0275c3b194cc506e2d95ce2703676f09df3744215469ffb7e8ac6045166ad82c

Analysis

max time kernel
125s
max time network
129s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
19/09/2024, 20:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ec1d89a8f5062c47435f81430077844b_JaffaCakes118.apk
Size

18.6MB
MD5

ec1d89a8f5062c47435f81430077844b
SHA1

84c9223b41e323ee6c5e7a2e60e09c6279ed6b83
SHA256

0275c3b194cc506e2d95ce2703676f09df3744215469ffb7e8ac6045166ad82c
SHA512

2a33936f2c708eef70104ab53889a0fbc533e107bc2887cac3beab5899543b76d177deea660c0141b776c9e59203dab84f670946d3d6b7a8559db9c5e7782c05
SSDEEP

393216:VUJ4EPukTzCvn0ZaHGS5IncJwUgQxJh2LZrliOkF52OW/h0ymVAHA6r:V8tWDvWaHZEUwgxJh2Lb0lmp/dr

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.zzoo.nanodash.mg

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.zzoo.nanodash.mg/app_mimo/mimo_download.apk	4249	com.zzoo.nanodash.mg
/data/user/0/com.zzoo.nanodash.mg/app_analytics/analytics.apk	4379	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zzoo.nanodash.mg/app_analytics/analytics.apk --output-vdex-fd=92 --oat-fd=93 --oat-location=/data/user/0/com.zzoo.nanodash.mg/app_analytics/oat/x86/analytics.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.zzoo.nanodash.mg/app_analytics/analytics.apk	4249	com.zzoo.nanodash.mg

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.zzoo.nanodash.mg

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
10	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zzoo.nanodash.mg

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.zzoo.nanodash.mg

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.zzoo.nanodash.mg

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.zzoo.nanodash.mg

com.zzoo.nanodash.mg
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4249
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.zzoo.nanodash.mg/app_analytics/analytics.apk --output-vdex-fd=92 --oat-fd=93 --oat-location=/data/user/0/com.zzoo.nanodash.mg/app_analytics/oat/x86/analytics.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4379

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zzoo.nanodash.mg/app_analytics/analytics.apk.tmp

Filesize
553KB

MD5
80098e1a49d5e7220eca7dfcec441836

SHA1
dbb66f762b66f26b26507ab9759eadc7bb22ad8e

SHA256
cbb8aa98373f4f0e7009ba8b178cad9087e48d6388b2f76261f38168201c6c4a

SHA512
c17378a499d98138a3e27afbc33833712c93139063ae83a4f2088a6eb52b5a9f631b3bc4d31ced99e1bafc907c2615af14dc8bbbd3d3c607cc03455bb8ecf8dd

Download Submit
/data/data/com.zzoo.nanodash.mg/app_analytics/oat/analytics.apk.cur.prof

Filesize
310B

MD5
c3ec6175e4ba61c8c7231ccc322b8764

SHA1
ea25b25907e9711dcc346dc2b47fb16efafc7f1e

SHA256
d2b66d437a02519c3fd0b9b87bbe985bfb6f812ba70e5225c9ab4b526379c002

SHA512
ed799e884b927fda5b661b82f343cac64aae11cac0680fb33b4379aa1063a1c54d9fbd2582fea7ae376b7a2d2b0f40a2f9ea4b1a353385bc9d0f1aa5cf5ae2fa

Download Submit
/data/data/com.zzoo.nanodash.mg/app_mimo/mimo_download.apk.tmp

Filesize
400KB

MD5
3e86b24cfe8ea3644e3a6bb2f3bc75a1

SHA1
7881136fb412166d04ad5b6c4fdb9550a66fd99f

SHA256
1b01837a2b9004309bff95248adc60d39ffdadc90e52ebf645b2c5ce76f28bc7

SHA512
40ec714867b4a3e0aaa920abb648f331ce43e8bef442e782eff5ebaacb1052785e681c23b85f6ec50bc4e57e5b9924e61ca4fd72589f810ce8c670b5094b612b

Download Submit
/data/data/com.zzoo.nanodash.mg/app_mimo/oat/mimo_download.apk.cur.prof

Filesize
1KB

MD5
dd74b6eb477edbb260bb75b5153d0e74

SHA1
8cb2d787f8102a6e38ef6b9a863d38e593c9cbbf

SHA256
e4e802f19f583b62e712cb3e9b4dc6f204247fee089a87dd4bae2907042717ce

SHA512
bb6159f75564b7a9ee37c8e37bd18027c3a9ff72d1adc6ea6deecdc3e0f6f4ed7a0d625a7a770436379582d6c78f1c7cd069e0ac4d65a319ca3f2d8cce0184f7

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/analytics.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/analytics.db-journal

Filesize
512B

MD5
3cc99b11aeef1f795f57d483f85133af

SHA1
abeb3cc60c8e07e35e7cf6460e1de7fe92682ca2

SHA256
41e1a3da668a0870b21156fb5929370b84611ef450e196c8c59e3c807e79b7f6

SHA512
595816410e929481458310f831568154adf950c542c99d68abd11bf8f18108fe78c59a9a0e5b89cbe6a87e02cd730e5126445c1f0645a2d84332d71a4a4930aa

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/analytics.db-wal

Filesize
72KB

MD5
090eeb585e6216f09d8ffdcc2467b2ae

SHA1
4870c560e5ddcd1e3a1f2654b50002da658229ee

SHA256
bccc94581fe3ccaf09543488e7f6414007766087b79eff2e7d423b33f61ef922

SHA512
027d66302134484a12e1b342b28b275a3f534b7fa883573449686d37f7e74db1bada2e1d175ebb51b0afdf201f900e34d715be31d91f630f1d6cc854a237d698

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/analyticsv2.db-journal

Filesize
512B

MD5
506e71a324a01f0ea767014ce1a6c6c9

SHA1
99209b46b3f88fdec3ea1758f5cb6efd3b623d78

SHA256
b6d826e308c5808335591dcbb0116aba9e8fac7d5f04a1b410629672e5578bcf

SHA512
e0768c41d9e55a624e8615207c26a983da59464a3a1ff5e149aa0fb3d93d5e8173655ac308c828e9c048cad808850c46d8f363018b6688685bb5d531a0a27a2e

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/analyticsv2.db-wal

Filesize
28KB

MD5
efcf58f651a966a9a9e67e7528680787

SHA1
4b47d4702c34b0ae7be95dc6175fd477ee1ca3ba

SHA256
3cd7c3552ed091df023e78dca2afd5d96c9c12b66fb1d73e71005794a1b7227b

SHA512
58e310d6f9b167f8c43a5b723e555ceee0376813d8d1ea3112a976f1f8b9b1f88f7592fa856c51d36b6de92d29ba95f74b6df97b8b4b0ded9e3190b5e9813d4c

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/cc/cc.db

Filesize
36KB

MD5
5d7ea1a23af19b4340cc8d90f28297d5

SHA1
4cfe95b23a9e98378d69c4290af81b51fbe76aea

SHA256
474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

SHA512
33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/cc/cc.db-journal

Filesize
512B

MD5
6db729b50bef243b105b560157f3122f

SHA1
727d45bbb97cfae6231edb44628f097e20a1ee6f

SHA256
3326cb1b38a68a509084a05888837dc7435f3384aa9342a94c80a55748704435

SHA512
2167e054050031ff06bb69ba87245a43f8c25ffc3805e19f8f040f4d4014fc825ba3cd7ace4afc089c967b3b9aa81773857079954f5710adedae2c980fb68a4b

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/cc/cc.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/cc/cc.db-wal

Filesize
16KB

MD5
c34267a8ddb701686fc2fcb26707ad8a

SHA1
632e6ce32fa5f1127b05dd2eae8d66181e6b8c3a

SHA256
3ccc0ce1f9fe6ab9a0c5a9b9898f3b02886c50030416a3d851a149f0e97ecfe0

SHA512
bd1b6b11a5dfa2d14e750b3bf12193690bdae3b2959416b22e44f0e9d00549547412efdd0ea0eb124cdf95e53f331cc12581b6a354b805ee7da51bd498e7637f

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/cc/cc.db-wal

Filesize
48KB

MD5
92ec6f9def20a418b61c41e203fed092

SHA1
c6fa0e2855b90bc06792d67fa0f1e9641648c559

SHA256
5884e1c61eedb618c0d81af32158e1d2f5c9bb001801060617ccbac2ad2f7e7e

SHA512
c35a4feffbdbc4873605d69b461d4b7de9ed0380a19e3d543930d7d4e1f37c7f0a794626bd46edb9c91fb9be4a2cf3b15da7971204273a5d7a9b32c6febf6158

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/reportServiceDB.db-journal

Filesize
512B

MD5
0564a6bc1bdcd6233b57885c95525a61

SHA1
68687b69f3410e252c74e724a72c98196d8584e0

SHA256
dc1467c504217b230d567a1106d908a3c377c7ad5d3d265bb608b81c44ce95ad

SHA512
86c3a7d01658139df8f78a6fc18b9e7affa12c3c97aacca35a0ebd4e8f37fd5dc552b27590b44a20a5e466dcb3225b9cbf766901718c49fa0746a0c1a7e695ec

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/reportServiceDB.db-wal

Filesize
56KB

MD5
4fdf2eb05a4bff9d883a8704b82e0329

SHA1
9a1e7d37b29659dd57d7921bf7dd1cc2ad3ac34c

SHA256
ee64f1db4ffef341075b1273f65673273a214b684dbd606b24cb01bca5eea264

SHA512
db004d150dbfaa329fff375cff1a1b71fb939a6adf6f14a5ba8500b4409cbd609f58adbae73c2aea25803b3544da17d76d9bb9bf8b63eb04211f9df531179be3

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/requests.db-journal

Filesize
512B

MD5
e7d6e4f6af01449dba473e5bf6c258fb

SHA1
a507a2b2ca99da6bf2c6c3de1bee93d43775f15e

SHA256
4ea6bea767a3269cadd25fd43c312e2441f49665e094a939046a0e6ca9032eef

SHA512
7d58f5cd45c7c134b125bc87584c94a06414decb10b80bc8170f2c238fcf36853079fe9648ea18604cc86df9165cd39fdd12c78193c13ee285055e0051fd1830

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/requests.db-wal

Filesize
28KB

MD5
3a17064b2fb6a5fe9264745a09727a9b

SHA1
016d3425f2c663a42dfffeef374f67da198f49b2

SHA256
b389690ab0f57a58d9234277d776149b58a5df7eedfdfad46732b5170185d578

SHA512
73f2674d7ce62b88e674429851f458bd6470233b7a95ea9ac8c77ff4b2a9e1f68906fafa9a4eff60f1f2a6d716724833d64271c6a8da9dc1c89f062ee0c59b01

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db

Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db

Filesize
16KB

MD5
30c4f85bfa582da8fdb79c9549f47e51

SHA1
d780e39bf6c95478d5626ecb105544c4d77a7b8f

SHA256
bad181a0e15a7a1bb9d631d7454aad5b8c771b378362931352bfd3dcfb034264

SHA512
e82b915acd395bce65e317977ffdc75875726e2c96aa9b3b21462ca003b98c3ecfadf0f7666ba246dceedc0629ee6fcb8e3a1ad864f2a007c9a5170b4229f8e8

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db

Filesize
16KB

MD5
26df43de2a2a44373c6f9dee942efc2d

SHA1
3850639b92fe2f5c0edc28188cf58575d5e388d3

SHA256
f5175f4cbdb0a5ced81f66d9222ba345eaa4cbe217b292e94208e3123bf5661c

SHA512
c72c8d402fd63994f227a2bc11e23667a36aa760d3dc403b2bd71298e976cf9a56f8066068cc60b200519afaa8995f3f693d02b0001f4b6d34218eccdcc098f6

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db

Filesize
16KB

MD5
efb358465523db47c11141c6e7ddcc7f

SHA1
8f878502ce7586a99bfdd0c40e00002207d61a4a

SHA256
2f897bc79b2751d1ff1909655b5c6d05c0e21e190a5ec9bd7c8d56d6d3df5317

SHA512
6a178c16dcfd92de5436c62d8be71097f680332c08322987549ee04c468e1a68ec0ddcf0b4aa08c3df0ab15ccbb5a4061072b113f4973371ce24c0c8537e0446

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db

Filesize
16KB

MD5
7886dfb0f39ac9ee418964e9035b4b6a

SHA1
c35a8aff878ca7067d51a42aa66a32c167362e2e

SHA256
17475787d48ed05a1702e654aea931138801356b839aae974d1f20061647bc40

SHA512
0dc8a2473d202635d5dbff6b47cdb8b8d6a29db61d6043bac76be02ee7dbcc72fbb84d510b0bde2b99da64238dbec79a5ac656f838d564d47a3c9f4e7734ed07

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db

Filesize
32KB

MD5
18d46b8f3bc62281188945711fcc4fd5

SHA1
4e2ac45570baa84a2e8108336391b22ac3ac4c18

SHA256
6e981c64d488f8f6fb6e42896b30d41aa1ca1d99e0310805835fcb8d4444123a

SHA512
b8a49f1f08023b6c8f87708553830682b7a1a192596aae611bfcbad5d8f8e79566c06d0b7094eaf53fe13ecec5064e1f43db358fbf2d46d6065d7828a902d6bd

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-journal

Filesize
512B

MD5
d7f57c952e43aaea73767fca875f2d78

SHA1
0743cc3f80bce1a1408497e821941a51cb2cd09f

SHA256
0953de9e89ebb1e9578ce9874015295b356b30605132ce03cd7d9e4dc16d5021

SHA512
9cc60f22be65a3707bca60a4b8d12cb65946a8768723d3969d05e06dd50cb4298aeb7f8c73046e60431e1b3dba1810bd99f98dbe8a794748e6132d5e972364e6

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-wal

Filesize
8KB

MD5
b0c3a12ab3d7d639e02564fe566e736f

SHA1
fce21b9069febefdbbaab99578f48cca42522085

SHA256
09334f3cdf17038e055e395123101157aa80b225f29d7d4e90e2cbb3ba9563ec

SHA512
738947ac909a601ca5cc1ab2964655dc210ca9158e6ffbae5a91dfc73bbf42ea45d5129a483d007c6cce1fe81b17cada3adab93f89e906bab845eb40e801d0eb

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-wal

Filesize
4KB

MD5
d2ccbed9cbb15541c5d3b74e9381f904

SHA1
81b7822230974d9b93e82ff83bf2114754cec3c8

SHA256
0355eb0c3e81b9718202ef11360ba7b9c4357b3019339c27662ec841561b524b

SHA512
7866828ad8fb044da923cb1736d8304d4ca9d33b6f828efccc5f5cf5c94ec565e995c878d5e934e9fbb277d068e2cda28a91eb6e14fcf47f8134e232bcd5aa4e

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-wal

Filesize
4KB

MD5
8c505c6fb31b0b7d11cfc5609424be84

SHA1
019058a4dd165b6c89187effd871af52fad8fd5d

SHA256
385ef9f605655e3426d60d41192149b70e856fa5145ba663548d0cd4dc318dd5

SHA512
776481879059eafd75b1a4d16289d7016aa2c82bb511c47ae67a0bce6013612da709a94f94014720841d71d8d579d1acc5beecedc7196b2c66407972e62a411d

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-wal

Filesize
4KB

MD5
64602e3fa6e91d31653de19e4c258245

SHA1
84173ab9fc8f0817315b7f428c7b75c85def673d

SHA256
8569587432575c7e8348fd70b5f7d0e5946295309165ddaea477351a80ec385a

SHA512
e14e4ae7670553aa8595d375ec1af129bb79d2f8da59203cc1037fc733b9c33a11f80ea551b856863f9e1b9ddee260b8282927cc0c1440bfea0bfc5f3369cc3a

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-wal

Filesize
4KB

MD5
6c6e4b186856d1bad85c52db20c960a6

SHA1
642ee2ec021784aa57d95376f01e6fbb4ce31612

SHA256
da41ae86f4792e7241877aec12f2da3134a0fb3b00a31e712959f3edf016e7d9

SHA512
acaba4e4401cc331d7e0b9865119c551fadfe87730d5df49a7e6f84eff80f04cff4bc27f48ecb295698e30d6c92cee9ccf8b2327c6c3cae064e501239fa7e8dd

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-wal

Filesize
4KB

MD5
408f87bb1b0bf58659721bcb3c01cf2a

SHA1
6368d642a61b43ecd94585f009452414c6d11357

SHA256
8d51885e96f578596ce32fcfbf51fdb920607b65c3ad75474e066d16fd931906

SHA512
b5509e1ae46fad4fac83497ff143cc06a3a838f52f74898b0dcce3bae76d573b8631b14cbd1a511f2a9c641a863d4a9f5db83be8222e937d206db9729ef02c43

Download Submit
/data/data/com.zzoo.nanodash.mg/databases/ua.db-wal

Filesize
56KB

MD5
092435dffdc87712d55e917603055f10

SHA1
89627df3fb5dc75b16d78e6b2d0d631f2f02e015

SHA256
bf0d3696bb3f8504c0e13bf282aecd5f98cee6bfa5a35e71b21efb058df9ce88

SHA512
236623424d46b2148876e3905fdbdf7ceeaad11ab2a129bef12e5d6a31c120a9514976edbe90aed1e18f097734f3b5b3cfc3aaec60951d19e9d7af063538b6da

Download Submit
/data/data/com.zzoo.nanodash.mg/files/.um/um_cache_1726777008260.env

Filesize
1KB

MD5
93b35a2f33596804db79282ff642a367

SHA1
dd510aad85c3161aa2cd69f2ec475afa2a6216e5

SHA256
db25e537a267c9c07b24a9d5eebad61f10069943a64fa27a7d0099baaaff4020

SHA512
87407dd3a8e542712e9cb785d3fb3719400778497f24ac1f552d252ca2be1adc1fcfe531a63a4aecc41d68a48bc39497eade9045263eaea294ebdb567fe87326

Download Submit
/data/data/com.zzoo.nanodash.mg/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
3ef627263a8fca3610c5c0bd3841c0d7

SHA1
9cd4ca2323ebe4ec87b4d59b26b04ffdb26fee25

SHA256
1ceed0e21f2611519ca6ca72057deba9148b633b1f5c8aed8b51e8145a7ca9de

SHA512
4bd9c05be781046e7c4078f1261e150fefc5ce6edb5585f006342b778905855eb3d1b412b3004420f9c8a2a36483138675369a6dfe69c4078dbcef01be55b40c

Download Submit
/data/data/com.zzoo.nanodash.mg/files/54db829f09424caad69f7fb9350fa48d/policy.cache

Filesize
12KB

MD5
f0326dac3bd2b30f8d216ca46622eb2e

SHA1
e34cdf9529a96288d206b07c5078afb012be5b7e

SHA256
c59de2f2197323aae35f444e18f7f5d7ae2967cc486b0297bceaf329ef8dfcb7

SHA512
b91250a4e5cc4c2464657d7d625a3d19144b321fbc091041bae340dd8f7a27712dbc0c5961d50bc039471014c568fb06df9b8305f20e4ad08c65894e56b4c49b

Download Submit
/data/data/com.zzoo.nanodash.mg/files/5a0d76b426bd66bf94b94e19a8719e41/policy.cache

Filesize
1KB

MD5
4d4dc628d8a3facc8c167ffbbb0cab59

SHA1
6f28c74730b309c7536866b5aaf04fa69d95b105

SHA256
742d07ce2cfa3958c889ad99e422f8eb063b824071fdd072e56a6de5c8d325b5

SHA512
59843b5081a0f9dd353159ff0dbf07572cb44ecf0393798558f2f1fa054129902e8dc2da88db38565ddb34fc6857ecd338fc4f24f6c50992be638793e5554bad

Download Submit
/data/data/com.zzoo.nanodash.mg/files/a194a0a7214f6cbda0672045c51505d1/policy.cache

Filesize
13KB

MD5
04ecedd182ec514d1a60d8d2ac199148

SHA1
3cc41071881e11ef4a5e8500ba83eb91e0502aed

SHA256
690fff1587a5f29c71dd12bb95f7c8d0d25518679ef90c9a9adf8c69ff5f18bf

SHA512
27a2e1ea979a0c3568064028558da583b72cdb5133442cbd5434c497ba0d2ba7a0a0445dee5657c4ec277af119b820371e03ac4c799eee93731b12379c491837

Download Submit
/data/data/com.zzoo.nanodash.mg/files/exid.dat

Filesize
72B

MD5
bc2d0ef7a37340509b6897cf87e666f5

SHA1
a6ccf299e53424fefa5751fcd58d3de1281339c8

SHA256
61e577cf484a5fefa5aee11ca274ee3229ff64025a19c2dc3eca7a9ce98278ac

SHA512
78a98447c0a9bac3ff91086f894916eb2616f4755a242208bd3bd52f825b8210156afb64fb79e08360cd6ab41a09dead77cf44a0ca854dc3788157799da35bb4

Download Submit
/data/data/com.zzoo.nanodash.mg/files/mimo_res/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.zzoo.nanodash.mg/files/umeng_it.cache

Filesize
415B

MD5
4fa077f2942a2798ae97b745cea9e264

SHA1
41410d200784f81814305f6ee2ae536a034a930f

SHA256
117cd8a1dc46a14193ebbd9b6ab7cff7ad1d5f9a40407f86511fd8ab1cb7b0e6

SHA512
ffa19d6cd2c073a9266b82c24185f77cc51466f1dfafa2124f17a3f6bb0bec977040f9f6cea905a5c8f233b4bba5cd82054cd1957e368b9804087879fa75f1dd

Download Submit
/data/user/0/com.zzoo.nanodash.mg/app_analytics/analytics.apk

Filesize
1.1MB

MD5
c5cd8696c76d58deef8733717b52f2f6

SHA1
2dc9954c7e4d7dd22a849c80fd60b6775392b2b7

SHA256
0645b3a73befc89c8814ca24b5e0e0f6a8ed3f8886b5763fd60079e9b2df7389

SHA512
e413c641c9c140c3de2ad28634100f5b259cc2d9df3e36b85b62d410235ac02ef70cfe09db99d47aeb64ee2bb7e9c99164f51edab815e724b691947b8cdf321c

Download Submit
/data/user/0/com.zzoo.nanodash.mg/app_analytics/analytics.apk

Filesize
1.1MB

MD5
3c8779474f5ad8e2490c5a0059d2c52a

SHA1
1c40e8b9c04d214911cd92b1137af2aed75480b0

SHA256
ee6c4e8ade7a55c09b7b596197064ea7f7efa7ac1f199882707b6b3a50753613

SHA512
d4bff517492fed5c6c4d72828a25e7d776f40c475736e8daa624d95b91522a87315767791c20bb11a65640b48a3980a510c95564330aa96e853d3ff701e8aab6

Download Submit
/data/user/0/com.zzoo.nanodash.mg/app_mimo/mimo_download.apk

Filesize
695KB

MD5
c526c06b92f76ffbf2bd3232f1053284

SHA1
0e9d0fbef236f8807f20d9a14c50ddfcc1736b52

SHA256
fae59c9be4e17b082d213c4ff1c7873cc7175b28f7c6664f8e8aa8280489017a

SHA512
8a4da38bce8ae67d3e8de8ce44d63b0ae96f9f12321bc8f84b623a0fbc5ba4f7bb87b18141dd8a64227debef3be72f58b0b76636c5d71a217891f78f3397831f

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/ArchivedEvents/172677690800000.ddf24a1c/e

Filesize
63B

MD5
6783dd491b6476f0ef6120884a152f68

SHA1
cb902844ec28f952cce139f708c1a2ff7d90cd85

SHA256
fe729595f87a3cb01227c14e5c402644dda72ff32aa16facd6b0dba12eda5076

SHA512
65f3b59b9c7bd82bc12862ce15dcff37fd484a3846d16ea7b5cda43decd19eab42c6f913a08247a1a7f5d206f47221fd6cfd040902c69d8a2c43ac4acda12261

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/ArchivedEvents/172677690800000.ddf24a1c/g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/ArchivedEvents/172677690800000.ddf24a1c/s

Filesize
334B

MD5
0b564434b7379640f60f964dab35fad4

SHA1
9d4565d27c2e93f591d94efed0bdc687c2388d51

SHA256
9fa82b239b99cdd8d45002928896850f402fdc979189a68a63f2fa2e55a2c682

SHA512
8d3caabf843ab28d30b4f4db9bc653e03244dc7ea117f028e89c3fc8ce40c0df108b6f3bc0c5f0da1f2b6dda92c1a4f8cf268a3e0f356f5e63e07d121fd5a6d1

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/ArchivedEvents/172677690800001.ddf24a1c/e

Filesize
101B

MD5
c5af9113a254e497aa2ee5aa8b868cb2

SHA1
6060e53898efc5676e1af4375121f564313251b4

SHA256
e1ddb163c02e5f0763171cf17de47a10b376375113b60c64432e16937d7ef17d

SHA512
8f6071cebc5d3129e41b17ee1914dff73da9d4a30a946689bc6667142c41e3e2d867c0c80321a53e910737c10f0882f886b4353d7da037f8413fa275c72df86c

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/ArchivedEvents/172677690800002.ddf24a1c/e

Filesize
996B

MD5
5d0ddbe48a574363ee5697eb7ab1533a

SHA1
d3f99717362d254128b3d80c7540c9cfc3367e2d

SHA256
836d554668cc6e671534bc3178cb6c918dbe25245201e55c8c8f57c157cffafb

SHA512
8f804d48d0e41bdfa6a89fa3e6342d8e48634d3a0d1884cbbff94766c3c061592e8e9d8f82927afefeea21349e800dfc07af2390c47b90b81f407b8b8309cd50

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/ArchivedEvents/172677690800002.ddf24a1c/e

Filesize
1KB

MD5
75226b3e1585bff312b570e8d5fea127

SHA1
d02990a7a4d44581785c4aa62b38f25a7ec6d3d6

SHA256
85ab667b494c461960b5912dc81c4ff36b0066ee599b93fd9430045e0e8d901c

SHA512
e730d47bfd0cbe3635b077d1baf74157c4f3eb369bec93ce2449e4c3f0a3a2bc0307ff3f5ef19cae7dd93e5234c471bbd4538c01a7f1bf12c6584aab79cefb78

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/ArchivedEvents/172677690800002.ddf24a1c/e

Filesize
1KB

MD5
b286a473cab058a2db56fde13d07be05

SHA1
7cf87efccf5c20e989dbf86007b91ae02afd2d24

SHA256
da0cf19df71e59a0f810f6b98d2b865cdf9a360633eca677dd35d9e6a49d6418

SHA512
c340e72baa8c566c5ffaee0275a62ea0aad393cdc06affb4546d80f5e4e6a2b9970cd4a7db9e48f6d414e245613e8a50a073acfb1b5ad36c0287e3f91d99dfb1

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/config

Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.zzoo.nanodash.mg/files/Unity/a5baa700-8c6c-43ee-8dbc-e796357230c9/Analytics/values

Filesize
148B

MD5
6af9a19381a7ac9b6e85bf564e283386

SHA1
bc3caa65c80eb9228acfe3f05afd8cd964d04498

SHA256
a222b3bf76531f02708714a9a118b7e361527be4528ef16f2219cd0f7897b894

SHA512
6bc9b73b8d6a5f2861bdeb2f167fe5bdba13bb7bde72cb4093efd3adcc3ae9e3f38fad983e6ffe29d57cfbf21d50aa2c5b36ade5401dd3df19919cba7d78d281

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads