6d8edad3d29057ac5e9abff15811ed2b430fc34d7034f2e0f96316131e98a90c

Analysis

max time kernel
149s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
13/10/2024, 15:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4096a9e3e0205b5129dda2839c4ce253_JaffaCakes118.apk
Size

2.0MB
MD5

4096a9e3e0205b5129dda2839c4ce253
SHA1

16ab22ec9551559fdfdc246ff61c8ada1bd22235
SHA256

6d8edad3d29057ac5e9abff15811ed2b430fc34d7034f2e0f96316131e98a90c
SHA512

fafa498b831d7c4a0b52e294f00aef2c7ea2ed05e1aca6d841242d888ac7402267a975824b9ed0bd32a0b69d532e88e37802b81f2d3a79f0ade60b9243af8009
SSDEEP

49152:GlqRp9SfrWa7OExl724VZxbOsBp79Y3/fLWCP:GlqRpkWarl7FHbOsn79SnKa

Score

8^/10

banker discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.light.ddp2
/system/xbin/su	com.light.ddp2

Loads dropped Dex/Jar 1 TTPs 7 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.light.ddp2/app_jc/c.jar	4286	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.light.ddp2/app_jc/c.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.light.ddp2/app_jc/oat/x86/c.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.light.ddp2/app_jc/c.jar	4212	com.light.ddp2
/data/user/0/com.light.ddp2/app_jc/b.jar	4309	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.light.ddp2/app_jc/b.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.light.ddp2/app_jc/oat/x86/b.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.light.ddp2/app_jc/b.jar	4212	com.light.ddp2
/data/user/0/com.light.ddp2/files/BKit_qsb.jar	4333	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.light.ddp2/files/BKit_qsb.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.light.ddp2/files/oat/x86/BKit_qsb.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.light.ddp2/files/BKit_qsb.jar	4212	com.light.ddp2
/data/user/0/com.light.ddp2/files/BKit_qsb.jar	4212	com.light.ddp2

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.light.ddp2

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.light.ddp2

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.light.ddp2

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.light.ddp2

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.light.ddp2

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.light.ddp2

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.light.ddp2

com.light.ddp2
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4212
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.light.ddp2/app_jc/c.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.light.ddp2/app_jc/oat/x86/c.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4286
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.light.ddp2/app_jc/b.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/data/user/0/com.light.ddp2/app_jc/oat/x86/b.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4309
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.light.ddp2/files/BKit_qsb.jar --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.light.ddp2/files/oat/x86/BKit_qsb.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4333

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.light.ddp2/a

Filesize
28KB

MD5
f402808fe3ef298a755b17f2aa317959

SHA1
a0fd30756029d2e2f7050cb40c5bc6a05278a59b

SHA256
95a9dae5d8ab2ce8d3444d8e08dce52f84f7359373c97b5143f470d25c10eba0

SHA512
5d51f0fd7bc67f75d4e62ce2d24bd0ea9a4e0af767fe41cf6d0efb18bde7561aca6ffefb2aa27aa3cce95a69ec38fe0416fb32026a6f63c675bddf35a2dbb9fc

Download Submit
/data/data/com.light.ddp2/a-journal

Filesize
512B

MD5
00728561432039644442bd5f1855f111

SHA1
72ac75c94672391af70ad4091f8c8050a7d94d2a

SHA256
8eb4255d0554cd88e0807adc3bc9c277c4c5f484f9e23aaf7e32b7150e693989

SHA512
348c62ebf1069cb3c623d579ca2111f9766d0948e424bd1b6039070ca821223dd72b36c4791de53101033b1cac2e04902100c7735805ba0b1ffbe3014a71857b

Download Submit
/data/data/com.light.ddp2/a-wal

Filesize
64KB

MD5
675439b5b02e55d04fbf4bf26a31fd11

SHA1
bc2c4afc63db7f5d2f4a04da84575d4f3d629667

SHA256
838c3c38bf3411b0360233f39e3fbf380b778165ccefed0c0569ffb4c9289921

SHA512
c57e63b2d11904aef8b8f51cb12b0aa31ab15f14d9648e7e02805b0f5db533a31ebda3b2366648162fc792fb6c80439bedc5b23d63bffe4343ce584e8b00fe1c

Download Submit
/data/data/com.light.ddp2/app_jc/db.jar

Filesize
95KB

MD5
e6b5ce59b96d66f7e496bbd7c9c9a5fd

SHA1
8207be6cdefb7d5e05867b6b9dd63572aa118c30

SHA256
4a12d9ae2d8481b92e9a1d0413227b6c25b9b4182fa5efd60d9c4a5e682f3c47

SHA512
9d72e7cebd85958c39273ac41f57afdfe326ebd7001c25613de977a30be95435f90acdf0a4baa315dfa736e2e544c2d88040182aaaae3960aea93d27a0d3cc96

Download Submit
/data/data/com.light.ddp2/app_jc/dc.jar

Filesize
51KB

MD5
17e76adc46244c2eb8240f6fa60ea08f

SHA1
1b3f04099dbfaffd44b175f2c70443d64652c02c

SHA256
8c237818675f2ab34fc3ab2a3b0123621bfb6986f9f3e51bc19bcbf53f40e19e

SHA512
110426e67ececa15a31214f06256aeb70e3984eb925becff6a9193600e52f3326939a1102b0e5f42ccc2c35ca5f35653668afda0c65409cfe5f1bde4eae5844c

Download Submit
/data/data/com.light.ddp2/app_jc/du.jar

Filesize
62KB

MD5
1a3acdbb7bba142fd62cd14f65f0f9aa

SHA1
0225a74d95ccb318cb833fb427d1bf4ad7bc693f

SHA256
fee9ad22d48920c23dabc57aa0e9fa9b2815a9fba645a95c51818549422713df

SHA512
c531a4407902f5750ef391b67bbf50a7b86774f785a0cd3124ee99ab0c68934878196b01005757349ff57c2cd2ed64feab4cb52274eea66bf72f32bfc2df1825

Download Submit
/data/data/com.light.ddp2/app_jc/tb.jar

Filesize
95KB

MD5
1ba088e6a5c9179048c6f0dcb9126b9c

SHA1
1654ede1e7d91aefd6284a26e80fe1810233fb5d

SHA256
d6f31817dd626f862daee2875faf3c2c6003ed4aa8b50c50704fd2babb127138

SHA512
218583cf2389bc8d5b849f5c15d06bd84869b616260f4770d3310ae2e17c44e76be1ca4f9b55aab3f13e71ae2cb4c3c1eb3399ead84bc8ec3813dfba8bd991ff

Download Submit
/data/data/com.light.ddp2/app_jc/tc.jar

Filesize
51KB

MD5
4c04c839c4c1663e740e6b9a6f2b6938

SHA1
727f1d98bcf6619fea747d1e0e1744c8a79b04d7

SHA256
a0f66d4a51dfe41f03e551c00ecc18b276b0af74c057f5af128ebc1751b1930e

SHA512
9fe91d59d0887f7fe99604610884be1a7bad463eca1bd3808a74a5466afac2549cf6d5d1242dfce0ba2999fe595ec7bfcf4ccbe6bdd3a1260beb020a457a1dcb

Download Submit
/data/data/com.light.ddp2/app_jc/tu.jar

Filesize
62KB

MD5
0bf39a7ea5d64004b531e2c73fa7244f

SHA1
138e64f2b52fbe6b220e046b1b7b51b2e3500bef

SHA256
a5fd25605f6e0bf439a1a5ac64f501fdf92d67f3281bf35b0ad7c2da2c65df44

SHA512
5623031209559f49985d67a390653361c17ea2ae4b9ea40f6f2feac021bcbceabda56deaf24996603068c2c14fa04a4f8bd8c041894688aca247331245db5f1b

Download Submit
/data/data/com.light.ddp2/databases/ad.db

Filesize
36KB

MD5
e1c9242c34653e3aa73d9938193e2f95

SHA1
1b63ffc311d84ef81bc08d09e81429ad5f5e52fe

SHA256
43bb9a6c58c786a72825780d4cf90b6add2030598d6e90e430df659047b01bbc

SHA512
35eb99e4c5138dad16a963c5bafd01a78b0ad909e99b8290093ec8c93485c3d2f4c0511e8390dceffbe29363720f5d200288b2cd60722ba8f6435149f10b23d9

Download Submit
/data/data/com.light.ddp2/databases/ad.db-journal

Filesize
512B

MD5
3564e3012dfc065c98eb70236ee70bec

SHA1
234cb3c24f0f3c95622f869380d896d634901c9a

SHA256
71d3750735e1d9c9d79449b71ef41c3379b9e1b2b23d8eff1a778900f98d4439

SHA512
b90f204cc417f0b596ffc7f25c3a862487791a4505c82128178ecbdc5e39edbe81e5d70adf5b4f2cd63c0fb9cd758a8b0d7bce406bc80083ff309c8d53a35657

Download Submit
/data/data/com.light.ddp2/databases/ad.db-wal

Filesize
48KB

MD5
460c60e9062e512d4faab5821a57fc21

SHA1
f22634ce69869cbd9f1354e727659b3e46d10bdc

SHA256
19876de265cf7fcd0dd92984b31cd596cc86376839945891ae9d4348b7ba58ba

SHA512
17fbb53c5f74aaa8800b139d1f3cea5fbb888265f4f79b759b58021180f9750db8a7e35ef4633ef749c8fa13a044b7e245d41c6bcb081f1203c4b2bd05d9c68b

Download Submit
/data/data/com.light.ddp2/databases/cpdownloads

Filesize
16KB

MD5
b3aff66ec2d873101c868b767cc31996

SHA1
36d4499fd0ea6df6dfe58f5b1f5ec9b439c4171b

SHA256
b255058fba09750156ab89f8066791bf82f47b380edda2e9b7882151b26f09cb

SHA512
799799e94e9b5e6c12f7df4f0478a47c711a5ebe3f621a21fbecdd891fc1106dccb21074289ae0e400f6c9b225db9cd3e3e489182fdaff2695d1de465329ab71

Download Submit
/data/data/com.light.ddp2/databases/cpdownloads-journal

Filesize
512B

MD5
fc92d77537c68d9d15a2504f17494992

SHA1
a1a45c09193c7ebb7f30d3bd7471845f2ca8a025

SHA256
56ef772259a2b1f937f6354d65ebbf0ee9f47c4c962e35615c81af32dd5652d3

SHA512
45b583b128d9d315086974051792064a3a178dfb01b0d5679d4a85339f2503a582b63972293522069e7458b306c77e5525117da1b9a237db1f09fefc6076ede5

Download Submit
/data/data/com.light.ddp2/databases/cpdownloads-wal

Filesize
28KB

MD5
585c71ac530bf657d33fa6d0a0831987

SHA1
18c8a55e328f7c05eb24df17bd6c30b66e65fecb

SHA256
0e0ce847409bc392749bb5c59b83a439646d8a2dcddd289605cdc72fb80a2710

SHA512
203d5c381833f9be808f9ffc34c238e24119d74109a49ab5e7ac1d160de089462d06cef82014fd7da3739520b07e7d0d0d19e8d2d192edad0b625887d65579bf

Download Submit
/data/data/com.light.ddp2/databases/sldownloads

Filesize
16KB

MD5
b47e5c0c9ec6b7c13fd0192d8719a407

SHA1
177b9cc3f85cfd406c56c8cac00f7344ab41933b

SHA256
519883d8e588e0d202330b48e5e4abdedcc0ed5105cb511f7d4f52a08a256460

SHA512
87c2c65bba00c02bfd7f9823f6036a521e54587a9be3b1010fafa1f93d8980be8abd23d7d9c03ee1491f931a6ea4ad5cd1367720eb78d99fdb971cb2839f3b21

Download Submit
/data/data/com.light.ddp2/databases/sldownloads-journal

Filesize
512B

MD5
6ce3688bd38f498f78a702efb0a9db8f

SHA1
b24b125f8af3901bc4bb80b53dec6e8d0e84a890

SHA256
4d601ff80d6b7dfd72b4a799400c25545fd252bda33e2428c92490db9ea0e5d7

SHA512
7c8c6ff49027d3f8ffd6d61c67a7a3079238b3817200a501d98708e89afb729ed31acdde3f38a98daeb9da001be3a3484c98a0442954b5257e39ce553cd1a007

Download Submit
/data/data/com.light.ddp2/databases/sldownloads-wal

Filesize
28KB

MD5
03a86dc698394316fd5c503a77daa19a

SHA1
2793d29d888a0c3c5187136b620d77e4fa6ee42b

SHA256
b6f063bf61158e39936af8a224b115a9d68f2b237944d3ea0718a72b0d62bed6

SHA512
6ad489acba9c577f74970ba782dd604238cd2c1fbc2d67b0a1ddc7f398f37617130652e06ce9a1dd6c16a8c680e550c8eaf6135bf4643027b00cee29ad00e568

Download Submit
/data/data/com.light.ddp2/databases/vdownloads

Filesize
16KB

MD5
da481a5edd07f25a67cec26bc5adb696

SHA1
6832cd2500ff2a1594576d6205dc764578faa80f

SHA256
62c3181e98cde945e9f25ceaa71277508307ba12607fa236f9a277cd5a23ea7d

SHA512
7cfd9ed2a47f7ef22030077567dc5cb822b7f3dca99b9f4298222bb32d4d2e4b979a7c741d383a2f734727922a024e33076b325b2dca8cbb705b3034cf2432e3

Download Submit
/data/data/com.light.ddp2/databases/vdownloads-journal

Filesize
512B

MD5
839b0bfc3a2321b6b7a7ae43fad8623a

SHA1
e153fdcfaca3b8a9962822853bf895c8b63db394

SHA256
a34bcfbc58b99dcc7f7d51c60f77766999a5aefcdff63b5c8295a02e20bc93ae

SHA512
bf7fcd47aa1de20d37f060ea66c1b6f6b79167fb69dd8a6cb43fa4f7b716714ce276f1090de7cb6e6e052538a37b79224f01119f328faf9fbf0d45788f70e028

Download Submit
/data/data/com.light.ddp2/databases/vdownloads-wal

Filesize
28KB

MD5
0815b3c70304221e419f57a18c2660b3

SHA1
e229a58937230ec3b27b7e869adf6f6b82dbd584

SHA256
5b981813bbae8f6d3c5fbfdd974ae762f291983b79c383dd1e91d71af66ff9f2

SHA512
c21ab8c93b9d7e48ce822e21dd5fb2675d2fcc84e7c330d464a532cb766b0c2c8fe8c0f7736379055a5c58e8c7c4c72b76ed524ab823b64dcc6ccb7b33014172

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1

Filesize
16KB

MD5
61b5c73640a70f58a916e5faef67d408

SHA1
4d4dee782057fc88cedfb556dae96ca811019615

SHA256
875e4b5a86b55e9a6b6c22b74d8e57667e85f3675ee265ac9536e8435d468dd1

SHA512
22f1931297dc1dd8f05f106fe0eb21679270006e8ca46c1e94e3c689832d1aeeafbd07fd0f8609b25630f618ae81ad90d2ed836eee0599b92a704820ea65fe9a

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1-journal

Filesize
512B

MD5
bead89ba08b9ba4efb944183e2291209

SHA1
4cb2c9dd5ef6b12c5ead8e33d687e22fad08e2c5

SHA256
8220270ee33b268bfe5be36f2966116f43cc845bfbd9c3faab375d78527655e6

SHA512
9937e560f237761849fa19954c3993fcc3e9a06181780e77d8f965bdda24ec575be9e74965ed93d4e9feaa80e9f32f3d4bda5fe713e9dba0b95978353a81bdfb

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1-wal

Filesize
28KB

MD5
be8f5bf5b127cd816ae4a7dc77bbad51

SHA1
c990984b4e00d808e7b4f74f187757f176bad636

SHA256
73637abd4f92944bc763396dce4136b62a6f2a8b58cc868541237a94e8c20086

SHA512
0d78c1e10dcc62526edc82ce0ece3c040efb4ff226c022572aff5d0768ad407b0c98af90d8dc1c6841829413750d41e0a2b32acac150251014acbbabcd539c81

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db2-journal

Filesize
512B

MD5
309e419522af4a497dcd1c4d00391f7e

SHA1
638ac249c768448667ee6bc766ec78ca7c658e8c

SHA256
8bbd09e804850e3f3f15b790ae820ff63c4b81ac1ee643dd2f8d99249d6d4150

SHA512
efdedc747e325dff9eede12d9cfc76abcbfb5797a84f9848d7a9c5be3a9a9101def6991d6f93699959f5b6466f3f4cc2fcf1fdfb307f75c425cbf9085cb040d5

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db2-wal

Filesize
28KB

MD5
0b44c6ce352921b2d154fd40faa8ded6

SHA1
f6dac9ccb478c7fe8abb447bebe7a8cf73d9ad59

SHA256
a3530c90ad703559537a90c33a435198ebf85ea13f044e48c89895e1deb6ef2a

SHA512
56b0baf9a5332fd75c582bf816b3ceb9436e0cce51d93e983f47433859aa399135de4bfde7091fefc38361836aa396062f418aa026de813b80bee1a1b90a33ca

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db3-journal

Filesize
512B

MD5
331de4af153c40e7694582b24c8f9951

SHA1
fb37ed8baf9800040a1e3b407efd7f2db69bb437

SHA256
3cf5ac6c541b899631c35fea3acca6ee998ab9fe010dcb89f5d9f533f55ae42b

SHA512
13333119a63a9c362a2e28fd663406fbdb1e97740fdbcd434695f8c9c1253d2183209e026540fc09ad0a2c26ba651a21eb58303cb65217d73a6bfeec8b087fcd

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db3-wal

Filesize
28KB

MD5
ff8883bc5b94fccf82833cd7fb5d2892

SHA1
e39224303f3e7be144f1855c5dee5baace9effec

SHA256
ffe63f7d4d8fa126b84d7d5d2c62823558a9b30b4d766f859bc29a88f0fe4c5b

SHA512
dfeb8414cf9bdbf39e034d9fac53067d154ee97b909f59cf399a24dc8eb0d5b897a1b94d1f86ed249b7dbb2e66ff37388449b9fc35874a04fdc5d2e668eeca67

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db4-journal

Filesize
512B

MD5
00c3a934de9903b161009637dc1a824e

SHA1
1a185d19bc54d2a082b1b71f041a65c177ea7329

SHA256
5931569621ce1e56bb5fa6abc1fe0ce31dc8dca1d5fe9f2dff297d876bd2d2cd

SHA512
607d352314d5c32c28af73ff505613d061fff0668b1fac35684b1958f854660519514bb15695659d852db3e9feb3e88664813c523296b309b940dd4145932a1e

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db4-wal

Filesize
28KB

MD5
a526f6f0cb8938672e6dfe5865dfb02b

SHA1
0f1875fa75f35c83ef7a9b045835854b3449ea05

SHA256
a8cef6b213272bed61f7ae51b6beb41e1b8651705777d5e3ed2cab71d3b0d7b6

SHA512
dea7db82bf456a572a292a673c211e2dfb3d1abcbce4d6b471d431c76f2b31f72fe5512c998308928bb0905ff6005e701146c9d294432541e403e125d1539f5b

Download Submit
/data/data/com.light.ddp2/files/BKit_qsb.jar_tmp

Filesize
40KB

MD5
2b15afda4be2bdc487bcca6dff5db3bc

SHA1
b07df752efb6650dfb3b52ef1cd82a0c9419c30b

SHA256
a8860637b469acbff60958d3e92b2daf451010e8d30e69915b79326249ec6e06

SHA512
22c101049771acbb9ac40c4a380da423b784ff2dd326ad390132bb4754ff7542325fd08b980c755404ef6aa69aa6c9457d3ed1f3208e0f1a10484d9881212025

Download Submit
/data/user/0/com.light.ddp2/app_jc/b.jar

Filesize
167KB

MD5
f15ead4849536bdd23f3a2cc43b9672b

SHA1
e4719ee1a5664c189c7f223d18432a21ab292030

SHA256
73ba04e7095d0bea8fd368beb23ae89c38d67629778b51c408923ed9020b34a6

SHA512
57830bed71a498ede34ec6b106dfafd2a5deff5baf2107b0d91f92ccf646628317c37bbc03455941a5de4ab68fa8ddfc3728fb960a7394256fb753ad77cc169c

Download Submit
/data/user/0/com.light.ddp2/app_jc/b.jar

Filesize
167KB

MD5
2e005187eab28668da44a87ce47551ca

SHA1
4b81ef675d8b1e285716b3879320bd298e4a6293

SHA256
efc89e94dad31ea2776b834478abbbec071851aa62127edbbd0e44d29c1884de

SHA512
111a7276bdc60f1cde5cf91bddfa517ed99c315a663a3270f3f1ecd7e4c8df44181ab2019ae2b493f6cb05061b2f0d96ea3e8baa679a34eacf8b94aac07b7068

Download Submit
/data/user/0/com.light.ddp2/app_jc/c.jar

Filesize
137KB

MD5
20d132d16112c2bb7fff7c8b3f28c7e1

SHA1
38e914bc3a9e122ad83e5444db45ff525816aaea

SHA256
d515a9aa1e7910033c14cac3501ceb0d8856f01c06649b5027075d44eb3ad78f

SHA512
e5de96ae4a53b30bbdef6bfc0f0c13d1b9a508536aa71ebbc682209f845084eacb8dfba99ff29973921da49ed2dc408c5ca83ffcc08ba0d5537c51449f91bf08

Download Submit
/data/user/0/com.light.ddp2/app_jc/c.jar

Filesize
137KB

MD5
47156cf1a64f54cfb14fe9b28d58e589

SHA1
286284ed2e5dc22d30d1114cc035251c54d63924

SHA256
fba71019b75963133d4e7d02297f0e6957d7ee6ba834be995c1dfb4c67ad7269

SHA512
dc98f55434296871ccae9d5b87b6fc80e7b257dfe4a343c2d541bf473e0206db89b7d36be2b2bc13fed6f0c5867a58a37c7dd5fc0d89ab520d89ed519a2fafd2

Download Submit
/data/user/0/com.light.ddp2/files/BKit_qsb.jar

Filesize
83KB

MD5
8f6fd25240b0ddfd8a5097a07275869e

SHA1
2f42b4ad8629c73c8c4a6fd71f3979dbb1fae1f1

SHA256
42084de8e888db14f3086bbadd1950e63c2a46b44c4fff13e54f4c649ea8e201

SHA512
978c2bb2e7e421a7056dc85364e0b107d14c0aec3bf5493de57df8abb2606d6a9b84e325c6f87fd0b0b299ec544c67ca23529a3fcf46699f88a1a4c2f561ab46

Download Submit
/data/user/0/com.light.ddp2/files/BKit_qsb.jar

Filesize
83KB

MD5
15ac4c22f4533cdb23beb38ca00f8f5d

SHA1
5b3c8903dc9dd2f82a5dec2a57f17dab14637f04

SHA256
0332d8ad92ff94bfeecb69055e494a0ffdfeab832aa2473f22ea23a200608a77

SHA512
0ea20d38e9d760bc3ac040fb272c6bf64c549fa87579b7a31cf9856dd2050f0ddf5ef8cae1e740da8508d7e1135cca144d4af65105745d3dafa485c57fa504ad

Download Submit
/storage/emulated/0/Android/data/cache/AppPackage.dat

Filesize
12B

MD5
2f640f14391154e7615c3ad95fa20701

SHA1
e7232289cea6b063602a3a94c4b1f81e7c365b6d

SHA256
a978f6677b5db792b3e0862dc82d440e5b6a9f62282b6737996316955d5af885

SHA512
b4d35dc072af53d6d6184f35a44b0fb3cf88814edab53d1458da957f0bf34d9a11b232b3d8d35f75be165a9eb0042d1d5306f4d9050e7c2384dc5fab6f06d0d8

Download Submit
/storage/emulated/0/Android/data/cache/CacheTime.dat

Filesize
13B

MD5
a96b35ecb3d89447a782639bbe901a9b

SHA1
89b95cf474302be1c3d69255f1f4f560c4e508db

SHA256
737a52a622f1e2c5099b6c98a507403a0fbc40751e0ca9ae43056ab30141cbda

SHA512
1379e37162b507cb1be815646cfaca5a0f8bac533895ef9f30269d323976b812d397cb15b4b84478b42064d980e01d2cf81620da2c44a4db6e989421614fe307

Download Submit
/storage/emulated/0/Android/data/cache/UnPackage.dat

Filesize
15B

MD5
e8a967565c007208bb449ff0e9c82167

SHA1
dd9e82a5f20aedec18ae410a8d19928218d6c9e0

SHA256
f4d6ba99555d460b9c89e34bb6af484eb5f9155838ffcebc49286ffac310fc7e

SHA512
d0962f78f3aca399ca58b6fcae05b32f33c0785f26342c78451551da3b4da05bf3b0c37ce28e619c62eaeeb27198ea2bd59c72a10398d11cac1ad84813e470cc

Download Submit
/storage/emulated/0/Android/data/cache/iconCache/CacheTime

Filesize
13B

MD5
f040c6abd0aed3cb587d392d36d7d6bb

SHA1
6c8b76ae87fc1facbf7a241f108079adac7ad3e7

SHA256
413d3af95325d761effd4193e56a52b51ea42795cbc371a249e9206246b66893

SHA512
72c1ff311df5c036234ce2c533f5d8ea6cfc044c18ab6303b775620a565add3e6daf3d03666b1434efe2828fb07ec58327d086054747bd95c510bf2c49225afa

Download Submit
/storage/emulated/0/Android/data/code/.vapp.dat

Filesize
899B

MD5
3e7e8307c716448c9636bb3d5abe91fb

SHA1
36a2e20c678edb4df059d32f125a372795c30de0

SHA256
aa0e8f4790e4d36617dcfaae57fe0904dbb2fad052539c1a7efeec9969e295ea

SHA512
2493071448fe5d67517756fc1a57138b431ba6b19b07921ee1d50d7a7be98e968a59da9b3e8d46f8312428fcd4f143e9f241758926f745959da06831b2611721

Download Submit
/storage/emulated/0/Android/data/code/KI.DAT

Filesize
58B

MD5
2b53b6b030d7bdb5da6ea0d501b6a165

SHA1
fa4e9e8d724d91963a3fa3def11790559cac11c1

SHA256
d8209526853a232417c586b6c130ed3ec53af8a2928b95d032ddcee37b4698fc

SHA512
dceddb69f3c907593c47edd56cea3b5cd68e560f020244e6abf9e63c58263d38b36e8736617758f2c5c7292bffd815af44fee3805217aa9065cd143e0599b128

Download Submit
/storage/emulated/0/Android/data/code/MID.DAT

Filesize
60B

MD5
c679783f144b5b77cbcc89952b9590de

SHA1
339c29f74856fbb0a27070d1d90c1acde4d49142

SHA256
03e9e03b09bb456d2e730f787e5b232d119d59547959fd73617cbf44dcf56de3

SHA512
5ac8cdf1e7950029ccd418c6df2991e9763083cc631f549ab2302758b0cd634817c1f712db7310927ba39aa9612e7be746532142434d314fb7231e2f97d4aa2f

Download Submit
/storage/emulated/0/Download/9j/1.dat

Filesize
15B

MD5
6c4c5cc69ca107f07d414681e2876724

SHA1
095e32156c9791d9fa35788bfef7a83c4b9c99f5

SHA256
1528d339d3f789d330e7c52eb3499952485c39449a3dcc5c2b288636cc82b9d6

SHA512
c6aff1e0803dd628130cdb18abaa8433490a810e4d1246e722937e153d4521629a4296ed5a5635a45859a58c848fd966a89bebce7d7868a9683c2ffeface70a0

Download Submit
/storage/emulated/0/Download/ads/clst.dat

Filesize
15B

MD5
fe8d42435d5ee8085344dcd77e155115

SHA1
3be1e628a46e571633f1b89779018ea54a1ed1af

SHA256
90e654288043cea9dc072371633fac2e86418ec46c64fff67fbdc8dbf957e031

SHA512
7f96435d05e412a1714edd3d92b439a9bde47f965940b34aba2663b165ff122a1cfef1d3e904cfe9d749b7afc6eef3f6faaf01022a13add71221d2b50c409627

Download Submit
/storage/emulated/0/Download/ads/rt.dat

Filesize
15B

MD5
4784d2abcdeaaa5c828abbc2d9da27a5

SHA1
8b2075280224518797a1c0bb3f95cf3a82aff948

SHA256
16c3c92c18d9f7711d1d400a9b9d1420eff254f07abc88c795f8dfeefbc78535

SHA512
cc92e169f3a5a518be6462a14ab89f758dd36b469ab2bddfcfa1033afcb9c8742011c30cc8dbf32481e76489626496effb2b32e2f8656d94bf7945819ab3e683

Download Submit
/storage/emulated/0/Download/cp/time.dat

Filesize
15B

MD5
5e8636f3792f649c6843e69f2bcd6a9b

SHA1
859b53e2d8340fb268791a121973b2524b16f87e

SHA256
5e3ccccb406bf0f5702e7adf515eff46ec6009205aad7e787e32ca08321966ff

SHA512
fad7d3cfb35834fdc62d0637b1747a5c356d0e6d3650789679294868beb9ff59e339fbe5c3eecd93c2a8e9c9cea924d9d351a78d3f997a236b1d561c1f34f04e

Download Submit
/storage/emulated/0/Download/vgp/clearT.dat

Filesize
52B

MD5
6ec51effb7538d4ef9cc6a4cde30dd98

SHA1
e927a79a4c0c4a9c67c1c60f806f4da56c5045bc

SHA256
8691801f6ca7e918b4a8e06c094fdfcf54c449d7ea6e9318530cb57f987b3010

SHA512
9313a529a0dba6972879309d650e95620e8c2d9802430e1d156f8699c2bd5b1293e58e90f7c0c15f2a1bcf1f9756e62f41d2c6b48835cc26fbbdc388b2a4599b

Download Submit
/storage/emulated/0/system/android/data/light.ddp2/devscore.dev

Filesize
2B

MD5
142ba1ee3860caecc3f86d7a03b5b175

SHA1
6e956e31476ccd6bea194a2d6e5e54d66bd3281b

SHA256
dedba7762ec349c2d16e9199752b17f374d6f83071d29b09877816f390928960

SHA512
afeff9332ae66f946c36cb077ca8eb02a2168d1e0634a5d04c607beb2b20abf893b18e30c5061081c7b0b6886d290a970378df7a05c565506c7e6c309d9532d7

Download Submit
/storage/emulated/0/system/android/data/light.ddp2/devscore.dev

Filesize
4B

MD5
29878c5aeeb58fa544cfb0290414663d

SHA1
046dde42eaa659f91800a7543528d7b7792c3096

SHA256
92a6d58077a0525edc4ec4b040e9d718f9377650842fef989b81f026eb0e225d

SHA512
d6f0f7c7d9daaae30c577fd3541060f7aeea6f3503fab7e588988e271540865431914834d7ccd1790fd4d46f865aaa244947f4a7e86e2f67630c09431c290932

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads