d101295e88e2968950ff753be9ac978c9f516e23331669c5057ce1e2ba2f5917

Analysis

max time kernel
145s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
08/10/2024, 23:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

275004993bfb5bce42e80489aaf7cfcd_JaffaCakes118.apk
Size

5.6MB
MD5

275004993bfb5bce42e80489aaf7cfcd
SHA1

6e30cb308a1342d2c695b96b5764ed24ce8de36f
SHA256

d101295e88e2968950ff753be9ac978c9f516e23331669c5057ce1e2ba2f5917
SHA512

04b18da38fdb2aad8957ae543699e4b7db0af3b569b3eb79ee9f466b0885e2742529b85bd92523fff6d9848b33ce99ccec377f0422033aa39202e0d721dd607f
SSDEEP

98304:wWjcu3NgYRe5JLOG5cACUkvY/3z84jT3UV4fV2C+j6cxRvZWtaPVzTl0ET7:wWjUHwA/j84/UVdv+W2aPl0E3

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/data/local/su	com.ht.video.ui
/data/local/bin/su	com.ht.video.ui
/data/local/xbin/su	com.ht.video.ui
/sbin/su	com.ht.video.ui

Checks Android system properties for emulator presence. 1 TTPs 7 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.bootmode	com.ht.video.ui
Accessed system property	key: ro.hardware	com.ht.video.ui
Accessed system property	key: ro.product.device	com.ht.video.ui
Accessed system property	key: ro.product.model	com.ht.video.ui
Accessed system property	key: ro.product.name	com.ht.video.ui
Accessed system property	key: ro.serialno	com.ht.video.ui
Accessed system property	key: ro.bootloader	com.ht.video.ui

Checks Qemu related system properties. 1 TTPs 7 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu.gles	com.ht.video.ui
Accessed system property	key: ro.kernel.qemu	com.ht.video.ui
Accessed system property	key: init.svc.qemud	com.ht.video.ui
Accessed system property	key: init.svc.qemu-props	com.ht.video.ui
Accessed system property	key: qemu.hw.mainkeys	com.ht.video.ui
Accessed system property	key: qemu.sf.fake_camera	com.ht.video.ui
Accessed system property	key: ro.kernel.android.qemud	com.ht.video.ui

Loads dropped Dex/Jar 1 TTPs 9 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.ht.video.ui/.jiagu/classes.dex	4251	com.ht.video.ui
/data/data/com.ht.video.ui/.jiagu/classes.dex!classes2.dex	4251	com.ht.video.ui
/data/data/com.ht.video.ui/.jiagu/tmp.dex	4251	com.ht.video.ui
/data/data/com.ht.video.ui/.jiagu/tmp.dex	4299	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.ht.video.ui/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.ht.video.ui/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.ht.video.ui/.jiagu/tmp.dex	4251	com.ht.video.ui
/data/data/com.ht.video.ui/.jiagu/classes.dex	4375	com.ht.video.ui:pushcore
/data/data/com.ht.video.ui/.jiagu/classes.dex!classes2.dex	4375	com.ht.video.ui:pushcore
/data/data/com.ht.video.ui/.jiagu/tmp.dex	4375	com.ht.video.ui:pushcore
/data/data/com.ht.video.ui/.jiagu/tmp.dex	4375	com.ht.video.ui:pushcore

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs

flow	ioc
21	alog.umeng.com
34	s.appjiagu.com
48	b.appjiagu.com

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ht.video.ui
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ht.video.ui:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.ht.video.ui
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.ht.video.ui:pushcore

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.ht.video.ui:pushcore
Framework service call	android.app.IActivityManager.registerReceiver	com.ht.video.ui

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ht.video.ui
Framework API call	javax.crypto.Cipher.doFinal	com.ht.video.ui:pushcore

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ht.video.ui

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ht.video.ui

com.ht.video.ui
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4251
- chmod 755 /data/data/com.ht.video.ui/.jiagu/libjiagu.so
  2⤵
  PID:4276
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.ht.video.ui/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.ht.video.ui/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4299
- sh -c ps
  2⤵
  PID:4523
- ps
  2⤵
  PID:4523
- ps daemonsu
  2⤵
  PID:4555
- ps | grep su
  2⤵
  PID:4577
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4642

com.ht.video.ui:pushcore
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4375

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ht.video.ui/.jiagu/classes.dex

Filesize
4.0MB

MD5
8f0413e227152fc246aa79691bb966a5

SHA1
3a674fd1d856002166a901071219e523ccda71c3

SHA256
8240d92a149ebb3ec0aeea18f57d32e947f568b1e72a6432ff3a8919ca39b8d7

SHA512
0b2f66a8dab9d06f1fc144409734e7f0c504ae36886c2017a1b0fc6ddde50009e2b68637fbaefaad01ddc9b749bdff31b2ff74aa828cdc3ae6f4e3556a295e0d

Download Submit
/data/data/com.ht.video.ui/.jiagu/classes.dex

Filesize
6.4MB

MD5
d876e1f37772e3860f5d896024bba61f

SHA1
5179e758d20875bf034e5ddd60ce805afc889958

SHA256
4d2ff8600792147b72712a2d538f730d79ccabf700826f7380c7b526f730a6de

SHA512
653d3071176d95c257e37025bc34e826352c317fa715b6464650fb0f91ed0cc038d23148fe97c043473b4c0d62149045c6e0f62bbd5026b534dde4fb639e8b68

Download Submit
/data/data/com.ht.video.ui/.jiagu/classes.dex!classes2.dex

Filesize
1.2MB

MD5
627827fbd4fdc74135ee28fae166adc9

SHA1
73b1de434ded70fae790d547212866b84ce031a4

SHA256
2205a6ac75d8ba4e4b3e6a6a43a5936ca49867ee43559223242725b2f26c5fa0

SHA512
dc2ee632dad4be1f7f06888159d1c211d8b17822050637b479242b40de3d497c65d10c6d868c782300353edc011cae2b31ce83ec324063a4954a6c0fbe96144e

Download Submit
/data/data/com.ht.video.ui/.jiagu/libjiagu.so

Filesize
455KB

MD5
e5a53000766ebc433b27d6a66ec4f555

SHA1
2c8f53f1c03aec2005bcad67d731f07261dabde0

SHA256
78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e

SHA512
370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d

Download Submit
/data/data/com.ht.video.ui/.jiagu/tmp.dex

Filesize
12KB

MD5
389efc2e2adb5c09538ebf99c3152858

SHA1
f5ca195821cdc6d49554cf19accca48829260040

SHA256
b1f437f327669b946119edf2348ce0174a3081fb23e44eecd9f7f96b2943e8ba

SHA512
e14872229697aa72d08311732cb14e5bbe30e69bdf7027d0012b0dfec87d1721a281a30fd61392ca6f63d7016da3b2f7b336d419ca17d3bd4f56dee4962a49ee

Download Submit
/data/data/com.ht.video.ui/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.ht.video.ui/databases/ThrowalbeLog.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.ht.video.ui/databases/ThrowalbeLog.db-journal

Filesize
512B

MD5
0dd9409cf2f242beaaa0bbdaaeee6a5e

SHA1
eeaaf2c397ffac4b6c5447c1585533b7654a029a

SHA256
fa52af429e3209caeb80a5638ea0dd982daffc7ea3b2708c6c5eda922f6b95f3

SHA512
17f6241ea4c1e4502ca29faa68a17e2c90032b17bbf6e0ec3b025915fe049faf91862f781b4414baa36178050f7bd9f101c3609071739151d69db79a98ea25c0

Download Submit
/data/data/com.ht.video.ui/databases/ThrowalbeLog.db-wal

Filesize
64KB

MD5
98558b716793d39d2162cf3930884f4c

SHA1
22781765b92642b2411da58821dd341a6d47e40f

SHA256
b65bdd3f42beed4df1a96f836bf42112b102fdcecb665fb427a3a5995263ea08

SHA512
da7d7398ef86a4316a1014c0f81928b8ecab265929989ffa59906a09e286f29e563dfac1606c931fdfbdf8fc97e486cfbed41320d0697f0701a166251d0e2db1

Download Submit
/data/data/com.ht.video.ui/databases/cc/cc.db

Filesize
36KB

MD5
5d7ea1a23af19b4340cc8d90f28297d5

SHA1
4cfe95b23a9e98378d69c4290af81b51fbe76aea

SHA256
474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

SHA512
33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

Download Submit
/data/data/com.ht.video.ui/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.ht.video.ui/databases/cc/cc.db-journal

Filesize
512B

MD5
9a6a44f56fdfbb75e2a3145c65bedd05

SHA1
fc4f2fe49903a01528d2511e471f97ededed22b2

SHA256
a3f09fb598a44cce9cd25bb4171b4714c8dff081e4e126da3f648945743beb52

SHA512
56c2040d7069134a1701b655abdce1622413bdd58470035ea9f80fada6bbeb6200ff0b29dd781d92168c5648b4a64319d99e3860b574f4694b648f0293cdde18

Download Submit
/data/data/com.ht.video.ui/databases/cc/cc.db-wal

Filesize
48KB

MD5
c5d3483287dd1136dc40230191b6b53c

SHA1
87ab544cd43f50f79818df549c11384159d20225

SHA256
111dd698bdd973d6c04e34cb53b10505315769f9f0d2ca249e2c9e799c2b70dd

SHA512
81c19cb82c96182664261dc82c1c290a80aaec5254f082cb68d86cd38e791ff9e9f00f28338333023a7f9ff72627c957e81341693d8c761ce6793929d87e14ef

Download Submit
/data/data/com.ht.video.ui/databases/cc/cc.db-wal

Filesize
16KB

MD5
e57f65c9a625ed1a3946435cc22ba184

SHA1
e66db2450c520d196bcea8b84664d803c4fcb2a2

SHA256
ec7b103bf044f9e449a91d465a656244f90178c9bf66ffba1508de570ce6ee5c

SHA512
6803a270fbc45ef81569539fccf0dae7ba29867fccb6f6480730ded0223f43f2cbe0370d095265b5aae0299580e20483b99d9d679dc3acf68b0e920934b33d6d

Download Submit
/data/data/com.ht.video.ui/databases/ua.db

Filesize
32KB

MD5
6af0093cbafcdcf016ab0c69c2828ae6

SHA1
d709c9ea9faf870fa9815a1dbcbeac5137645297

SHA256
db09b9e3ae6ca85080576377f81a17c63167d95e576437056da5b8d79a4aa11f

SHA512
ca2986db604278c08a1b3fe72f900772890ecbaf531253d9849638affc5a2c37961edf8c88fae64d9a979a43fc2921c247939b4bb9c70be8aa9a3c99e826357a

Download Submit
/data/data/com.ht.video.ui/databases/ua.db

Filesize
16KB

MD5
86e71b0f874f2ba0ff468387589cdfd8

SHA1
1bfafe850c15fe83e74b8e3a46c4278c14f2c29b

SHA256
d8aa1ff9e844fad63945ed54483bc49b511a73defba145245f980179b862f63f

SHA512
556a7ca5145b571a3e64a20b523d08c4d1a46096c75ef6e07859713a227680536c1ba8fe8abfa92473692af30c3f8816e430585558398cbd19d284d046ec7112

Download Submit
/data/data/com.ht.video.ui/databases/ua.db

Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.ht.video.ui/databases/ua.db-journal

Filesize
512B

MD5
a339d9ddf98245083ca1a30f91647549

SHA1
c50eeea85c10ca2a49f9ab152027f7bf8efef476

SHA256
3ae0d048170912b2b28c3e47bd3b7c25f9f02ad154cf062b58d654c83d56f6c5

SHA512
0a5cb3b28fa41c399d49bfc0b5d107f3b8d155abd2e1e18f7f558fc334c08839e63f612ab76c90faa01f600ca963b2d18469e8fdb6d4bf28a63d2faba3f2e8f1

Download Submit
/data/data/com.ht.video.ui/databases/ua.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.ht.video.ui/databases/ua.db-wal

Filesize
56KB

MD5
10c7ff1714bd255686b5ba34b0428461

SHA1
11ae172504b911b5408d8e8f04cccd31fe471b2f

SHA256
38a73052920c2fb84add2768c34684e9418e96f253c996cdeb69ecdbaa381340

SHA512
4346af53126ad4b9a09ec1ac2b8dd0019f663853ffde9a0c0c4df9d13f6492fc713e87ed2133024b982623fdb2cfa499ab0ee780e68676868f20945a8cd65259

Download Submit
/data/data/com.ht.video.ui/databases/ua.db-wal

Filesize
4KB

MD5
17dbbdf6459758925bf28281ba9beb82

SHA1
da5559cf5e6a409fc84439fd4ac055bdb8b98a77

SHA256
aa7405e366a36c47ea44352e3932b86214674c4c59e03464ab7876c40d74c731

SHA512
00b12b5ee2d1b355ed876527f4ee420fe9cc69e0b62b63336ca6cf9f49324b23dbf0584f6b8b958c4a03b0c7e566a71d08bc7a0255a97858028e7ddb07e95088

Download Submit
/data/data/com.ht.video.ui/databases/ua.db-wal

Filesize
8KB

MD5
7d74f1be43b46ec1de45866539a2cafc

SHA1
d95645d8f67f96366802a748bafb7acf39fecf61

SHA256
f64261d9c3224a307969623cc2b88a9eb6123b401256cf722eba9761fae8f1fb

SHA512
225c14f2e01e2576fa37159b99c2f9e72f6dd8e7d8c266019a893fb6b239d733778b4d5a7c502f992d164c7c7fdb424e06e2aa7e99a86b8ad9067d0ee736241f

Download Submit
/data/data/com.ht.video.ui/files/.jglogs/.jg.ac

Filesize
40B

MD5
75f150c0c5624d344b8ee90e5ed7d642

SHA1
a2256e85d696abd8d1c61e3258468edce8d05637

SHA256
0eeebfd0c3c2c98a30b7750fff90670052c33fcc7d196ca06e3790639a267f77

SHA512
afa8412e415be50d20bef86e7906aa01d66ccfdffc216d39d91fa0d48381d5e12b7a2ef9a880660ee8fd5adee35cc3bb5317882fa64d6e35ddd6d8bbc02ec2a1

Download Submit
/data/data/com.ht.video.ui/files/.jglogs/.jg.ac

Filesize
40B

MD5
32be06ee1bf5962a3aa7122735957843

SHA1
9e71ddffba722b03721125c6ffad7ae8019b7358

SHA256
e97fdea410a8d43e534b134f7c52c13f4fe0efa2b6e723b93f74267887bf86ab

SHA512
41278f5f20b464990cf354ef96b1bc44fb79e6e7df0c52956bdd1b0eccfc6bbfb75ea0080b0f38b9f3ad5593ea45ca02c91d280f8dacd0ed55e64822bf1687a3

Download Submit
/data/data/com.ht.video.ui/files/.jglogs/.jg.di

Filesize
340B

MD5
fe251b91c6f4d227afb89983ae72ac45

SHA1
02f1adfb2f598aae0b10f066b9f379fa9e9747c9

SHA256
13f3e3512ad601dea3d62d379aa5d1ec871dcdbffcc24837ab983771f8e1c820

SHA512
7faa52df411305faf96b6bbe782edf667a794691913f7990d27058e0eee076d84cf0cf4a531e2d5446e0247cc32c426cc35a1d4167f27004f4c9f9ed3f715802

Download Submit
/data/data/com.ht.video.ui/files/.jglogs/.jg.di

Filesize
340B

MD5
6a1ac1ddf3277ef54727ffcbf79aec04

SHA1
8e49d25c9484fcf35f75aa78e6782f8d7d34b7b1

SHA256
becfe307a51897169b0e442007268d7ff95513c7c9a5a8b589957c86227df089

SHA512
471f11127b3c4ca473254ef27644aad026b8fe57b8cde0c71110939e1bc3d413c378d89801ec871bb01d5f8f3a2998a6c437f1a3d5ade0091e8413587aef5fe0

Download Submit
/data/data/com.ht.video.ui/files/.jglogs/.jg.ic

Filesize
40B

MD5
1ee1dc45166f03f48683aedfa7392fbc

SHA1
0188764ef6c961d9d47a623ccd2e53eba8da89e8

SHA256
5b5b2a3a9944d754bdc9fed8a59c932e132c1812a3f17c3d25274a5787c4ed1c

SHA512
25d4297b24c1cc317393764194150374adaa1c85ca86557fc51b434ceeada3957fc06f4ea07589bd78aadb484a4fd7f885527d6751af5c16ca9f946abaacd008

Download Submit
/data/data/com.ht.video.ui/files/.jglogs/.jg.ri

Filesize
314B

MD5
139e8a615aad609c0bc915c31ae01e2f

SHA1
5669f5bcb96f8f7b573e61780600b8c45dd23ec8

SHA256
1eac01137bd2ecf7cda477a1f08395cca5321b9fff095c5072d5d8573221429f

SHA512
987e8ec17979e17edf266424b41fc5d7f4e0345339c04c56d3fe1bdbb49770041dfcd954a8c84dafa31740bcedf2179d004aa40202358ff432af7201c2d65c78

Download Submit
/data/data/com.ht.video.ui/files/.jiagu.lock

Filesize
27B

MD5
b9113920d27d133e5879e9243f13059e

SHA1
a462d1bab397322aa07a2cdc84c80426bf0ae5fa

SHA256
6a739a6616d8dacf83faaafd494fd8c9475555e0a934888c977d85501232e581

SHA512
0e92cb0b9a1e5060805f80237987177f9f4139eb1b30a7090ae18baaad9a6848f31836c63ee1162d8436f18c712aea460bad268bdd4c77c20c26aced3f3fbce5

Download Submit
/data/data/com.ht.video.ui/files/.um/um_cache_1728431698771.env

Filesize
1KB

MD5
2412d73d456d2f9bff306f52d6da6592

SHA1
1dadf6c1feb9e57197ab6bef371dc50fa563087e

SHA256
bdd3343df45897018be2b82453c7f87fdd34a0bc3f274e14c456a859278a7114

SHA512
47a17a0010d55a1e837d2da1e53cb1c2ba110f70dcbf3248db008f01455608b26b9efe0a9b4d014d31336595e6b223d3a2656af0760f347e10a624686f6a9627

Download Submit
/data/data/com.ht.video.ui/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
13c5a568fda874b33bd6bf0d45c661e0

SHA1
8ad3702fb957f7a718ce30f1f59a782c70ebffed

SHA256
170e006ff2dfa0f1d6f3b033c2970175aaea04f1c8e17c5d1ae16bab453a9bcd

SHA512
b51943eb1a2e7d9d2a9e2da1d6a7c66648f31140c9dc9e59aa365c189602a52591f6d53584613c54ad1dd5035f40b9c496ebe0a8960f85ce4444eb354302ead2

Download Submit
/data/data/com.ht.video.ui/files/exid.dat

Filesize
59B

MD5
be298ea752976f51545a230d1a2e33a7

SHA1
4756478eea9e70523fdb9e9a5b599e3f22ed865c

SHA256
5ca0dafdc211233c53b23048ec0ede80da2c061bd1112e7885adb895cc32a982

SHA512
891b3774c68287393936689c5307af3cd4ea8df791c9bfd06646e7a36ca6674d1ce8946dcfc91733fc9aabdfd4153c42e8f13ee54dc76e04eef66df800df18ef

Download Submit
/data/data/com.ht.video.ui/files/umeng_it.cache

Filesize
413B

MD5
c8f61b261f56180873a02657c2d8aec4

SHA1
7ad6fa73000d71e378be597bec83b4455000a97c

SHA256
38a2fa276fa0834fc8cff9e06f5c56b21cb90ab51141a49182dc1a9e3bd0aa40

SHA512
2bec41d5dc1b0396da9c8a2ff3059bcb668cd2b2e7a7ba0975298121555e1b00f85a6c0ee6bab570241a8ff5bbb31197e92285bf1e3fe9fc294fe8986156f91d

Download Submit
/storage/emulated/0/360/.deviceId

Filesize
48B

MD5
1d8d16c4e3b19ebf18988530d9b9a757

SHA1
bc94c1cce05cd848a53271ecb9c5311e27ffebf5

SHA256
abd87140da8de3d0aa39a24a8d52bfe7b2eb28f7a3d505f205471c7e8f4964d7

SHA512
4562d1eedbc5c2dd7f25cd1c70343053fd451026403585182b142a64f17016c1bd0bf6ad51667b439b220e425640e55fbbda08517e7106376cdc220a4555da82

Download Submit
/storage/emulated/0/360/.iddata

Filesize
32B

MD5
0dab2846c41de08199071cf8ab279250

SHA1
2bd3de432c4a5c7cdd9e5c6683154d3141f6973f

SHA256
fbe9a0981873450fc06d187bbb9a22eb741364d8144d7df237ed5279136b9fcc

SHA512
87aa9ae6a39bc03d5b1f0bada986df5564fbfe4246ece704be626d2e09fe776f2345958a31c5d5a449e976718db65cc33f0f039181883f959bdc0af3b9593c56

Download Submit
/storage/emulated/0/Android/data/com.ht.video.ui/files/tbslog/tbslog.txt

Filesize
8KB

MD5
0eb389158e91c4103029def4ed212e68

SHA1
fd768ef22703583e597c82e715510f216aeecde2

SHA256
3216837e8270027d225de925afb75abae69ea67c99867e688b58a66504c467fc

SHA512
9c7a2168dab3c469efbe79456775ee4fd9b61a53a10dbf4987c3c7a868901f2dbfaa76ce8b4df1a8f4064fd42d8a883b2ecf4a2d8b1c19d70f845480ea01dc04

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads