6d8edad3d29057ac5e9abff15811ed2b430fc34d7034f2e0f96316131e98a90c

Analysis

max time kernel
149s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
13/10/2024, 15:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4096a9e3e0205b5129dda2839c4ce253_JaffaCakes118.apk
Size

2.0MB
MD5

4096a9e3e0205b5129dda2839c4ce253
SHA1

16ab22ec9551559fdfdc246ff61c8ada1bd22235
SHA256

6d8edad3d29057ac5e9abff15811ed2b430fc34d7034f2e0f96316131e98a90c
SHA512

fafa498b831d7c4a0b52e294f00aef2c7ea2ed05e1aca6d841242d888ac7402267a975824b9ed0bd32a0b69d532e88e37802b81f2d3a79f0ade60b9243af8009
SSDEEP

49152:GlqRp9SfrWa7OExl724VZxbOsBp79Y3/fLWCP:GlqRpkWarl7FHbOsn79SnKa

Score

8^/10

banker collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.light.ddp2
/system/xbin/su	com.light.ddp2

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.light.ddp2/app_jc/c.jar	5052	com.light.ddp2
/data/user/0/com.light.ddp2/app_jc/b.jar	5052	com.light.ddp2
/data/user/0/com.light.ddp2/files/BKit_qsb.jar	5052	com.light.ddp2
/data/user/0/com.light.ddp2/files/BKit_qsb.jar	5052	com.light.ddp2

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.light.ddp2

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.light.ddp2

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.light.ddp2

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.light.ddp2

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.light.ddp2

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.light.ddp2

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.light.ddp2

com.light.ddp2
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5052

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.light.ddp2/a

Filesize
28KB

MD5
aa1284d64d7fbb7c80a6af595364a351

SHA1
f6709f7b9dd77dd1a718f01703e74d52072414dc

SHA256
c68ee983f378d96e1c6aea51eed29b4a9b3eabbe038ab16150160eb7700274e3

SHA512
b7e8ddabcdf6b6f8415ce064d7a2246d3d8b1867283b8c0f1b017f9af0aac6af0101bd45f929b9a007f36951fd5051a36c80157ea16528a6f9e035dd21af82b7

Download Submit
/data/data/com.light.ddp2/a-journal

Filesize
512B

MD5
ffb1b0ee3daf95afe77984159c448658

SHA1
b49c1f74b278f7c00fa77bef1dc5f6299f5c29bd

SHA256
89b4fbdfa89f83f60115f99bfc78a87a3b2308c8249e3d9f74389d357231bcf3

SHA512
14cbd07ef5b00c1e905211639f50570ad7eeb0046c2f7dcad025d784c6117f7ca027de95b06e39a6d33fae1ac88afc0fba2a9fdc95e61c430cf2f0199e173083

Download Submit
/data/data/com.light.ddp2/a-journal

Filesize
8KB

MD5
c082e56d47572645817c69e4bc6f872b

SHA1
79adbc4e5e67c580be8bec1e9b342ffe71ecf9a4

SHA256
8ea122de871eb8b185a47ad69e3a7509b5f67f40af5fb27d25acf2697b02770d

SHA512
e3086099b570c455786c4e774d2186cf0b10c767cb5a1df6fdaddf1f95e8426355d24f45d29ad51bd2c0084116a55628cdfea33cb99869761a2d4d1dd22bfa97

Download Submit
/data/data/com.light.ddp2/a-journal

Filesize
8KB

MD5
23a9b7455b221057cb0de56c24e6f441

SHA1
59038b225ec043b464213fa10fd45e8c59f78716

SHA256
2313afde5add8e96d644c923791b70a62ca055e4034c03525f9c4627620f6105

SHA512
76a21dde2999f89d8489f485d2b286e8a84a96c77e35e4dbe4c8ea5a8011be0816d04db1c8f8315e00fcee4125c0637a485bbac4dec65a8762e2dfd12ffc524c

Download Submit
/data/data/com.light.ddp2/a-journal

Filesize
8KB

MD5
ebe940e6f7c4e3898c0715fa29c550b1

SHA1
3557cdddba6099d0ac2b890ebcd328c7e512270d

SHA256
5a0423ffd8e7c2fe5dae1fc3973e91446c5437911a31b3cd3f32fca8e5ada203

SHA512
4b717e0080f52300a154dca5ec21ebfd07ec493e794bd900ce0a48a45bbac3015c3b1a84aea478c0e8507b7c0c7dba4a5e1b36e08bc3bd20482028a8bb3800b1

Download Submit
/data/data/com.light.ddp2/a-journal

Filesize
8KB

MD5
a29ac617bfacdd7c4a8eae0820cac654

SHA1
ea998d442d7bc839a340b0f0071786530e79270b

SHA256
9ea34549fd3cc40dda45a78f7a383492e6245080659ba4fd2a078f7e9140ce3e

SHA512
d309d300aa9145e8d1f9d044b70e59941779fa123ba9f6dee3f1566b6438495a58692693b3e5deeb315a0a244828848bed94b35649beb853c951dbbf6e264650

Download Submit
/data/data/com.light.ddp2/a-journal

Filesize
8KB

MD5
0b0693a3133b90c0873edcc55ca0aa29

SHA1
10757dd182a9f85ce4aa05484088cad49a4929f2

SHA256
654712e0eafa688133c4be6a7e248a93a605982e983b1ee8e2dc49fccd495ec1

SHA512
c5e188920cd65dd7c8a7a527e59fbd694697bb8f82004eedcbde2f336b1ebe669c3a8b7e389031a21f421f875d27da23bb43af1edd9fcbe4a610204843308e1e

Download Submit
/data/data/com.light.ddp2/app_jc/db.jar

Filesize
95KB

MD5
e6b5ce59b96d66f7e496bbd7c9c9a5fd

SHA1
8207be6cdefb7d5e05867b6b9dd63572aa118c30

SHA256
4a12d9ae2d8481b92e9a1d0413227b6c25b9b4182fa5efd60d9c4a5e682f3c47

SHA512
9d72e7cebd85958c39273ac41f57afdfe326ebd7001c25613de977a30be95435f90acdf0a4baa315dfa736e2e544c2d88040182aaaae3960aea93d27a0d3cc96

Download Submit
/data/data/com.light.ddp2/app_jc/dc.jar

Filesize
51KB

MD5
17e76adc46244c2eb8240f6fa60ea08f

SHA1
1b3f04099dbfaffd44b175f2c70443d64652c02c

SHA256
8c237818675f2ab34fc3ab2a3b0123621bfb6986f9f3e51bc19bcbf53f40e19e

SHA512
110426e67ececa15a31214f06256aeb70e3984eb925becff6a9193600e52f3326939a1102b0e5f42ccc2c35ca5f35653668afda0c65409cfe5f1bde4eae5844c

Download Submit
/data/data/com.light.ddp2/app_jc/du.jar

Filesize
62KB

MD5
1a3acdbb7bba142fd62cd14f65f0f9aa

SHA1
0225a74d95ccb318cb833fb427d1bf4ad7bc693f

SHA256
fee9ad22d48920c23dabc57aa0e9fa9b2815a9fba645a95c51818549422713df

SHA512
c531a4407902f5750ef391b67bbf50a7b86774f785a0cd3124ee99ab0c68934878196b01005757349ff57c2cd2ed64feab4cb52274eea66bf72f32bfc2df1825

Download Submit
/data/data/com.light.ddp2/app_jc/oat/c.jar.cur.prof

Filesize
147B

MD5
ec192333ed35a09d35b8a43238d62e96

SHA1
68602309b2f5a4074f82039d5f51822870aaa258

SHA256
e6d5f557fd95af7a2b6e3a57d622e63373bd72b0274522bdb2b9f633db5b0d10

SHA512
8cfcf3d6bf60d574b37632e035d96d9e540b02e8d37481cac00b67cfb4a75c1f718009b1958618635ad5935bdfddff7b850dbc272e00396cb74da55019675801

Download Submit
/data/data/com.light.ddp2/app_jc/tb.jar

Filesize
95KB

MD5
1ba088e6a5c9179048c6f0dcb9126b9c

SHA1
1654ede1e7d91aefd6284a26e80fe1810233fb5d

SHA256
d6f31817dd626f862daee2875faf3c2c6003ed4aa8b50c50704fd2babb127138

SHA512
218583cf2389bc8d5b849f5c15d06bd84869b616260f4770d3310ae2e17c44e76be1ca4f9b55aab3f13e71ae2cb4c3c1eb3399ead84bc8ec3813dfba8bd991ff

Download Submit
/data/data/com.light.ddp2/app_jc/tc.jar

Filesize
51KB

MD5
4c04c839c4c1663e740e6b9a6f2b6938

SHA1
727f1d98bcf6619fea747d1e0e1744c8a79b04d7

SHA256
a0f66d4a51dfe41f03e551c00ecc18b276b0af74c057f5af128ebc1751b1930e

SHA512
9fe91d59d0887f7fe99604610884be1a7bad463eca1bd3808a74a5466afac2549cf6d5d1242dfce0ba2999fe595ec7bfcf4ccbe6bdd3a1260beb020a457a1dcb

Download Submit
/data/data/com.light.ddp2/app_jc/tu.jar

Filesize
62KB

MD5
0bf39a7ea5d64004b531e2c73fa7244f

SHA1
138e64f2b52fbe6b220e046b1b7b51b2e3500bef

SHA256
a5fd25605f6e0bf439a1a5ac64f501fdf92d67f3281bf35b0ad7c2da2c65df44

SHA512
5623031209559f49985d67a390653361c17ea2ae4b9ea40f6f2feac021bcbceabda56deaf24996603068c2c14fa04a4f8bd8c041894688aca247331245db5f1b

Download Submit
/data/data/com.light.ddp2/databases/ad.db

Filesize
36KB

MD5
828a3377f8f4e7fd850edb810b63b1b0

SHA1
3e65cfc37a562650b1fc8d46bb477f197f50ad46

SHA256
ee34b7110ffaf02a8d776f8722d57b89bca9c2d7f968a6492def1485ad16b0cc

SHA512
db8419ccf538fc4df35dbc91965ac6db3fb0cda0a6d1e38d7084e390c2d9105d3001ce80dd485992757e1e37b23c8b5704d3e6dac7a9d093d2d8ba532248a8b1

Download Submit
/data/data/com.light.ddp2/databases/ad.db-journal

Filesize
512B

MD5
100c808cd873ab54ea8dd05c43b78554

SHA1
bc5f2c7c9ef8e1770f6f2ecaf6693662edea00a7

SHA256
acc6a3f9682b9d67d422e567fa68f00b84d70ae182edae51a9a6fa18d5f18e6a

SHA512
29c4f62b75ff343659f83789a0820ef7638f9375b95856769699d5e6a2f75769d73a7b206cc2bb11aa91a7b38bf93e0c88f8eb7c0ddb30cfedd9435c1097ecee

Download Submit
/data/data/com.light.ddp2/databases/ad.db-journal

Filesize
8KB

MD5
dae310a280d12989b765c489f0ebb4cb

SHA1
2bc90114a811ea2ef1bc4fd0d583f242bcadbb86

SHA256
2ce7c460fbebf8cc25776ab9bed196186a3f396dd816c391e52f571d0d4ffeca

SHA512
5e736dd4e21ca71017035494d1e4bc4e609287278648893c724c1c8a6d537128fc0596ec6b853f92c33edeb7544da9866c97596d203b558cc708a40b76f88ab0

Download Submit
/data/data/com.light.ddp2/databases/ad.db-journal

Filesize
8KB

MD5
8b0ddcee74875605d549e054352303bf

SHA1
d1266e24b0c674ba544977a01d5d99f34f5bbaea

SHA256
a1ea45e38eb24ab00b95a7d41223ee74888aa2fb4b8886b120870c19d0dbb8a2

SHA512
969e0906aaca916ef8d110850779371e732f603b62ac936d8de8fd46ac7b777006ce0c3be97d915391640e62275c4fb1d08a084da7d752b23eff85e2e2c1519f

Download Submit
/data/data/com.light.ddp2/databases/cpdownloads

Filesize
16KB

MD5
e2c8da95e3d91b8de6787b9e50d8257a

SHA1
e0b5214d24b6e66ec2fd791085d1507f0c8485af

SHA256
4683755dc7e1dbef7d2c1d198707e9db8cf4bec331a72c5ed211346ae52e9deb

SHA512
be401dc8640cc7d07bdc3e8770be05b46cf6aa3f9d4749b7768e64becbdae328b456c5e2d5ada7255f4bff62f93ba33a43490125dc20c2ab02215662fbc0765d

Download Submit
/data/data/com.light.ddp2/databases/cpdownloads-journal

Filesize
512B

MD5
1fd607655d38d31ab50f6595866d8bbc

SHA1
fb5dba5cbd34ed5ed84ff7e9a3810e26e26a11d2

SHA256
418ca36cd794b0597b7f3d567f4e3c92ec0ed26776ee052188f64ebeaea0140a

SHA512
322ed3dd06e768c7c6b46e9759321d82fe28192d0ebfae2bf7e9c41b19dc44ee33f9b0f17e293e3ddf9214b5684b6e11c64e3ceeaef062d09217e673aa7d823c

Download Submit
/data/data/com.light.ddp2/databases/cpdownloads-journal

Filesize
8KB

MD5
2ce4bbb6995d6ba61cfd762832fec176

SHA1
dfda2dddb3b3db6b15017153fff7b22e9c350aa6

SHA256
aee77369ba7a36f326c7d4b9fcac8d7a9471262dbd8be90dfb748b9a3cf8bdd9

SHA512
b4651ab09c244a40d8880957352b97dc8ed007040076c5595e470c7b85769466989ec4ff21950228c7efdc2641c09c2d9c46a3a683a20d069fc4516dc66a8ba6

Download Submit
/data/data/com.light.ddp2/databases/cpdownloads-journal

Filesize
8KB

MD5
554652be5a6f6e9bc32ba560fece4b08

SHA1
1316db12f5b3e1d8114537d36f044c16241eaf9b

SHA256
85bbfae8fdf260955c97674f5b2823f80b551273d34008d58a183773b993c292

SHA512
9b082d99c5ccfb83ca8cd3ff6bad426008525b7a20f960c35d286287383d0a15d4e7434aa4d65ec5fb9e684670da0c5cec5e6cdd69c0052d09a88ba5998325d0

Download Submit
/data/data/com.light.ddp2/databases/sldownloads

Filesize
16KB

MD5
a9bd2aa34ce441d967beb6d060b9df7b

SHA1
79c6030877dc0782966edd60baff0ef7f2a48484

SHA256
b8d584978d24a3145fcda5af4f23a81114805d6a4714c5119c4105a6eb3ca57b

SHA512
e314e034881d50a666bab953b9242eabc5ae3fe99ea6d951072c17e67f11c1ad379212aa86be4f37264c4744526415b82708858d361beff38fe92e77963ad449

Download Submit
/data/data/com.light.ddp2/databases/sldownloads-journal

Filesize
512B

MD5
ddc14150d20e82df006b94ca5e7d868d

SHA1
24a739f55eafbc447711d30196fff3908135c882

SHA256
049561f0ce473eaadc3f2ce31c42012613a00664e2f883c0e8106f226a618dee

SHA512
ee1145c42600506c44d1e3e90d5e35707a68cccdf2fb70c1bc1e9993905dce7c3ae710c7bb622056dd53fe916f987fae115c25364e8f8fa6fba4ed0ae0bb78b1

Download Submit
/data/data/com.light.ddp2/databases/sldownloads-journal

Filesize
8KB

MD5
e7d70ecaa412689a660635ff9c5b2739

SHA1
c85cd52975e289119175872a301bedd86f899f58

SHA256
40e6e04e019fe41e294510950cb2e805b7f5c20588a075fbb2bc03ed01ad561f

SHA512
b6fd69d0f0f05e1305ebe673f40de8a75a41f5fc7f34d7aa80c7c1ba2d03cb5b03f9029358df669e44f0a9c970934ef6b2136b89c368e400d9d5995fe580e6f5

Download Submit
/data/data/com.light.ddp2/databases/sldownloads-journal

Filesize
8KB

MD5
4f1644302adcdc819a7c5e0c929e152b

SHA1
294b5f9df1d5b3890d093e8325339df591ed66f0

SHA256
17a742b286bdcf06b7e63b6cd16bfa04abf3c71c2a875368f48797c34a70e3e6

SHA512
d917eb92c4c34a6b1f380ea0e5591550b7c6ed46279ee5d8476b393ccf56f76b1d3aecd7bee1006f74d1163c55b1b11631c24c781c4929fbc520bdbd88cd11b2

Download Submit
/data/data/com.light.ddp2/databases/vdownloads

Filesize
16KB

MD5
e7cd9ccd4be298d81eb09b3d6b49155e

SHA1
c210726abe27924458141b791a4b200a1fca656b

SHA256
c2c39a68a208531dd52c96b0caa13f29f0576c718673c6c575587f3814e2d3b3

SHA512
9a7d0e51c74a595d2412415add5e8d05ad3abf1996e2b79d20085f3adb358bd0cecf6beb43b433165b03d864cef72d4448090aeeae92311cdb59a8715f832ca3

Download Submit
/data/data/com.light.ddp2/databases/vdownloads-journal

Filesize
512B

MD5
251694c5244ec96927918e806ea3e32c

SHA1
98717c40ff5b2dc5134785c0b23529b2d2a687eb

SHA256
b6788449b55f388c5becb0adf98de295bbccebc573d56479f131ae3b1c3eb3c6

SHA512
e4ef69372a8ea7e8c6e82f906d4487e5836f0ba2c9b3e8adf99633b52ec90e1dd2b1dd60a6485374dcdb5ae7a9e806be96c18db368f5b2417401ef5d928f138c

Download Submit
/data/data/com.light.ddp2/databases/vdownloads-journal

Filesize
8KB

MD5
150f56be149ad243f12409ba35a1542b

SHA1
d8af988491d790b836508c519dfc97513ac75001

SHA256
25066dfddff737e56669ffa319a0e047c9f2a29e6f4ad96cf2b4e8200c200cea

SHA512
f4aa76d890d7891338bb4d449664bee376d03bf8733e87cfe1c725be017a6567ea711416591a2bf8ba3720b8dab81ac6e0f8599aca7932617766f011bcfa59a4

Download Submit
/data/data/com.light.ddp2/databases/vdownloads-journal

Filesize
8KB

MD5
1b3e149c0113d2977cffdf2cc89df91a

SHA1
19b6798aa9d6d806ae14c1154fe3d209381a261f

SHA256
4d835f8e4702c12dcee04be11cf654d4d1bbc2609e432414051b4d667685f009

SHA512
9865fc0d632e41108963b4a9ed82ad4cc82b1e09e871d11a8e18f32dfa6cf581ca24ac2f4f30375ba465cd77ff182ddde1f3ab4944b2c3f54b64a5b35e1d4524

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1

Filesize
16KB

MD5
f5f27d5a5e3029f2ecab3d7e64cff165

SHA1
b76ba1a9e01700bfe1428c5c1a4b81e4782c5f09

SHA256
58c23195c845eb25d30167f6eb703c3d8faa7f893d0f16b81132fcbbb5ca7c5c

SHA512
79388652d4ee37cad56bb229c1515916c51d30fbe238af18e41afd155bd98a199935c92491e87bd0ab2a02a36bae4b73a9736428300418b23bb8d10ac0d1508b

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1-journal

Filesize
512B

MD5
a6a3aea294d7407b55001f49776147e8

SHA1
2bf488b73b5b2f6446c6c33e1d05cb7fd2ca550a

SHA256
39da288dd617af64a62d1593a177f6910bf4da85e00ab5d7b586b8e155854e6c

SHA512
a0d716ef4cb4b9b268e06d4cf93ce7f6ba4a3ac1703f82280ad2984d807e9f8ce4edf3976dad94360e53854ff47f90d97ae1e632c0d07b92e8fc0dc2b932736c

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1-journal

Filesize
8KB

MD5
0fde29922f14788e0a3de95a637ecf6e

SHA1
92fd7dd16bad7ede65f742dac1fec67b1db450fb

SHA256
ae647d75177a391e7e4681553c8e41e2f0d634b73d34f99a61c7dcdf8adf5fd2

SHA512
06fc42394c14b3bbffc21d078f6e5f8ae5dc78864d92738096212d629334f51b20fd52862c518eb9f4947c2323f7991bd284a56fe3c9f754a29ec2b01ea8d6b6

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db1-journal

Filesize
8KB

MD5
7035ba594044da59cc2eee9a6e41dbf9

SHA1
1bcb8a7270b0aa1addbaf67317fd317f5687a5e1

SHA256
de7b50afd4f2b11542393b739982dfaf3160452b54d312766045642b755535fe

SHA512
2f2e11b473552bbe0ac04012faaae3bcb0d2140ca50f6895e67443c75d495b6eedf439e23d66ed2672ff5b063f2dc239850effe1e4894e1414988b2e93be5ae6

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db2-journal

Filesize
512B

MD5
d653ccd2a3cfa2f1c8be2f8c38640ee6

SHA1
ce4e0ecf49575dac7c951ae6673883143d681d57

SHA256
8fd77c88aa04cd0b0316ed0dd2806287f6ecdbc1b2a8c9f1add234da5781d861

SHA512
e356bdeb137ddb2d2bd9118508347e47a774863a47818bdd01899bc05f8257e550bf37c2703edc8907c7b334e97ec5ffc45c4046dccd7fafc95fd5bd2c72b276

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db2-journal

Filesize
8KB

MD5
e9de6ad6d8aeaa424925ae99070fa37d

SHA1
5bdf1a42b793754700a360161591103530e0bf6c

SHA256
5daf656e4562355cc5f1cee63f3af8cd44e72a11cf12c700dfc05574c39e4dc3

SHA512
1ca2721b6ff65fa3fff6251ce38c034865b4bb6a237b6080d14ca645448f85d4c62bc6e9e480f4bbd49fa66314994ddfbe7157719e22dd0c777db9222a5db6b1

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db2-journal

Filesize
8KB

MD5
f35c9b50bc9f2486b51bf6afc98b1f61

SHA1
bd4f358eec6b4829c287e13135f0f1a987aea8b5

SHA256
3b80c08bbcf1f53169786ee434c29d99c22c55ec465995234e5bbb1dc58fdcb3

SHA512
cebc1b8f685332cb0754f42e8de7b63541fd1496e2ec1271a6396103eb347890af3da3b0a0e4b3ad60a2897e1e3887fa0b2a2296579c2386d95b06a6529c7629

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db3-journal

Filesize
512B

MD5
23128412e3bc01c20aab305ab4530c8d

SHA1
0d742b29577350313f1b7a2945f6511ea5fe7d2b

SHA256
a38be39f649283e9fd7237c96c8f1a2eb7bac4d338bda2b8551b6c7537e237e6

SHA512
49861d993e2671cdec0a05491b72b327f1bc5db392766da4e8f72628a0894b9bc8c2f032051c0d08949535fb47bec83dae028b54a4797a3dbfcb382444bc9798

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db3-journal

Filesize
8KB

MD5
524ea4180565805e33414f2e0de1b303

SHA1
4de2385453420be1e589a002149fcc57b91258bc

SHA256
03667b7d2b583d89fe18bc0df203c5bb4ef26418d282138aef801136406c9637

SHA512
eee0061d60ff7d46ba7290e321d3dfffac8eb2a5bb661dbf1878e942e3f8a13b390c1e2660e31b64d3aa3b7675c796bcb46339101d07aed02dc99daabbf8abaf

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db3-journal

Filesize
8KB

MD5
26cd908ff908888f49b056c50720c6fc

SHA1
f9fd9815258cd93be255d97e47f11e96b000fade

SHA256
b7bb12aead4679ce288dacb22691fbd6e1b99caff3fecdc35ae85e7209cecb44

SHA512
309164a146323d389506373f6047a1160baeccf5f15a1865f5de14dde034796cc1cff1ce813b171855ee48b3f87ce26163d242dea283cc15b155b14fa4c2dba9

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db4-journal

Filesize
512B

MD5
3d7b72fda9d920ae592902871cd10409

SHA1
c8456430dcd349bd6993f664758ff7889ed7d02a

SHA256
e75d2e28f3d63405025931971538e6ff1a52057c055155332c1e963e012e79a3

SHA512
108005baff6aac8659fc5924ee8bcdce437d3c8f54376b39dc95e242dec7db7a2c930e82f6888be03497d0eb2cfaf1001fd744546d2ede791578a96717b00e37

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db4-journal

Filesize
8KB

MD5
8ad3999b12c39201c86155b49195c387

SHA1
a65b026b1dde7825a833b4350dca870828dda953

SHA256
327be31f6981324fb956a0d3305284272d6cdf29ed54f1d9b48a61e792153f1f

SHA512
d94c59598d1840efeafd458f763571384046b72ec8769b5ee595ba02ea153d70ce56b43a9f9bc6e295785ba584440a6efed9643d2022785b1e1f44c4a56af978

Download Submit
/data/data/com.light.ddp2/databases/zdt_record.db4-journal

Filesize
8KB

MD5
86311a938a34f11166e3170e42ed0f99

SHA1
200656941f78bdf0b7495163ccbd5dca6400a7bf

SHA256
0599e2ccbc58f8b046b96df2787c8011daced645029f68a9660a175f257d3ecb

SHA512
1fe2fceb216573bb34c33a1f4fbe73d836816c48699bf23d6ad721e187287c56c7f11411e44704cb5a49b2fb9f9f5e32daf2cf075274515974c66369f1226a91

Download Submit
/data/data/com.light.ddp2/files/BKit_qsb.jar_tmp

Filesize
40KB

MD5
2b15afda4be2bdc487bcca6dff5db3bc

SHA1
b07df752efb6650dfb3b52ef1cd82a0c9419c30b

SHA256
a8860637b469acbff60958d3e92b2daf451010e8d30e69915b79326249ec6e06

SHA512
22c101049771acbb9ac40c4a380da423b784ff2dd326ad390132bb4754ff7542325fd08b980c755404ef6aa69aa6c9457d3ed1f3208e0f1a10484d9881212025

Download Submit
/data/data/com.light.ddp2/files/oat/BKit_qsb.jar.cur.prof

Filesize
253B

MD5
adfee78c504b7d5caa039e2727ad88cc

SHA1
e37db5b118a0f55f764ad2c38488fc0d4a091e45

SHA256
c3b35f22e026cedd93c87c406cde840d9f11899af9ffb5ed078cbed1cba971f2

SHA512
15cff76a79c807465f58d3c0a6f7deb29792289759b3143b8fabae7323a7a39a0c6c32cda5c2b00fff3149dcf2adde5d3aa48c96dce8189c418241a465fb6624

Download Submit
/data/user/0/com.light.ddp2/app_jc/b.jar

Filesize
167KB

MD5
2e005187eab28668da44a87ce47551ca

SHA1
4b81ef675d8b1e285716b3879320bd298e4a6293

SHA256
efc89e94dad31ea2776b834478abbbec071851aa62127edbbd0e44d29c1884de

SHA512
111a7276bdc60f1cde5cf91bddfa517ed99c315a663a3270f3f1ecd7e4c8df44181ab2019ae2b493f6cb05061b2f0d96ea3e8baa679a34eacf8b94aac07b7068

Download Submit
/data/user/0/com.light.ddp2/app_jc/c.jar

Filesize
137KB

MD5
47156cf1a64f54cfb14fe9b28d58e589

SHA1
286284ed2e5dc22d30d1114cc035251c54d63924

SHA256
fba71019b75963133d4e7d02297f0e6957d7ee6ba834be995c1dfb4c67ad7269

SHA512
dc98f55434296871ccae9d5b87b6fc80e7b257dfe4a343c2d541bf473e0206db89b7d36be2b2bc13fed6f0c5867a58a37c7dd5fc0d89ab520d89ed519a2fafd2

Download Submit
/data/user/0/com.light.ddp2/files/BKit_qsb.jar

Filesize
83KB

MD5
15ac4c22f4533cdb23beb38ca00f8f5d

SHA1
5b3c8903dc9dd2f82a5dec2a57f17dab14637f04

SHA256
0332d8ad92ff94bfeecb69055e494a0ffdfeab832aa2473f22ea23a200608a77

SHA512
0ea20d38e9d760bc3ac040fb272c6bf64c549fa87579b7a31cf9856dd2050f0ddf5ef8cae1e740da8508d7e1135cca144d4af65105745d3dafa485c57fa504ad

Download Submit
/storage/emulated/0/Android/data/cache/AppPackage.dat

Filesize
12B

MD5
2f640f14391154e7615c3ad95fa20701

SHA1
e7232289cea6b063602a3a94c4b1f81e7c365b6d

SHA256
a978f6677b5db792b3e0862dc82d440e5b6a9f62282b6737996316955d5af885

SHA512
b4d35dc072af53d6d6184f35a44b0fb3cf88814edab53d1458da957f0bf34d9a11b232b3d8d35f75be165a9eb0042d1d5306f4d9050e7c2384dc5fab6f06d0d8

Download Submit
/storage/emulated/0/Android/data/cache/CacheTime.dat

Filesize
13B

MD5
837964d074c6b87a907decd13c40b71c

SHA1
81641f6480cb29be1d06bf5ee6f4fc44344cdde6

SHA256
2e679a812d6afe7bf5c2a5a2e1799c71440216b18edaeb246e5066ce889ac608

SHA512
7a60c01bbcf3edabce0558d71d8c9d7811afa5f7001bcd41210796c8c1cc37258a76ccdfa041aeea2bc38641fdd03e1f283ae7fe4359cde5cdb5cf79726677e1

Download Submit
/storage/emulated/0/Android/data/cache/UnPackage.dat

Filesize
15B

MD5
e8a967565c007208bb449ff0e9c82167

SHA1
dd9e82a5f20aedec18ae410a8d19928218d6c9e0

SHA256
f4d6ba99555d460b9c89e34bb6af484eb5f9155838ffcebc49286ffac310fc7e

SHA512
d0962f78f3aca399ca58b6fcae05b32f33c0785f26342c78451551da3b4da05bf3b0c37ce28e619c62eaeeb27198ea2bd59c72a10398d11cac1ad84813e470cc

Download Submit
/storage/emulated/0/Android/data/cache/iconCache/CacheTime

Filesize
13B

MD5
88fa423d67ca9c252d369eabb7b65770

SHA1
414958bf01c7d90f2df0c6f7aa05fdc3c62a56c2

SHA256
30ea1a6bb6e554a601f034468b610cea589805c6868823af1349e024b70b3b2b

SHA512
9f01234025a27be7562c3608b8f8812542adb6d7971eed9e863828000cb2d0a24f10c257f1339e01b8f76a7ce63e36e166f1805455da7090d7c39da1f1849939

Download Submit
/storage/emulated/0/Android/data/code/.vapp.dat

Filesize
813B

MD5
be767381c88493dd430666bc78579bf8

SHA1
5dda65b8095b6e82b095b3f44b29e53eb4b7224d

SHA256
fafa6af0ba2ee1cc83b7b24c5dbecde34b45f1da79d501942208257c9a671db0

SHA512
79793e28b95603b28dff7ab0a891cbf0fc621a049fa60f5f56c2f385984ef3c9a0cae79840204cd0a6b6e7e531870504ef51d4121f97a997444a04928d3083b2

Download Submit
/storage/emulated/0/Download/9j/1.dat

Filesize
15B

MD5
d766bbf21a5729d90c632821c152e14e

SHA1
8abf0452cb5625c590cc1a078f04c68209fa841c

SHA256
24a22a592a9438c5c6ae3fee81ca70ef55bbfb348542eb8bc168ddf624ea6d29

SHA512
fd434285cf484091ee92365b869c9263603990e4e5d2ccafac4da0397a13de50f4116569a11a6616ef966e73bdba89c40f6b4c7d574c1337e0106c8aecd0da11

Download Submit
/storage/emulated/0/Download/ads/clst.dat

Filesize
15B

MD5
6a3e779f7ca58f2c8fd5e9128a0b6564

SHA1
5a84396c4ceb90109c39459c9983149367ae2f01

SHA256
454e6ccabce23c9fa22e5ac243f8eba07f51a70b39f419ff3552c82d7b3c182c

SHA512
353e2ec46731c51fcee90871bfa88d668fb039f453bd8eab2f568aa08826bf0e24cd547885395bcde818306105cd9f509c15a218f8d3d7d0d560c480367afca9

Download Submit
/storage/emulated/0/Download/cp/time.dat

Filesize
15B

MD5
b7a31770e2c80ef52d83cc712eac07e4

SHA1
914c293290a7883d3144596f6986b40d02bab7bd

SHA256
44ba9624fb8ef45118a49a8111affb812e2c62e6beb41b302ddfa8cb59d65e8f

SHA512
709e2b42c0c0e2670fea0e977560456d22882e274e7d3b2bb2d99df1cf503657a3cd371d799a8dcae5ba2805e61323c423c73cfb9e9b0d4feedb04b0b2806f8c

Download Submit
/storage/emulated/0/Download/vgp/clearT.dat

Filesize
51B

MD5
7d5641c2a394f9af54c18e1cf6999129

SHA1
1b48985155b57624c59b3e601da6d8e20de339c0

SHA256
6bbe5a0e430cba14a41288e1b0db973e63c40df23c9a7599b53cc9fe5122bbce

SHA512
a63a693f13060fabb0441804b3483f0538be546adb53468fe43af35ec4ea6aff1c8ddfa5ee4f6d59e1ed01d8ea904aa9cff0c1130afeaadf4e6aff840f31fdba

Download Submit
/storage/emulated/0/system/android/data/light.ddp2/devscore.dev

Filesize
2B

MD5
142ba1ee3860caecc3f86d7a03b5b175

SHA1
6e956e31476ccd6bea194a2d6e5e54d66bd3281b

SHA256
dedba7762ec349c2d16e9199752b17f374d6f83071d29b09877816f390928960

SHA512
afeff9332ae66f946c36cb077ca8eb02a2168d1e0634a5d04c607beb2b20abf893b18e30c5061081c7b0b6886d290a970378df7a05c565506c7e6c309d9532d7

Download Submit
/storage/emulated/0/system/android/data/light.ddp2/devscore.dev

Filesize
4B

MD5
29878c5aeeb58fa544cfb0290414663d

SHA1
046dde42eaa659f91800a7543528d7b7792c3096

SHA256
92a6d58077a0525edc4ec4b040e9d718f9377650842fef989b81f026eb0e225d

SHA512
d6f0f7c7d9daaae30c577fd3541060f7aeea6f3503fab7e588988e271540865431914834d7ccd1790fd4d46f865aaa244947f4a7e86e2f67630c09431c290932

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads