fb1bbb0d07090e

SHA512
071111562423e811333afd56dbd18fb68e0720f41936c42d266f70d041862560b363aa202ae24af40e9ca611d7f3eb996ee4184834097e85fbda1e2d36291f4a

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_btnbg_yellow

Filesize
1KB

MD5
c56a569d3e2cc40deb8ef6dd9c8273df

SHA1
fcdfdfa5f883afe7dea8a08b4e22d66b243065c5

SHA256
0e603b7797d42f1eadf5ea14499460e84e6525df6bdc4ee1464e00789c10c057

SHA512
b1549f4667c2765feb11d38469a5bfa4f599609ff519e65b73fc01521886cd57e7f30c2c43655d2b3af8665c77cde4f3a07e1e21f7dded059dc22ac60cbdb4b8

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_cloesbtn_top

Filesize
2KB

MD5
6edfc3ccf80c5cb2c25bf82dd5e78c46

SHA1
0f71fe007ebb0479e42905c6a78f80b0a109a03b

SHA256
2225deaa4204ae88206589b390dd277c9e24ab0a68338cec19eae600b854fe32

SHA512
a8e4adcc0cd0867e8bb2cfe43a04c3a8e8a84de99ad7150c339c4dab1e81c8dab87af17fe7b7bbea41d54c6acd6214224f07ba456a8dc0fc8c33b3782e83ba4f

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_cp_more_btn

Filesize
1KB

MD5
a0314cf413a6efe118ce49aabe7d323d

SHA1
a8134a8d8506f5d44cf084b501a73fddd194fb8d

SHA256
3d723fa2d6bef03b2f44e09486edadd7eee392e14da4bc9435521fdb9d5a1537

SHA512
e5decc76e4461aa063571e45e9d1e47fcd8586311b726c1d1bb60e327c43ef8e104f4e1614e9ac656d5ae0e9095042e230f7245c7a3f0d89d515a2fad78046d3

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_cp_other_btn

Filesize
1KB

MD5
5b1fe1609131bc828527fc35dc4c7353

SHA1
39b6169e1e2a7fee0e56e421184d81f071d3693b

SHA256
ebc4e49b42208680f7d5b9ebae07bed1712a1ecb6443dcf5b09171faae0e0eae

SHA512
74ebfb919c0af6fabc52228d7b501c632c95d28b91e0ae87109d9da5f422471f96190858f26d097bc502a8e673ccf31e35ab2b15910f7a43e8c48fac64a0c8e7

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_default_bg

Filesize
3KB

MD5
67d8c02c18a4eebb21aa28ebd88d7a8b

SHA1
f31fe91485bba4da727e9a0d0525c7417d6c72ee

SHA256
7b341f9b1ab0a691029b44f9b1d64cf74fd72ad0c74772964645c79f687402d0

SHA512
73c14d96680105ce3e24ba0667cd2452848f9c7d2549e937667c25bcce01a4d9207a78f2dcfc7c09cdb39f87f079c7847ceacbed36cfae55013126ab3bdbf5fd

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_dtop_closebtn

Filesize
3KB

MD5
82da041f51d1ac5bb8def1a7b43d23fa

SHA1
6bc0fa16bfa87398bb17922ee2f6bb1dbd9a4b6a

SHA256
0bc4050b837665100502e255107b5e1521c7012b03fcf41eeb92b2bb8c95ca5c

SHA512
1e558cc54a7f5900ca418ce7a64866273a533a25d23a84ca4721277528949836079472c7fc0e66cb5c41548ef2c06d412a1e8538fecbb02ceecf982e10c238b5

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_img_bg

Filesize
2KB

MD5
089965b9fb96326ad74e361a9a524e4b

SHA1
528cc6c7a10de9f525919a477c9e20d6b6e93d55

SHA256
d7c9eec30a30c3da3e80d2f7db31ae1ceb542c590f5ce8abaa77f39a16a0cf46

SHA512
b19f99764693882cb845b024bf5ef42121826dc92047532df19ff3e236c5e5e57e1390b942182275cc906fea83c541190325d21c88f70bd1041288b17489a579

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_install_btn

Filesize
1KB

MD5
c64af13b874ab8cfdac99f000c29a3be

SHA1
e5274173c7721f8c77bb5da46fc94f195abb4924

SHA256
67af721ddafee67f3eea6241bcdb5b8c1315e8ed1b8dc852646cde24fe040516

SHA512
d59c85b4576152848427a74214c7b979c576f5cc6978430b9d7076f50cdf8957d8256eccf55aaba2bf7f80da2a7a2b445a26758aeaf3e889ae1c84a3fb2185c9

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_list_title_bg

Filesize
9KB

MD5
c34bb6ce3d7def12e8af79e87a6b5173

SHA1
99e8103027a7bba73b736fcded9d0d91b49e4ed9

SHA256
daf75ee4e642b335cf1918ac9678502bace139f76645eedde7eaca4f296b7e57

SHA512
58735b6034ff6ce1974aa0a48952100345b6bdf74a4dd083925aa87b0882e1931ff8608d03d0854c9de23ca409e5726ddc1e8313339181f57312bee0804ee2b7

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_listcloseBtn

Filesize
1KB

MD5
6fb767d2563a35f3c0e362a5970ffe1e

SHA1
6d3a8fdbd7ced06a363517cd6cea7a7fea16c269

SHA256
534fe818efbaa752826c53f1b63d3ecc1b647c8a9f7970012e316cbce5fb5ae2

SHA512
ab989e8b01b9d397cb2968dc8191a9c2c6fdf19947b30b96cd5266afc6fc330a318de8c914d34adef98caffd151a0bc29fb130bf11c5638e97b3ff15c723fc2b

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_listview_bg

Filesize
2KB

MD5
28554ef38f282f89a2f3b298157fc984

SHA1
08147f2b5a83fd07f5acadb43598480a13d3fac1

SHA256
b4034e26cfd742433a0b59676bf73a78d93d413decc891abf3d34486160d307b

SHA512
cd31cd81a7c37155f540c1b636cad9ea198860952d79f8b3d39dac661c2e7fa82e1398830c7aacfa6904e4d4cffa6f5f1d906dabbf97091f3e38a65fb5fa51da

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_m_star

Filesize
1KB

MD5
590dd3230f50ba57b7a828cf1ad04aa0

SHA1
d8cd7d9cca6d011d3d4f6cea8c76fc3c1a7898ee

SHA256
d67f2ece3ab36175096b96cf121f83b0e44d7bf96fc5c8315b0c26ceb6d53cb7

SHA512
449dd317e61e063b342fe5491f8f09344699ec92a7e46aff6eea231472c55a0ee772ca875f46900de7f20c9d760fe20a662aea42551328c0f3cefe9bfaf82b79

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_page_normol

Filesize
1KB

MD5
2bf3d7d7ffe4a54396979c2802e5a0a7

SHA1
631def5dc6bd48080d51d3482a85c470b291c316

SHA256
ec1601e7e19b69d6d6bc8f18738698a6b4483a4f1ac546215dbcff9cc74acf7f

SHA512
2a9a95a9298c59a90b7234343f01b70219653e4d43217c83dd3dcafea84b96727d1e5f40ba035c36fb4dc6a83478fa66d545a2cf8221aa2da1ab9565b3deae79

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_page_selecte_blue

Filesize
1KB

MD5
1c4e3c1de688a5cde892bd74eec4bfc1

SHA1
bade0d4743822214421dc664449c0b0d94d69aae

SHA256
ee7abc5886a058b4436aa0a53c6be535fc0bd3a6832f2b0b0e611473667dca5f

SHA512
ccf419b266d7fcdf4c6696963c657f7138a59b06a4fdd900effebcaac0b162ddb5e9135f5032a33e2b3ffc17642065600d9b9292005e200f5cd8e79b17968f24

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_page_selecte_green

Filesize
1KB

MD5
9dfe941765a15b163eeb46b49cb4e89b

SHA1
caad3358c1706f28624e10616cf6d26a45b2dd5d

SHA256
d92d42135d59f97d35cc2d553b7bc79f19397a40cae9ac971a86def6fbc9167f

SHA512
0a38e4a6187fac65999a9a27ff4a917ab6dd023587ae5b0e33c95a502e7e93626ac3cfb48affaacc274b5f7fa118f483a627e70288757308041ac67e3337a4f1

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_page_selecte_orange

Filesize
1KB

MD5
ffaccc20bf244076988df00a6bc20b06

SHA1
4a7176527cca9e9a862cb12485cf02c49c228913

SHA256
71d16959b999e8251ea5ffbf0075a43724b02f85ca34e3ee82b31935537c9a9f

SHA512
dba973767cc9e9eec698232e9f7d057bdf5464c8d70fcef3e6631ad72d9e62ab4cc08169db2e3927e2f3a870787ee60bfb4b26ec1ed8c3fd30e84aa38afd65c2

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_page_selecte_yellow

Filesize
1KB

MD5
8487656fa992a7c3603773e0b1b1d7e0

SHA1
ac740cc2ce2ff0729b70c26c70ac0462072d1b81

SHA256
12b5a8c075e94cfd69d4a3ea6e62552d7e3e7e2ae5f6e69b7fc4ab5a6c9635a8

SHA512
b6be96693719978dabdaf05e3f733925b126959bf8ec0096775d76eeb08a6a5fd56c2ddb4697d81a8da9ef1e00524348c0ec7aaa36ac5302d89dd51db6f08fad

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_pop_back

Filesize
1KB

MD5
64e607b18ceed3c184658ad0bead2c87

SHA1
ce0da694a61264c3dc52a42c5e4eef67c267330b

SHA256
ad6e950cabd47d19678ed9e243a954c428e11aefc17b14b03929ff9e7379a7ad

SHA512
a37c72b611a02dbcf6621904e34bd80fa2f0c71b5ff0f229cff91794924d3a8907d5971bc3dddc8a81536e78ec7b92cc1ca4c782ea91bfd065defbd842cdf63e

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_pop_bottom_btn

Filesize
1KB

MD5
153c4a358fd2029b62d88c5abc8315f8

SHA1
b8db469b4ed0798040ed2cd7618fb31c143bb733

SHA256
6d7b544ef6694a9440ab7b2fe902a67480f4cfdca37156b12db1ecb4bffd1945

SHA512
7cf959e5fa3bab95af3efe74e56b82d48e393b5ef1b733fd37e2f5f62611083fe58ace340a3b0bfea2227e94cae921714a82bcf64d1bb5834ca73ef088876850

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_safe_icon

Filesize
4KB

MD5
5101a78d00419574d0dcc0eb1f4b75a1

SHA1
c4142d79270fddb27f24d6e8e8b61e9837b3de48

SHA256
abe1bd342d024dbe2e1e853af11ce74d2e3d9286a8e44c6d94b4b5e4e7abf999

SHA512
cbe4d2438dbde51d36c19d26afc826d37d8221bd76a6641e93e6c2e6e4e124fedf8dd5ae10c90c882ae0220ce4647d7dd469c53ba5a8c2769e0a4983c5df637e

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_safe_line

Filesize
1KB

MD5
1533f88b71966664017deaa78437e057

SHA1
7b68a5bc7a6808a041c05ac7adc5da0fd378aecd

SHA256
ba11714200029dfc64b90b9953f80cdc49f30eaac9bbe8597d949f7a89b52b8a

SHA512
f04b79396404b4cf1cda6ad3ed7af3137b177d0da249d59a818c9a8ddb1e80cd98d078bfee9c352117f8c62303f08c9b3565bbd558a08d5aa07cf07527318728

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_sc_circle

Filesize
5KB

MD5
e50c867a1725d1a77477d0a3931266f6

SHA1
1561a6d26dcc43254237e0dd99a8c1a8f0ad7d67

SHA256
0a549f08924e57ce9a5142fae8932efc57eca3454ae80ba8af57553f834be8be

SHA512
88faee49b0db9a401dee69f8fccb96fd2b671bb646a3cdb91d5f53a110e470d9fe027cd36684c77b0aed4e0f19d71522b1b88551ade135d5828ce4f41ad4c28f

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_shortcutad_bg

Filesize
2KB

MD5
66cfa171762dc97679085b770d8a1a24

SHA1
0ea4278905b9beff4cf8ab932955e720b7efd200

SHA256
7742eed2fc4c8437016dddf0af8b6b7ab44c8cb67dc2adb13f44ebd959cccc0a

SHA512
04c3b023abb743dbbf4a856c51d08af43d9fcc9f128073336ba4bb8149a9ce4d70f7cc50cc2989e59cd82339371345f02a341fb7abdfc53b0cb8c0680c400ceb

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_tj_line

Filesize
934B

MD5
83f9aabf34554a65a8f47514703ea69f

SHA1
bc3097db92c0f1821d60779d9b1f712cd0cc7866

SHA256
a5d81d5357d00dcff6099ee28f989711e289cf1e41fc6ef0903640d5ee73fd6d

SHA512
11fd5b05b830a48f658a9767556b8dcdfefc864bbe0ce5278f40c272879326fd03100cf73e2d762c3ae674f2eafc2ae5ea0285e690c4c18c7721ddfeb447bcbe

Download Submit
/data/data/com.dfcgle.xldirltf/app_imgfile/d_top_bg

Filesize
1KB

MD5
17f5c25477711a64b0dac419b8d68c0c

SHA1
475301f9d8143ba1548114d1de9272a18298a5dd

SHA256
b0e6d8458712cbb246fd4022cefee92796e55858a2c4f25cdec4dead894006a8

SHA512
09050759dca1837f59ab10d8c2531d986483ce50af2ab5038aefba3e5255fc8f67db1412f50717022b2c54fc39acc5ceab7ef3dcd51b38a61086ecedb885d478

Download Submit
/data/data/com.dfcgle.xldirltf/app_oiuj/zkl.jar

Filesize
70KB

MD5
e3d3999873c0f4c67b08c6b9015cef48

SHA1
10dc320eee3051b272c60dd5d311090e1e97b6fd

SHA256
1962b0bd5ed7d07b207cd7a6dfd9acb16d979ede1d6992841e7f9e30ddbb7bcd

SHA512
ed7dd135737745ffae14a7d953abe864727b2f780ac429467779a3237793e0d72c08cfb586986cd71828f7f3abfcf8f175f5f684475cfb5c8863999625d1a902

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/bottom_btn_cache.png

Filesize
3KB

MD5
b08b3f807464a79d8a28b44eec61d5a0

SHA1
7855100f98a14220cb24a8e097c1aed778bf855f

SHA256
adda17ece90d03a44e3f15970f62c0aef32dbf3459fc47eb72914975397adace

SHA512
a20b7781df1b6636c4266011315b602b1a69a03656206232fee54e5ddfe85bf431301f9fd1727c6aacd0e2ecd3b9ca18c0c7880613bbb8ef7660ee864bbc6ae9

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/bottom_btn_cancel.png

Filesize
3KB

MD5
d2135ade336215f3510780177806f569

SHA1
42ab579d5c377f0674fd749ce99efb20dd57351e

SHA256
790801d8fc1b026b2b1c919ee915e776a3bd77a231861d8cff5ce7812565096e

SHA512
741b4c2c730df14c2d9d61f3eb01a87fa06ef89e1c1b91da27b03c98a20ff7fe01fb47cd08234316abf597bec03ea3e4a770ff8799c9347ddd4e9e916e9f367f

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/bottom_btn_install.png

Filesize
3KB

MD5
7f10a1d9c5e514050e22138d70d842ad

SHA1
2a58f5fb306f4f4d071b845baf84c0bb39ee4ad7

SHA256
e7758d23bd9ad789d81e7f9eef7e948a403609a4a28ba53d9b3124135ad796ab

SHA512
cc3186cdd32448ecd35b052b6aa7af6b189644611518f711bdf8ad1b29acab3c8a0e65fa736af500153ca281b1147e2dc005fa6799417799fc185ba6fd64fcaa

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/btn_install.png

Filesize
1KB

MD5
dd18221de23603b78f421d0ba0f591c7

SHA1
c1806e627f1e71612fca6638e93894a00b092618

SHA256
aa4077aa3cc99ec30f27c07fcc11f8e8d48e5cf0cf786335c89a459a5a8949c3

SHA512
8aac08f0e222bfdf4d7800c90eafbed96ce47a93e71ec04234031da33b3aff981d3463a6fb8e66122d32848225fadb759e4c0b58f374873fdee2d9d157354e93

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/item_btn.png

Filesize
1KB

MD5
c273f481a2774797a0f67a6f4a042bbe

SHA1
2858e907a559742835b1d820c8fc635ec5f7d094

SHA256
bb44dacdbda4803c00d0d7ef98376a2c3ad17d4c8b33084918a4986c744135ac

SHA512
75ee76ba31b62d0fbf0d17da7db4732664bf083e3848a1c38d82aca70d8fdeda54b3bef06c6df833fb9a4459c7789db2240dc886e52f2d82b50c464d505716cb

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/pcheck_n.png

Filesize
3KB

MD5
1bbaeec81e97f3734c45574017b92488

SHA1
dc916c37bc512ca035adbf4504fad1a53ad1f6c9

SHA256
25db9414151862fb15fb24ec8530ecf1dd0c8b53664d2e153b042c24fc14e37f

SHA512
d630ba8b634d7ade563eda37b5c887ddc0582ff99346f19f6b1b933a8282a435cbe469f769788cdeadf35ee899f6fdb389222847eda76f3e101115901ad07675

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/pcheck_p.png

Filesize
4KB

MD5
e0a4ce2b09acb7c9e83fc656348ba99b

SHA1
9713de8c7f8c3d8631bfe91a57738dc4627c72c0

SHA256
b41279960593d3a9212d4e3b34a712d957a809f6c0003f1c7b86445581d675f8

SHA512
ef5e23caa800f35cab588c5d0880727d7acb0ecfac1b274873ed313935d2f0f79e79ff72852b62e6956f7c1bb55de74dca75600b073002aafc498a9f5a9fd49b

Download Submit
/data/data/com.dfcgle.xldirltf/app_psimg/pushapp.png

Filesize
4KB

MD5
ab7f8efe5cc8cd8979bcc02000ab881e

SHA1
6e78655557838b3515a922aa7df1bf44f13ef567

SHA256
d749e36c1f6410195fa647b7b92137685bfe64a20b32e14283fe31217c4c3f77

SHA512
5410549889161c58e706e882befed71b2511f31e0196eaeb487fba4113f848e61110fe1b3edffd0318b010d9ff60179db861a4f55ed10c149c6aa6ec283802e8

Download Submit
/data/data/com.dfcgle.xldirltf/app_zxlk/bvfg.zip

Filesize
63KB

MD5
008768704498777c338952dd205ca895

SHA1
2575b5be9568faf3cfb2fb2b71abc511ab44a5a1

SHA256
56e4a967bc3c6b7c5bf2f77e5ad5710544815003cde804a7077efa6179562d2a

SHA512
8c9804ed9c7382de86d6d59e0d319a8fd099083fa98bb7f194e0153ffea8e7c61c6d174a57885a049f0f72086b76f6ef60fa4b5e48c56ffaf8ef9be09e5bfd0b

Download Submit
/data/data/com.dfcgle.xldirltf/databases/cpdownloads

Filesize
16KB

MD5
f61c547784fc61f0def6f9ad39601f27

SHA1
a0984b08d6a415a234cfde01f6d44a54500590cc

SHA256
e17d394754c237f22355b8825c93c939ea62b6d933dbc040dfe7454b71c42420

SHA512
1d22bcccefb3c5816b06f427582954672e8c1ce1059f1d054f126599f0dcee6d9cb2a0aace58a0f1a35bed35f4ed9fed7ef6bf814a38d02c8f11b5b92f386b5c

Download Submit
/data/data/com.dfcgle.xldirltf/databases/cpdownloads-journal

Filesize
512B

MD5
d3c9a93e1e77b5ccb040e6e2f936091f

SHA1
c75325717d1142f1461b788418cccf3c73ad2ded

SHA256
2315e63afb226216600b41051fc0b5110781407892106a85fc85fad52c50be96

SHA512
5c14fea776d6bac1743a56312cc9db844105478515a471df2932bbc3d8ad48f0d1e80d31fff8d3814d4f0141eb44af4985b250adbb25ad2df93e7c8904ea454e

Download Submit
/data/data/com.dfcgle.xldirltf/databases/cpdownloads-wal

Filesize
28KB

MD5
47f226b3b80680c477c7cc257bc8a47f

SHA1
bb9a907d3abe9d0afd978b6082f97b028b119a53

SHA256
6f78cd83ad6bde525dacf173db8ce43d08646f1eb97b363bf62281234c8bd6e9

SHA512
21d80780e3198a7aeb26ae159c11598e8edea9614d5e4388c6387ba3e43be5063216925a33b1b8aa5a4281521e407247ef50568ff5fb790ecebad82b3f275863

Download Submit
/data/data/com.dfcgle.xldirltf/databases/lcdownloads

Filesize
16KB

MD5
cf70498ad4fc55daa64092ed0e3f4223

SHA1
90aad59c9a0e687cb1ae4bada5772037c6f02f02

SHA256
ea52ca91f2e584f71bb9ee367c35e16a1a25b027e3132fbf19a0b87ad84f49e4

SHA512
a88ed3697790166cf89bc2456d0ff9f966a12b37cce59174247b7d443de8060589c1ab3027c1c32692b0916f66b7ad1aaa06c86463bb6bbab8d174ba1d5b9780

Download Submit
/data/data/com.dfcgle.xldirltf/databases/lcdownloads-journal

Filesize
512B

MD5
38198ddfc24bc5089c9d3dad01ccf922

SHA1
4252a9b942ae162ad0edc52ffdd5f12b9bef1b51

SHA256
2612eaf36440f02fc50b97ff804fac61d6314625a3075a54edbc08b194b27ae6

SHA512
ec4b625edc2ef8aecc99e863ee4a1b05c2bea40d31844a20e5e4e7582c17dabc160a2e44b2dd349fcac8ea1db478939bc9b04dc3fefff85e919c12c3f36337bd

Download Submit
/data/data/com.dfcgle.xldirltf/databases/lcdownloads-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.dfcgle.xldirltf/databases/lcdownloads-wal

Filesize
28KB

MD5
bcf3f6c0bae9458264d2f11db1c771b9

SHA1
e09038fbac3bbc0aba51230134c3d9b109ae3d9e

SHA256
cf4955e1fd14479ee1dfc2598e6d2e4b6162cc601f92b2a971a9de9f68c1604e

SHA512
bf5f4bb77e2d9d109ad1ea2c3bc2fb4b718e0154696f264d4f529588c35f10778a62282e438b39758face4566c6b62cba8b8d9aa525e62ee2ecbf992605b1ce9

Download Submit
/data/data/com.dfcgle.xldirltf/databases/sldownloads

Filesize
16KB

MD5
9b5133383e125479cd7550a549ebb98d

SHA1
8bd3828730657ea3ec0d256c9ee9bf6a475184f5

SHA256
ca8c8c0b4777c3374e001a77bea5d3827019b3272839b1faf5d55c47f553a226

SHA512
2e7539b33ff68af2c9d567c37c7a775473c2daec88491bc6aa75b235fb9cec5294e7096e9dbef04749bae78646ed71c6b90f8fa7460ce0b3c6db4679e5cfc6ef

Download Submit
/data/data/com.dfcgle.xldirltf/databases/sldownloads-journal

Filesize
512B

MD5
acf5faf232c0c2c42e464800a41874a3

SHA1
a04d4079f8f67e6360ae52af3021df641e7d52eb

SHA256
1ec1f325f14bf16fdc75f722474e01aa459cc2cc2d92481341e409226cf69750

SHA512
4edc666dc19be156b4fbacad453f522bc92aa1bc5af210675ae3e7acf1501e58ecc0c1a16839aedeb2f896e790a522234842c2c84146ce5f0cbe1059ab3846aa

Download Submit
/data/data/com.dfcgle.xldirltf/databases/sldownloads-wal

Filesize
28KB

MD5
a70eb179c7ba502be05e24a322fc5c7f

SHA1
60807a736a12b0226f9409f8cb2ba7f5d7ecdbb0

SHA256
32e276ef6a3a20b09259aec62cc3d5adbf140b4fc59067e6625630cbfed10012

SHA512
a1c2be0b5d8f1ddb42fbe36389627669df55517e5615d28df0934a18f063692ee4e6ba54f403a22d79cf443ff42ac215a8921308da8b9a1c9d911ebbacbbef7a

Download Submit
/data/data/com.dfcgle.xldirltf/databases/vdownloads

Filesize
16KB

MD5
7c019dc0b0f4a2051781cce981759154

SHA1
afc3bd27f645b80a521596d214bf3e509837b46a

SHA256
ce284530992d5eb0d9649e29fe65473a397fbe60fdddcb693f97f6fba7b76e8a

SHA512
8e43b43c0ee019019bf358077cbfec90a65edd7803e4eef7dffaa16af0e6cb8c807b9c9cbac1fc4f44d1dbb96825d069eb0844fa34351d85e5a2bbaeb636aaaa

Download Submit
/data/data/com.dfcgle.xldirltf/databases/vdownloads-journal

Filesize
512B

MD5
550eb2a234ea13a9240ddcc4081ded3c

SHA1
b91dbccfa69d39f2ce4ae0defd9329e5cc140089

SHA256
af960101880ac6f79ddd3c82c1c0954ff1cdb6a9637227f8f8b6a1fee0c6f9d6

SHA512
07a152e31671c42b7abc2eda1b9df06787e586dd988c6fc100f0435abdab0fbd48925e05add97196dde08d023f447c7c648cfe610e5ead1639b0304db0f4f294

Download Submit
/data/data/com.dfcgle.xldirltf/databases/vdownloads-wal

Filesize
28KB

MD5
6d365f6d08c8d372dcd3cd2e6346be7b

SHA1
4c4a2cafd9e5e622a6d3ed16330968a0ad8adac1

SHA256
388d8ce5a2882fc877d4201fbbcc950787dee92ca7779c85cb5e5f344f26d20b

SHA512
2fa49e684e2c343c08555aaf51ea2a0bae20433d743228ee06ab4ad8463e75f62c64dc9e5bed9e0105d07250fb22fba8a18b5e8505ac6f0e0c707bca0ab01cc2

Download Submit
/data/data/com.dfcgle.xldirltf/files/jni.jar

Filesize
287KB

MD5
42345a6bcccddf0a1b0c6051dbd2589a

SHA1
c8c735444c83d9640a17488ffde2ce65b54043e2

SHA256
a907256b09cbadb4ad65b483c744047fd42bd2b9e0e21c54bb19f929052f66f0

SHA512
3271f645a09f6dcdb9922fd64cbfd6b060d3fbea9e37b3ac4947267d91e3bb42c9f55f87e3b5e23100f8851d8f027bdbc25ca2af25d4ad3939976f561f409449

Download Submit
/data/data/com.dfcgle.xldirltf/files/tempjni.jar

Filesize
287KB

MD5
53c8a982af0615f126be430ed18f0107

SHA1
f72dcd6d17b369e21d012a9e6f645cfe15f410e2

SHA256
d93a6702a55aee0209a7e39987aa1212072cb1b35f77a94d1372eb7a67433cc4

SHA512
98fa5bbed5017da36169bcca5ed66ec67c5ef567933c53e4f8707ca563d64aeb04f936bf278ba9b4e5b04307f6b65a005e86ac2e3cd7df483e666f0ace798d73

Download Submit
/data/user/0/com.dfcgle.xldirltf/app_oiuj/zkl.jar

Filesize
157KB

MD5
e5bc8e366206976c03c01b37668a4901

SHA1
2e6b477ca543853647bf58d2638503f92f7a46f9

SHA256
0fb4aa0d4c4493c23ef8fb57cb197913c8fe930eef644abf79c3aac8f1e1d108

SHA512
ed7da038ed35d200b633beb9b641c37f846138a8815868e86e31d9c66e90038a6428c6aa6bbc7d3587b85c4316f01be4ed876686b849dd220611eb352d39d9e5

Download Submit
/data/user/0/com.dfcgle.xldirltf/app_zxlk/bvfg.zip

Filesize
138KB

MD5
10155ae5660e7ef577319af5e6cba5ae

SHA1
a79f377e748cdc8df9c06dd5c80fc53091b58a58

SHA256
6a3f5b24f70297cf73e17f63e9598531291d4b37936b84eca84ef352b0668bbf

SHA512
b6cf92458b819fedb134d8a1e2341dcda010636712759c8e7371d36302fbacf0056c0082676e0bee0b57b50f0007a4482bf91c37aaa38953bed739ea5b7aa4fe

Download Submit
/data/user/0/com.dfcgle.xldirltf/files/jni.jar

Filesize
280KB

MD5
86222fb116b90670a94fdace5ae4c0a5

SHA1
5bb5fb55248e4747422a0af9a001c419a80ea657

SHA256
eb2697c38a37c7c07fed611d03e19aea77109cdff6c02cc13da61faf0de0dc57

SHA512
29de1b29e8dc70276ee369e3043a27b24a13e6a08df13369bebc01c5ab5e77d90459b4b94e7594669e1ab8e64604413d1582e5aa7cbbb1ff03363eb86a0aaafa

Download Submit
/storage/emulated/0/Android/data/code/.vapp.dat

Filesize
904B

MD5
057fffc1842996265f4733522a778860

SHA1
33836320a65190cc3f3ad01381302126be3ec291

SHA256
9b974526343905f8f2e6ac3281dc2bbd5c91f8ad3cfac0d87e5b77dc7b3a63ab

SHA512
e06f51847bcdeda7c211aff2bf732535b251cf03ccec91c699aa80648f8877454edd1e08ae92d7b89528eb1d6b9424844dd3a116ff1994cfbe8f2363d1bc5714

Download Submit
/storage/emulated/0/Android/data/code/ljk.dat

Filesize
58B

MD5
2b53b6b030d7bdb5da6ea0d501b6a165

SHA1
fa4e9e8d724d91963a3fa3def11790559cac11c1

SHA256
d8209526853a232417c586b6c130ed3ec53af8a2928b95d032ddcee37b4698fc

SHA512
dceddb69f3c907593c47edd56cea3b5cd68e560f020244e6abf9e63c58263d38b36e8736617758f2c5c7292bffd815af44fee3805217aa9065cd143e0599b128

Download Submit
/storage/emulated/0/Download/cp/time.dat

Filesize
15B

MD5
cc1bc997b30d883c318d0a3329115390

SHA1
8c9d21bb11408abd73248da47d58d6b22f2092e9

SHA256
0469ef44e1d796678bc6c0033ba6fb13cdc6393ec374097b575969783ba41fed

SHA512
a6b6d8b6a7e1c56e4ebf9a616916d16b690e2b9f5f44d28ac22354549b7d377c13a76abce88d51e829f1123b0167af6ae474f22735b2bf20692de38239a65ff4

Download Submit
/storage/emulated/0/Download/vgp/clearT.dat

Filesize
50B

MD5
1eb10e9f92c6ca60e6f9ce230a65d799

SHA1
ab0d7285cd2829ca4674b585ff21fdc162f218b0

SHA256
06bcc13b685fdf188a90695f7b4443b1ba6c66ef36dde5d6c15b83fd9d779638

SHA512
74d13362b63c688c19f55122a856c1b06fb187a91aaaf6d04431487b6531de02ed9b45f67e173d87b1aef3d28858e276f81175b5ae5a811b8d02412258052d1e

Download Submit
/storage/emulated/0/ddad/error/com.dfcgle.xldirltf/log.txt

Filesize
94B

MD5
5aedf402c4733ec30fa8359c400e892b

SHA1
ce72af2dea682c1d955f443fcddbda5ddfc726af

SHA256
d1f6defb5e45a3888a99448f0bc6972fb43ac2f73f68daa80e0e160957c6bfd9

SHA512
b83258784e11b65e2e3e6e6e1554e4ea5b516746f144be6fbe1a8157e3f1ec742d15905f558c7c4c9d5f1bc9894f685e31bbcd581c3c94401f683bd2a1e80272

Download Submit
/storage/emulated/0/ddad/error/com.dfcgle.xldirltf/log.txt

Filesize
45B

MD5
4590687b538d0cc9c0d10db94209ba82

SHA1
273d214e7eaaf92777ae0916195b7e4533912be2

SHA256
173f64802d0ffa4a1fb6b1286d306ecc13484bb42474b84c5e559f403a892dc7

SHA512
83d04594c9e86938f4fb850d41b3d201935efef3174a6591a58fa8b3075a0a50991a449c5c978b73d866938d18daf8657f12c075bb22474b7b568c80d291d71e

Download Submit
/storage/emulated/0/ddad/error/com.dfcgle.xldirltf/log.txt

Filesize
41B

MD5
95f38d3fe9567b7ae876bfc269d768a7

SHA1
3c1ade2dfa2941722ae3ebd0d127b149afefe71c

SHA256
868078d06a2e08cab9e65507fd5f4399a5d61c779b052b52ee9adb44ece8480f

SHA512
1a9b8a498b8fd0f81cdd381dbc332bc2f360423a9daa6fb2750835d91f75119321bac7e8ffdd1ecd1d9f2a4e761a08b9a1d0e088fb3ae8e7a7b9a81e74e95cc3

Download Submit
/storage/emulated/0/ddad/error/com.dfcgle.xldirltf/log.txt

Filesize
75B

MD5
1dfc0cd7c33324784bdbaa4c86d4ac1d

SHA1
d0138be9bc12d7398529ea842e999545c39ac06c

SHA256
8b9e08a8aa765221139f40d215cc1bbb3c92d433857ae9fec3224bce3b529137

SHA512
541044162288d6fc42127de8de93f7087c1743b535ca4399c627ba88332a1ed09120388cf879e158d1c345145eba04018e34ec61738e849e60046f9e89a3ee4c

Download Submit
/storage/emulated/0/ljk/capin/time.dat

Filesize
15B

MD5
1ec76c565dcf75557a3dbafa338a6879

SHA1
c4d86e51a115989d52a5cad5c251119aa64c5d44

SHA256
d395503d6375cf9bd978b29691cc92d7c99875651f0590f3c05ec5fb32b938fc

SHA512
566faa4f7b6ffd027f9d31580892c5063ae1c82562e787fde692137d0bdddb466c9507fb2c00d425b86141e45d7ba681cead8d9c423550cfd3ab93a906a8a986

Download Submit
/storage/emulated/0/ljk/dl/reqt.dat

Filesize
15B

MD5
95a80c1e63a1b425031cac3831ff3d98

SHA1
03935381b0f34875da4018f183cc1041dd5f29b0

SHA256
649c80d30874e6209bbd2159ae50ae532807e7c592e712dd0658588b28d5dded

SHA512
f6b2eb198ea9436486cb03632284b7368c74ecb90a8fc1f9e288690b5ca1dfd1da09c96f8ee8056d8e9611a6f467b74014863613db6f95d62034cd06bde3e9a9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads