132b93bcd9ee444f0bd68dc7c8c7408e1b4441f6774a10747143123388f951d9

Analysis

max time kernel
139s
max time network
157s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
02-10-2024 01:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

PandaHome2.apk
Size

9.7MB
MD5

4d4a759871446a557d56560a5554a096
SHA1

2cec9b00c6c12fbae28028a17e54d0a63049d3c2
SHA256

abc5b401fbd50c7bf87f19bdb8b3fce936beb2000f88a3ba6a004c1a8be331b3
SHA512

12bf8bf71cff1c4a439e1b50a73e9f2da6a1efb5de306d9982d90a40c3e45f06071ce872da132dacd9b12b34466e8e1316e3a67aee90791fa7e40aeb272fa279
SSDEEP

196608:k8Ib1RI15raimP1Ibqy5LEASqZTHg+o453iM+tponqufr+3FsTMmkl:U7I1BaimP1ZL45dquaFT

Score

8^/10

collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.nd.android.pandahome2
/system/xbin/su	com.nd.android.pandahome2

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/storage/emulated/0/PandaHome2/myphone/plugin/com.nd.hilauncherdev.plugin.navigation.jar	4328	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/PandaHome2/myphone/plugin/com.nd.hilauncherdev.plugin.navigation.jar --output-vdex-fd=69 --oat-fd=70 --oat-location=/storage/emulated/0/PandaHome2/myphone/plugin/oat/x86/com.nd.hilauncherdev.plugin.navigation.odex --compiler-filter=quicken --class-loader-context=&
/storage/emulated/0/PandaHome2/myphone/plugin/com.nd.hilauncherdev.plugin.navigation.jar	4214	com.nd.android.pandahome2

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.nd.android.pandahome2
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.nd.android.pandahome2:hilauncherex_start
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.nd.weather.widget.WidgetService

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.nd.weather.widget.WidgetService

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.nd.android.pandahome2
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.nd.android.pandahome2:hilauncherex_start
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.nd.weather.widget.WidgetService

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.nd.android.pandahome2

Queries the mobile country code (MCC) 1 TTPs 2 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.nd.android.pandahome2:hilauncherex_start
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.nd.android.pandahome2

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.nd.android.pandahome2
Framework service call	android.app.IActivityManager.registerReceiver	com.nd.android.pandahome2:hilauncherex_start
Framework service call	android.app.IActivityManager.registerReceiver	com.nd.weather.widget.WidgetService

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.nd.android.pandahome2

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.nd.android.pandahome2:hilauncherex_start
File opened for read	/proc/meminfo	com.nd.android.pandahome2

com.nd.android.pandahome2
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4214
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/PandaHome2/myphone/plugin/com.nd.hilauncherdev.plugin.navigation.jar --output-vdex-fd=69 --oat-fd=70 --oat-location=/storage/emulated/0/PandaHome2/myphone/plugin/oat/x86/com.nd.hilauncherdev.plugin.navigation.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4328

com.nd.android.pandahome2:hilauncherex_start
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4294

com.nd.weather.widget.WidgetService
1⤵
- Queries information about running processes on the device
- Requests cell location
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4580

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.nd.android.pandahome2/databases/91analytics_v4.db

Filesize
40KB

MD5
20e523680a1cf04b16b2744d43ec4c9c

SHA1
5dda87ec0599338973d2d49ecb82cbaefe90eba2

SHA256
3f37f8dadb9e9a002438d78f64a6df53567cbfc7e9e0384348bf3d8e212b1df5

SHA512
7085d65a99ae3b115d17804d57cd574d84a8144cf18e8bbd3c6c5d39929cf52502a9ddef616814f441e1fe36081b33c660962433a8f65fec872a63d98b4d21e4

Download Submit
/data/data/com.nd.android.pandahome2/databases/91analytics_v4.db

Filesize
36KB

MD5
b970443816265aa35ab4beca01ddbaba

SHA1
d259f8630e5eb6ee1442a3a56c2993e9f7fc0aa1

SHA256
b44a2e44b1796c79e81577e83bd6f178e5ec18eca27690623011972bea9ee792

SHA512
479c136c83bbd03f676f935f808bf9c4f55ee479b81a1ae4df0ae75f5dea810c428daf5a510507581e0f3acb011c67b65f6e1b821261048e052347ecc6901bb3

Download Submit
/data/data/com.nd.android.pandahome2/databases/91analytics_v4.db-journal

Filesize
32KB

MD5
5a66de1baffa9ee5a0c11a0138bcf7de

SHA1
df9b7cfc43855b54a075e42885a9105c1dbaeba1

SHA256
812bc4be7977feffa2b6f2db02fed07ad0c68a8a544176bc81a648ea17675671

SHA512
79aa8fe5d779098253d417c60d154cfa380f92259232c8cd0c8fb31ec8d8ffff4b3b5a19ed1560d3821db14ff6ec33f812daf3329a10725a68f87c52081e86c9

Download Submit
/data/data/com.nd.android.pandahome2/databases/91analytics_v4.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.nd.android.pandahome2/databases/91analytics_v4.db-wal

Filesize
52KB

MD5
2bf65639b6a7dc6806c52f00c86112ab

SHA1
e51fa2c19ab6c9c30d762047dfde34e0f5e57e33

SHA256
9ba1a23ea60b56aca9cfa1c18d152de3f924caca9366aade7e5c42a4afbd53c1

SHA512
fcdd899422b95682a33b2f2347e80b8ecf5ac6a9ded03d22527066d0039b31a6d57b7d58008547d58c0f1244e64a6ae460e0ca9a75519690a3cc86434ba21f3d

Download Submit
/data/data/com.nd.android.pandahome2/databases/91analytics_v4.db-wal

Filesize
8KB

MD5
f4bc6e6e586801cedc813bf721ca3a58

SHA1
bc6e981728f51f668445612eb3fb1e7a1ba76311

SHA256
5a5253bdc3ae81740e3b610f0cf86eaf3d77d64fd5c68fa90c79f31305d4711f

SHA512
f3ef32c1927a804de6bc26a53e9914da2741ab2ef609c11e3176c8734206e9136d19dd8630eb7af4a1ada0c24b36e3928f25ea5293b775d92e019e1356bfa9b3

Download Submit
/data/data/com.nd.android.pandahome2/databases/User.db-journal

Filesize
512B

MD5
cbc8bb10c62ad77f08a09a5893718111

SHA1
8f91a439204d18f2768de293e7ea36bb4b3e7198

SHA256
0db4b55acbb606334a0716a23a45bfa2486e983e1dddf9506e4dea9090917460

SHA512
7fe6606ea28ed7a12937741123e58bc95d502100ef55d1169be7dea3d32517db98c71dcdebb204d84a6d837c666529c6146c9496796e6d600382fc977f137ddc

Download Submit
/data/data/com.nd.android.pandahome2/databases/User.db-wal

Filesize
72KB

MD5
97d8d966d65eeaa5f886136809d221c4

SHA1
9f9dd89af8f7e1972655d54382e27c5dacd0b78a

SHA256
41fbd17a23ead2c86747b860f6c050713661b0c8424cc89776e32081d79e6e93

SHA512
c143c7e3df6caa490dd5fdf860ec903c56e6454637a1020ea6fc53a1a76921bfcdb172dbe1fc632ae26bf646421891de4b9ebbe1a48c405b56d59b6ad1da4a5b

Download Submit
/data/data/com.nd.android.pandahome2/databases/app.db-journal

Filesize
512B

MD5
329923bb668ba28dea814a6f3022ace4

SHA1
4a04877caaaadc0edf64a9b006ab7f533f6f8bd2

SHA256
a82c52dd3c23a2c0b36b495b3cb0918c19ae79d4535dedac9230e9c1b7d9b99f

SHA512
f55752980215377e850c5ffe2d85d47fc00190b044b9ead93b5b5b0d0fc4067b0a403eb50eafdfbdc9cec1be11d7061a2cb642d969310d47a45e92fe9202df48

Download Submit
/data/data/com.nd.android.pandahome2/databases/app.db-wal

Filesize
100KB

MD5
2b66b0bc7c84a4069daf047f03a67418

SHA1
b12316b90fd65c861a08583f460bda7a3fe442ea

SHA256
eafef96d3c1e4a58a53589165318b864d77654702ef8b93fc8c0a5d76cce677b

SHA512
62f1f30e411cd901ec9e85d27e74ea67da5b3d3c01abdb3a69b0174e9de970039f38a249fa77db5fe6b9a64b4beb25f486831af1df96de0196194bb2adb76261

Download Submit
/data/data/com.nd.android.pandahome2/databases/config.db-journal

Filesize
512B

MD5
72f71bfe17ab78cfff2536be4aafe057

SHA1
0f9712696bd3cf61446501a445aa456f6fac7340

SHA256
2a87018d6e6327fd37f5cdb0238e19dd22c2647bd5bcc619c87a40ce1c8cc42f

SHA512
4e94db2d6568af6b6cd29250b909b6ec57fe0e51e6c7e7dc9a952aac01d8c8715fc8b606fbe76b1f21f358003e04295cd3f73b554ae5b0294de3c525cc309a6f

Download Submit
/data/data/com.nd.android.pandahome2/databases/config.db-wal

Filesize
100KB

MD5
12b158bbec589a0e7e6525439198b3c2

SHA1
16b7b396fe9f126a32bdcace671d1def26d9048e

SHA256
1d4886800742e669c3680edebfa0e18477114453227d8e0fa73b300b3cbc61dd

SHA512
2b84aa1c337cc8ba04fda861be289d5f8d616fe80dbb69cceac64e1bcdabe65ce4935365e21b9ebefdb9068ed514c13fa22c943931f3d2f23cd27fa6e3da07ab

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db

Filesize
12KB

MD5
3fe30614d7e0d11db870b4624f6c50e0

SHA1
053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

SHA256
67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

SHA512
c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-journal

Filesize
512B

MD5
83ed45e6230a2b57bac11a790a96e350

SHA1
45f22e1fb3ad318cd511eb1c5e537654c04cd262

SHA256
46345c630f0973ba4cff555525dfa4c0b8d9ed4d6416da6467ff10b251d1710c

SHA512
866062e0f05d4e0ca9372ecc8d38f423bf043ee4651bcf8a4be8ce6838dd8e2337b42341bceebb410e739694385331f805272aac1827e719aa93f9291df6a913

Download Submit
/data/data/com.nd.android.pandahome2/databases/data_center.db-wal

Filesize
16KB

MD5
ce06ae509125980e35322fe459dbb430

SHA1
627bbe27d4c53761d0f5f00a87dcc73d9d1a2e1e

SHA256
8b6111a81f474dd0977e4074f5fdb295123da053e7cc52d6543400f9308160b6

SHA512
663d35d7b6b894dac6204b2aaac525fb08d2f4fe0a4b8d034be3fef0c571c61a5cde95e35b7a0008e2b691c426f3422237f2a6c121554e09894d48204a42d4ce

Download Submit
/data/data/com.nd.android.pandahome2/databases/launcher.db-journal

Filesize
512B

MD5
e1fc801605d140625dc0e2d705346607

SHA1
3ed9a971170e0b34878d1d9447cd5cc0d35fe1c6

SHA256
764a669806a685622cef1e91ba4778bab1a65f19f1b05613cfb0c0317214e1be

SHA512
fde54c97aeab1f2b07e6ece8678b2d4e6437f478f8a0c5e6252d93a1c9d39d5bb05f1e9c5518fee13dfea8295ff0f5256e9b750dc37c731fe718acfce2953e6b

Download Submit
/data/data/com.nd.android.pandahome2/databases/launcher.db-wal

Filesize
44KB

MD5
360fdef99e3e5c5d136992dbc2d2109d

SHA1
b0b5dea4356a25378763c2213a29e5871fb3815d

SHA256
402b8077d7201efc181b55bff3da9f933095ec074c30cb0f1292c4cef067b640

SHA512
b9a2a84553b1587e1c869239bf1b532a000a203a389ce4d87377a84a7f814f0286da06996aa32238d8e22a55c189800bca8ef763a346b469a629dfbf93ca181a

Download Submit
/data/data/com.nd.android.pandahome2/databases/mode_db-journal

Filesize
512B

MD5
57dd961b4626582fc0887fa15e4ff201

SHA1
7ab0431f9666350fd1b2d28569c4a56cd45c869b

SHA256
a0eefd753a4ee4269d108245b31dac5fbafcbe0a8971c529a2a14225076c9c76

SHA512
8bccaeff99e673d9b5c34238593cefdd10bba94967a4dd97aea09b5f76d027f3dd3f317164e8d8142f8830f70381979df368a24c79e5eb52fc73d8afb61a8c66

Download Submit
/data/data/com.nd.android.pandahome2/databases/mode_db-wal

Filesize
40KB

MD5
613cc2f086420b5fc4c2a5d57815942e

SHA1
17c919f30ca86667fde6e9d001cff01b5edd1593

SHA256
2c419c30d4b5f32d21ebbe34d2031c0c51ca36c85af0802f43f58f0c5b139b37

SHA512
97c513ed977a193aa189554eb873206f06233c149a5e8210df9b411606fdb89f5a89a34ef89d9c6e158b9327e5f6b3550714fe819f3661195c788161780a7d3f

Download Submit
/data/data/com.nd.android.pandahome2/databases/myphone.db-journal

Filesize
512B

MD5
1a5923df5d1bb9a02cf3be423b691ce9

SHA1
8a16c5da4aa187e5d879b870b758d8938c0b35e0

SHA256
367b01af3b0eb30ceeb73a991c393548dd18a798ad40f4f2fc411ba0f629ac20

SHA512
a06da4a52c06a9be3d8fb46ad3550b777b14606154be574d9326079778feba560cf43f3a9764c5d20463c3cfa2d0a0961aa364ed5bcf538b94313dfb1b50626b

Download Submit
/data/data/com.nd.android.pandahome2/databases/myphone.db-wal

Filesize
44KB

MD5
45a97d5b5f17746b437e77cddaa7c122

SHA1
7e7aadda3973c1c17626e7e156d61ee85cc6ce87

SHA256
5b0f712e574d73920ccda083d7d146cec74fb98e42f52c437d387cef114b2671

SHA512
3370eff73a1bf0278b10deee9845c5437a5da792a48d47aff630414414054fb619b09730aec160be489aea7f454ba5ac5a9e836217e1f75df6137bce8a590c9a

Download Submit
/data/data/com.nd.android.pandahome2/databases/scene.db-journal

Filesize
512B

MD5
f6f922f666f79998587ee2a63df7b5b1

SHA1
19a1ac3105416bacdabd39130a2a53ce13c38b74

SHA256
2b669250917277a6fb98237083a99b6b2725afebb0aed83ae2ae8ce35540fe31

SHA512
e3916306a9e499c0c49e00cf88d88b46a7cafcc4a37a8e1eb464adec7b78d9329db2b4be118f4cbff4d92d7aa96038cfb69f4d71c2871753c574586756d71105

Download Submit
/data/data/com.nd.android.pandahome2/databases/scene.db-wal

Filesize
52KB

MD5
d097400e7f2b6e5d3be783b498356742

SHA1
1026dfba83551294a9c58fa04b154d7aa118607c

SHA256
d8f9c95e0f716f3499c44d96485ba4acf71a2dee5de95cf211c88cfdd47e381b

SHA512
de21c09bbe442a167dbb32809f685b4943c39130ddc51c2cd6533247c54608d38f8576bf1efd8a42173f1138f36d6ab6e8dcbfcb2ff1d3960f3f14b4b1f71ab1

Download Submit
/data/data/com.nd.android.pandahome2/databases/themes.db-journal

Filesize
512B

MD5
85feac619efb5fe1f823c4a4ee9d6edb

SHA1
05736f2f8e8eef9b05a051d71ac0ebfcdaead884

SHA256
7a3ec4a33da2ac6840986fdc99b0eeef5eddfcc4552cc3e68dc6f331d970fa8d

SHA512
e4b24a9303f0f105a5bd512dbe243342d753edd5ffb56b68fe09ba2f23f8cb2725ce0a8252df1851df336ec559d644bfcd3db4768cb059b37f6120e9aa39b1b3

Download Submit
/data/data/com.nd.android.pandahome2/databases/themes.db-wal

Filesize
52KB

MD5
0017dad6a533d2e9eaac40c4c02957f8

SHA1
09a89b92e51fa7d6699e5b7773a5c45eef6a9943

SHA256
b5b098b048f3b53f04da863179dc2df34693402a75d7718d73bffb7f83a5c1e0

SHA512
2c54d58ad6f4a2e453fc55e70355f994b681e85973c826a363692575098f4d3312ec2393335053dfe852a9a75a0dcf14cf64b8e6344b15d1a9699d18888d7ccf

Download Submit
/data/data/com.nd.android.pandahome2/databases/trafficmonestats_v4.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.nd.android.pandahome2/databases/trafficmonestats_v4.db-journal

Filesize
512B

MD5
8e6cc1715b8d549f190eb5ee80ebe0eb

SHA1
4cbbdc1b996cdc60c3ed48fe11ed9ce3a3bd3252

SHA256
36d9efc3465cefcd452f881bfaaaea222b4e56f235244d2b2838a8ba910b55b7

SHA512
4dd8154b8bf48cd272fe52ea7417cfb962170118760a960662582feaccb68e032bb8ddb9421bf5f9b81cdd06a9c970d2e43d9a47e03ed652854f268ba7d9b59c

Download Submit
/data/data/com.nd.android.pandahome2/databases/trafficmonestats_v4.db-wal

Filesize
32KB

MD5
8a9003bf4cc5bf5c60f623d150e1c14d

SHA1
f3e7bdb9ab854915cb668ddf04d248bb49743aee

SHA256
d5ded4866245957e8518bdf9c18f7de8943592d8eefd72d514dc4898f8f00938

SHA512
e4a81618f60d3cef9d5d05c825e71e87756f1bf85030eaddf209bfea96a55667e38ec1078c6896b1aa4b75122e4be3bee90ff276cd4666423a12062cae7e36e4

Download Submit
/data/data/com.nd.android.pandahome2/files/channel.ini

Filesize
8B

MD5
3cfce39e84ac592b5c56f7b3efcf33cb

SHA1
ff3aab2e3d6593a15c7c4eabc3e7c2280e169d44

SHA256
e8654cf5f9fd178856048fe9eb16649582120700b31ebbcd631fe880e9ce5415

SHA512
061a9c245ccd763468eb515ba47d1835ab64fd267b2e8c8e5ae255a0f9c200f566e362abe9245bff43cea10506efc30a8740534a8d632997d6fca90d92f5669d

Download Submit
/data/data/com.nd.android.pandahome2/files/plugin_upgrade_new.json

Filesize
2KB

MD5
274a070e614a591fc6cd855813e48849

SHA1
a76398e44af91f14a87c12d9f142fd95e37cbb3c

SHA256
6de0bde2f8b17967dcf4471649afcf64968f10d0c0660eaf9b023ab7b9e073ee

SHA512
1ffb38aa8345064c503279fafc07e6d9d195d7db838dad841fd2de10ce6666513bdcad69d400d436f266adaf5854d35e9cf91f14d144b2b4fd698a7011934e49

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.android.chrome_com.google.android.apps.chrome.Main

Filesize
3KB

MD5
cfe05b70af90cd5418a9c03efdcb63db

SHA1
147df5c75ca07979be77127d06813a4d96fa6024

SHA256
c9201a5f45856c83e227140ea0882453e79836a3860ed60f4f85c73c3214b71c

SHA512
e134e6149b1ff313a89e566a0f1ec2208e144c385bb91987ecd5b428a19df220827507ac980f4701523b8e86d7b699f564bcabd9b2c98f8cc9b1fec0baaa0403

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.android.documentsui_.LauncherActivity

Filesize
2KB

MD5
ffb030886425a18dbc606da9576cf3c6

SHA1
15419d19aef876f7a3a72296d497ab62c1692ea9

SHA256
01b6afd0e04baa43d0c7bbd543ef7434f3b91b11be55c4576647375f7c554a41

SHA512
b78d594f19ad3bc7bff0605a371fba99f3028164e467c76dcee707621ac46c4d1a019d30e8824283f0029edcd60e5163713dd7a61d5491ff5414a78c5d1c663e

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.apps.docs_.app.NewMainProxyActivity

Filesize
2KB

MD5
f21be8d08f7b09daa54ce27fbafbe07a

SHA1
63ee2be5875563f5b382073516a5b52c3e7895f8

SHA256
a08552f6837f132540ea62036a214ed24aed258c68989e20004e6e23429afd98

SHA512
dcd5c92611ed976dcf0f6435b8b94bb3d4fc08dafe3fa2500396a9b9082eba5ece645a5f1006fbcc674865dd845e4ec95931386f777873f557975a6f37dd395d

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.apps.messaging_.ui.ConversationListActivity

Filesize
3KB

MD5
07cb15f04308089fdcf7f7fd0dd9170c

SHA1
715d19eb4ab18c6e7a952e3f7c3e78606ad95dec

SHA256
693d8ed094f9e511fee3e6b1d7527428397fc62ca0d4205a49c62cbacd2eb1a8

SHA512
f57dbbf37f8f68143ca6e8985ea2abaa2ba9f4b69a1fe81e3ffba8e75d9e5aeb64ea8d59c5f4adb1c41333fa21cf18450b9d4adcc7b3b0eb871045ea0071fa84

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.apps.photos_.home.HomeActivity

Filesize
2KB

MD5
4b414b7110310af12dfa98f70ff0bdce

SHA1
b9e3976328142fe3fc7e016f490e94e45b42ac75

SHA256
661276b46e451e3ecb605f1a27d3788babfa3e9b759bc4332ccc9c0618c856de

SHA512
88949cf538855edfc2db880086c0ca2ec43db1b944f843ff5adb8b4374702342d4ab188065c621c3af96c3389bd417d93d03849c31406838b218583a81b492ee

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.apps.wallpaper_.picker.CategoryPickerActivity

Filesize
3KB

MD5
db917e5af038cf662e47ba090acc4c56

SHA1
49e2b40bbfc5fb5a2f431c0a268f573326a9eb93

SHA256
4c1802f8ba6b63a4eccddf1b1387240c94dd0b46c876d5155953d9c915208cd5

SHA512
b1bd3429fde18ece2a010b1835867cbd4cc9148f370523ce22c48c3cb9afcbf3d3ba3b72c90f8be1619648ff30579be501274d3d113a19c6d6dae0b309fc45ac

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.dialer_.extensions.GoogleDialtactsActivity

Filesize
3KB

MD5
31ee3d1d5e5681ac38b48f64a591bd88

SHA1
ef0ea7f2bb40547a27e30f57e672c22532c93e18

SHA256
a81b277d1f673d23b6c78198a7ec8a69fb64a6141c566cdefd92ba8f071e102e

SHA512
f31c1274b3c4aa0e54145f70b5710c6b5e1f6725680a9664429b70118cbccb95c6dba95e3c1e48286593316793e87c165e1a9f4278cb96e69e1d298f460b96db

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.gm_.ConversationListActivityGmail

Filesize
2KB

MD5
6bb9385ecae9f975daa2bceb50781128

SHA1
864fcc2ff497244c74f8f4b4573070fbaccdde6e

SHA256
cf80d02937bf0a58748e240b83512889ab0a3823560f4df716eddb18618b2306

SHA512
f87a3dceccc24c606e3ef4267bb5e13fb4ce5f370b07d9b423f14cbfa492993919d123cb1d28c578172b1eb458edd3b1e0ba6cb7184dd60cce6788d9ee00a250

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.googlequicksearchbox_.SearchActivity

Filesize
2KB

MD5
c9e529b83590463ea20d4145f97792d8

SHA1
af7d82ff7185682dc040e737fb451268c3e78c28

SHA256
98ab480276d73b0d60964bbfe112bdbed4788f2aa7d3a704655956bc59733789

SHA512
508e428a41f55beded5a0bf9a6594abc27a57d4fb5eb64fba0997d569f9c27bf53fa19bf07ec63ac11c5ed419115d63559634fc04caa0335b181b35b387f6208

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.videos_com.google.android.youtube.videos.EntryPoint

Filesize
2KB

MD5
e4428df83ced1f8c14fbee13b289e7fe

SHA1
ff784cb1513938d677a76dbfc95ccf0ccd79c51e

SHA256
9e329d3891dfcc91b00a8c1c5688430fd2d3d5309b27487ceb92bc33b19e3216

SHA512
b5f27045a6d08458e91dc86a6a8efd041a3a01fb2f10fd040816609eb5acd0a26f9118e91bdcfd6875a3bbb7f3213c713f510c99d12b4c199814753c2db483af

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.google.android.youtube_.app.honeycomb.Shell$HomeActivity

Filesize
1KB

MD5
34cecbd6d15a07cca5953b2a25d1a813

SHA1
230c9d4d9c7c7efbd22403858697ca2263c25850

SHA256
6612f96a1dabab17d14ca141e49f61eb4e713ce9ff04d0fd11c9f0bb44fa1b4f

SHA512
9b11b092378dda893bde39b84a0e0c3dd35456035b4d7b490a5d6674c322ec76d7fa779db4ae9b0843c0ea55e5ff3c38949ef354cdc40f44409f617f007c6eca

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/com.nd.android.pandahome2_com.nd.hilauncherdev.launcher.Launcher

Filesize
4KB

MD5
b346e773ce8aa1000e7a437480931d62

SHA1
a9beb52eda082f1b04fd1790e3ef904e9f777e1e

SHA256
d2a3a32354cbcbc22ee5207258feabe0aab0e89313ccfca5d99e114e62f0b461

SHA512
8bf63507fe3576e9e23af5f6bf2d1aeda0ca06d3a1de62458ba9618f461d368c344621e4eae0fb0a1686080ecf5e45bf774f352536a425c64fe473bdeab5ea1e

Download Submit
/storage/emulated/0/PandaHome2/.cache/icons/v7_small/org.chromium.webview_shell_.WebViewBrowserActivity

Filesize
5KB

MD5
c1ce3d8d628e4c42947b4f0831299b35

SHA1
d1b4ab2b3dd15245260fc42610069cbf59547553

SHA256
e28ab2924d3bd71268a145b38a2797a4f6be74399a0c422b80a05e89fe809fbc

SHA512
7cd4605d8d4b91c62eae1530b042b9e5385accfc85f8ad779d1f14f08a004a7a05561a6e4b5d87debe6f3e1a7b9c7f2f8eb3b90d31d496f01b9014b619a44925

Download Submit
/storage/emulated/0/PandaHome2/caches/imageloader/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/PandaHome2/crash/crash-2024-10-02-01-17-15-1727831835405.log

Filesize
1KB

MD5
b50ffc873126bd376f7d98754ab8caae

SHA1
0b7b73cd971cc8f284197f50ecb95a9250f33101

SHA256
18fa2677e2ec82b3751112f5c9d288282cc6a0f6fd634b8264af9865b2440fe9

SHA512
ba34141a807b45c1f7ddeafc875f21921568025c8623499121c0b1cf2eec6646b928d88b36276841599a7fb0d46aaae0cb64c891b3ae6f985f50b2df43831566

Download Submit
/storage/emulated/0/PandaHome2/myphone/plugin/com.nd.hilauncherdev.plugin.navigation.jar

Filesize
901KB

MD5
01d8431923f1ea4428c9686e208278b9

SHA1
a9347f8325422181405cfdff233e91f9feeaa9c5

SHA256
086f6315c4879ca33db63503659696647bfc89efda85d6edc77b000b4fc5c55a

SHA512
912b4f3fa66e77651933717ca96a1b2bc20e3ab372c6dca71745f99662de48466c66b9cd48bf19ef7a850fc9b70486ff35d415e531ef62e43f0b372ea8c472d4

Download Submit
/storage/emulated/0/PandaHome2/myphone/plugin/com.nd.hilauncherdev.plugin.navigation.jar

Filesize
620KB

MD5
5d461c2e10b5a3453e88aec8cd31a424

SHA1
89a17b104a025d5e093ef9eba451c8c406301308

SHA256
ca86a5dce69d6cb56f2397fdbda04c13d11896760e6304590c04f62fc204047f

SHA512
aa98dc258b26874fd3872bed313b9d696bd3a8043005e4df8133900599352abeac24f986c4f2f84af599e2129bf5dff251199f30d5d154a0f16b89fb44d60c2f

Download Submit
/storage/emulated/0/PandaHome2/myphone/plugin/com.nd.hilauncherdev.plugin.navigation.jar

Filesize
620KB

MD5
3bd04c357d102e025ffc5fd24bc00df8

SHA1
54dbc2666bcfcba1664e28e98735724abd96171f

SHA256
343e03c07bda70e38e367633954adbf14749b1835da9f463b0b2042dba6e1048

SHA512
09fbba948640369dbb53987b3c1ad854db1fc2ee543f860947fca922af1b83368f74c8493c33e1809b12d695635935dbee2ae52debf1cf8601d5dc18aa41a4e0

Download Submit
/storage/emulated/0/PandaHome2/myphone/wallpaper/Pictures/default_wallpaper.jpg

Filesize
44KB

MD5
f4be5affa886615c77c426a1143a60c1

SHA1
f7a19ec293cfabc849f7d1b3b93a5e29387e5044

SHA256
999b87bd3ce34d27202ac68509ca5a867b8e9fbaa1d7fc9e5f14baec212f268b

SHA512
9805306a5531a7bbaa16df55ed275b41295e092c2d3195cf3c4b13c279ff626cb431b7ab582112988eacedaeddf0d4694976aba16f797fcfebb9221d140a5d52

Download Submit
/storage/emulated/0/baidu/.cuid

Filesize
89B

MD5
ee834e0bf35e0c9f406a5b9c292790ce

SHA1
70f6f9fe8e96747256a1c0ee862ea289bfbf5bc9

SHA256
8d22dbf519e40ccbc47ff7a12c30560ef53911e9062791150fa6826fa06cdd09

SHA512
29bf0bcb87d2f94c92bb74281bad1ea736ac4157f7a58e34dd818a58898da93e23e48552131300144a7bcee2056a6684f4ad399f6cfdd1ee18de0a3002acddbb

Download Submit
/storage/emulated/0/tencent/tbs/tbslog/tbslog.txt

Filesize
1KB

MD5
e438acd47b6cd64ea51cce5519ffe455

SHA1
9e03545f1e69513459f7aea8cb07cfb07bca6b5c

SHA256
177e82362cdcf9650fd5b01f1c46afbcce7c25609165ba4c6e39a084291bf5f4

SHA512
10bcf62000c4325855f45d5aa1e7b3dc9fa92a18b10d522d103b3afe4cadb3f9e1658aad8da6129bf775353ea819f3c9818735ae8ff0cf2389676afd70a9cf6e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads