470610643ce13c3ae387064c7032633c17c2648e69fc47cc74a4cefa04b94963

Analysis

max time kernel
32s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
15/10/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.AndroidOS.Dowgin.ay.apk
Size 5.0MB
Sample261015-dalj4awwdv
SHA256 470610643ce13c3ae387064c7032633c17c2648e69fc47cc74a4cefa04b94963
MD5 475baa56a9fd992e2990e3dd5d4782a2
SHA1 4cc53b5636c0da18275d69a98abf038a41f526fb
SHA512 c29cac5a50c27c563c0f2a676f264b67912a7377b3b487d249fc6846354d43bbb5d48030800dee0e6e1c7f50a9f8ed0cb150b2bbe525852e8ada784b75d617af
SSDEEP 98304:lNgs0Jx+vUC0wgaE1Xi3h5yw3OOD8U/WFEogw+A2Ik6MvPhztUGG0TcKargzwESo:l6stUhwgF1S3h5ygOOD8uJw+A28Mvdtn
TLSH
T13C3601707D411775E0A5E0B9BA238A2DF5239F1C6B9DA386EDC19B276633601937803F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.wysdxj.gobangadd/app_jc/zc.jar	5025	com.wysdxj.gobangadd

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.wysdxj.gobangadd
1⤵
- Loads dropped Dex/Jar
PID:5025

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

du.jar

Path /data/data/com.wysdxj.gobangadd/app_jc/du.jar
Size 64KB
SHA256 5d3a14219fd0ae509c64b946abbed2c936fbce4d4fef551fd053c4b774111f77
MD5 36f728098875e6c17e23ac44bde25528
SHA1 3b103f6fb526faf023690a41573e0a2b1b309199
SHA512 7ca395a4347048f23277bda7181f3e9b83a15ce56ea358979a91674a6f6d97e6d3224136556d75a3ecefb672b1dbe83086ad49ff7bbf386c571a7ebff9936720
SSDEEP 1536:zayQb1DiODFSpn2YyZFgzTQBvr+nEYAVUj6KHppQ:Qb1/OyZkTQBvSEYAVippQ
TLSH
T14D53F18C14E7522EC99E7E79325DD204458768278919F329B2ED81C7FEB0F730B1987A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dzc.jar

Path /data/data/com.wysdxj.gobangadd/app_jc/dzc.jar
Size 62KB
SHA256 c0f84d31cf118d26dfb080b83141a542e0f851c136902c3606a3f27d473a566d
MD5 91c075caf65315428cdd69adc977f8c0
SHA1 51a7de49d8e801b84f1b20c7d42ba927e2b9eb07
SHA512 99f0a7cb75cee8727f365aaa3f7cb49fbe209fc01fb039adf1eaabfeb2548f71aefa795837bbc25452e2a46025fe2a1ab9d0f1057284c570eabfd95379eb6001
SSDEEP 1536:kayrq1DiODFSpn2YyZCF9Y3XTFylFgt1ZrhBt:4q1/OyZY9Y3X5yYt1Zzt
TLSH
T1D25302EC2A97640DD95FA5372E0BC04BE28D53BC8901B77566848257A0ECF204F9A5FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tu.jar

Path /data/data/com.wysdxj.gobangadd/app_jc/tu.jar
Size 64KB
SHA256 1f755a11fb3cf6c74fdc1076ebce8d8a3e1e7d041c02d02ececc4f0b2aaf77d9
MD5 3756962beff0dacce490d979eba54bac
SHA1 e39576d5b600dea61c124bc09b71982d37abd230
SHA512 8c27aacf05e68de29b0f7e470f48380e80474b3ac2968198b7a38eabbf5984c4909a0da2354ec8580f8d33b2c4383cb9a8cbea60b3993f3982804029e95ee7fe
SSDEEP 1536:ADgZ5kIjSi710qGPctc6tp6WyhcOClbpvrR6KoGag4sZ0eI:AhIjSY1/9c6tpLyytFpvl6KoGSspI
TLSH
T1555302832F402BAEE538F9562467EB3FDF24E51FF04114699C2A93AD747A47222871CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tzc.jar

Path /data/data/com.wysdxj.gobangadd/app_jc/tzc.jar
Size 62KB
SHA256 d4324c11d678456940870b0b77862e9eac08ba1b44ae48d025c265e26436fe91
MD5 6e108d5e7396e1e3346d45119c4f0f95
SHA1 1570d7b24eea220a2ce6fd94d4de8bc2fe0789dd
SHA512 6da1fd691bfc178416b0e5a037b7a2cc06c6d5dcd049326a35f2c8dca08ff739e24a0e2ec1638bf36f06389295678aef138f853e648ecfcdc4928eb4f238e1b5
SSDEEP 1536:rhrEgMg2pFpR1sJR7WOx4DyX7Bq4VdNKcMO0/24GIWn1q7Au0HZLuuH4z:1nMg2pFH12RCDKqcFMLcfIEfLdQ
TLSH
T1FA5302D6DAFC44BA55116131F7EB81303F78DAA19E44C78FBACACF63852C6258494A0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lock.db

Path /data/data/com.wysdxj.gobangadd/databases/lock.db
Size 24KB
SHA256 5b992ed2dc2d5fbcb5e770bfaa19fd2717a279e700df9e2e166d4991beab09ff
MD5 5800bdc8c2387b52b7e76b99bb01cda7
SHA1 b61d0778b03b11120a4bde69a9da873766866427
SHA512 fe3ebfb060580ed94d918c1fcee11efad0224c625f87cd8ed72ee81eb9e046c75553f619f5b4c7a934e635b604d15cc84e71d3ad0143bc804f5ae00853407b61
SSDEEP 12:TLmzhYwsmuoFQX4ygAjTl3GVzxjeqo4TllhW2RmBEyPbD3OwGQ:TLm1Ywm21AjTl3Skqo4TllgNGSzGQ
TLSH
T1F4B226C72BA43B25CD0E49775830536809FDB96E853393C23AA270765E83009D830CE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lock.db-journal

Path /data/data/com.wysdxj.gobangadd/databases/lock.db-journal
Size 512B
SHA256 b1698af72ffa981a0f34db711134d63e6efeb73c6936fac6a9b2ee15167eac1b
MD5 fc07cfea4adcb5f66991840fa651be67
SHA1 0a9cf70ec035cd533c6ed093c5cb2add087e0541
SHA512 de6b2dc0c61f30352f739f26346156777f22fd2c3fd7e456fabc5780c707dde75dd62c3cbde855cc57fe3cd494d3944f716deff838612b99f0436c4e021bd5d2
MD5 SHA1 SHA512

Submit Download

lock.db-journal

Path /data/data/com.wysdxj.gobangadd/databases/lock.db-journal
Size 8KB
SHA256 249cdcccd47ff0c27f20115907b1ccdaaae69f7e254f02d71ccf12abfcde5395
MD5 89be79ac9e6d0cf79045b01a85a4bab1
SHA1 e135e685991c4e15c8eb967e3d79a41538e69461
SHA512 7b7fc490e11f10539370f1a758f17ef3f97916aed4e217dc9faa612918a5491bd04fc853b30e6fcf2936b1d8e8b91796304151f472de1170670c0df04200d5bb
SSDEEP 6:7+/l9nn1sg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKpj:7+twqLiuWdwRmBEyPbgj
TLSH
T15D02C0CD6B883873C91D16FB94D7834C0D00E719C979CB17156008F83C035CCE4A0D45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lock.db-journal

Path /data/data/com.wysdxj.gobangadd/databases/lock.db-journal
Size 8KB
SHA256 f657054a8ebbc3f37d5270509953071323f9f47407452414fb675e1b5aac0ebd
MD5 c10b4fe0a0fc1465cb6eb5c639454f04
SHA1 48b8f4aac3ec6e48ead8d440d811f12bfcc76822
SHA512 bad872bcf8326a5ac6667097c72a81a3b149b1d6447e3e4214d7b77dd0a2a0de66afb51971cf6d44b7d63b3a4c1fec605b151f688d7b53e1f2500058287c7f83
SSDEEP 6:7+/l9bq4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKi//eV:7+t5qwqLJdTRmBEyPbVXK
TLSH
T10002128AA7810913C61D57B7A0D983952F60A7158267CB5715B708987C466CCEC90D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zc.jar

Path /data/user/0/com.wysdxj.gobangadd/app_jc/zc.jar
Size 76KB
SHA256 3d57975664fe8b6197e33e492fac05d500224da0177c8fa847bb33e51ba502b7
MD5 33f00794b0fa4157b451fe8e4e1555db
SHA1 decb62f6eb8cf89d311cc7ada50e111a54821fc0
SHA512 c84aba4d4ecf820e1d4b3baf02220642990f1ee3f1e9b7ee2dce81d6b3ab0953859c143c952ea908e9de8b3fac8c4f6286a0b5e21a85cd24bd61575f07b44e59
SSDEEP 1536:8beWllnFeVHidokO6J3vw0wCjgEUdRIH6PyjkgIwONly4OOoOE:CFegw0wCjgTds6lvwONlDOOoN
TLSH
T159731B07F68599A1EDAECB3568B386003732FA567E63C7030982D6B86FC27E25F145D1
MD5 SHA1 SHA512 SSDEEP TLSH

Download

justin.txt

Path /storage/emulated/0/justin.txt
Size 247B
SHA256 69ad950613f40be4b6941c96271cf1465a25e15fbcd14c073fb58a69f8a50a67
MD5 2f0de4732d6f0ae320a531d226b8dcbc
SHA1 953cc2d5cee3fd4abd2b7b717c3d1ce1b014c109
SHA512 f4bd8a3d74eeda46bf8f122e8f53d91eb1edb6630b420256738ad25c51767a233f572172c1ffc5a1554c6bcfbfaeb3a01b159fe224c74ac119fd7986611f4e48
TLSH
T140D095C0C13454A7F4317500724C7751C413B361F4E1D9403FC41E040D11048B158FEB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads