cfa394542d95b5735ec49b1afcf305e7cfad7e10a5a4d9e9f5233d23c154a113

Analysis

max time kernel
149s
max time network
152s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
19/09/2024, 03:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ea888aec00b448fef31dc67925bd20c9_JaffaCakes118.apk
Size

13.4MB
MD5

ea888aec00b448fef31dc67925bd20c9
SHA1

f316e0e2495a25a27b65b0988e327461d22c5d1d
SHA256

cfa394542d95b5735ec49b1afcf305e7cfad7e10a5a4d9e9f5233d23c154a113
SHA512

dc632b82ac3ccf6298ac9a6c2a87577088d0529c6d125b30a407f9d0f7280cad6a91135a181e28b8d2fd1b56e91ebe5ed312f1f164013619961d4bb39c58d90e
SSDEEP

393216:fgwisbxbGC0DVpE8vyGOZ2U81KzTJHWmX3buM:f5bxuDVlyGhU8QzTFWmbv

Score

8^/10

collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.apa.kuaisheng_shipper
/system/xbin/su	com.apa.kuaisheng_shipper
/system/bin/su	com.apa.kuaisheng_shipper:pushcore
/system/xbin/su	com.apa.kuaisheng_shipper:pushcore

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.apa.kuaisheng_shipper:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.apa.kuaisheng_shipper

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.apa.kuaisheng_shipper

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.apa.kuaisheng_shipper
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.apa.kuaisheng_shipper

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.apa.kuaisheng_shipper
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.apa.kuaisheng_shipper:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.apa.kuaisheng_shipper

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.apa.kuaisheng_shipper
Framework service call	android.app.IActivityManager.registerReceiver	com.apa.kuaisheng_shipper:pushcore

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.apa.kuaisheng_shipper:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.apa.kuaisheng_shipper

com.apa.kuaisheng_shipper
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4315
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4359
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4536
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4644
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4663
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4682
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4743
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4785
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4840

com.apa.kuaisheng_shipper:pushcore
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4385

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.apa.kuaisheng_shipper/databases/ThrowalbeLog.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/ThrowalbeLog.db-journal

Filesize
512B

MD5
fbe8a996db30585094228e92ee7ca598

SHA1
c28e8ea4aa5f6ad0b5a8a0ef433c3025c5e43714

SHA256
e920c7015ea494b11a3130787cafcb3728f783c769a87e8e7098e6db39a7e9a5

SHA512
cc7813439cc8126074170a5731f50b401fa8dce90e083db07933a9e19ec60f05fa1a8120d5c38a9e63856ffbc75e9a8af3a7a78338c73b0248cf55b14e85b7dd

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/ThrowalbeLog.db-wal

Filesize
92KB

MD5
fe6f195a174dd669c38c071e14211e34

SHA1
665ea78bd8b8be03b3b656cfe50e700c6b6f497d

SHA256
a438941912460342ffd7a22ca68457e356fb6e0ef80462022f5c0d70e6506533

SHA512
481059f9b372365eb395211aa2ea785b8357a39d806a150e8095e56966d3ef1a1591e4fad3961c1c0ef4218e027c0a6e0aac8cd4f71a866306a24de8d88c0407

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/hmdb

Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/hmdb-journal

Filesize
512B

MD5
21a76cf0f586b61582187cc7bd124666

SHA1
9102099ac8f0397e2a2908690a5a8bf466d4564f

SHA256
69f36742e2f0ada9ec011bcc47d29b8566f00ffb2f0cae26b43a27126afed215

SHA512
ec0a15cf2df7eaa4fd05c923ac9695f4f889d10e96959c9ae6886e3a8e46dc1d36f061e4e9603df5ba15bd3e044014fa70c087167aab3244b3e2a15a89bedf96

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/hmdb-wal

Filesize
16KB

MD5
1d84e7325f9d7245699df9168c00226c

SHA1
9ab1c1efd1bff51fd3ed49e7a83a7fe777f3f57c

SHA256
a7ae84ffdc3f453fe7035d8675af5ff413cdda9c15657cef351bf754b960a024

SHA512
b997164915dfe96eb2ad85f8c20c6616a4f6b40fa8a67df846f0f5c9f1aa5eb23ed9a88d68b5569b945cde92d5039d4f9a7e5dc46b663bb2b7980bceb8c3203f

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db

Filesize
36KB

MD5
a7b5debf648af8527d38065f285c6754

SHA1
ad8513c878ca1483a2472c7f8dfc8a416418517e

SHA256
0d8f1987d41b042ee7aa1ae97d1950a40884ff4ed620fd02371017160e50eaf5

SHA512
c879b912d723e9c382e547f605dea4d77830d9300c3cdb1a14c2758cf4e895000c7ba2afe37584ed2fb94a9893e8ff47bdfda4dfbf2dc47aca75efc5d28984e4

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db

Filesize
20KB

MD5
163cb77ed299fe3bc947107f9761b16c

SHA1
c091598338ddec2194754b745dcdaec983f02df7

SHA256
8e86153f19e9dff458f689f4674cfbf1153ebf17389bf195900759a50f75071d

SHA512
717c010b3ab34407ce350384a96c49761c4f4759b3e79d665b8556e51fdca5ea05d2a9fa0f6986264330ec3fee6888352515dab3c4f6eca9b4ea4b4ebf6d1b98

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db

Filesize
36KB

MD5
60e918a66670488ae5e111bdcbcfa95d

SHA1
ee81e2f5ad9a7301adfce5999095370e532a43d9

SHA256
0126f776c2c01bb621001c4d80787b706902fa8fdd89fd1f062d063ec74d5313

SHA512
1abb9311fce204649d299a19efab820981c427a8f3778a9848fdfe99aac19fbb3d62bdc4f5fc93bad66c090d198e9db33c23066041207272f2942272167796d2

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db

Filesize
20KB

MD5
e86452960fe4d0bf9746434464b404de

SHA1
c17874b094add13a5508a62009ab279c69407e05

SHA256
a0533770f5ae834b42e095ff5203fbb65b314ced58c0433a3fa10b1fb5b4e4a1

SHA512
ae73e81a682ae42e8e29e475f9cc6eb7cd126ea228c36df28795952dd1641cbea37b75631aeac259ed3ab4a774186eed66c9ac84bedcbc157c8a8c6740a9b822

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db

Filesize
28KB

MD5
9a3c31887cab2a067c41edf9e6b7596b

SHA1
6df61b7719979c1dc7af541c039c8d4b32f73119

SHA256
8cc55c0306940ba74d828472c1c853e327844dffb2411ecc53da6725b8eabc5d

SHA512
7889ed67cac946602995910fffe2777763949e7329aa4d5b95887483122d76a512059bd88dd2122e5cadc562c8b66cc594b96cc7dd5e9b7882df304b86b1088e

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db

Filesize
28KB

MD5
459770b1fda81ecd5d1ba9a63166d78d

SHA1
f9d83498658d52b3767b65be441ae988c4d16115

SHA256
b9682444da13cee8a1ecba05b43cfd05b0659805b4bfb640f0ebc78ec2b49532

SHA512
34abd34db54c7268736aa8dee6fdabffafa24c33debf5cc9589d0c26eaaf2005f44e01443f75113f5f2bd4bff703488fdefde9feb105631f77710549a6d189ba

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-journal

Filesize
512B

MD5
0fb20abff16f01503213ed33809f8a3b

SHA1
7215c46b93f1f3cfe7c6011d1355c2e8359b211e

SHA256
81a6e65511871628ceeaed79a864af0f24ffd81325f8ee2dd42bca812afc06a4

SHA512
3815df78a66eeb1fb9db81e491fcf918dffc2415c21b0ae018e1dd2a6295dd8dcc43c14bda5eb715a210415e7f21bb8e3f28d974273b07bdadac7fb3f89ef881

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-wal

Filesize
48KB

MD5
ec55f0a00882448c6bcffa68bee68f48

SHA1
1d79325e543e5cb2c7bfa68e732f31f789a8a5be

SHA256
46396724d0b105022ddb77af812236371da085c16114a776e0d6acd937f503c4

SHA512
6c0152123dd692bf731b6f7c1d1927e892031a9bc8c8d8a52f60983c33fe0198df6551572b36e93fd68c4a279bc75e7beb86548640042b970d7e41359b8c1a1b

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-wal

Filesize
8KB

MD5
a1ac02833190c5e6307f85538e21cfe5

SHA1
122b8a6e161e48aa83a86cc2b836140ebca78360

SHA256
3d36f3bd4d2bf956e3fa6e1031e3810f9073e77349d2c7ad5ce60f551ad00b53

SHA512
7b28e275585cbf401681f5bbec4684773f498effb0141f50361c861db178cc27b99d3a00e6552f36e9f253588c0800ad6ab8e8c1cd4fb46e89ddc245d6171535

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-wal

Filesize
8KB

MD5
96715d937e4d9fc456a2a9b9da20b2c7

SHA1
8e8369159e7148f905c56135de0183479afa28c5

SHA256
288068c95e094053e4e112b0c0933dbaf2e2ee85c16d936988cbee7fa9122e9e

SHA512
7ca0b588a9377536baa9b2f7d79f34e698984c8681669617aa7e73288e280e38fe85154f83466d1aa5051f1058ea7620ec011131fa0ff0fdf3cc599eadb82a73

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-wal

Filesize
8KB

MD5
3e28dbbef2854a547b0172477e1b236e

SHA1
77572adb5369ba325946f13e286f71649fc8d6e5

SHA256
8261b1bcad7ca7dd085d3bcfdea4deb937c14eccf2be2cb60d1c9303557dc3bc

SHA512
e2273f4f549e2df6f151cd435a4b9b4b803c35d860357a16776778810ec38385111c127ff1039c50e77695151f2b4d3714ce2f0489370f777c606d29addda481

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-wal

Filesize
8KB

MD5
96370511d3f723c7d770eb8d2dd60204

SHA1
594159fbfab1917ef92854007716c879458b00a9

SHA256
336a6a54b3a456f151a94c32d5fb328fa96733132402e71116961abad4775054

SHA512
a47501493602aaa509d82e167a62360749ba8023c9fbdddfaa3d7ef83aeea93350f7d529a50269b2950b02a6395498ebe670d952c0499b0259f480acbd6bddbb

Download Submit
/data/data/com.apa.kuaisheng_shipper/databases/logdb.db-wal

Filesize
8KB

MD5
6e5643360d1ed62efad1eb1b6ee5fec3

SHA1
2a39bae5bf773a79a3b41eeaca5c81983d028607

SHA256
9f4837d252d5700e005580d468c40d02fcfc254cebb5376c519b8ffe0bcc7d5d

SHA512
cacec87f66488043136da833159b75380f2263625a91bfb82750927c3edced04b8827c30177e6b9b5e6065d4324056891aa6d677890885004fc07f8a4a956140

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/Mob/mob_commons_1

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/Mob/share_sdk_1

Filesize
23B

MD5
8e24e79baab91c4d0604eaa9006a0cb3

SHA1
e427afc94a4b957a7096f73e395a10ea404c076b

SHA256
65ee797326cb9d94a4c8b13fb114a7273d80af9ae547496bf56556c479f75e4d

SHA512
45bde5e1b5da5e54f7f5baf24cf4d9158ccf5813f0babc05677437bfedf1d54c4707090a1c425089e8f9582a85fed80b25c1e1f30ec2051afc6fe68bb8a76bae

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/Mob/share_sdk_1

Filesize
62B

MD5
de6ead8e066e3739d0a520ffb635b0ac

SHA1
1f77dd4a36934b7b4309992b05ab20419e0e97dd

SHA256
20b50b8ade57702c62b711f16bf7db527de98b683c5f714d60ae292c4aedab80

SHA512
f6b42b24247cb3f11d85b61c6634fd10a2afd61e880f8e1a30571a3d9e8454007b0e9f743029e3f764219b4a968d9ce9c0e89058f0e27a982508982daed93caa

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/Mob/share_sdk_1

Filesize
86B

MD5
ea5de47623d59b603ca80f872e7837c9

SHA1
b660d170cd4536097fb0f907b1f8ac000ef553ca

SHA256
326d24ca119535d5827be356fff153029f67bb536afa6d1f2aa7ed9b6802cd54

SHA512
c69a7f452f80173741eb6e548bda2f07982ac52fd0cdb559c3d061c1a70b0a7b41d2407947c802458f635b972a374a122e1532b5900da0331fcf08bff2d31ad9

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/a/b/2c6ae29dbae4c86288ffc8816cb48cbb.0.tmp

Filesize
1KB

MD5
071b939e58a395dcf83dff630c01cccb

SHA1
72e0e0111c102b63ee958eddfb17fda699e569c2

SHA256
613e2db8dd4437379061aafbe3bb9ac207bedc04ac92497109b1526ecfccd0d6

SHA512
52f5c2d75a60e6cde0ed3b20b98d3561f5f008b29604bf4ae338d66a8a7a30ec019f2cd6db168e58f1f15e22435c97e57b235a0174782240f0d799b5633b39fb

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/a/b/af2120da9afdd517f35829211e62b93a.0.tmp

Filesize
1KB

MD5
f4b1f78684c61bb37298b3c4f584a15d

SHA1
d71c972cfa542e5fc93bcc357966f1c08d08b10f

SHA256
2e997368ca41a2c34ff8f9a6a1754b32a991ec6d53e2ed0a77f894a6e858d1d8

SHA512
89f4d9b1739ff12c0099810560419506b1e9fee7135409fa81f1334d8d9b908e551c12107baf2272c263f5764a7185e82bcfe5b86a5fa082fbf26df989ab2dea

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/a/b/bceb78e43827cea9f294b8165350e16e.0.tmp

Filesize
1KB

MD5
41f432ac7e3e20f8c0e0ab380769b913

SHA1
6619ad9b95095403208adfe3689b36655ec31945

SHA256
b34b88baa600f97192480bef64184e828622a379bd87f65fbaf2808368c442df

SHA512
242e81247fbe8396ed22e13714cfc11347ad66819d99f810893a22b8859370415c8deea1051a26923637f840473fd9fd376e75d6017a7d8944fc079023545c6e

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/a/b/journal

Filesize
114B

MD5
4329f0ada3c67bbccbc3e1f2ad907383

SHA1
6b7236b00750abf58083a6efb2ae24d4df3713da

SHA256
2e601e21bc26ac4a1f3dbfef44507b0c6ea44c0d495fa5c835d18d0f39f77641

SHA512
afd8c57fbe2ab9b6f77347ecace483ef475e76ebebee9ad139361a4e9996030fffa03d985b5f3aa46194f275f4add5034a05bccd8270a8bd7be757983bbdcdb4

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/a/b/journal

Filesize
197B

MD5
1f7dd02ac1a647e38b2b15a06b7ea752

SHA1
b6c6608e057875e2f0c0b5b1f388b23e9c198208

SHA256
89605e517db409c780da0cf2690c427065fe0c15555985899001f1a42b7e3bc7

SHA512
297f3625241dcb1395a4da9801bb3f1889f93365ad1b33cf891c0bf43d3c0c379ea2610eef98c1550738771ef7cf4b2086b672dfb624193ac4668c4918a2aebc

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/a/b/journal

Filesize
280B

MD5
f6e20df4526802ac325b2a497e89cd44

SHA1
65329fbb19ce6f742c2bcc49567f307aea1bfae5

SHA256
9fbb07c2dee5375a6b74d2bb773cd4e305714d9f84a4cd922f43b8a86e5355be

SHA512
20be8b9a1c57069015464f1a9d01f6e7e22e4ce188c4631da3ad089a3f320f2083e55c12052630ee18ba50ce84341b28ffe3a0577ce9df9cc1d3ebac1ba4ccf4

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/jpush_stat_cache.json

Filesize
119B

MD5
4a02ae8ecf5bd52c4b1516c99a3cd1bf

SHA1
ca67f400250c5c1c3d7211a4ba685a6d89a4bee4

SHA256
94ab3a41e88d19a39a14983ab93d541e154570136e5bbfd22000dd6e028b64bd

SHA512
4764440c379a4bb87c7ee9175847a62594aa25176a00aaa5c44548a2a1463c480460eb1818ac5d44e3d80962c2c10afc7bd854e38b6497d39ee35b10e9ce9904

Download Submit
/data/data/com.apa.kuaisheng_shipper/files/jpush_stat_history/active_user/nowrap/523a5610-6f1f-4bdd-94e2-c4a2da2aeace

Filesize
159B

MD5
e315098bda3a8625eb9c1f8d86d730f6

SHA1
3a67b19386c1a22da95ea5d285d7f144f18418c7

SHA256
17a0731ce4f063677c14c4234b8ba0b57c32fa82ebec340153fc6d4509932012

SHA512
fe4b6520e435f61dba49ba8ac176a16f1ebfafe9ad956bf94e7b1b7386227d8d11644bc076cfe69ca994f1336bc7b149bfa597273f034538cd3e34a824b5cbf6

Download Submit
/storage/emulated/0/Android/data/com.apa.kuaisheng_shipper/cache/TileOverlay1/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/Mob/com.apa.kuaisheng_shipper/cache/comm/.mps

Filesize
26B

MD5
840eaa01e5d03fffee257ed5ce4fba9e

SHA1
886bd732b29f6dbdd94b890a2b203c5a276ae773

SHA256
7648e772307acf936c331c4ea9d92872b1af6367cbf83f33f569ac204df65595

SHA512
b0a4f9238c4b60bec0cca9c72e551a702a95210a735bd8176c1d5ba741e264d2f1e885d65ed07a88086afd74f69c5e02a92db8068b222a62c6f56762a26b7d4d

Download Submit
/storage/emulated/0/Mob/comm/.di

Filesize
202B

MD5
0c67b1f37feb1405c9d452d10632076b

SHA1
774775d569aaf10e77adcb187f252100c7a32222

SHA256
67673c2235d476b3d149f6f60b86368bb129646c00bdb779c898b388511c8b62

SHA512
ad39e11378058ead3a412df1e6e6fd605adae1d52719cd57e37667dd9e42f987db7c56d4eb4e2711649eb07eb4d8e36f9c88331056bc5a9af3f4b822ad8f15be

Download Submit
/storage/emulated/0/Mob/comm/.di

Filesize
57B

MD5
70a42cba408700f9a6c01c7941a8829e

SHA1
eab01cc2c0671538795fb0b1146017dc099d0984

SHA256
499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

SHA512
8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

Download Submit
/storage/emulated/0/amap/data/cache/am_font_model.dat

Filesize
66KB

MD5
89aa9d3514ee5a99fdf6ec3bb1390926

SHA1
94a6fb75789dc35b0ef0d94bc55f419ecec5e7be

SHA256
96ca8ba42dff6d695f40eb51aeb0968d35ab362a7fc4338a4adb3e1f33247fd2

SHA512
cd00dc490c7a2cdc0a12eda2ea21ce8eb3d8321c23562b09f7d86ef5048229ff34a2cdaacaa9c218ab710931050458ac505372339a8586155b0d6af07d6258f4

Download Submit
/storage/emulated/0/amap/data/cache/am_font_model.ind

Filesize
36B

MD5
f6d127811b6135d2dc6fb777e8e0eaea

SHA1
0444b077df9a268aaa319753f88c3d4f122165f3

SHA256
8679b215607e08fd95ce469870e643edc3e106244fd4dd6d9695bcdb66883244

SHA512
a34470684d3acceca54119867f89c08a358fe045e96203361ba3d37a4e6e5596f242b4ec4a434bb08dfc4e3ced0bd2ae224c0e5ca4fd0080126ce8bd9ff197be

Download Submit
/storage/emulated/0/amap/data/cache/am_font_model.ind

Filesize
316KB

MD5
397b6c950ac0ae95676cccdcba7801ae

SHA1
473ec8fa7ec1694dc16f873300e176ed2564f1fe

SHA256
57f0300c6ec381458f0f56d117780ffec97ee14570ca980d9dc6843ba24619a9

SHA512
4c9fbda9d26a7fc748b1db8441221ddb755d5645f81fbc77751f30e1fd63a449b3be38df8088968c5e1bbbcbed62c96dbd1f12efe83c8eb1ac5e72e116a3e415

Download Submit
/storage/emulated/0/amap/data/cache/vmap4tiles/poi.dat

Filesize
4KB

MD5
71d162722d8e23fae5a0a4bd17084d10

SHA1
6d1df94cdf8f6163a29bff936b7808c13a699fec

SHA256
281d2ddace92a46f7d5d57d01b9ed8474f936921f12588f1bf9dd9460edf1539

SHA512
ad6ec7259fa490f6681ac9765676370d521744354bed0fb5041cea75d6b565fc91a14271c77ec52dd59409f56413e5e72d714ec0147f3d4ea8bb3a12c6ee0cfe

Download Submit
/storage/emulated/0/amap/data/cache/vmap4tiles/poi.ind

Filesize
146KB

MD5
150b10c71ac015569f6daebfb83c0914

SHA1
28a5cc781f7c94eba5a42f32816a8e2290d32ec8

SHA256
98d5d08258b6c47f1db5fc1de28c12a37ec22e9b3ff1b96a9f4b0ae2f15bda1a

SHA512
28e3dd226e40733e147645e0830802b5233856d03c4c5e8d31b8206090b872087f17647a88eb34d8df65dc8726130d60d8fee157f8e2eb2717b8ede8b9eb6001

Download Submit
/storage/emulated/0/amap/data/cache/vmap4tiles/roadmap.dat

Filesize
59KB

MD5
04e12f7bf7465c2136e58a8e73ed394d

SHA1
2706cc022a3123806840f7c43977579ace6eba67

SHA256
aac47f608f260152c81522cfc43d9e6c6c459e39b783bdc43599098da435675f

SHA512
5f0ac0cb216bf1d395dc2c424179b6b6a780b15aa3f19d0c8a82cbf3f2f10418964825a05eb818adf04f9860e3f7df85f259fe5c598b3c3682648d092bf9c89c

Download Submit
/storage/emulated/0/amap/data/cache/vmap4tiles/roadmap.ind

Filesize
146KB

MD5
de495036e8756f1def3d5d7759696d01

SHA1
e1e13b2651fb1c429b6a1a3a0e15fd10d041d11c

SHA256
6fa3843ae5a658fccf109a67ba6a02664eba72004a078fa644c8b25559da1b18

SHA512
340d5204ca9c40164fa7059f378e78c0fa0ec6fb798a278114b9ca86586b41491d32499171ef864d0e9caa645c1a0bf77062698d678302e000becbdcf88c6f98

Download Submit
/storage/emulated/0/amap/data/cache/vmap4tiles/standard.dat

Filesize
22KB

MD5
204e954f9e6dba315f12a4ad1b563f7f

SHA1
554a940d85f2977a1785fd8c62c7b25469f7c38b

SHA256
ad29025a1308608b06acca79f7c7672e8a0a2763e3b20b36b6fc21f9cfb2e798

SHA512
6b363077fbe2af283acfd547878f4c018e35281d928771de0ae55b44067cad5f519b9705b24fb149fde350792019ad5571a3fb3b849294d6dd4800a00e13a124

Download Submit
/storage/emulated/0/amap/data/cache/vmap4tiles/standard.ind

Filesize
146KB

MD5
972a6c8064d2fc430be404efe42cbeba

SHA1
e30c38a43839f6fc87b5075b4ab054d438c16da2

SHA256
e5f084eabc6f077ce1f98abb9397faaeb0851c54a6a65762732e71efbafc47f6

SHA512
7cc41e4583745a6c56b2d0e8fa0d4fe127d5c2b02e64dc11f5c6e71592cfcc25fdf2d3c39c1c9ce35bb4c37d8e0430a45574ac02b499ae0a2f25d64e7fb3c119

Download Submit
/storage/emulated/0/amap/data/cache/vmap4tiles/tiles.dat

Filesize
185KB

MD5
7b404af9395f6f8f9c061f80f0f39331

SHA1
4a9e3d7410e2c5260b0c128ea88c07f6eb251ed6

SHA256
bf603f051e868fec55aa20e1a33a42c00499531e16c65be2c7f2fb91ed8c4c5e

SHA512
2d39de3c0e9636816756c8df77b482c1c9c7c4bcc978bc7e01ddf577a8b8eab04eed75487dcddf902cb88e84d24ee66b99e25f359c45b06a49006f9945e30156

Download Submit
/storage/emulated/0/amap/data/cache/vmap_indoor/v4_indoor_db.ind

Filesize
20B

MD5
d774095a14d69970bb56d412825e54ad

SHA1
4ada65b63d9e95669ead0a7cb4bd7d4e0ed5e302

SHA256
162fc7441ddaf17396bc0a4dcc022511c9a07d1f61d2e4dc9d8de1da208275a1

SHA512
e5a14295a44763ae8aeb69fd593436f48eced8811f5ad15c8c294c480cacc49d866bff068ddb431624eb82df8d12f4a0cc7c62be6e08d4399875a47a9eb84335

Download Submit
/storage/emulated/0/amap/data/vmap_engine_version.data

Filesize
4B

MD5
dbfc22c51e841252508c66609d3d5880

SHA1
ae1849c31ce313d7eb0a6294f2d6013d54c96f8c

SHA256
caca8183cd21a08afa0002352dd9574784aef05dd0b0e232d7f1c8cf85a9a2a3

SHA512
6f138993b131c2a4de93ec325549a451a480c8a77eb2e5dda4d8b7fe0d260ceb6ee59114b5fb72e8bd92ba1ac96481e33bc8122953d47a62825a056a04a384ba

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db

Filesize
24KB

MD5
6999293712000d597b4cf4f0d42316fa

SHA1
ce64c005f5f516ec4c491eabd907423b0fbe2a1f

SHA256
3cd4e50816e59adfdddc5d5ea2bff7068bf6fe711302b4820f6a79f132f0fedb

SHA512
8638503a6e9c40c8025722ce266ca4314804c7d74546938464253a136f230921ecc990343541f481d317c6823ae519a5a33d279b363a1457bb105a6de49656e2

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db

Filesize
24KB

MD5
a22d9b53bda0f7778f3d24257fcf4441

SHA1
71a3202820a5d72b61c6a9185a225ad483faf94a

SHA256
888492242c42413ad12546ef19324233a05469b6c6883c49dde8415d06ef5982

SHA512
5e3cef7d79e1a41c55cb92b79cfd5273207df202feb742653462e98a600c0b2c6df0e63be1fc84201a08de83301c2b1a999973e37c3ab25fb0e8f32f94e15d08

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-journal

Filesize
512B

MD5
ae434116ea604874d4ea0be4db67d27a

SHA1
0ae8090bdf064dc581421c629dafd1bf0af19e9b

SHA256
207ac0a3ffc21d755d2c446d5d40c6564d27bf28826a617a550832e67a3605c5

SHA512
a90885c64a4e687e625952401fd6a92bab969d04d7026ed02edf2aeb8a5bf12cd3236b12c60f1c98128e972815dd65f37b0c74e51ef38bbc851f7834b57d8da9

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-wal

Filesize
36KB

MD5
28ba9494943f50bc6a3bc3c78449e60c

SHA1
a500c446db866246d466a711b6a3de8e0b04fd95

SHA256
43f789e3cbd0db1f7b8ce40dccddeb6be76b8be8dd87db657b5c0e9d9e4cc131

SHA512
cccce134dc7cc4113e55db72dc2c18b32a7f198fcbb22c769ee455d4219ad18dee14b96ee0c3a019519e993169aa5be9766cb6890c34ba46847ee9820241b0d3

Download Submit
/storage/emulated/0/amap/openamaplocationsdk/alsn.db-wal

Filesize
8KB

MD5
c39ec26281cebc5b94f06cf4195246bc

SHA1
9e4a629b4469e54fd04237d1667185bf50aa4400

SHA256
523c5ab7cd32480102f62360b85868a6d4aaa4eb23c5bc2c5b793632b83dc8e7

SHA512
1ff2501afd1e9025d11e9b90955a4f6d002103532d717fa16a90e2fe700285a44a755e7f3e9aa54053d89bfd792845e65bda157d56514fb0000ff3aa7ddbe5f4

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
c32e02256407d79795f55abb8f36cd20

SHA1
0897469a39ecdaaacef02ed7cb6311058b14b4fd

SHA256
5743bc222081cd876fda6f21aaa9d494248ee16c2ef9a27494ef5d252b616e2e

SHA512
1aecab2201b3ba324292d3ec2c489722299d0894a204f00434c1eeebbbe6ccc09dc5f1adc7ff1a080f5728417b34895d316ef4193f9606a3a3a5bd8835c440d9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads