85a0b98e09ef3e436a26710a696b34c14e59f46e38424e5d7bc64a0a93eb5845

Analysis

max time kernel
146s
max time network
157s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
15/09/2024, 00:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e152b24cdabafbc1a2f4fdcb10a925bf_JaffaCakes118.apk
Size

20.0MB
MD5

e152b24cdabafbc1a2f4fdcb10a925bf
SHA1

19efb226bb68679fc4c8c2dee22edd1450bd4738
SHA256

85a0b98e09ef3e436a26710a696b34c14e59f46e38424e5d7bc64a0a93eb5845
SHA512

40e7639e4fe9ace6ec177b92866df1df0f353ebbc805f132975ffbe29a191ebe6f8284575704a489573d1f5277b8bcd9e268c602206a692cce8cf473698c16d8
SSDEEP

393216:Eq1HIQQQ1By4vaW1uVxW41cCZIEeKqsNruMg5pUAOb095jgMEMdLKfC5CJw:v2QQQfyCXYW4cNlI1g5vca5EaKfC0Jw

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.cyjh.mobileanjian/files/AdDex.3.0.1.dex	4470	com.cyjh.mobileanjian
/data/user/0/com.cyjh.mobileanjian/files/AdDex.3.0.1.dex	4470	com.cyjh.mobileanjian

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.cyjh.mobileanjian

Queries information about running processes on the device 1 TTPs 4 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cyjh.mobileanjian
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cyjh.mobileanjian:channel
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cyjh.mobileanjian:channel
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cyjh.mobileanjian:channel

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.cyjh.mobileanjian:channel

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cyjh.mobileanjian
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cyjh.mobileanjian:channel
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cyjh.mobileanjian:channel

Queries information about the current Wi-Fi connection 1 TTPs 4 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.cyjh.mobileanjian
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.cyjh.mobileanjian:channel
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.cyjh.mobileanjian:channel
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.cyjh.mobileanjian:channel

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 4 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.cyjh.mobileanjian
Framework API call	javax.crypto.Cipher.doFinal	com.cyjh.mobileanjian:channel
Framework API call	javax.crypto.Cipher.doFinal	com.cyjh.mobileanjian:channel
Framework API call	javax.crypto.Cipher.doFinal	com.cyjh.mobileanjian:channel

Checks CPU information 2 TTPs 4 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.cyjh.mobileanjian:channel
File opened for read	/proc/cpuinfo	com.cyjh.mobileanjian:channel
File opened for read	/proc/cpuinfo	com.cyjh.mobileanjian:channel
File opened for read	/proc/cpuinfo	com.cyjh.mobileanjian

Checks memory information 2 TTPs 4 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.cyjh.mobileanjian:channel
File opened for read	/proc/meminfo	com.cyjh.mobileanjian
File opened for read	/proc/meminfo	com.cyjh.mobileanjian:channel
File opened for read	/proc/meminfo	com.cyjh.mobileanjian:channel

com.cyjh.mobileanjian
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4470

com.cyjh.mobileanjian:channel
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5144

com.cyjh.mobileanjian:channel
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5392

com.cyjh.mobileanjian:channel
1⤵
- Queries information about running processes on the device
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5756

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db

Filesize
36KB

MD5
4dba45bb282635696634ea5a0566d68e

SHA1
046d663d34742d94dc585196d9cb586ea1ec11c0

SHA256
efa7c62cb22281166c065aa6d1c441115bfe57503e55d5124f1adb2172e4193e

SHA512
c3b21451838e211c07a57e3a9b845637609f035a8b354aadd7fe0524b1c7c04a4328e39e44c9949c4cd39235ec8692d55fba681314b30ec90d0bb5859a4e60ec

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db

Filesize
16KB

MD5
904e3d5c9227f82a491cdab25a437511

SHA1
745753665cae0a920bacc160dddb05878de14045

SHA256
f486e9de8440cba03a717641781a0bf6b39140d7eaf66cf3b83e9556fa88c929

SHA512
ec99ce6add96282704b93d9f19cc20935a89b8560f54d7b6c98be9a9366a93427950ed7022a96fc07c5db5ca21a9438ad9412c5e194abeea1c6445d169b36961

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db

Filesize
16KB

MD5
aa3822862b8f26e0f8a4842c63c752d9

SHA1
c8cad5d84e0072283583c6ae1ead949777016446

SHA256
c4dbe889baa2ec439664ffd84292ce882def40bbe1dc952c9fc204f871011d66

SHA512
c9b5bb3462090d3e860389295f0ab6f409f96083716a30de6810f73658222ca6e9748156de9bf6f01e6ad09d796f26d9603da9efba6c4025e49893626908d1da

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db

Filesize
32KB

MD5
7dac6fd9a9dfb58ab904817568435ac2

SHA1
4c4b72b374473e195e0d8b2a6794ebf6a56814f8

SHA256
00e7a939eb975fe934ccad5ba934dbf2c5baf07088c2eedd21b1c51157b01c91

SHA512
f2e9c3ff39d506eb0aab45e6bd0060043650dbb0e504d25ebdb0e98b86645210e6c2674874c56867046fe6e32a1f346dbbabe47f80a09fa4b4fe9de9d256815c

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db

Filesize
16KB

MD5
edb7a318a5dda2aebd3e4e76c7164efe

SHA1
8def159769bd2cc8912447e847ebb3c08f84e2ce

SHA256
a5ca117787bbb545bfca50a94c09ff22232eedd0d69d16815f71be565170b1b9

SHA512
f5c9fc4508693fc20e6a3d18c207e27c8aa22314478cf448a9b8c1dd581ebfc53f409d93f46f478b0148da407efb26a66a625b0e345d481113711fd95b1fa2a9

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db-journal

Filesize
512B

MD5
dc085e3e83f8615f18522e8787d00322

SHA1
977022d8d31a91dac34a2e4028a1809e6360fc87

SHA256
c5cc641bff1bc631516777c7103b64dd05da034ae396f93e8272bf552c36bd35

SHA512
fea8c46d7be2e2514a274cc59ec77f0bb86a8f3ff38326826418e3653e50756dc0969fa87662b9ecc006fbf9338618324cb1abbba8eba446a737624c6b32456f

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db-journal

Filesize
8KB

MD5
6553bdcd1ebaefb7e94a38b6f76cfbac

SHA1
a680831a5c885f0c9eb642e4526facaa451740c5

SHA256
dd2d485743099bd85002f3b67785cd3970c1e71f99facea29b411f41fb01c560

SHA512
cf042c1a230b6efbf0767fc4e99d086fed131a050a5bec62a1005b305fd3a7f021f360d9baba253250da2c96ee674f0dd467f5885a393f330ca49bb7e249f55a

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db-journal

Filesize
8KB

MD5
ab87ed8383cbf64e2ae2bba674d68348

SHA1
aac54067bff416d84c5309144ede3a69b4155c1a

SHA256
e0d4eb9d09319e85303a251cbad62d34d03cc56979425aceca9b111bc96ec47f

SHA512
8e4b4538278c65cd56a5c4eafdf19fc1d5dca966ab545b07be949e5a7da9463fd4483106cbe34547892cbdc689fb0ce7cf02fe261d10c2de9ac858ee46162d56

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db-journal

Filesize
16KB

MD5
52494f8f13b07d37039c7cfbae516da7

SHA1
ec2c8e3617cd31b4b97711c7f438a19f60af548b

SHA256
940a625cf334c727ba74a397aac0a34a914d05fd048876be50a570084659b680

SHA512
d56a6e4fe7c43fb82f90a15c29eb3e398bf4356eef29118f13bd89c1880f2378555bd5f794ad0dee4ff3f165aaa86b3b60aa4d5f6748c738362889f58b1d4b4b

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db-journal

Filesize
8KB

MD5
c91547476f851ad999661fb0f72d867c

SHA1
34ee2773e3a32b14f73a50dba43bfd6022df5ed6

SHA256
84be31a32b315083dbca67b756d95811f2336723c893d0da5c35526163cca595

SHA512
95664c458d7fe22b0df97b40f7e83c0336eb193756a5377381b2508b0bec78f0fd933b56934105ab22a5df9e2e259a5477ed98ca5cd59d12017e2bacba60d3c1

Download Submit
/data/data/com.cyjh.mobileanjian/databases/.ua/ua.db-journal

Filesize
12KB

MD5
3e3f6b2f2d9ad8e42d2adca5248a561d

SHA1
46bbf0d2979f8912b286c32b5972bf331642ee76

SHA256
28086c601aadf6aeeadbf8a063dfd10cd059d890644647955a1bdd4561557179

SHA512
037d31f7b9cb5989ff5cfc6f3108a6afa9f472c131a40d18a23221a63fab7ec1917516cf8ffd206ddaae48abb6b06722266e71726434833c895146b83ef9508b

Download Submit
/data/user/0/com.cyjh.mobileanjian/app_model/TinyCnnModel

Filesize
987KB

MD5
f97413f4f666085c652d8d3d2a8846b3

SHA1
9b6de4999ceec83f5f2a688419dda596858dda2f

SHA256
c370451dfbc29ad910c14696fe96400f0a363311612db775e444c303319dc11b

SHA512
0c32d0ae404113f631c488215520ce8a9c281b8a02d5b7b92fd1671b8e33f49a948a5ccff467550d10c962975bc01a0ba3d5460f44206e26f752db0aaac10be2

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MessageStore.db

Filesize
36KB

MD5
1566065dc2bc8b45b36c3273b888db08

SHA1
ec5b2841a35fb540f5032dbfce7566ec3082c505

SHA256
59dfbcb03d4edbbe00cbf55abdc13fe81cffd2fc2841ce34c5f5fa9f8900d4da

SHA512
f2fdf5774d80b35b1ef711b3e14258eb777f724ff47a6186bce5c2698ed868f19941d7656b1b29a2a3b77f72537ee5485a7a05597c3d53706cb0f97e8ee7a48d

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MessageStore.db-journal

Filesize
512B

MD5
2c4be4f4af35290898b3ea9108fb4423

SHA1
00b4e9a8bfade20e09d1af0ecb0e3340a3d3051b

SHA256
a972b7f36b7f435072a89bf3dd67d83caaf8be968fa5170db8e72eb8ad796aab

SHA512
49e6709496ed7694e90eec1709e578ed24ef4d847310e55a311809b671374ce96eeeace8c158d2b5dc2d9273e7507c05f28d3c4d1b8f2251e9b97468f767e770

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MessageStore.db-journal

Filesize
12KB

MD5
0f80b7fae34a43ad32db1c1c74ea1e3d

SHA1
de60795dc8d57eecd032c7807e1b7ded10e79e4b

SHA256
ed3f4128f0f0aa608070a76d09c8d75730060c5ad060e30c897aed1c6037f959

SHA512
401c2e08c234c93c624eadf42ed8491a99ccdc0254bc073ae971d78fa0e14f8c6c2c986dde14964cdf32e89e202c768d833dff90f602587a8ed40ca5505b6b16

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MessageStore.db-journal

Filesize
8KB

MD5
8d138d2df987884981cee233363b998e

SHA1
34fd70c693c7a186e27133b50165242099a2de7e

SHA256
3c48d1a78cbe95f3c30c720d1577db937d13c405c6bd8b0c8f0132b71dae0d59

SHA512
e27067447de730f5011c6424b9727149ecf8a73f465410364a1036710441dc8737dd90886819bc1fc5a972f9d47afd7b1c25b45d87771571f905fd31394b4c38

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MessageStore.db-journal

Filesize
8KB

MD5
6d514d9ab755bf8fc9f61894a6ad22a8

SHA1
c9499af067af0b00d7e9488c7e79bae5404b0e11

SHA256
410edfcb0cf9d4a7cdedde307a60319fbf19c4c0f34e2580b39dd2461f120f5c

SHA512
25deb7c31f2a7190964bddc7b3ac207bed86b9122ce6df0bd00bb1c161cd8f091045b359bd1e337c8c013994d4071bb0a1f6c0536ae0ca3336da4cd57752933d

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MessageStore.db-journal

Filesize
12KB

MD5
aa4c45fc57bc5189ac0d4388ce8cf579

SHA1
6a422807cf21cd6e04c7805af192780e4c4af8f4

SHA256
99214fd9c1afa55002f37475bc99e3f5de9686c730375e02940f051294569298

SHA512
ec681d3a63b148d30ddc24a978ac584a2bf2f031492c0d130953e9c1b5298b863f560d5df6c3ad1c92b4552560bc16a1a3250d4c7f8e34bc0f8f3641fe4475ec

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MsgLogStore.db

Filesize
48KB

MD5
a9f42e2e6cdeb989ed1f37ecb67f7e76

SHA1
53fcbb2a7d4254d544581b963cb28074344769a0

SHA256
9b44a60f1e642a0ba34ac9ca1bce426682d3dc3d5f8e68771f07ab0b1542b02d

SHA512
f5458edb4df6212bcf1c2797f24a14aecdf2ba77e54edcf2d860cfa383fdd7d093f0586003edd7d7d088b21e5706853cd7fd73c33a04e5bb2ec4af98fe07435d

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MsgLogStore.db-journal

Filesize
12KB

MD5
171aedf968e17a2744d2585715606cb9

SHA1
bbeddeb3b89fcf809619c35b4a318a80e7d5b029

SHA256
d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

SHA512
78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
9be3c3ee5adfc669e936cbf22a54c39a

SHA1
da512714cfd33e20e265920d8f8147dac854de70

SHA256
c4b9a61abab8d04b87d55c9c366dbce63c8e0a897b2c3704676f292f3668b807

SHA512
f82667367e69629089ffdfd75cac3ab481a2f625801a6bcfdab68ee54d690c371b12fc905632d9eac4b840d62f3a9002f227514b0a2a4f052700a81b2c803d4b

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
49f471d03e54ca6667df27435a24256b

SHA1
a1aa5d7c0ca87354cf078fbdf1c8af99827d2455

SHA256
531f6f0ea49b4cc2981d86d2ed02740480b12d8fbd729562e27c7d5568dbe790

SHA512
f3d501fd594ae3b4ee01dcefa774e7d0459b7f9e490676cdbd1450afea6c9bcbea2b7c1ce359eb87e0a4c919034e52ab9d9e5a721667c020206b8bb04a1036d7

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/Reyun.db

Filesize
24KB

MD5
c08fc04e916cb41df987aab062135ea5

SHA1
1dd7f2381e2f182650a6a790f228b7e8dbf3a9ec

SHA256
ef85119b8f688d95fcdc72c144e7a02e9337f8a2063a5af1481f2d19d8aae0fe

SHA512
6304582a3a3cd5f9b79173999d6c406bde7630abccf4b2810b163ce63480b8879f87873d876cc54b2af02c28be6897667f55657904decf828243f8ab88eda70a

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/Reyun.db-journal

Filesize
512B

MD5
9bfada9b54b7fc6b57129b4e0002f998

SHA1
c2854c9cd1a497250e5bec635d6768d2eed38b69

SHA256
50b549ad244239ae2c24936ec9124aeae46a8df1fe97a95ec1e0a1907fbeb807

SHA512
536cb708e53a2fc6ca237a4cfdc06217497f087dbb8dbe02f6ec3016a918e5e8fcd3a213cac9eb1b66fa781c116e685249d5031297d18a6621ef5bf96e0d140c

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/Reyun.db-journal

Filesize
8KB

MD5
0a2d77a0b18f0150d091108d48e58156

SHA1
60b8556b6103d583ef67bbc311ce00f17bb9ca32

SHA256
deb1e276fbb4d08993fa58eb61fc7be0db63eb66b3be9bd855ce893ce6a3ee56

SHA512
151005e5177960a33c85b4a2445551c401172c269166773e3a53dabecb1899c8528efafe8bed03f580f8c087e9ebf099e59ecef6d5d11e670809b46d2bbe0b42

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/Reyun.db-journal

Filesize
8KB

MD5
b82f818c885edad3e7ac6542b3bec791

SHA1
9c1ecdf38031df5758eed33439cf748f56dd140f

SHA256
cb4b80118d52f77a1f4a472bc1c73d4b4f428ad5746a3489312a6248c02745c3

SHA512
aed7cb3dbbc0acb51c96664f066fdb1d280c433369c25045afff2e89118cf022ad47024adb52e59181ac6c7fed42792b914b4abb7b57be665419f4db8b7f4605

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/accs.db

Filesize
20KB

MD5
064201502ce25754236b3b5c12e24c65

SHA1
e2c89961dcf8306440bc99f7b058ef4680eacf0d

SHA256
b4ef8a71919ac4b6ef9a895a991b527f5c3316fd6204eb815366c9614dc71f00

SHA512
3f5af9d3e7fbca1c0a3f9ad5a8d8d8e1d3b3e3c79cfda89b6baef007aeafb4ec5738626fca1f682b73b0305a94a4e2bf17c0bdd4fc7fbacb80ed02c7affa44a1

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/accs.db-journal

Filesize
512B

MD5
199c7b2b55fc5434888cd4552837ab63

SHA1
69cece802c4fbbb7a0907d90c7423b02afd7c99c

SHA256
e80c2de669bc8021adf459a5e01fa7d731c0c0659dd90277f1f3cf1e86cd4885

SHA512
60155078728bb16abf47af440bdf55729c41bb2a775f9fe8dc9507503c6c1c8c901ccd58a8328dbacb9c42f42dc7aa3812f09509bc030021f962a7cc3a48faef

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/accs.db-journal

Filesize
8KB

MD5
0c41b717494335f1624397ec6cc978ce

SHA1
da878eb93d85dcc1fdb6be8561728644d281b0b6

SHA256
bf5aaf3bcf55679b70d985bb320f069482bba99268d46b33dd908d855a47531a

SHA512
f0959ad1b8235dbddd5a0acc10566b1fe779241614a97ca316c9e9d7bd315f06eaac0075b89b17db744084391c0f59941d94a9b227cd3a8eb0176c5b287f93e5

Download Submit
/data/user/0/com.cyjh.mobileanjian/databases/accs.db-journal

Filesize
8KB

MD5
1110e66d2d068c47fa4a89a4429cf17c

SHA1
ed3cc48685d5b5ced50e7cd66888805ec5b809ae

SHA256
e53f2a4f9aefd97f12b521b6d148c5f7d47552f1fb62f93cc2b07455b9fe1684

SHA512
b1f7e04e1eb464a4c9ffa26bec93dd42f2f8d90cc39a8ed3e807399f3a33913a69215262bae095fb94f43df199f93525c921144136d17702ec1fec5b964c83eb

Download Submit
/data/user/0/com.cyjh.mobileanjian/files/AdDex.3.0.1.dex

Filesize
152KB

MD5
2e4955e53555341dbda9c6fc0edce515

SHA1
ed84d44471ed72bdacddeb11573589a33ab4d132

SHA256
1b5da8a48052894d5810326084b0006b53e8ccaa4efb0be3388d178c375d261a

SHA512
1b4f53db35fbce25678773e26fa932965314d153fb791c19a1fcbf4a6bb21532cd3503261e1b2ea82a56816e31e6f77d0a475ab51291ecaee846ffae79b850c7

Download Submit
/data/user/0/com.cyjh.mobileanjian/files/elfinject

Filesize
13KB

MD5
a97746c2dc86397304dbe4668597c507

SHA1
9e73822b093d3ebb0a1c8c69be0e77fd4a70dcac

SHA256
7104fcc3b76277826095e036f20b5a9378fb73a20127bc8982b4d10683523888

SHA512
90fa7439d2d0de19c3a4e002b19779c4398903ddfa7aa31954d820f53c2eaa5cdda140dd6c7f4ea9dcc712366896cb99a6b28d4e4857d79fe5ba1b25cbf54b58

Download Submit
/data/user/0/com.cyjh.mobileanjian/files/start_eventsrv

Filesize
380B

MD5
0e1211ab5f0162e1de374f592ca78301

SHA1
aaf4b49ef4917c34f4cb430afc5d10908a5494a8

SHA256
abe60e8495e34301e1f740255c08f22b43ed20cf79016b8c7209509e289b5b81

SHA512
b2bc4f6488787512d7699dc67d39247c0e4fec7a4d38480e5ba9797dc81373c4a8de1088bc9ab1504ee285024b9425e5411437eefc0f9016e390d35a7c646578

Download Submit
/data/user/0/com.cyjh.mobileanjian/files/start_eventsrvR

Filesize
317B

MD5
31a1047e70777c146f84f081237d5fae

SHA1
6a47a4a60ed9747008fe8d46efdc72212943d616

SHA256
d1f09d63329ed687724c3cb3374f0155164c771979b345b5e0a771b8dadca796

SHA512
3a571750f4e3cf75125ae9a4bb2aa72a535cc6139cf2e04576fb4e2cea087bbcdbb5173e14addb96392c68ca11802981e5e3d9a91ebe287abd1f9286dd86039b

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
372f4a74bedf22e2a27ea3a7b3ce576e

SHA1
5fe7023b834b190489dda024058bfd73a9008148

SHA256
d23ba92535d3b43f99212730c2e8b00d66a2f0fca3ca6fa87ada98aeb07c49ac

SHA512
b20a79af5c0c952e17483f5943ddcfe977f9ef553a024ca3c9e5533637d4d7a563850b3e0a2e4ac3dc4edfbd04cc9c98bba832bcc8928af50977a90b64fcc921

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
83f8bff053c12a95157e3b111703ab3b

SHA1
0fe542435121511ce226d9f42f0a7c70e3059862

SHA256
f8b1e63faa6d053eb97dc663d908b9ce0f9c1179f6d5d984e4984695326975ea

SHA512
669328eac2461f3b81adbbe7b1a466ecd543c02f0ed723d66cb9b65e9bd3242f3efc021f7b11d191bfaab70c3c7126266e021ce2670c7f6f720a3193347fa075

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
2b0d114173433062b61184cb29a81333

SHA1
7c37407f57fce132407c8ce39cfab8ad4aa5b54b

SHA256
d185482f184cd5339767f363e231ee50e8ea516a9a5d983d82da16e4795ebb52

SHA512
67276fee0315663c77360b8e7f553a3090655f7da27965000c0b052393d45eb25ba3c4c2b86be591f830fcf2a282c37da553a5f0ddd41441c6cabdb9952185dc

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
9c4132d67afe5966b96e57951a448031

SHA1
670ef3e9ecf0597aba2f079156e835f77be855e0

SHA256
bc670c2a209346c9d39743908b11c848c2e59b635ce4d5834450688d8fcc64c3

SHA512
8842b770321e0085309965ec94fa1b170995360099af48794883109020a51f6a1dc3cb27ae5855eb14fc060d094d2799408aef1dfffc30139a29f77b5da731e6

Download Submit
/storage/emulated/0/Android/data/com.cyjh.mobileanjian/files/tnetlogs/inapp_20240915.log (deleted)

Filesize
544B

MD5
fecb3a4ca64fd3d6a390722e50cc626a

SHA1
a7bae0625051be94dc96665a90465f20a5aa0100

SHA256
4e349b208df93fd2e3ed9d6dfea11e4f21562e48178df66e5a85f03547be796c

SHA512
b9b3c204aef18793527fc0f2026b75bc53d25dcbf66654ffda3f50700330b8ea1966bc406c8c67223f2a5c9c0ce2ddb1e4117efd680efc3a0096257c2826a877

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/Cjson.lua

Filesize
290B

MD5
97c90342a07f5359f9c4c930fcc648a8

SHA1
df7ef5635184d405c1c48a755d7fdceed47181e8

SHA256
e04a563b476f7f430b5a5bc04a8deae901c6044661c92748a5eeed3a21a63758

SHA512
42cafe134f3b530b52146b1dfb9c8791566c382e4758c6fbda437c1bd028689b897a0f3c9c27f395c6d8085e45d1c5bce2e08518a09a58f8ca9f30d1aafe9e52

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/DateTime.lua

Filesize
1KB

MD5
24c99c33f4b6692997890d047fbb9f2a

SHA1
5768bfad43efc9fdb5729fbf2cca0fc47f2f8cdc

SHA256
ebcd3ea72063585381f9c8c117d2b6ee6097e008fe345ced1a63d8f9075deaf4

SHA512
627d73fe166a8bbe598f09e72460da3b86677e41e5b64c40da45bdcb495440e04959952bc1cd161234bdb7bcfb3fc698fee7d67f94237ac2ddf8a0b6b247eae9

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/File.lua

Filesize
4KB

MD5
be0ef02e262c0a2926a0ae578361fade

SHA1
e949a8825ce5f5dc8d3cdf22f48d87fa97c8f728

SHA256
17032e981dea72427563b255ebb8e3e5300b02a0d7745a35a02cabfbb776cbf0

SHA512
eb6cdb4893f62e06b6bd0c6708d689c3594cb28de3116828c74f33a66ca4a15a1170703318530e63081fdb3619056035c12bce24874b84351c568d4c77a98952

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/GK.lua

Filesize
20KB

MD5
a87ec2dc41b3b543292e0e8f8ec75a84

SHA1
a8f40e0c6d7dbf968b4e041335414ae6c4f7a121

SHA256
9eb966e352f8f62944cdc4a8bdbc664907f196b5ee110f742314a7aeb78fa314

SHA512
f4cabbce28136c61595fb3bda312fbb2fb0cbf19aa57782b1fac4e7c46207b0deb903f443db63c3855fa9f2d06d17cd09c2f24ca6118af2a890404f9b828f9a2

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/ShanHai.lua

Filesize
66KB

MD5
ecad2131ec97c32d8689caff14ea5329

SHA1
d0c415676a8645c42718eac863cca77a07378e68

SHA256
92cc30ede32b31aa33563dfb57f7f33fcf2d06be6e830a3729063c2baf92febd

SHA512
3fab903cc48f69d0c60ee5768e93cd5b835374e9bc6e74406fe7b9ba4e295de7a698695a8c34a1e300c2c501eaeb65bbd069d0fba37a7057297a8e5a50c12272

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/Thread.lua

Filesize
709B

MD5
a0bd91b954da64cc9be07ec0d3d65b4d

SHA1
317516bb10320a5c9478c2d9c823afb47db9402f

SHA256
04f72bc70361eea0818766c09454c08a139893f7dffea432ca7ba327d9e2b69c

SHA512
a2a8463b7287f2a447a7400e76e13527bd1aafc6a054df830670782f18e2e7e3fc68901da6576cf1d7c3c350c822adfaa49af299941315310c1ec2692ee4119d

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/Xml.lua

Filesize
783B

MD5
991833f25d4a0cafdaec700ec6b1b4a0

SHA1
28599a598999dec0358374c01667ec276e82b55c

SHA256
eabd68375fd0e3f7f3a67a7554200f00bf699b159d97de6f0c993316155bcbc2

SHA512
4570e6e50dbafbe45d97b3a4ee5004d8716779010395b734bc56aff880ec68f732d5af680de0a280e16068cc623dd24b31e027a0108b53d3e0db6f735bad6622

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/iconv.lua

Filesize
593B

MD5
41cb21f70a45987bb84bd729ca70ac1a

SHA1
341ed2f354585ecfcaf312cf467706a8f0ce0a62

SHA256
c599c9a3e2c51f7efd2059f925d27d769292b8b6a9008ce0b021549300ce20ae

SHA512
cb9fac8b80cb1c0aa83a694e48050e4beb8c461d86bc2450623ee0d008a26f6dfdca9aa79f9352390510c31da397d66bbfca8dbf52001553d3f515759c281fd1

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/lfs.lua

Filesize
746B

MD5
031e88cf18eeee9250b6114e95bac53f

SHA1
e4c184ebf86f245fd2b0850865f56b36a1351ed2

SHA256
9463f2a68d1f96b30e846df5bb55d3a3bfd6f4ec5ebbbe2718a1e49ed742ac5e

SHA512
666bc0875fed7ec27174649770163ce2601fc307e8243af30962dc451e839543dc46a073cc46505bb94ad8b973d5a57fc49224fd1264e3897d69dfbaaea2a2f2

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/lpeg.lua

Filesize
857B

MD5
3f8c9e1139cbe478d75bab25fded84b2

SHA1
0ef446d20cc5d1d8a603ec036c704bc4763d0921

SHA256
7dc69e0272743eb6ef82b855f1029aff02bd69766e7f46484631297559bd9b78

SHA512
faf8a7846e2c8a69932a2cd4902349a8334e8b226fbcefb1912f994eea031e18fd7d72b0fe6fb90da8fdaa810e36cfc650e78231b4d95d0c3101f8544876eb50

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/socket.lua

Filesize
418B

MD5
180fb8b3592cd0a8a13ceac1b4f4a134

SHA1
b2cbcfd7e38e384a2aeb83a336928d227bea84fc

SHA256
aa3e3cd6345abf92a75d66c1cd6f94fca84f2feb9f75f8c8bbef71b23cc83400

SHA512
fab7c9716e5ede603e74f6f862f969ef6628f9a0188e77b56ee0e8627ea7af06eea5f2d9660d822f1e61a6a2e065118144c9b574d28a1d10e07cf06eb814cb57

Download Submit
/storage/emulated/0/MobileAnJian/Plugin/sqlite3.lua

Filesize
2KB

MD5
dfa8818190987e8c1a0ef2fcf7f664a9

SHA1
4174288a2b00e6163cefbd88dc514d0f593ff362

SHA256
8a4378599bb01cc29dc0e629068e7a283ad3f0648ab71346579c4eb5de31632c

SHA512
598556e44e35903bb8390a9b27502309dfe6242b3e7025a2959b4f47569a853b6ce92e6bd9f915417ab4817f8ebe1c71704fabc7f46c122aa98d37100d1a9c38

Download Submit
/storage/emulated/0/MobileAnJian/ajjl.db-journal

Filesize
512B

MD5
a60d5896ea8c2acf17750bd49893148a

SHA1
4d790a56a01cc88183e5656aed2241230d94494a

SHA256
d32b2d81efaefb1d77a9f68f7afbc2d9ea34b2bea83ecbd638c06c3ebe9a02b2

SHA512
180cfa8071a5ea00eea7837e1e3d56bc9c108b349c1b2d0be1031180bbb5b83dfd16c698e8335f2f4132d6db34405ba2f9c3144f6f966055756e0879af30103d

Download Submit
/storage/emulated/0/MobileAnJian/ajjl.db-journal

Filesize
8KB

MD5
afc0af0ac3c7b46d3f54374b0e3fc01d

SHA1
2560958fd6617ae14454cc7a3ca4d0d024aa8839

SHA256
044404800758c4bd5e9a573a2648b1e781dd95f8e6bdae37354dfb620ff20344

SHA512
75286b6a6b71bf44d41018b70ea36202033aff12d0c79ec1972bddac1597d000dac70d4b6815917f0d082a9f417e35ffcaa855ef11ca537965786f5919ff1d8f

Download Submit
/storage/emulated/0/MobileAnJian/ajjl.db-journal

Filesize
8KB

MD5
7df132f847ada05a2ab4f9310ad8c20b

SHA1
d145584acfc799ec4505ac562da274bba7309507

SHA256
b0f63125b55758890557efef2b6af81f8f22ba54cc3114f06a46f3d80dd6816a

SHA512
d022536c02b1f479c0e6bdd98dab31d7dfde0a25043f1cda13184d5a15c0d2eaf4edef387eb3168225556f2a1fdd9ad433e1e778dff198a2ae00c45ae0bf8d7a

Download Submit
/storage/emulated/0/MobileAnJian/commandLib/CmdLibDemo.mql

Filesize
357B

MD5
66ffb7cae5c1d8d390bcd2946acee1fe

SHA1
c6fb2ee70abb6f354e9309814cbbd4e1b97b5d4a

SHA256
8efe8f087e7eca7c96df5e2e17f0063947dec8c1819eb0d91fec79613ff88b9c

SHA512
b84d9ec65f9aea101e1996688d50bb68c24d3a2cb367c6818c3ca4e5a7f1fccbe2eefe1b081e5c97b047208166aaa50b74a379bea20160ccb70be19da98d57f5

Download Submit
/storage/emulated/0/MobileAnJian/commandLib/CmdLibUtil.mql

Filesize
68B

MD5
85c8c6d787ac3d0fe89b87c69d4ec224

SHA1
64b62433610ce2839526d65a581acf3cdf47c9d8

SHA256
6f7b6c9969ec9641ebdc22aeaf02ca584a0141860ba5d8163cdc8f52fbf9aae3

SHA512
21e4bf3ccb222dec154d8fcc63b04c09b38e5006c8e29703948844b80ac8afab151a8eff3bed5e5cfaddad8fd6dbb7f1df88a1cd5722407cdca11332244bc3b2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads