26fa63b70718a7bb9849dd72be6d7f55c6163e5a8b9b3085a216d1b9a5bb4c82

Analysis

max time kernel
107s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
12/10/2026, 23:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.apk
Size 1.6MB
Sample261012-24k3esfa67
SHA256 26fa63b70718a7bb9849dd72be6d7f55c6163e5a8b9b3085a216d1b9a5bb4c82
MD5 5bbe4283c03e324a3169cbdfc82fb7fb
SHA1 8e1ea9d1df55cd83cde8947a74ba77ad0c790f73
SHA512 15020d72fab3e3d56b8c2a5c140443d94c57fb67edcc5518893bc3060eefdf5d584f8d50f2a7f00acf8a55fcc3b6c5b883ab7a2d3d9820c8d689ce7fa80359ed
SSDEEP 49152:xsle6Dpi5i+Co5OELAR56ZZEVNPIk4BeY6DuCp:EjY5JCELAn8CLPIV8DuI
TLSH
T171751213E74AE497C5B3D2368A37A16191828D349707F7871C0AB1788EB7EF40789E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker collection defense_evasion discovery evasion impact persistence

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.name	getprop
Accessed system property	key: ro.product.model	getprop
Accessed system property	key: ro.product.device	getprop
Accessed system property	key: ro.bootmode	getprop
Accessed system property	key: ro.hardware	getprop
Accessed system property	key: ro.bootloader	getprop

Checks Qemu related system properties. 1 TTPs 5 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.android.qemud	getprop
Accessed system property	key: init.svc.qemu-props	getprop
Accessed system property	key: ro.kernel.qemu	getprop
Accessed system property	key: ro.kernel.qemu.gles	getprop
Accessed system property	key: ro.kernel.qemu.vsync	getprop

Loads dropped Dex/Jar 1 TTPs 11 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar	4323	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar --output-vdex-fd=50 --oat-fd=55 --oat-location=/data/user/0/com.burin.orkdn/app_Wyzf_plg/oat/x86/5.0.9.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar	4267	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/new_md.jar	4426	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/new_md.jar --output-vdex-fd=102 --oat-fd=104 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/new_md.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/files/new_md.jar	4267	com.burin.orkdn
/data/user/0/com.burin.orkdn/app_dex/utopay.jar	4460	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_dex/utopay.jar --output-vdex-fd=109 --oat-fd=101 --oat-location=/data/user/0/com.burin.orkdn/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/app_dex/utopay.jar	4267	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/Plugin2.apk	4487	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/Plugin2.apk --output-vdex-fd=108 --oat-fd=109 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/files/Plugin2.apk	4267	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/yf.apk	4556	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/yf.apk --output-vdex-fd=112 --oat-fd=113 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/yf.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/files/yf.apk	4267	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/yf.apk	4267	com.burin.orkdn

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.burin.orkdn

Reads the content of the SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/	com.burin.orkdn

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery defense_evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.burin.orkdn

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
28	alog.umeng.com

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.burin.orkdn

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.burin.orkdn

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.burin.orkdn

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.burin.orkdn

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests dangerous framework permissions 25 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.burin.orkdn

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.burin.orkdn

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.burin.orkdn

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.burin.orkdn

com.burin.orkdn
1⤵
- Loads dropped Dex/Jar
- Reads the content of SMS inbox messages.
- Reads the content of the SMS messages.
- Requests cell location
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4267
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar --output-vdex-fd=50 --oat-fd=55 --oat-location=/data/user/0/com.burin.orkdn/app_Wyzf_plg/oat/x86/5.0.9.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4323
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/new_md.jar --output-vdex-fd=102 --oat-fd=104 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/new_md.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4426
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_dex/utopay.jar --output-vdex-fd=109 --oat-fd=101 --oat-location=/data/user/0/com.burin.orkdn/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4460
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/Plugin2.apk --output-vdex-fd=108 --oat-fd=109 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4487
- service list
  2⤵
  PID:4510
- getprop
  2⤵
  - Checks Android system properties for emulator presence.
  - Checks Qemu related system properties.
  PID:4530
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/yf.apk --output-vdex-fd=112 --oat-fd=113 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/yf.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4556

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

5.0.9.jar

Path /data/data/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar
Size 50KB
SHA256 611bbbd83419cac7976482fefa632fbb138332fb1cebc494f114787b66ade248
MD5 420af8883b28b70fa5698fc2c9bc1ae2
SHA1 80b2d0868f0c2170f93d2f93c61c8b430936d181
SHA512 f72fd329d7b9ecc7d6c7c7c117ff638456201d3797821fdd9eb8b6d5f862544507fd62985a3ecffdb33349851f6e65920962fa44f24bef20b042bcf0ca9ec645
SSDEEP 1536:cQCX8PNdBpV91XMH8h7K50LdxIakqKcUG6:D/PDBpL1ceWQJBvUG6
TLSH
T1F333F1A2F8429A3450250DDAF46C94F000659A1ECBFBDF4D28F548B7D0D7ECE7191B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utopay.jar

Path /data/data/com.burin.orkdn/app_dex/utopay.jar
Size 30KB
SHA256 d5c57482245f9caf63cfae312978e8d38d0185cc3161f1f16dc4d3da91b6983b
MD5 835e546b50b1e9d513f5148f7a1c0faa
SHA1 4a072863d236f6ed895647c809359ca1e1d25ed6
SHA512 2cb7076e28464f53bce04efbf1a250294879894423320195af3187aa58e2d6f9fb88b34fec3a347676949dcc1da2ed048bfcb6c4073b0a75db97ce3a00984445
SSDEEP 768:NgCHAfdzCElRN9KAHzSdVVQzO4W97lDH2U1Go+ik:RAfdznlRN9KAHzS7VQqiCGFx
TLSH
T199E2F1F49749B700F980E0399A4979E9CFB7657F502EEEC976169C3ABE00F1561020CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

740410100062013

Path /data/data/com.burin.orkdn/databases/740410100062013
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

740410100062013-journal

Path /data/data/com.burin.orkdn/databases/740410100062013-journal
Size 512B
SHA256 2fdebfc2b05a5b2ad610cee121426766522efd70c12e84cf54983954832cb32f
MD5 7843bbe1459242a27b548060897e3d4b
SHA1 f6b5904224e8430200bb4dcb3dbd163fd226c42e
SHA512 86d16e4de035aac95a45ff704e4736d6abb0c6352a6b418d203bcb0fe33ba925b59878a9d19d0e1e48f9483d2e40373a2be91b13cd88aa7dc915dcef5ada4e6e
MD5 SHA1 SHA512

Submit Download

740410100062013-wal

Path /data/data/com.burin.orkdn/databases/740410100062013-wal
Size 160KB
SHA256 02395b0127cbeaaf5ac5861efd114762e06b70d48209d5373188da54a41811f1
MD5 df59f999179a06111b467314001b97a4
SHA1 2493fd1857776e568362fbcb1e308c0829a5cff0
SHA512 aa148c2179525c7fb343528955dcb5ca769ff15908b34358aab353f2596ef3de5d471bc5ac6609e5080f8fb00037d41811c4aa79ef974975436f6dbd661391ca
SSDEEP 384:RbyIhjMgsxr/cyPwfxrA3yPwpxr/cyPwnyWxrA3yPwpxr/cyPwSfxrb3yPwT:0IhjMgGpbEOplNEOpFBEY
TLSH
T1B2F3D99B6E240C57DA19CEB085048352E025F73E82C7D2F799F96D352C59802DBA2DBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DD.db

Path /data/data/com.burin.orkdn/databases/DD.db
Size 20KB
SHA256 10975dcca48744c40859197d891a3a33493d00f866c317ce7ee818b7c74ede12
MD5 527782f11b208e3f32a45df9667382be
SHA1 75ddb0a67ae976a49444ca73948c93e39fc8ffa8
SHA512 b4c024abd5379d1fb1300f00db9278a1bc81d1b8bde5aae8a78c3197dc98b9b867700ec5e0fc27c4f10f7403a675096f2d99b875f0472916c63930c8e8f860ea
SSDEEP 12:TDlaOjK4pT9eXf9BKP/mvRmBEyPbAVOwWSXF:TcOjbGfk/mEGSEX
TLSH
T1B592AB86A74015E7CA084333A8CAC3B02CFF9539CEA5CBCB64978A14EC9164C7460E20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DD.db-journal

Path /data/data/com.burin.orkdn/databases/DD.db-journal
Size 512B
SHA256 16959a694bc2f05fc5653e7132e0d8c4a58e5bebe7c0c15a92533498b778d650
MD5 616ddb161b8228eb184ecf171315644e
SHA1 041763580cf5510ea1151c8330a71ee3fa47a203
SHA512 bcab17edf8aa5c113724954b7e0a9fe6a8bfeb9877b952176aa1211176dd199622f45772a86573105a96606f20977e904b98ab6599cb0aa1363e5092a7431778
MD5 SHA1 SHA512

Submit Download

DD.db-wal

Path /data/data/com.burin.orkdn/databases/DD.db-wal
Size 40KB
SHA256 402a69f4dd2322b8b93e06303536c271b6058b2c9945d60cec6565e00425e886
MD5 aa65402b695bb7f41e8a1ffdc4178f0d
SHA1 50b32f921d1284f1ad10f1b9ee2f54a83063b511
SHA512 67eba0a49b10d211ba350d7950c19b9a8ae79c140e1ee15377f36b50de715c004c2bf1add63ff04c94b884db4a4f61f6f354b11c4014176ee20273a3d8c55fec
SSDEEP 24:KYzyGSP/WVDwWcOjbGfk/mEGSP/++E/FKcz:pzNSP/WVDZcOjbck/mTSP/c5
TLSH
T123036F91A74019A7C10F63F29CC5C36C2DAE96698E62C78B26D54594BC536CCA450F14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc.db

Path /data/data/com.burin.orkdn/databases/cc/cc.db
Size 36KB
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4
SSDEEP 3:o1Xll41Xll41Xllv1Xll:oQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.burin.orkdn/databases/cc/cc.db
Size 36KB
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
SSDEEP 12:TCFP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQn:Tz7sL7yot3BVrHotGGSgGQQQ
TLSH
T186F29EC397101162C97C51B3FD9592620E74962EC7B71746BEE015066DC5B01F83AEFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc.db-journal

Path /data/data/com.burin.orkdn/databases/cc/cc.db-journal
Size 512B
SHA256 ade782ab1d344832f5bd542fd0dd6a094b4c65c92e1367f7a7b2e5e5115b2dcb
MD5 df1d4e43870c2b9b2d6bf9f07728bb75
SHA1 8423837f6a7e1a57b0ff577e3fc4398bafc4f064
SHA512 b774e2fc8a1d92a611eca82db238a4c3ec45751ad9efe4537ff2d1a17e6bc12cf844ba74df33a486228a13e24a8e6ea1f17bd5de58c3f0a21b756ff0b67209de
MD5 SHA1 SHA512

Submit Download

cc.db-wal

Path /data/data/com.burin.orkdn/databases/cc/cc.db-wal
Size 16KB
SHA256 9f16b4e6b500f33916dbf135d43062d6e42849487fada7a5b509e083dabec438
MD5 3eec72ad8042d4ae0fdaed41d01558f3
SHA1 50162a7b2cf23bf86df85a3cfff1cfc8427edd8b
SHA512 e5168c5a6af47dc8639c713a6411aecf6393671f367c35cd8933057231d4afd940d5d1f425a4fbb11baa3a9b764929ae338505a12c42ce6bc0aa64dbefa8fc9c
SSDEEP 3:OlH/lztvnK62lDztvnKgk2k/lfllgvnKTLol/vXllnlOovnKBtFllMovnKEtaDv9:KXolDpvhzvIctv8yMUovOvt
TLSH
T18B724C4100F7D2FFC07D26754535F712142590D894C51D15635974AD148510095E3939
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc.db-wal

Path /data/data/com.burin.orkdn/databases/cc/cc.db-wal
Size 48KB
SHA256 554555fbfa6e944e326a07dc19e044f16721507a047c50e1362343318c668180
MD5 f5496fe7f949f7e7c720746c89138928
SHA1 39e352850aec5c42cc7180b93da0a31c6bc77397
SHA512 186e81315e146b27e4aa3eff600964bf271403c6a65c4ef23cd8ca01f941beb4da2da2229bd702d427000883c3fdca84ab0303edc353c839a587ce29a6f00f3f
SSDEEP 24:KmzyGSP/jaGyz7sL7yot3BVrHotGGSP/i77eCFbA:jzNSP/+shBWfSP/iveCFc
TLSH
T1BB239783DB001152C0684DB3FDD5A2520E77E22E8FF357067AA145166CC2686B925FAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flyou

Path /data/data/com.burin.orkdn/databases/flyou
Size 44KB
SHA256 d6e4da9d6ef70d6cf7b550a6446a8bce843ef397c1df2f0c6551881853e0403e
MD5 a072557c13ffe50f617819f08eb8e453
SHA1 67e36dd1b56ef6a2a6eb4efe039b9de612870697
SHA512 f176c3cacbf47811c508084ec1df66ddc16ee7abfdabd5a225e2fca8d3b5da9f41a8adb2c7b9ec3f79d972a70f4f65f1bdc07694a85dc35bad94411c3ef68678
SSDEEP 48:Tt/6nFivnFi8nFiB9aKFaKGIOnJlPILXVS:JMx7aKFaKGIRX8
TLSH
T1F513426179144402EECCC3721A87F2D40AEC413E6EF657416C9F5D1BDABC909E4BE8E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flyou-journal

Path /data/data/com.burin.orkdn/databases/flyou-journal
Size 512B
SHA256 028f576523dab0bf36e38d89b5f70d61afce20464982f73b3f75253dd9e3d502
MD5 8ba47134d58b035f424336587561397b
SHA1 c998f818abf1a5d3a3371b948809145ea43ffd12
SHA512 7e9936be19d6b7edbb7701ed6ca663102ecf3fcf1287412a156a58b04090ce7809c15842f13e250cb6f6fb63f6b13b79e4f0b0870fef765294f234772759dd7d
MD5 SHA1 SHA512

Submit Download

flyou-shm

Path /data/data/com.burin.orkdn/databases/flyou-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

flyou-wal

Path /data/data/com.burin.orkdn/databases/flyou-wal
Size 56KB
SHA256 68352fa99bb09fce5cddd9fcfc8c4fd6577340385f5ffdaea084036efa1774bc
MD5 897b130c4a3051b488da2aae672880e8
SHA1 9471bfe5b7275ed4bed81ce327852f50bbdff5a3
SHA512 bb4a14153793093ccbfaea916910f6d6e5c5268e40151b27a5716929a5e3e7b2ea0680448474b107cf5bb15d683d8474969d5de12bfacfabef0866ce5e411ae8
SSDEEP 48:fzNSP/yt/6nFivnFi8nFiB9aKFaKGIOnJlPILXVSP/jDOX:r0PEMx7aKFaKGIRX8Pr
TLSH
T178438B5179040512DADCC3721A87F2C51DED413EADF74745389F5C17EABC988E4AE8E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mhzb.db-journal

Path /data/data/com.burin.orkdn/databases/mhzb.db-journal
Size 512B
SHA256 8aabc54bb4a7bf24f9d8aea9b1caeaf8c9feef55c1c68546372340f32aec8c36
MD5 c6d4c32568bd3012b5ba2d7c8f1e8b0b
SHA1 d067406b606106f9ac31d9f3592f555863d6f2cd
SHA512 f2172d0ac8eca8aee5394c5210757c871c16abe468024b66423ab30bcfafcbbbc0c553a953bf0f00ea3652042455a87b410a7c3a0123c4d9bcdd03953c6a5db7
MD5 SHA1 SHA512

Submit Download

mhzb.db-wal

Path /data/data/com.burin.orkdn/databases/mhzb.db-wal
Size 20KB
SHA256 bbc4abbb99fa114bb506922fa08adea1723febe7be423945e9e2e3fd709045ac
MD5 0aae331365f31ab1db6999d9186000a4
SHA1 90aa5a6273ed26e6d551fa4f352747b5b0d4294c
SHA512 23a5f3b2c98bd75b745e407bac70e17b445af6a54ae444cbc110838b90a75abed6bb64e2a8fc3cd90062a84f8d4161e52590c1f2ff05a9f14c6e45d1eb5025a3
SSDEEP 12:KqA8lzdTRmBEyPbP/ake4e4OwCldlzqDRmBEyPbV:KzmzyGSP/akevCElzDGSV
TLSH
T14A92A7C5A7811953C62637B2A0C5A3591D91AE1957B2CB4B5560085CBD1278CB5F2D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utopay.db

Path /data/data/com.burin.orkdn/databases/utopay.db
Size 20KB
SHA256 bd2d3cf4e172b0edeb01e5606df3b2e7300215ea39414a1cc3a7b67c9a41bda3
MD5 7787fffcc2ded5c1f4d53790a72824a9
SHA1 9b8c0b61fc8c77c205aab43c19c9878e7e224f2c
SHA512 862844fd6d1b115c0f12baa95ca470816f313881faccb83ded087d690635546c52785756c2fc8241383a6b9a5f6c633d21b67d3d201d823667fe270136dbbf94
SSDEEP 12:TDXUyNTSFbymtWtWhaFRoE9gDswDfRmBEyPbAVOwG:TbBAt0mqg/0GSEG
TLSH
T1E19255CFDB003217C9988272ECF483621DA5A16ED7428BC735F214949C8024460B3F78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utopay.db-journal

Path /data/data/com.burin.orkdn/databases/utopay.db-journal
Size 512B
SHA256 042bb0790a8444f84137f569ac3872e582b2e8ff754af57c3a9f6969c793cafa
MD5 75859ed81e0aaa968adeda91eee878dc
SHA1 6032b6e7ffde2f9140833763269a14b94fa107c1
SHA512 774a270e80c26b45ef54d52c6dc3b40ef0e4252a3ade4458b58d98a8297410f00679b8909b2e135eb1e21bb97eb368a49cb58c3112ad38377c0232481ed729ec
MD5 SHA1 SHA512

Submit Download

utopay.db-wal

Path /data/data/com.burin.orkdn/databases/utopay.db-wal
Size 32KB
SHA256 6c321e4c22efe3db6fa060f10b8e8995cff8389c134b640665b8114c6b4213c7
MD5 1d1bfa39ca90fca0fe5314bd6d7bebb1
SHA1 d758f978b01ff947a129d7626440a53fb0b8207b
SHA512 bab53224bff0b7dde600ece19de648e8be19159fbdd3042c547c263edf2ccb67724fd8ce8dabbd4fb4cc6db8d7616c809b4157cc2d0e074fb47e067ca54a5210
SSDEEP 24:KqKzyGSP/ZjTouybBAt0mqg/0GSP/QRtV:MzNSP/ZXlybBAt0fSSP/QRtV
TLSH
T102E2BDAEDB822553C74B6772D9F583511DF0A26ECF9ACBC777B104506C43B8851A1F28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.imprint

Path /data/data/com.burin.orkdn/files/.imprint
Size 1003B
SHA256 127cc195aa38a634cdba43421ef7f7d0a67e5d57abf96ed02ffd61ec8937d995
MD5 13969ec180ca20fafce22f26ba060f45
SHA1 230a0020d37a65604c7a427d6d95319499469a80
SHA512 4fa8583e35250619e4f451217a3a61a81ec7ad58a2501c794f76cb6ba6132392654aa2bcd5496e1f5d52702cbf4741cd978000e34adec8ecdd32b72b33fe340b
TLSH
T1991140E14C97807A3E20EF382295A8CBB71BB452BB8B5A3524324B40C33DA069B5330D
MD5 SHA1 SHA512 TLSH

Submit Download

exchangeIdentity.json

Path /data/data/com.burin.orkdn/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 336072f76ccf647ceedf266a96431b0e54b06e4895113308ab22e040d7ef5382
MD5 a8a7985676dc736c75085f409690f3b0
SHA1 96353fceafe761a13078167067bb40de5cfcd8ab
SHA512 5481c05e0d9749453944885610dec1e6045dc6a4079e5f44ef1a7f94175560c5d14692e9a1004dc4dd127e4876ec9bd138268fedae78d724b164eabd45bee303
TLSH
T180C080CDC5684CF0001E41C5D5C105FD651551660AE9605015F55155991F9F0393110E
MD5 SHA1 SHA512 TLSH

Submit Download

Plugin2.apk

Path /data/data/com.burin.orkdn/files/Plugin2.apk
Size 96KB
SHA256 77ff63fc4125b3c1bf970feb1722e02cf43c9c4d6abeff4b2cccb6a9e55a51ef
MD5 38e2a484a18765834e721e42df3b89cb
SHA1 21bb2bc4f29e40abdb103b9d64af815956cb504b
SHA512 1ad43dbcfdffe2c21649e043ed3e6a61f81f69ac53bac68a9350624b3613be8c249ff0df5b8b7711cb13e030033d23aa71bc3f730becabede1040417f576a618
SSDEEP 1536:Kh6mBpBM3vDKmJJj0Z/maH2/88Hsv0SBblAi9HQ1oF1YOVUAOgrULB+hsr:UFKbPIZ/me8Mv0s1q25VU3lBwsr
TLSH
T138A3124FE694F63CE1FBCB34F0E28738B73AC919D961534F682A6088D9336905580F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exid.dat

Path /data/data/com.burin.orkdn/files/exid.dat
Size 59B
SHA256 6b3bfcf94c29f5f90477da13158e26345cabb331242bab401d1f261c581194fa
MD5 700964a65c18efd5e8e25672dea4873f
SHA1 901f3d9b307c4b72c557e2e9ff204197694e386e
SHA512 c428d2f992b42d4f7afc5a0093d9287c0d8fc2ee94df2ff68d2e87f3c1c69683abe013775665410b96ee3319e7ae4d829b88d8f614a7860321e2d02d21f71b1d
TLSH
T1D1A002CE80B444F6C471B5DBE6E668B38958E26F4FA00451561A60548666920408880E
MD5 SHA1 SHA512 TLSH

Submit Download

log.dat

Path /data/data/com.burin.orkdn/files/log.dat
Size 161B
SHA256 1cf071b1bfa093fff0a78c85eba899909ba3a83e77693e5d71f1bad513f1c679
MD5 dd76a53485f0a59de7ba1d8cb75c175f
SHA1 aef70f31a64b9543c702d3f50bb21cb1b150b529
SHA512 9a497a3ee2fe80c606687055d0c7c30b2b2027897ea361775482e9423810e25ba967c34dac41e030124eb535375e8a8ebe193c3dfda818e7c7fd0b002c66426b
TLSH
T126C08C4D52781427A3A320A0067D1A8243F10F18922008E6D9CA4FBDD6345D2FCAB0EB
MD5 SHA1 SHA512 TLSH

Submit Download

new_md.jar

Path /data/data/com.burin.orkdn/files/new_md.jar
Size 36KB
SHA256 001c2f29557e000d84b6f586fb54ffc2c501c7d749a89540db796891b3021279
MD5 fc8e74605c4ce010ffe0f51c14bbb9b3
SHA1 38f82b7517fdc0d881a80c64e32244ead819b815
SHA512 f508dde9bfd0d64a5cb6cbcc2fa1ae1caad447502754ad93da0ffcb7603e6b785ad6dace5c65e87ec0b84af82d9b46f93824f0f74289952e25eb412efa17f5ce
SSDEEP 768:8lssiwpQAHAR8h/nZ5hW1aWoW0QmRJ2ZDLOZ6jANpp30sEXWg:8Os0gDhWiQmiZXOcap1mT
TLSH
T136F2F1C8BC4441E4E31909B7E0E418124E4514979DBE1AA7DAB1DCE3D8957786FF87CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_it.cache

Path /data/data/com.burin.orkdn/files/umeng_it.cache
Size 415B
SHA256 272416d2e186cc9484399d174171dc2bfe9c130d8f11dcaada980fba1d608d82
MD5 ff41f7b185314ba3b443dc171395999e
SHA1 233f9202d78c8bae914fb143c543f6cd96f91892
SHA512 5b8fac8c2ab00cab770cc96e8221e3380a18373dc67d950c9c5904eb103dfbac970755745ca01683c6b07801d45341683c36cf609ba38ff2d63a955f2d2e98ce
TLSH
T103E0AB9DC2B108229302EE9202453163FF1EADF35069838B7816B8E08B35D40CF8035B
MD5 SHA1 SHA512 TLSH

Submit Download

umeng_it.cache

Path /data/data/com.burin.orkdn/files/umeng_it.cache
Size 211B
SHA256 44b3f8ce95f3fe216cc0a106ae72acb6e46dc9bba775c119d75efd58c381b28f
MD5 1720d11dfefa0691b4f493244311dada
SHA1 5b1cc41568321c418f0c252d8613d7b6540e68dd
SHA512 a7e8cd6e5128ca886b32cd8d3997e96a3b015e054e2da94de6ab36a79dc5d5ee7f7cab1415918a1634262babf95ac3fd5a816345e357efc47902988362dda77f
TLSH
T1C3D022AAC2B108635602AEE112443193FF5E79F35069834A6816A4E08F36D80CF8034B
MD5 SHA1 SHA512 TLSH

Submit Download

yf.apk

Path /data/data/com.burin.orkdn/files/yf.apk
Size 59KB
SHA256 57133431ec20e515d72a3905c8618e31d6a132ac74f7841380b946bdef586f52
MD5 0b4849ba2f3ed571b5f6a4fdf6215993
SHA1 15e89a5d848a48043fd37cba8c9c0ee226ab6578
SHA512 8b757b9d1d5652d17c3e115a24aabba88c65653ff6da525b24164defeb0aab93552d65cd4c46cc2d988f3beb68f6cae8532de522e5806918431638333306280d
SSDEEP 1536:2mdRXxEljTYrsxJF2MfXn9S4v0GAJZeejhKmq2tN8R/nSU:2mXXxEersPcM3MGAJZeejh3q+8dSU
TLSH
T143530223ADE0C902E7D77B391FF59B345176434A82929EA79DD021349B2F90AA724CCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5.0.9.jar

Path /data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar
Size 112KB
SHA256 1cc01275ac67d4f0bb70cc1156d4b199e8a74805a1528fd08dd2918450988718
MD5 8565d2e2334ff507e2262115e0f26929
SHA1 b293c7e05e0300f46b52e3ca984e2606469f9c7d
SHA512 46fc1400f8627adcd27cd825b7474916a20f811dc02a7d9930d6b7ec7a01cde72494130cb1d4eacf2d8e178bada93729cfc9ef96763530043a13192b9ca0770b
SSDEEP 3072:BqWITuZrgO+oE5AZUfTezDb1kOmcWGQsr4yrgEmKO:BqWIaczr5AZAerQrhEm
TLSH
T1A9B35B13FB819D23DDAD9B3690D263856736F1073F43D393488491B69DCA3C16E6B2A8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

5.0.9.jar

Path /data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar
Size 112KB
SHA256 02a5ef69d0967cc0310f315c2340fc8b088ab89d0320227a30cb58229319c034
MD5 b477ed7cd5872f72f6f91bc754738f9a
SHA1 5ce083e7b964b08c39312bbc725f9fa2c279a612
SHA512 d41e1fa806551daecaee5bf632667e6288353532dee6996631bba121e50448bacbed8df4da1c0c63012a9421744b3d2877d28fc65872ea1bf215efd21a8f7597
SSDEEP 3072:BqWITuZrjo5pgTKezDb1kOmcWGQsr4yrgEmKO:BqWIaXfTKerQrhEm
TLSH
T181B36B12FBC18953DDA8973AA0D293416732F50F3F17D3534488D4B69DC67C36E9A2A8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

utopay.jar

Path /data/user/0/com.burin.orkdn/app_dex/utopay.jar
Size 66KB
SHA256 3b00f99e69a9b0cc2a58faf52e8169f99fdf15330d810c484ef81d6e0a8ec17b
MD5 8e8a18b329c0937d393f3f1c71dee05b
SHA1 e4492aa18b2103240e2c846a04267a90a6490a04
SHA512 cc54f2d8f141ace20fc9d031fd32ab736721e9159e8388a2d8393b66104e407b4a193f2e2e272b23dff6d085e0f2d6aea5cdac45a581130a874e274c34c1625e
SSDEEP 768:48ubzJZ5M5dkwJZQTELvwexWMw7B+vTsPQdW2bjRL6wB7Cv5EoYzHtcYeI9JdpLx:QJZ5MxJSToYAJvk+nB7u5EPNcwzLx
TLSH
T1D4633A03B3821953E5ADAB3591660381A333F5631FA7D347485858B9FEC2BC18E797E8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

utopay.jar

Path /data/user/0/com.burin.orkdn/app_dex/utopay.jar
Size 66KB
SHA256 c9dda4e71a7152be8edc8fab7489894d976faab37f63f93490e8adc2062d5d3f
MD5 56f57464bc726c0bb2842fb5bbac916b
SHA1 7c6f45b6110e689208182598abcce6d44576b7f0
SHA512 4f8a4514b38d4224ea88414ecbba673b50587f5a4825be533843d609d10584888aca0b29e1d30dcfce3283482893fd1bc5259b94516d780134b2f2d0e58987a2
SSDEEP 1536:QJZ5MvsTSToGEEVR/AkehkF0nB7u5EPNcwzLx:QJZusTEkEjInB7u5EVcW
TLSH
T184632917F3825992E9AD963C71A613407332F9224FABD3574858D8B5DFC27C29DB02E8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Plugin2.apk

Path /data/user/0/com.burin.orkdn/files/Plugin2.apk
Size 206KB
SHA256 2e80dd205ff415e530a217310fb52a9f97cdcf5db3c9f0b1e0401663cd00011f
MD5 cafd25d8741a3a816dc68fa1ddd26612
SHA1 df3b581874de4e3a9e5e624aebd8dafd7f07884e
SHA512 c99637604c502456ad6aa2aaef97f18fdceca5e2143af074b97a8b0d3b2f96ae01eca3317cc6fa3c7fe132c796e828ab23c63eb1343345946f957d1e487e151e
SSDEEP 3072:UN5r36EUqAhV+18dYU/CMZqp/aX0+GKkLF+kuJihuPaSQPSEy3bZ7zJx:REomlpE0+IvhiLKyr1b
TLSH
T1BF241932AA61A627ECAF9B3180D3C6C2F73AF9512707C353059C10B5FC963DA4E6E594
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Plugin2.apk

Path /data/user/0/com.burin.orkdn/files/Plugin2.apk
Size 206KB
SHA256 1f60ae0f7ca558ee9b0a6745881b7123925e603afbb4ec0ea1c973c38e659901
MD5 52e90ce3cc1f84fccc81e46706bf338f
SHA1 3f98d84bead1db6dda6b3c773300787b6677f324
SHA512 3dfad621b9df17981eeb9f227176b6b36a144a613d7a07f5b827798fe8b8db1b108ad2404daaa3157261b34ed4435510a0476e4303bb1b52d8e6a1de42524acb
SSDEEP 3072:UN5r36E9/ety2pLuIsDCI4pRc+YM1v5lGRG6V0IeIF+kuJihuPaSQPSEy3bZ7zJx:REIEyI4pRH1QlVNvhiLKyr1b
TLSH
T134243B32E951A692ECAF923990C3C282B736FD50371B8363055D94F5BC853E79AEF058
MD5 SHA1 SHA512 SSDEEP TLSH

Download

new_md.jar

Path /data/user/0/com.burin.orkdn/files/new_md.jar
Size 83KB
SHA256 04bd4f9aafc801876a326b24499c5fc332a74fe6d0247790fada3e9df815702f
MD5 701111a083e8b31e55ec814cb9c78917
SHA1 a92514f99a3af011d770a79d3699c0e6ac915813
SHA512 55ea76b432bf0a26bff5a3db2a629e9240a866de3a2d4d9a5afe0ca7193cc7bda3b5311cfeb2cdd6d2c62e760131611f8aad3dcbcc2e76ad97cd272fa15b667c
SSDEEP 1536:3Qr+qeW4RW3CYG+EJ8HDjdzF91r0xU8A4o4s+WMS3gEL/LBjIi2IeH/wFO0CcTnX:3QuSnFki2RYFO0CUnabDCyxcxOwsRuU8
TLSH
T1B383D703F6409923F9AD8F32846397C0A332F6526A13D7936508527BEDD67845FAF2D8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

new_md.jar

Path /data/user/0/com.burin.orkdn/files/new_md.jar
Size 83KB
SHA256 0afa5f48b018da2ed56bbad69011cfb2187944df5489b916d298bd960f4589e3
MD5 fb585df12147c75e30fb7acc4b1a6aac
SHA1 c00854e3869901c3a93a87d86bfe2560f0c94dff
SHA512 fa653c6a1eda7b61bc33db5fc947d8fbf1bc98697b22201f5010627af6c6b2d0d1c619bee08fbd6043ed9e6a3e64238fd177dde82cc9b753b28d3088e50e4353
SSDEEP 1536:3Qr+qeW4RW3CYG+EJ8HDjdzF91r0xU8A4o4s+WhIMGDBB+CUlHz21mbWCfJ/2xO+:3QvfHXlT212WCcxOwsRuUGdVh
TLSH
T116833A03F680CA52FDB88A3574A7A7807332FE67AA13C3539408D1B75EC27856B971D9
MD5 SHA1 SHA512 SSDEEP TLSH

Download

yf.apk

Path /data/user/0/com.burin.orkdn/files/yf.apk
Size 137KB
SHA256 01afa31859896fb68696a3a872705133c171bf6b65c66d7a21f2a4afca76a2d5
MD5 726c1c0feec92559ea9c8196067c101f
SHA1 96e985d2a67aa0f5b4caca40296ca54163611d45
SHA512 2935899268a1efe3dbbe25a227bbeec30c10487cd4a0b6043d8476b657c303cfc37cf3a2a3b3460de7cfd7ec0be2bec049a1a0d7b3f6093904a58fa763f2cc17
SSDEEP 3072:HPRKLfbQjymuyBuJZp6oSpBKfKwoBAw+nz5d0s4JtA8:HJKLT0uIU7qlGz5AtA
TLSH
T10DD36C01FAD34623DAD59B3350531B01D3BBE78247538393791CAA3B5D913C4AFA9AAC
MD5 SHA1 SHA512 SSDEEP TLSH

Download

yf.apk

Path /data/user/0/com.burin.orkdn/files/yf.apk
Size 137KB
SHA256 75e56e086b477dba5e717e2a40a0045e9893b2a320416ab1d4110cd47d48a512
MD5 29165f06d68859ffdef2217f0e9da657
SHA1 f1d5abec38653470376c05e70785c8ee6521de00
SHA512 41c32625515dc2d2db9837841aa1e7b5b62284fe950943766bc38fa5a3bcfe9ed7d91c361fec2764788e2e1c138e3a6789588e3bd15f195c8e4549dcaec5d3f7
SSDEEP 3072:HPRKLfbQU7TMy/h6oSWEsCDXcwoBAw+nz5d0s4JtA8:HJKLTxMqhpEslGz5AtA
TLSH
T10AD35C02FAC24A23DED4563324931701937BE7D593A3C397690CDA375E823C4AFDAA94
MD5 SHA1 SHA512 SSDEEP TLSH

Download

journal.tmp

Path /storage/emulated/0/Android/data/com.burin.orkdn/cache/mhzb_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

com.burin.orkdn

Path /storage/emulated/0/com.burin.orkdn.start.times/com.burin.orkdn
Size 77B
SHA256 8d8103c88557bcf6dc06f9e44b45ab3412c333fce6e22380a91de610d3eafd05
MD5 81501198c971ae16a99f41982142a055
SHA1 f8487a793c0f13e23510811d3847570a094f9014
SHA512 9065477b5e426562b422a2698297573e718d37b78c7fb1d4461fb0e30276aa9d5a8308e8c29adfb1a0006456f4573f383cd64b8d7345a9b91a8ac68824246d07
TLSH
T132A00262C69E9A37F29D20333033179001250BB25560E2CD8B5B1A347BC52E757D593E
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads