af258a14a8a7ebfbe30224ccde50e4c095de6b93d6c2fa9f9db20266ca6b6c4c

Analysis

max time kernel
107s
max time network
150s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
12/10/2026, 23:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.SMSreg.pf.apk
Size 1.6MB
Sample261012-3cshvsfb54
SHA256 af258a14a8a7ebfbe30224ccde50e4c095de6b93d6c2fa9f9db20266ca6b6c4c
MD5 8fe36f040ff8ca4f00844a890c931a1e
SHA1 b12a91ccc741db532703240fea627d185140c866
SHA512 3126642aa43a73069b6d9516792855d6ae8dda53278f84b825b7c6fa5570f7d0724f8395a6895374d5d614e8702fafe8aca59bdf3407c402dc017604174112de
SSDEEP 49152:qsle6Dpi5i+Co5OELAR56ZZEVNPIk4Bez4vU4Y:9jY5JCELAn8CLPIVBvUL
TLSH
T11B752313F74AE0A7C5B3D2368A37A16191824D34AB07E7871D0AB5788DB7EC40789F9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker collection defense_evasion discovery evasion impact persistence

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.bootloader	getprop
Accessed system property	key: ro.product.name	getprop
Accessed system property	key: ro.product.model	getprop
Accessed system property	key: ro.product.device	getprop
Accessed system property	key: ro.bootmode	getprop
Accessed system property	key: ro.hardware	getprop

Checks Qemu related system properties. 1 TTPs 5 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.android.qemud	getprop
Accessed system property	key: init.svc.qemu-props	getprop
Accessed system property	key: ro.kernel.qemu	getprop
Accessed system property	key: ro.kernel.qemu.gles	getprop
Accessed system property	key: ro.kernel.qemu.vsync	getprop

Loads dropped Dex/Jar 1 TTPs 11 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar	4440	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar --output-vdex-fd=57 --oat-fd=58 --oat-location=/data/user/0/com.burin.orkdn/app_Wyzf_plg/oat/x86/5.0.9.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar	4385	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/new_md.jar	4544	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/new_md.jar --output-vdex-fd=105 --oat-fd=106 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/new_md.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/files/new_md.jar	4385	com.burin.orkdn
/data/user/0/com.burin.orkdn/app_dex/utopay.jar	4579	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_dex/utopay.jar --output-vdex-fd=111 --oat-fd=112 --oat-location=/data/user/0/com.burin.orkdn/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/app_dex/utopay.jar	4385	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/Plugin2.apk	4603	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/Plugin2.apk --output-vdex-fd=108 --oat-fd=109 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/files/Plugin2.apk	4385	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/yf.apk	4699	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/yf.apk --output-vdex-fd=113 --oat-fd=114 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/yf.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.burin.orkdn/files/yf.apk	4385	com.burin.orkdn
/data/user/0/com.burin.orkdn/files/yf.apk	4385	com.burin.orkdn

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.burin.orkdn

Reads the content of the SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/	com.burin.orkdn

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery defense_evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.burin.orkdn

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
22	alog.umeng.com

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.burin.orkdn

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.burin.orkdn

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.burin.orkdn

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.burin.orkdn

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests dangerous framework permissions 25 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.burin.orkdn

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.burin.orkdn

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.burin.orkdn

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.burin.orkdn

com.burin.orkdn
1⤵
- Loads dropped Dex/Jar
- Reads the content of SMS inbox messages.
- Reads the content of the SMS messages.
- Requests cell location
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4385
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar --output-vdex-fd=57 --oat-fd=58 --oat-location=/data/user/0/com.burin.orkdn/app_Wyzf_plg/oat/x86/5.0.9.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4440
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/new_md.jar --output-vdex-fd=105 --oat-fd=106 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/new_md.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4544
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/app_dex/utopay.jar --output-vdex-fd=111 --oat-fd=112 --oat-location=/data/user/0/com.burin.orkdn/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4579
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/Plugin2.apk --output-vdex-fd=108 --oat-fd=109 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4603
- service list
  2⤵
  PID:4628
- getprop
  2⤵
  - Checks Android system properties for emulator presence.
  - Checks Qemu related system properties.
  PID:4648
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.burin.orkdn/files/yf.apk --output-vdex-fd=113 --oat-fd=114 --oat-location=/data/user/0/com.burin.orkdn/files/oat/x86/yf.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4699

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

5.0.9.jar

Path /data/data/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar
Size 50KB
SHA256 611bbbd83419cac7976482fefa632fbb138332fb1cebc494f114787b66ade248
MD5 420af8883b28b70fa5698fc2c9bc1ae2
SHA1 80b2d0868f0c2170f93d2f93c61c8b430936d181
SHA512 f72fd329d7b9ecc7d6c7c7c117ff638456201d3797821fdd9eb8b6d5f862544507fd62985a3ecffdb33349851f6e65920962fa44f24bef20b042bcf0ca9ec645
SSDEEP 1536:cQCX8PNdBpV91XMH8h7K50LdxIakqKcUG6:D/PDBpL1ceWQJBvUG6
TLSH
T1F333F1A2F8429A3450250DDAF46C94F000659A1ECBFBDF4D28F548B7D0D7ECE7191B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utopay.jar

Path /data/data/com.burin.orkdn/app_dex/utopay.jar
Size 30KB
SHA256 d5c57482245f9caf63cfae312978e8d38d0185cc3161f1f16dc4d3da91b6983b
MD5 835e546b50b1e9d513f5148f7a1c0faa
SHA1 4a072863d236f6ed895647c809359ca1e1d25ed6
SHA512 2cb7076e28464f53bce04efbf1a250294879894423320195af3187aa58e2d6f9fb88b34fec3a347676949dcc1da2ed048bfcb6c4073b0a75db97ce3a00984445
SSDEEP 768:NgCHAfdzCElRN9KAHzSdVVQzO4W97lDH2U1Go+ik:RAfdznlRN9KAHzS7VQqiCGFx
TLSH
T199E2F1F49749B700F980E0399A4979E9CFB7657F502EEEC976169C3ABE00F1561020CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

740410100062013

Path /data/data/com.burin.orkdn/databases/740410100062013
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

740410100062013-journal

Path /data/data/com.burin.orkdn/databases/740410100062013-journal
Size 512B
SHA256 c1c43b260023ca86486d754033dc5a623f0b7920f4f32238c1af0be04ffc99d9
MD5 f9bf6f3ae625f872dfd65fe919224255
SHA1 16588670584a0d8dac734bc613d1061cc3120c33
SHA512 0198762a0ae90766389b7f03604e899100a4fbb3aaf08bc88b14095fa0a8467c311bfc111ab753d8cf9c86a03d143cb1b97041cd6529a041e0f82af7557bc8cc
MD5 SHA1 SHA512

Submit Download

740410100062013-wal

Path /data/data/com.burin.orkdn/databases/740410100062013-wal
Size 160KB
SHA256 86447deade1d2b4847477b60d451f49ff28ade9680ce2210f48f6bf1d371d35b
MD5 c8b8d12c4d6ba98e3466325a1ab1ee05
SHA1 e5043298b55af9f4987834223b88f2377f37f400
SHA512 3e44b728c9d4333757261c44ec204635af80fc1d99c62e2ba68f56b4a6dd5ffb7a9538e1f2ce74d8c90bb7ab3fa0876f8be5973ef26cc779de29ad8efee98682
SSDEEP 384:+yk7KjMgPwxrA+ybwyxr/FybwTxrA+ybwTyGxr/FybwTxrA+ybwIxrb+ybwq:Lk7KjMgPLDfMNDZcMNDRD9
TLSH
T133F3D79B6E251C67DA09CEB080044752E029F73E82C792FBD9B46D351C59C02DBA2DBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DD.db

Path /data/data/com.burin.orkdn/databases/DD.db
Size 20KB
SHA256 10975dcca48744c40859197d891a3a33493d00f866c317ce7ee818b7c74ede12
MD5 527782f11b208e3f32a45df9667382be
SHA1 75ddb0a67ae976a49444ca73948c93e39fc8ffa8
SHA512 b4c024abd5379d1fb1300f00db9278a1bc81d1b8bde5aae8a78c3197dc98b9b867700ec5e0fc27c4f10f7403a675096f2d99b875f0472916c63930c8e8f860ea
SSDEEP 12:TDlaOjK4pT9eXf9BKP/mvRmBEyPbAVOwWSXF:TcOjbGfk/mEGSEX
TLSH
T1B592AB86A74015E7CA084333A8CAC3B02CFF9539CEA5CBCB64978A14EC9164C7460E20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DD.db-journal

Path /data/data/com.burin.orkdn/databases/DD.db-journal
Size 512B
SHA256 b9e3e26063e5d266a3c3646e805adf0cef696da1a2f4b59042007457dab3e9ac
MD5 ce1de5b0030636c64bb9e3caee29c783
SHA1 7177888911968a166bee361a2625f3aab741357b
SHA512 f62d661d34ffd2a4593d4eb7ec7c925800af2492e868ba2012c009d97c67c2659c11e98cc152a2b357b228dca27a173a4cea8c260f1bf44a9972a334084a0cac
MD5 SHA1 SHA512

Submit Download

DD.db-wal

Path /data/data/com.burin.orkdn/databases/DD.db-wal
Size 40KB
SHA256 306f2ef626749cc22377f47bd4eaeba6aa73b2fcc24e9a984a07bc5d60c88410
MD5 422f6d20447db09bc57fdf2423e9656f
SHA1 b2c04276b4f326051bf87c3acca3ccbcbfa4ec94
SHA512 52931cb87c7f269162966dc316708226e697f0eb3f746380f754b279379c6b5ec28d6aa96e05bba9dfa9cc35373ca7068d5b1c5b8a492b830e9cf6d38dc40505
SSDEEP 24:KMgFXVzyGSP/dNcOjbGfk/mEGSP/035tB3benM:rgFXVzNSP/PcOjbck/mTSP/0fBCnM
TLSH
T184034E41B74C69E3C50D4337F8D5C3642DA6962997E2CB8F27524D24EC4A78EA4A0F86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc.db

Path /data/data/com.burin.orkdn/databases/cc/cc.db
Size 36KB
SHA256 7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c
MD5 ce6135aa1b1fe4f2c2db2a546d2a5558
SHA1 79b59582154017aadab783dc266fcb158c252940
SHA512 2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4
SSDEEP 3:o1Xll41Xll41Xllv1Xll:oQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.burin.orkdn/databases/cc/cc.db
Size 36KB
SHA256 474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da
MD5 5d7ea1a23af19b4340cc8d90f28297d5
SHA1 4cfe95b23a9e98378d69c4290af81b51fbe76aea
SHA512 33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b
SSDEEP 12:TCFP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQn:Tz7sL7yot3BVrHotGGSgGQQQ
TLSH
T186F29EC397101162C97C51B3FD9592620E74962EC7B71746BEE015066DC5B01F83AEFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc.db-journal

Path /data/data/com.burin.orkdn/databases/cc/cc.db-journal
Size 512B
SHA256 3f26b65e604342500e3274593cf6c1090b8cbb797b3d50f3d9f937657d8b1ddd
MD5 ced0f03113d6f71a6a366e6284bbf03c
SHA1 79ede775c8193d953a8b84db5b433e1712776eec
SHA512 e28fe39d1d71a353bfe89217b4efdaafb01837f7483a2abdfa208e146c5a0801bba5c181ce342e2fcc4758367496014ab35bd2043f9b33d7bc9591818836223c
MD5 SHA1 SHA512

Submit Download

cc.db-wal

Path /data/data/com.burin.orkdn/databases/cc/cc.db-wal
Size 16KB
SHA256 69fa345f56ff334749f27360f05aa6a474d571e8d211adafc67ab707bcf7f78b
MD5 0c3e9c22cda62078069fec60287d2f0b
SHA1 0a9d2790b3912890ca3083ac5463fe5c27b6885c
SHA512 6dcfd1ac5472f2f805e8432d949a89911eb4bfb40b8efe1e1c3988f9367a1c21094313228617fe7dba47f01608b531a1175ef6b5b1873c923c584dd3160aff9f
SSDEEP 3:OlH/lSCcp/62V6Ul/Fll/nrlfllnlyK4W/FllSNc6ZaXll:KAfDV68ZqYYO6Z
TLSH
T11472921108E4E275C8DF50B50CE1456032F8118C29C3ED2C751DB07C928D52D09F5FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc.db-wal

Path /data/data/com.burin.orkdn/databases/cc/cc.db-wal
Size 48KB
SHA256 66eb3d93d603591fee7777645a5d5fd38496565f57044c28a1c6b8cba5b33719
MD5 026092b5137f6f710dd6c098dbe474c5
SHA1 b4c2ba656390afce4c76a4bccf93b0ffb8714055
SHA512 19d73c7d261dbb2467e5e9e43e78b4c2aace4303b2ee528e3b13b9df9ee1f818ca0a71ae59e35904a7c12957d640f52224ceaae6966efe9ade5bafd886ff6978
SSDEEP 24:KKhqAftlzyGSP/8hH6M2qz7sL7yot3BVrHotGGSP/81NRGgP1qcC:fhqAzzNSP/8zzshBWfSP/817FP15C
TLSH
T16E23DCC693D02663C42C02B3FD9593125F75962EC3774B867DA006176C85F84E836EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flyou

Path /data/data/com.burin.orkdn/databases/flyou
Size 44KB
SHA256 d6e4da9d6ef70d6cf7b550a6446a8bce843ef397c1df2f0c6551881853e0403e
MD5 a072557c13ffe50f617819f08eb8e453
SHA1 67e36dd1b56ef6a2a6eb4efe039b9de612870697
SHA512 f176c3cacbf47811c508084ec1df66ddc16ee7abfdabd5a225e2fca8d3b5da9f41a8adb2c7b9ec3f79d972a70f4f65f1bdc07694a85dc35bad94411c3ef68678
SSDEEP 48:Tt/6nFivnFi8nFiB9aKFaKGIOnJlPILXVS:JMx7aKFaKGIRX8
TLSH
T1F513426179144402EECCC3721A87F2D40AEC413E6EF657416C9F5D1BDABC909E4BE8E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flyou-journal

Path /data/data/com.burin.orkdn/databases/flyou-journal
Size 512B
SHA256 493c28c8004cc460d810b73c030e765394bbcf02c681189921627e7396a92f7d
MD5 c94950ac1c14e70d80de7375de79b7ad
SHA1 2286824574a764a1adf2875dc1590444c1a30e0b
SHA512 c234a3421bbe3e7c2a7ab3350591631742958b24bb2029da4c995a36c2db8d4ffe865a4a65b716cb01f3e03e5dad5503faf37ca32b2621bdce8cd1161151b494
MD5 SHA1 SHA512

Submit Download

flyou-shm

Path /data/data/com.burin.orkdn/databases/flyou-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

flyou-wal

Path /data/data/com.burin.orkdn/databases/flyou-wal
Size 56KB
SHA256 1434625571dfbb94304cffe1fb874e967dff6032f1a5037d4db41442a53be69d
MD5 32048accf01845cc4eece8c9a14e76b4
SHA1 632b6275f35965595d625c40b676ee734a0ab985
SHA512 f9f4051936b85f238a4bb1304105522a87d8920b519ae413bb705a50c68a76daf58e3afa2e9f4d82889e11c5c43c0f9a3b37a378724af1722502ccc9d253ebba
SSDEEP 48:ElzNSP/Qt/6nFivnFi8nFiB9aKFaKGIOnJlPILXVSP/2L4:K0PeMx7aKFaKGIRX8Py
TLSH
T1D3438A51B9051542DACDC3321ACBF2C409E8417D6EF74B012CAA9C27DEBCA48E4AD9F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mhzb.db-journal

Path /data/data/com.burin.orkdn/databases/mhzb.db-journal
Size 512B
SHA256 1b1fc869a0c883f9117e19586d633d55e64f3278b041759dbe3c658b98a93e8a
MD5 2bba2a3638d506aa29ecb26d38316c82
SHA1 0bdc75e5da1b6589a465b20ce1f115c55c14f598
SHA512 084ea7a965298389db16552199753a02f31606b568816b18beeb957421b526bccde4831cb1b44c71b71bd30bcac41da5cf6a90d9c773dcea746d359090e917e1
MD5 SHA1 SHA512

Submit Download

mhzb.db-wal

Path /data/data/com.burin.orkdn/databases/mhzb.db-wal
Size 20KB
SHA256 190722e0745aa51acbc405bca1019a1318bf06c9a47d130c0313f9bcaa6ebbc1
MD5 b7837e3de5480895a8035a6a9050573e
SHA1 d57cbd109e0fd587957c7f871e13657c9d2cb9e6
SHA512 2f405e3aabcc89929f3c2b6859ab0a0bfe16afdceb35cd2c31accc55ba419ab8b8cf8c9c8af586d37054023c39b9c8a841ab9b01ac79aad0c8f0f3bf95f71dd0
SSDEEP 12:KpzdTRmBEyPbP/24Yj0LDiOwCldWwzqDRmBEyPbV:KpzyGSP/2/YLDwEWwzDGSV
TLSH
T1D8922785A7801A53D2490376E9C9D3EA7D70E63D93A3CB0B599148667C466CCF490E18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utopay.db

Path /data/data/com.burin.orkdn/databases/utopay.db
Size 20KB
SHA256 bd2d3cf4e172b0edeb01e5606df3b2e7300215ea39414a1cc3a7b67c9a41bda3
MD5 7787fffcc2ded5c1f4d53790a72824a9
SHA1 9b8c0b61fc8c77c205aab43c19c9878e7e224f2c
SHA512 862844fd6d1b115c0f12baa95ca470816f313881faccb83ded087d690635546c52785756c2fc8241383a6b9a5f6c633d21b67d3d201d823667fe270136dbbf94
SSDEEP 12:TDXUyNTSFbymtWtWhaFRoE9gDswDfRmBEyPbAVOwG:TbBAt0mqg/0GSEG
TLSH
T1E19255CFDB003217C9988272ECF483621DA5A16ED7428BC735F214949C8024460B3F78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utopay.db-journal

Path /data/data/com.burin.orkdn/databases/utopay.db-journal
Size 512B
SHA256 30dd79f07f8ef824c701c5f549cd094b293b2e5e476cca0e4ca5c3d4760bb3c9
MD5 0e5f23d02de8d857f55bacb5e2d2fa31
SHA1 0d31348cc58df82c6f422986b26a2f7e72b17b05
SHA512 988bc6e76167f0ddfd2348f0bc731c8aaf06e7d4013dd8cb061b435f9545c981a2151e043d5138b84bf44635a878f328d04e597b9972b804eca4a8c640687fb6
MD5 SHA1 SHA512

Submit Download

utopay.db-wal

Path /data/data/com.burin.orkdn/databases/utopay.db-wal
Size 32KB
SHA256 ca9115dca028a6b9d567201180fc8431ecc04a1312e49bf4905a19f9e902e7af
MD5 b78e1f3c9ff281246e650b69108f0e74
SHA1 931891e280f1a0d15f7b4eb5fb3ee3d61616452d
SHA512 d8f285eb3d2e4ba7677fe3f2d56b5f9239d892899f3c0c89b081ffffdcf52011838fe1c5b37c309aaaa44e44e0877d6e4855f2c2cf529407e458b80bd034bc22
SSDEEP 24:K6BWBv4XzyGSP/YB7htxWoB1ybBAt0mqg/0GSP/YB4WJBlSk0o:3zNSP/GObBAt0fSSP/ruSk
TLSH
T164E2668EC740355BC14D82B298F4C3521F60D22D935AC7A725B904D76C6038C50A5F28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.imprint

Path /data/data/com.burin.orkdn/files/.imprint
Size 1003B
SHA256 51fe417890338e134aea296aa445db39890156ce4d50a7f5d38ec7ed7e3ebe57
MD5 612a8f9938b7ebd9546ed043bf05ebbb
SHA1 4029dd59b2304e48283c812127d9fdede2226762
SHA512 65b912f5a56bbbb6f2eccc50d2cf505efb2f8502e9b039bd34098f98cf91b17462b9779f5b5a8297a1072fe81cf206d219d950b8420051e2f86c56732e02c101
TLSH
T1481189C9B4704427267F8E18C766F38C5AEC6836E7C879880950528503B02CFEA8AE4A
MD5 SHA1 SHA512 TLSH

Submit Download

exchangeIdentity.json

Path /data/data/com.burin.orkdn/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 69089f9cdf883142e9cb03c6d562c8ebae0d31d14885b0b203b55bedf8c07c0d
MD5 5ef717c2bf100ed0321c5e29db8dc693
SHA1 914b6a85dc859378d438c896a221b27b89c14aad
SHA512 57ad88d7bdf07ca1c519626e0baca42b4f73f47b65142d182a854749c0451734441cc491284b683a2d2cf75da1ecea88b9c560c0d2dd7a44d2a3e3e4a1345c85
TLSH
T1A1C08C8A02F060E04C80664CE8845DE0ADCE204B6FD40120468AB25882BEA3C2E9658F
MD5 SHA1 SHA512 TLSH

Submit Download

Plugin2.apk

Path /data/data/com.burin.orkdn/files/Plugin2.apk
Size 96KB
SHA256 77ff63fc4125b3c1bf970feb1722e02cf43c9c4d6abeff4b2cccb6a9e55a51ef
MD5 38e2a484a18765834e721e42df3b89cb
SHA1 21bb2bc4f29e40abdb103b9d64af815956cb504b
SHA512 1ad43dbcfdffe2c21649e043ed3e6a61f81f69ac53bac68a9350624b3613be8c249ff0df5b8b7711cb13e030033d23aa71bc3f730becabede1040417f576a618
SSDEEP 1536:Kh6mBpBM3vDKmJJj0Z/maH2/88Hsv0SBblAi9HQ1oF1YOVUAOgrULB+hsr:UFKbPIZ/me8Mv0s1q25VU3lBwsr
TLSH
T138A3124FE694F63CE1FBCB34F0E28738B73AC919D961534F682A6088D9336905580F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exid.dat

Path /data/data/com.burin.orkdn/files/exid.dat
Size 59B
SHA256 0fd78be5b44b779bba61c2885a599e0d4eb3b1c8afb972693539174533e94a00
MD5 81f8251e02e525a3838044776eca66d4
SHA1 22cdba4f98d9a68480a4b722731ac0e61c8ec5b2
SHA512 d5e93f2d5e97591183496b8b3343e793d5a432165aa32c8a601474e985ae46b0864920e084b1bb128c9a52f8b46817e69bf184ae245c12db00b0638db5730b77
TLSH
T1A1A002CE80B444F1C07575DBE6E56CB34588E22B4E600452551A60558666920448880E
MD5 SHA1 SHA512 TLSH

Submit Download

log.dat

Path /data/data/com.burin.orkdn/files/log.dat
Size 161B
SHA256 3cfc2f1055c70f36794fa56c56c4356e1e2c80e497dcd9dcea9e98b1b47d0042
MD5 cc2cd3f804617dad6b2007486adcca30
SHA1 75ea0de3d6b057670f1af10c1ae31a3a8a43bc86
SHA512 baf96fb2d16d5691549d40bc659e26f7c407b023e193014b41a4752eb61bce0e2ee6dd78f816856dbe055da13bec1896bf662ced260f9aa35ba46ae2b075c80a
TLSH
T130C08C9952A04017E38220A5027C1BC39AF14B6DC2240CE6EC8A475DCA71AD2FCAB0FB
MD5 SHA1 SHA512 TLSH

Submit Download

new_md.jar

Path /data/data/com.burin.orkdn/files/new_md.jar
Size 36KB
SHA256 001c2f29557e000d84b6f586fb54ffc2c501c7d749a89540db796891b3021279
MD5 fc8e74605c4ce010ffe0f51c14bbb9b3
SHA1 38f82b7517fdc0d881a80c64e32244ead819b815
SHA512 f508dde9bfd0d64a5cb6cbcc2fa1ae1caad447502754ad93da0ffcb7603e6b785ad6dace5c65e87ec0b84af82d9b46f93824f0f74289952e25eb412efa17f5ce
SSDEEP 768:8lssiwpQAHAR8h/nZ5hW1aWoW0QmRJ2ZDLOZ6jANpp30sEXWg:8Os0gDhWiQmiZXOcap1mT
TLSH
T136F2F1C8BC4441E4E31909B7E0E418124E4514979DBE1AA7DAB1DCE3D8957786FF87CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_it.cache

Path /data/data/com.burin.orkdn/files/umeng_it.cache
Size 415B
SHA256 068f7cfd4fe135029218757d99e59189a5d5a376d191f071c4bc54076b534859
MD5 29b56c971a72e5733cf2295d694f8aaf
SHA1 68b1e3823db96e3aac6c4789e3485e634db20664
SHA512 c88205ec659e206cd3ebb30e1502bdd377f0a486cadb95a7de03b1a12b147eb9ba80593f5306c4138b6c480bb21eb347f11fe826b6ab2967ee97d483239e4328
TLSH
T11BE0E59E91310463E345ECA2164532C3FF0AA9770A660697E02F92B5923554DAFA036B
MD5 SHA1 SHA512 TLSH

Submit Download

umeng_it.cache

Path /data/data/com.burin.orkdn/files/umeng_it.cache
Size 211B
SHA256 3f14cafcc6b95b88c7d077095c00a8240d4498824e0a0df34b503b1aa829b5df
MD5 e933efd1b51273ddbc27861ea34e92ef
SHA1 43b28362d3a98235b7d4f64c0f64d0d7820b0e57
SHA512 e6dc327a1f31c60cf1af0d4b2668da03bfef7d34d56cda8bf52ab2df5a9b61ae5cbf9df9c6bd33ff66e43db9894c30f37b29e9fd4e15d8383c16542be25a6550
TLSH
T12FD0229F91300463E301A8A2224432C3FF0A79B60C660397902AA1F1823698CEFA035B
MD5 SHA1 SHA512 TLSH

Submit Download

yf.apk

Path /data/data/com.burin.orkdn/files/yf.apk
Size 59KB
SHA256 57133431ec20e515d72a3905c8618e31d6a132ac74f7841380b946bdef586f52
MD5 0b4849ba2f3ed571b5f6a4fdf6215993
SHA1 15e89a5d848a48043fd37cba8c9c0ee226ab6578
SHA512 8b757b9d1d5652d17c3e115a24aabba88c65653ff6da525b24164defeb0aab93552d65cd4c46cc2d988f3beb68f6cae8532de522e5806918431638333306280d
SSDEEP 1536:2mdRXxEljTYrsxJF2MfXn9S4v0GAJZeejhKmq2tN8R/nSU:2mXXxEersPcM3MGAJZeejh3q+8dSU
TLSH
T143530223ADE0C902E7D77B391FF59B345176434A82929EA79DD021349B2F90AA724CCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5.0.9.jar

Path /data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar
Size 112KB
SHA256 1cc01275ac67d4f0bb70cc1156d4b199e8a74805a1528fd08dd2918450988718
MD5 8565d2e2334ff507e2262115e0f26929
SHA1 b293c7e05e0300f46b52e3ca984e2606469f9c7d
SHA512 46fc1400f8627adcd27cd825b7474916a20f811dc02a7d9930d6b7ec7a01cde72494130cb1d4eacf2d8e178bada93729cfc9ef96763530043a13192b9ca0770b
SSDEEP 3072:BqWITuZrgO+oE5AZUfTezDb1kOmcWGQsr4yrgEmKO:BqWIaczr5AZAerQrhEm
TLSH
T1A9B35B13FB819D23DDAD9B3690D263856736F1073F43D393488491B69DCA3C16E6B2A8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

5.0.9.jar

Path /data/user/0/com.burin.orkdn/app_Wyzf_plg/5.0.9.jar
Size 112KB
SHA256 02a5ef69d0967cc0310f315c2340fc8b088ab89d0320227a30cb58229319c034
MD5 b477ed7cd5872f72f6f91bc754738f9a
SHA1 5ce083e7b964b08c39312bbc725f9fa2c279a612
SHA512 d41e1fa806551daecaee5bf632667e6288353532dee6996631bba121e50448bacbed8df4da1c0c63012a9421744b3d2877d28fc65872ea1bf215efd21a8f7597
SSDEEP 3072:BqWITuZrjo5pgTKezDb1kOmcWGQsr4yrgEmKO:BqWIaXfTKerQrhEm
TLSH
T181B36B12FBC18953DDA8973AA0D293416732F50F3F17D3534488D4B69DC67C36E9A2A8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

utopay.jar

Path /data/user/0/com.burin.orkdn/app_dex/utopay.jar
Size 66KB
SHA256 3b00f99e69a9b0cc2a58faf52e8169f99fdf15330d810c484ef81d6e0a8ec17b
MD5 8e8a18b329c0937d393f3f1c71dee05b
SHA1 e4492aa18b2103240e2c846a04267a90a6490a04
SHA512 cc54f2d8f141ace20fc9d031fd32ab736721e9159e8388a2d8393b66104e407b4a193f2e2e272b23dff6d085e0f2d6aea5cdac45a581130a874e274c34c1625e
SSDEEP 768:48ubzJZ5M5dkwJZQTELvwexWMw7B+vTsPQdW2bjRL6wB7Cv5EoYzHtcYeI9JdpLx:QJZ5MxJSToYAJvk+nB7u5EPNcwzLx
TLSH
T1D4633A03B3821953E5ADAB3591660381A333F5631FA7D347485858B9FEC2BC18E797E8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

utopay.jar

Path /data/user/0/com.burin.orkdn/app_dex/utopay.jar
Size 66KB
SHA256 c9dda4e71a7152be8edc8fab7489894d976faab37f63f93490e8adc2062d5d3f
MD5 56f57464bc726c0bb2842fb5bbac916b
SHA1 7c6f45b6110e689208182598abcce6d44576b7f0
SHA512 4f8a4514b38d4224ea88414ecbba673b50587f5a4825be533843d609d10584888aca0b29e1d30dcfce3283482893fd1bc5259b94516d780134b2f2d0e58987a2
SSDEEP 1536:QJZ5MvsTSToGEEVR/AkehkF0nB7u5EPNcwzLx:QJZusTEkEjInB7u5EVcW
TLSH
T184632917F3825992E9AD963C71A613407332F9224FABD3574858D8B5DFC27C29DB02E8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Plugin2.apk

Path /data/user/0/com.burin.orkdn/files/Plugin2.apk
Size 206KB
SHA256 2e80dd205ff415e530a217310fb52a9f97cdcf5db3c9f0b1e0401663cd00011f
MD5 cafd25d8741a3a816dc68fa1ddd26612
SHA1 df3b581874de4e3a9e5e624aebd8dafd7f07884e
SHA512 c99637604c502456ad6aa2aaef97f18fdceca5e2143af074b97a8b0d3b2f96ae01eca3317cc6fa3c7fe132c796e828ab23c63eb1343345946f957d1e487e151e
SSDEEP 3072:UN5r36EUqAhV+18dYU/CMZqp/aX0+GKkLF+kuJihuPaSQPSEy3bZ7zJx:REomlpE0+IvhiLKyr1b
TLSH
T1BF241932AA61A627ECAF9B3180D3C6C2F73AF9512707C353059C10B5FC963DA4E6E594
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Plugin2.apk

Path /data/user/0/com.burin.orkdn/files/Plugin2.apk
Size 206KB
SHA256 1f60ae0f7ca558ee9b0a6745881b7123925e603afbb4ec0ea1c973c38e659901
MD5 52e90ce3cc1f84fccc81e46706bf338f
SHA1 3f98d84bead1db6dda6b3c773300787b6677f324
SHA512 3dfad621b9df17981eeb9f227176b6b36a144a613d7a07f5b827798fe8b8db1b108ad2404daaa3157261b34ed4435510a0476e4303bb1b52d8e6a1de42524acb
SSDEEP 3072:UN5r36E9/ety2pLuIsDCI4pRc+YM1v5lGRG6V0IeIF+kuJihuPaSQPSEy3bZ7zJx:REIEyI4pRH1QlVNvhiLKyr1b
TLSH
T134243B32E951A692ECAF923990C3C282B736FD50371B8363055D94F5BC853E79AEF058
MD5 SHA1 SHA512 SSDEEP TLSH

Download

new_md.jar

Path /data/user/0/com.burin.orkdn/files/new_md.jar
Size 83KB
SHA256 04bd4f9aafc801876a326b24499c5fc332a74fe6d0247790fada3e9df815702f
MD5 701111a083e8b31e55ec814cb9c78917
SHA1 a92514f99a3af011d770a79d3699c0e6ac915813
SHA512 55ea76b432bf0a26bff5a3db2a629e9240a866de3a2d4d9a5afe0ca7193cc7bda3b5311cfeb2cdd6d2c62e760131611f8aad3dcbcc2e76ad97cd272fa15b667c
SSDEEP 1536:3Qr+qeW4RW3CYG+EJ8HDjdzF91r0xU8A4o4s+WMS3gEL/LBjIi2IeH/wFO0CcTnX:3QuSnFki2RYFO0CUnabDCyxcxOwsRuU8
TLSH
T1B383D703F6409923F9AD8F32846397C0A332F6526A13D7936508527BEDD67845FAF2D8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

new_md.jar

Path /data/user/0/com.burin.orkdn/files/new_md.jar
Size 83KB
SHA256 0afa5f48b018da2ed56bbad69011cfb2187944df5489b916d298bd960f4589e3
MD5 fb585df12147c75e30fb7acc4b1a6aac
SHA1 c00854e3869901c3a93a87d86bfe2560f0c94dff
SHA512 fa653c6a1eda7b61bc33db5fc947d8fbf1bc98697b22201f5010627af6c6b2d0d1c619bee08fbd6043ed9e6a3e64238fd177dde82cc9b753b28d3088e50e4353
SSDEEP 1536:3Qr+qeW4RW3CYG+EJ8HDjdzF91r0xU8A4o4s+WhIMGDBB+CUlHz21mbWCfJ/2xO+:3QvfHXlT212WCcxOwsRuUGdVh
TLSH
T116833A03F680CA52FDB88A3574A7A7807332FE67AA13C3539408D1B75EC27856B971D9
MD5 SHA1 SHA512 SSDEEP TLSH

Download

yf.apk

Path /data/user/0/com.burin.orkdn/files/yf.apk
Size 137KB
SHA256 01afa31859896fb68696a3a872705133c171bf6b65c66d7a21f2a4afca76a2d5
MD5 726c1c0feec92559ea9c8196067c101f
SHA1 96e985d2a67aa0f5b4caca40296ca54163611d45
SHA512 2935899268a1efe3dbbe25a227bbeec30c10487cd4a0b6043d8476b657c303cfc37cf3a2a3b3460de7cfd7ec0be2bec049a1a0d7b3f6093904a58fa763f2cc17
SSDEEP 3072:HPRKLfbQjymuyBuJZp6oSpBKfKwoBAw+nz5d0s4JtA8:HJKLT0uIU7qlGz5AtA
TLSH
T10DD36C01FAD34623DAD59B3350531B01D3BBE78247538393791CAA3B5D913C4AFA9AAC
MD5 SHA1 SHA512 SSDEEP TLSH

Download

yf.apk

Path /data/user/0/com.burin.orkdn/files/yf.apk
Size 137KB
SHA256 75e56e086b477dba5e717e2a40a0045e9893b2a320416ab1d4110cd47d48a512
MD5 29165f06d68859ffdef2217f0e9da657
SHA1 f1d5abec38653470376c05e70785c8ee6521de00
SHA512 41c32625515dc2d2db9837841aa1e7b5b62284fe950943766bc38fa5a3bcfe9ed7d91c361fec2764788e2e1c138e3a6789588e3bd15f195c8e4549dcaec5d3f7
SSDEEP 3072:HPRKLfbQU7TMy/h6oSWEsCDXcwoBAw+nz5d0s4JtA8:HJKLTxMqhpEslGz5AtA
TLSH
T10AD35C02FAC24A23DED4563324931701937BE7D593A3C397690CDA375E823C4AFDAA94
MD5 SHA1 SHA512 SSDEEP TLSH

Download

journal.tmp

Path /storage/emulated/0/Android/data/com.burin.orkdn/cache/mhzb_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

com.burin.orkdn

Path /storage/emulated/0/com.burin.orkdn.start.times/com.burin.orkdn
Size 77B
SHA256 8d8103c88557bcf6dc06f9e44b45ab3412c333fce6e22380a91de610d3eafd05
MD5 81501198c971ae16a99f41982142a055
SHA1 f8487a793c0f13e23510811d3847570a094f9014
SHA512 9065477b5e426562b422a2698297573e718d37b78c7fb1d4461fb0e30276aa9d5a8308e8c29adfb1a0006456f4573f383cd64b8d7345a9b91a8ac68824246d07
TLSH
T132A00262C69E9A37F29D20333033179001250BB25560E2CD8B5B1A347BC52E757D593E
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads