Malware Analysis Report

2025-01-19 05:29

Sample ID 210801-lda7ervm9x
Target 26453_Video_Oynatıcı.apk
SHA256 78d97e56b62a69a14febd66d7b4e9e981a8ddf0771ffdfae8db7bd68a2ff15b6
Tags
hydra banker infostealer obfuscation trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

78d97e56b62a69a14febd66d7b4e9e981a8ddf0771ffdfae8db7bd68a2ff15b6

Threat Level: Known bad

The file 26453_Video_Oynatıcı.apk was found to be: Known bad.

Malicious Activity Summary

hydra banker infostealer obfuscation trojan

Hydra

Requests dangerous framework permissions

Loads dropped Dex/Jar

Requests enabling of the accessibility settings.

Reads name of network operator

Uses reflection

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2021-08-01 06:03

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2021-08-01 06:03

Reported

2021-08-01 06:07

Platform

android-x64-arm64

Max time kernel

5388s

Max time network

194s

Command Line

com.loducwqi.ocuxbeu

Signatures

Hydra

banker trojan infostealer hydra

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A

Requests enabling of the accessibility settings.

Description Indicator Process Target
Intent action android.settings.ACCESSIBILITY_SETTINGS N/A N/A

Reads name of network operator

Description Indicator Process Target
Framework API call android.telephony.TelephonyManager.getNetworkOperatorName N/A N/A

Uses reflection

obfuscation
Description Indicator Process Target
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A

Processes

com.loducwqi.ocuxbeu

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
N/A 1.1.1.1:853 tcp
N/A 142.250.200.10:80 play.googleapis.com tcp
N/A 1.1.1.1:53 ssl.google-analytics.com udp
N/A 172.217.16.232:443 ssl.google-analytics.com tcp
N/A 1.1.1.1:853 tcp
N/A 185.199.110.133:443 tcp
N/A 172.217.16.228:443 tcp
N/A 142.250.187.227:443 udp
N/A 216.239.35.0:123 time.android.com udp
N/A 1.1.1.1:853 tcp
N/A 208.95.112.1:80 ip-api.com tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 142.250.187.227:443 tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 216.58.213.6:80 tcp
N/A 142.250.178.2:443 tcp
N/A 216.58.213.6:443 tcp
N/A 142.250.178.2:443 tcp
N/A 172.217.16.232:443 ssl.google-analytics.com tcp
N/A 142.250.187.227:443 tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp
N/A 45.153.229.189:80 renzofowler326.xyz tcp

Files

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/MultiDex.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/tmp-base.apk.classes1917158561924435470.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/multidex.version.xml

MD5 6df41023b709ef6498a1d83ed1aa964f
SHA1 bf4cde0b40e0e350996a716ab81de8861be86e9c
SHA256 49f3961ebf581f7c2e1c8b4beb4a9e535490f120e670aeebd6c9eeb8e89f56d8
SHA512 558c94444992fc54d0348741beecffaf256a9c6756177feabfc524c16132bf74c5ae133bc6613baad7c5f3ec8ed64f733fb918d71bbead877c03d56c16d5ec62

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 390c02c81c0835a477bdc26fd6e259b8
SHA1 b4ed496841f6162a759ed9bd0e611a11b2e64037
SHA256 e34dd6d1771813b959fd2b94d896629255037cb51c506d6d75811a7bf2428839
SHA512 718d10e98dd79d85a033cb27f1ed3109fb8c669d4e72697036c2bb4bbd09ca15f7583e848dc6963508c7e985576c34a473ce87cde78518c08cc6af3f52c353a4

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 1c6b6a6a91f2ccf7ac553f9a439ad69e
SHA1 270b45bc1c3255f95fecf8bfa85f7dbfc8fb5748
SHA256 a7958ee3107cac53056bac67328f317cf9e3aaf4533e1072f0c4f0334ebbffa6
SHA512 8a61fcab1bc82977f72af693d4a749ad41df81a9a9c6eaafee0f4ffd36a34f069a259c6b20046a8bce58a6eab526df122cb82e8d093be73cf5ff9d41e489bf8e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 a95ac01dfad6979410c9afdfa3afe27a
SHA1 3c8d27204b0fe06b0d3fa021ad71ee0509c14600
SHA256 01e452e8b31a738b82632154df8deb339ad7511d9ae1f37436b16dde78ba2bc4
SHA512 75960e80c0f26bf9ace5abfc76cc4d42fe9f37893f3c53d5dd53345d196107171f8038121e4e254ab85a38ea00370d65c84c4acf59b2d2f223875ad6c915e70d

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 64810ba61a9adce97b1e6df885d9af55
SHA1 58853157c44e8c0feb5f93152c6bad0142c590d5
SHA256 3d020bf20b7b3b0b305d7057a520d4ae557d61384bb4c461533c3acdbc651ceb
SHA512 7d825f609df4b4ed49848c1128bddfba3960abf191b0977410b9ab3d1011702d6cb5ea31a201d93257c7c4af5c459042acd888dc845ae2312dceb2f1b1f69f71

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 31ce8bf368ff3a4c1d0ada13b1f037d0
SHA1 6ef93ccc40064bd4b00d86ffd5cda71f1a1dd170
SHA256 3b01b88c3ec56407b228d5a4db66a7dbe98c78aa5deb95cf45884720073046ee
SHA512 8a81900cfc4be27b585006623b1ca3b13fba2f12379be216ca6e737271cfd752b1197e64e64896495866b5d2f44fa940eae94a0a833fcd04ea131a624e7d39c2

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 2fdf79b440e3846b426e1715a92d554a
SHA1 69f020386a017f5d9ebfbfda2139c0c16622c7eb
SHA256 a4774314f5f769ae73c46a668ce50858b2e181983f3b1ad63c5b952a76ccf2df
SHA512 8e75dd53b0e65e4f3bc413c3a1cae8212d6d5a59b500140ef75ada41131630463ce18b5ac5afc27dfaddf3938fe392cd80e3d8b4fa1d1b711d054686badd1018

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 c3b410d9527ac6cdafe5bf2460296ae9
SHA1 bd6eea5345d35b8a579863e68c6566d3bbfdce36
SHA256 959a3937be4b9a94d3baa812c311e973214b4e689f8e94ee4d5de884a66b28ba
SHA512 4400c692b56c54343334e36b07aa2f0e93200e0f0faedd856feb635a27ddf7050882f4fcc4294b9c33a9338d36c94825eda976073b187a2ee5930ab6b0384d8b

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 9f1f4f437c95dd1ca14cba13e35168b6
SHA1 3fdd88f318495b6c6778541ade7587541335e165
SHA256 3cd1f95d27f900d1af2576404cf32c94e50dd324d30a06b6ab1883124dd8e770
SHA512 b60b647bf88f406065e2a7a199ad84089f63a07b1e87f9b974b03fc19cd67ac4d74a25bfd0349897d4ab26e0d32d21cf6a5117c465e3b620d2821a4bd7d07f2f

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 275f096497e1a03f07bf12faf9649bae
SHA1 d5c8e49b872ad9bfd8ace17196206e961b032b76
SHA256 1f44895cc2cdf579e4c69b8c909ec0c75308c60c872b4c5fa51bc4b58d760135
SHA512 ae30737c236cd82027e6216d45fb90866c6a0cc8aeb512aaebd7cbd153704812e9fbc38617de86d20ed7cc783ab427f8a53ebd8704f74d1b14ea5cebe9664e1e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 1edc30075034fbff809c79928f5a2d2f
SHA1 49b9f11bf02aacbe17851ba138ce5482f609b5a3
SHA256 842408f754a61e1f5b27ad74d4c15d258d2dc0f18d35a16e1059f09f85211149
SHA512 4cf97823f8ea994baf704b1de9950a510c4db9e0a063a4b25443a89d455aa986f70e9c6d22f1363fc0199ced9ef625570a7fe57683b6687486ed982034de4495

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 f316ddb7c9ad13c34b57189ab4e87d15
SHA1 30f1564bc7d0ba56bf9d4000f7ede20e2a0bc737
SHA256 b4d3335093efc862c82470b334f5844a999ef5ae8eb794ed03a7a66a7de0951c
SHA512 3c13cb4d1500bf76f9042d492b0bdd4276f259b57a49fa06fd9e13dfc0c486b8981f9c67262a32513a78a391219050bd6f46b655b6a99726b85966dfc8d820b5

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/1222122121.xml

MD5 c28fc2966426ac4c63611d586af79930
SHA1 c77b20b082268e67f454eac4d536a903d1001544
SHA256 abbc2492c2f66f9ee33c6f918cce44d12ca5f02ccc1219c25c5d37b3802b0017
SHA512 a259e504f93233fdce545621a8593afa9ffd48c90abd3e0d589d44ec9a5d4409aa65230114a9a5ad983f447a450fc94f69a2775fabb14e78ed656bd734c11635

/storage/emulated/0/Android/data/com.loducwqi.ocuxbeu/cache/8gzebQ1OXqs94lSHwauuFRp8k2cS7sGAHZXkrJQ6.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_akbank_android_apps_akbank_direkt.png

MD5 f0944187029354d4762dc3c5189d215c
SHA1 a66cf3942cd888e98fab277cd58985f6e937170c
SHA256 9e33add96263e8d8947f83ffbca81d5284d95ff00cc483efa1bf054c2ae1bc1f
SHA512 7c4450c6519c04d18a8aee81265f34bb22204bd15a8f018219815fb282d954381e77016a32b676a242af38998988b8ce50e24b50a11d8e9d0c0a50bde870266c

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_albarakaapp.png

MD5 fbaff9d03716bc9d8389322f7d950f2a
SHA1 4305b3705a85e64e36f50b3c4e51a6854ca8e824
SHA256 2156d89ad2c989c8a34abbe248d85cf57f05ddf286ab2f4ef74fad70a65f6603
SHA512 04eed149eb65c35241ad538c93cc62d303efd84af4b3ee906ca9347adc2904c7848dde7466abe584b2217714d32de0b3561021b28e3aa98af7c3b9a23d6f5c3d

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_android_vending.png

MD5 e87aa3759751d81b01d8164d645fc0d4
SHA1 f722327fb7bf2ad8371aad50a728ab510aa00c56
SHA256 3062c8280bff477bf2b9e2e4e82138f049f82ee72da611af7811fbec7cadddbe
SHA512 22ebf5801182351ba2860b0a168df3d35ad4ab3cfcb2e905551c5993f96162fa0d8fe57dee75a44638f2560a5c84175ff392cd041f3905b72e3a81867d33df99

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_binance_dev.png

MD5 b7bb51233b35f1112f990378d2a1b409
SHA1 343561f2c99d3474f5c2b50007a0b6bf18ac8029
SHA256 eb59896618de76e94abb1b1bdab74a118b27195838fb56aa5e74733878ab4b76
SHA512 ee48f5851d0e30ce008dc2a1c130f909a5740e8785f782ddcbfe4b0e41fa5e0e3770d8dba880fdf574227f7ddbe38455f51a7ba1ead85f992adad81d9ede4ce8

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_btcturk_pro.png

MD5 3c4ea8341ab6d8c9346dcfc4e5932dba
SHA1 5dbc02c35a432db782fb9333dbdda688ccb3cb16
SHA256 340b42acb18864b0bf62a652009f3e22beb87b5a06f1baf42d388d668a36a492
SHA512 c5b001c8edd3f99f35d31e1e670f9cc7b0a0f82fdf3f8d2194ae3c9ccc1aa7bc40b20bb171f8b9060d2312ed621a355ef2cb12e205653104b3b8c7ef39349bb7

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_denizbank_mobildeniz.png

MD5 0750fcea4b5049e8a2c72fd47579cc0a
SHA1 23d9cce109e4a1b4465cccf9cb903671b1ebb27d
SHA256 f4fdbd84ad14904261cf9ab3ed1679b963241e0280590a237b65cbb74366cdda
SHA512 5a95616e3b7e7c09debdd193021da132f5b831f1cba1efdf40acb5e42fe9a3f2400c3c9b30bf955adba572ed7708a6285bfb9c68e121dda2e918f95558077b10

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_finansbank_mobile_cepsube.png

MD5 67d1d00965b1b4cee43c81d832dc9953
SHA1 3078df5ff4c48133f91d7cea0e0e3fc913005928
SHA256 9af0f627d7d9647cedfc028230d7201d3346bff3f96f0adb54663f8e9e6cdcec
SHA512 824d37cf463b4c1c56241f67e287c1ea0cab9a83de6d9055525d31404a8acbb80b8b24ed34160c8d46874b850cb97207c0a144b7b2c9e2a4737c55cfcc1a0c3a

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_garanti_cepsubesi.png

MD5 1184ec3cd220fa6c0a6b005f1dd8decc
SHA1 15bcdf154f387e8416ed87d7daecfa9d6f9d7742
SHA256 6afcbb58c06cc0f693810beb2c646ba8d093a2b2e11344a19170466c0a12dafb
SHA512 e6f08570f7a978842a372b5488e2954ac6d6312a832d187d6c65968fd620d30543f86f12d152d4a9459330211dd9f27361c63f0cce02e57ba72de60176d08224

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_google_android_gm.png

MD5 aada1e4218c3d576ba3ffbcd5a62cd37
SHA1 e884595e9c4bf93e8447a4bd7ddc95b40d9301dc
SHA256 c456ef2d6a86bf9b4e2e179fa27b3946b0f20cdd86d675af43c63d132e4bdde5
SHA512 e29e53a80852824058277e552bdfe42c1b9a0536926d28eda8871b8bf8fe97754c38c13998ae5a9d61fb01b0e6d753a90d76f0568cf074386824c6af0f2c687e

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_ingbanktr_ingmobil.png

MD5 5a33a9c2420abd5a928feb1222515769
SHA1 b7615971e10314f58cc724816beba693c976c236
SHA256 266d5471cb47d9343caa65b2dbbcca03870c31823a2ecc598bfa3b9f89456fd1
SHA512 ac46fff371cb1910dee42df0b1f97ff1748ce53cde32452140b086aa17c4f65c81d6d340a70140a48320d8d89f9bdb21e38ef2e8d144432121a7bdc5af133aaa

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_kuveytturk_mobil.png

MD5 42179533f266915856074601dbb870e7
SHA1 591efb76124617beac6c0bb22611b77e62198175
SHA256 e606db19e8c4012b842c60e4106c0b263206301918a16ae17abcc419fb02b350
SHA512 eed14544da131d35731fa750788e57080e6d0c4495a27d49839c2ea73ebb7b57a9753ee47db84aa0378482e6fcfee05ac557f89aea76ed430edf1f8f8574c031

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_magiclick_odeabank.png

MD5 f32efb7ebb9b7ecc2a466838d2ed8803
SHA1 5b67fb94e1667b5be7bc51ed7a054f21c29bc6be
SHA256 549374b7718d40c8c501beaca1bfffdf2352d202fa8602bde4e353a86d66832a
SHA512 fa8c0b19a05f396ac22caf94241a3f9ed37d14f87c55d633712cb519ab325bef624dba46bb90b08b5ce8eb97ab73519bb55ed24227954b120e4ce94f9bc8229f

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_mobillium_papara.png

MD5 d9fa26c98bdfc393d6cf21d463f8389c
SHA1 09a521f0e44d0976417427ba11a98338940aa366
SHA256 fe9b9d85947fd55e627af234da07ef09bf663ee16c8c20376c483277d4db6942
SHA512 f1440957d2174afcd58170f423312e5d85cdc1a13113480eacc899f9786b285f5b2706ffaa457f453083cdab867d152e5bd0144790bb48bf2bcf5ed3bc43067f

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_pozitron_iscep.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_pttfinans.png

MD5 08882084a9311316defffa072211677a
SHA1 ccf357b22b46eeb2b6980eb172739d16646458fe
SHA256 cc7a0d759a3b8a114fe8044c733967a1a883aa09f09669eb53bd7a6a6b6c73d7
SHA512 45b19857750942da8b467752a2e7a10a87737ff9a20fe9de9baf6b43345f7810bb72861a1b43fc950e216c95379091e5b529daccf269ae5e34feeea0896bdaba

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_teb.png

MD5 383ac9a927287011b4195dfb2369d5bc
SHA1 0e07eaaca24edabf34a5191b2fc7996fccfcab09
SHA256 f0659c8516860ba1e8a9cc4a414620d1437e070e3a02853ad23ff705a92088c4
SHA512 9ac6850b802179fb1457ed2afda1b06e8630a1d7a447f8b681e67eb877b76a88b1b8198c84f5e1357c4b411c3ebbd61c0496ead86d6b2519f635a3db99b7d1fb

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_tmobtech_halkbank.png

MD5 92d180c3a78ab31b6787eb8e19c1c767
SHA1 cea31640650a00af47da187acfd7ce56d15d490c
SHA256 e8f987df6a83ea943675a362c73fd64f81b7cd400ba4864967beb693f6f992ed
SHA512 848dbb168344737eb6718b9dfeed3065159ff3f9dff6c671a6a993dbe70da415f403710b5d3734ac77a51a372040899930938ab1d43f6e1b7bbb8f304876d44e

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_vakifbank_mobile.png

MD5 b528b62312f769207c88b2db48109da6
SHA1 3d5c15147e17050b3ab9755de924186eba12dc5c
SHA256 953dc1a94cb5ddbc40a1ed7fc5868138129699b62e9ff6dd56e76623a9694d1a
SHA512 485cae39fb9215801e14d9360128c67cf076078f7dea76072d5b8c313887d631496215b7a88b3c39d9f884c4fbbcc6e14e1e5f85719a5c0bcacfd8cd72230b1d

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_vakifkatilim_mobil.png

MD5 3d37613b9a9031f6c9cdeeb3dd0eb090
SHA1 df5460146e9ce51c4d04dd1ede69a26387f28ca5
SHA256 9097449dfd826e3836344d84ff1a1983dfae7788960419caa12b83f29f1ed747
SHA512 a84b50a62c689a014f52e0434e93f36cc3c92c2329cf7e5fbf31ee4a657b6d7e8b305febd137238f814a2d45e0e1e43e38e52f7ab7e4939aecbbdb8eb53bddc0

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_ykb_android.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/icons/com_ziraat_ziraatmobil.png

MD5 06eb5d715514779d4f6b784f5d833f97
SHA1 08f7ed2dd7400a5c34ffe82f756f5b1f948080c6
SHA256 5e7e25fe2fc87ebcd00660bfdebf53236bb8a8ba377bc8e1f6cec3dd66fe28bd
SHA512 8d5d3fc8e9ed6704089f1138f225e6651fbead7c416b394445fb1fb5df650fa99bc92060b482deade2fa7005010f71dd321871f24a3636e91d3a85f1e6b6b727

/data/user/0/com.loducwqi.ocuxbeu/files/icons/finansbank_enpara.png

MD5 8c476d4958fadb8376e8c95ab42750fa
SHA1 687a1b4a8c601db0e42068abbe716896fe3c4f1c
SHA256 85e3f8bd942b2138e95c35bfcdfa89e004fb38de8d5e92ce88b70f636f410877
SHA512 01d029ccfb344d95c9520bcf859f949f1cb192694e589e3e9404a7c10f7a25399a5a143ec1e46a54aeedce802a4953ca1491c669e7658d117ade5c248aaebacc

/data/user/0/com.loducwqi.ocuxbeu/files/icons/tr_com_hsbc_hsbcturkey.png

MD5 bf41e9c520b8fb5616b5572939318256
SHA1 168cc84317f8c99abe2621b2ae478e5c59a49f8a
SHA256 b95a66d27ded1b0319e3bb67022b29d19ad857a4eeec91f18d60d23813a60f2a
SHA512 c28b341a057d641937a438ac0bbd2bdb86cf22a4fc623a417a584d178c5b865f3c0f04e4869955e43d21e1b4cebf503ec2cb88ef2beb2094217be71d1de7610c

/data/user/0/com.loducwqi.ocuxbeu/files/icons/tr_com_sekerbilisim_mbank.png

MD5 23bbc66e3c5fb39b0f17d32b06d2ee83
SHA1 ba1416cb813d692bb33a9f285f35be003447b5d9
SHA256 1624c48a1633e7faaac39cbd4d3e2178eb94b46fb6443dc98be5df19a1cce266
SHA512 bd468dfae3153302cf8fa3126d40bc1d10751ae11d914dcbd4e1afcdf260851be1ed0afbc3d6f69f038926bc4125a345f1634f0f5c7c7d1134c7f6f4ac07a1b6

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.akbank.android.apps.akbank_direkt/com.akbank.android.apps.akbank_direkt.png

MD5 048de76a334f6f2c7be98c5599c7bcd4
SHA1 92301a6b2f9987acb88529737f409aa362e51bef
SHA256 58fd46495a1988affa17ed2bdd8427506e436e9d269b78fc9779f98990a9f43f
SHA512 6e528f0a1853360b705d33aa6fe716f420e73174d05385b275b2a81ec74ea100273a22ee1f90ec7d10f7770815319bae1772f0a7b304a1c6a0c285f8fb2fa332

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.akbank.android.apps.akbank_direkt/index.html

MD5 a1f214156e53d4857db2fb90282d3b01
SHA1 43ac5b556cdba7b1eae05b25d4d201d56a03e901
SHA256 2dd84aadb08195000906d0dbc2bce6f6a2d2ba46e310c8d805a993b5178272d5
SHA512 6104d02eb49b45a332dee5e7e5c7218b1a66a70eeb9c5c1e64bf63e2afd85050f41a19b6fb656664d6201683896d02676e2e2489f188ddb836c249f8926749fc

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.akbank.android.apps.akbank_direkt(card)/com.akbank.android.apps.akbank_direkt.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.akbank.android.apps.akbank_direkt(card)/index.html

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.albarakaapp/com.albarakaapp.png

MD5 70735c17f65111509ddea3bcbae0d990
SHA1 2ab033c2d3e5e546193f1a6e9a7350c911613298
SHA256 70166e4f34857b7e7b672e44cdb5f2cf6ca4c54bf25361745da2b8b04957bec3
SHA512 0ac036b8dc680bdb1924839fb0499dd886137aecff996a6e66432849185406546e0df73e0d7b08eb699d2e74b7b99e9a6cb50a2c107fab2d3804ec3bffd5c7d4

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.albarakaapp/index.html

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.albarakaapp(card)/com.albarakaapp.png

MD5 17fc94d2a39c233165bf9035fb15ba5b
SHA1 d2dfd8a201b13c7aeae7c286f88f5b62a33942b2
SHA256 71dcb78f64bfcdd833392da3c682e2ed54f527f2244f9b9e1966b13981f3e319
SHA512 9bf764c9b4936377caf6895cfe4f384bef5658f5ad171badeb9d391295a5ea5b709df87f2c8ee6d34a88fb13bb961fcca66e281eb688a8771e6791d2c026344a

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.albarakaapp(card)/index.html

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.binance.dev/com.binance.dev.png

MD5 0717ff9e7eb2751ac7ef8c83aa4c6bec
SHA1 3c666237695c668d217d4ebba5256ca9985312bb
SHA256 8edd7cc8b723d4556de22f4ea372f07b8cdff2a73b91420aac33f0bbada7a785
SHA512 962b82b765b3c8b96a6047b780f3255c50f55620b8c214c08667890aec24f6d0fdcc49f070aea2961aea05b80f736d584a0614ea914ebf2b7a1494e376327aee

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.binance.dev/index.html

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.btcturk.pro/com.btcturk.pro.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.btcturk.pro/index.html

MD5 98314f2e1f5d5d2d2e33dc184019b104
SHA1 b1a117f8831501bd8639afde5fdaacd0fa0da847
SHA256 8093f80a7889c8a5624c4f4f2575f86648eb48d5bf5f3c987906759fcaad0b3e
SHA512 9160f134a0104b623a3b01042e48b084d7a07e3751854e763714063d244ab5ecb9394a2a94cb8e7a1588d3f0c58e96c7a1d13ba657fb4ad777355151ab926777

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.denizbank.mobildeniz/com.denizbank.mobildeniz.png

MD5 a2149f22a821533c72d6661a4e41b7ef
SHA1 5012571c87a0d4cd34253315dba3823e2ad55f7d
SHA256 29823a0f8dbd53bb0a0be6f8f65517f4de1852ebe82895df89439ed56cf8f829
SHA512 fc9781406287f1f8a188da57c88afbf9d127b2de0d456e735cd122a43a81cd21d28d74e7258e2e8d7bf3e4a4363a82c1fff96b1a7d873be3dac6aeec190636d7

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.denizbank.mobildeniz/index.html

MD5 797a310173e4420e6a7e6c9e75e3fa31
SHA1 c640dd4d8e7ac47d832338df0fd5c9b22bd2970b
SHA256 476066c1e1b5c1133852d9d1ebfa04d7cb94f755ec9a1c11191302c84c2ff99c
SHA512 7613aac7daf9f6738b4e829e52cd4c3e5759344ef9ce97eb9e3bb8d83a0f4b6fe701a1e359ef94d89f40003475d825e25c74c67691a7afe2e70207828f9d7eca

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.denizbank.mobildeniz(card)/com.denizbank.mobildeniz.png

MD5 c73b45bd414ea6b99fbd97a5fd808c24
SHA1 0af3d036b4d93264056d506588500b686bc30fd6
SHA256 76023dcba5d1c50ff6c0f1d1bf9f89360fab272f5b427a5116702ae75f4a66af
SHA512 5213c715b078b20421e8c47fe7d620ece075d3a0ee3eb576eb5b955756db772f41ae161b2de23973b77056332d7a59e7d72d76f33beafc7a234e9fccc0fc28c2

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.denizbank.mobildeniz(card)/index.html

MD5 cd106fe5df4b5e7dd64771f8f980cd47
SHA1 b96d6599e8af57042fe95904ea4ee3ad8f931330
SHA256 2a90ebde2918320580d08d82d052f9e61e0aba5dd6c457a49a1108a51ca46ff7
SHA512 8e363639890ea75333a7487639cb17b4f913da7d4ce90bdd1749528d9a065e9c9521e04fe648dfa17fba922a4e9d2dbb5251e11add2d3c060ab47846a48597fa

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.finansbank.mobile.cepsube/com.finansbank.mobile.cepsube.png

MD5 adef4b2cc35e58090b0a860e37a29057
SHA1 5ad3d70bbaa0a6999938b4f7dbb2f851d7fe3f4e
SHA256 a887d08cb17fc6165ab5c3115e475e8cc423d7f204a6575a22ffa5bebcb35a0c
SHA512 35ee69dbf3acb6f9b44abcc4f34ecad6c98bc43e9aba6f742716809aef1c887d1547d78b793856ca7d2cd58ecd3fe5a0a7fb28f4e4ecfc6b13643c3b2840f094

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.finansbank.mobile.cepsube/index.html

MD5 c2e16ab850fb80df6b672e31919ba9df
SHA1 622e3effaea8202f9833e783c924c3921abd4ed7
SHA256 eda244d5b60ccfa8735d5b466424235f4be4f34a93a27c3fc2894a80d29a4a95
SHA512 83ac3bbe69ddbf98da5bf8c112fdb12aea58195feb7c1a17761f27b78d5d2b9750bce8a530064d868cb0de0f6ad857b64ca6c0c8b12c178eb141ea7fcf8adc74

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.finansbank.mobile.cepsube(card)/com.finansbank.mobile.cepsube.png

MD5 e60d1e770905e33fdaea87211abfbe7b
SHA1 a3c6436e7e99df35f4e76d97369cfd7cf2869bb1
SHA256 095b61cf98e03c8188feb97124758bad08625464890a8aadc6eb06279f271584
SHA512 c2ead8b5bbdfb47aac0b9d96c1769d34e23da3bec7bba1a96c81eaeaede61ef046eef702323b211e57cbbdfdcb6420ea3a88e5c8a51fe6fb56a9c63833cb0d6b

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.finansbank.mobile.cepsube(card)/index.html

MD5 ee20f0fbc1d1e91ec5aa3da987855151
SHA1 6418a25b371d41fe44a399133935aa5de5f38dab
SHA256 39fa3ae44d2286306030b3a94e39e580fab5955bf0685ec8af96855c69e7bccf
SHA512 8afc072a046879c80875749fc1094398a317c4ad45c288b500982fe806fa0f506553f222b44f401462984f57420eedc0c34dd45827b7054e6ae64c0cf2292dc8

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.garanti.cepsubesi/com.garanti.cepsubesi.png

MD5 d70a9980a50f671d754c5ffc85716e17
SHA1 6d769eff26d14dcb7c50140e8c12844801e9128c
SHA256 6bac56f8ab213d23f82a2a1a7a1f82857973dd6cd31eb7dfd9c3619f8bf13067
SHA512 168728370f9c4b2a2a20d6b4abe3a5850688ed7cc4e696c652877384342f93d763f2335b84913998fb8478d78073d16d5bff6c050cde15564959e909b62e0412

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.garanti.cepsubesi/index.html

MD5 b8d80712e7c7286690b9df561282613a
SHA1 5afb5aa74c965fd7c4b6b018d447bf6e1b6bef43
SHA256 34098e044a65078358be91adad9a8261f16741f26cdd00b34a55aea01a82f4a5
SHA512 67afaf4aee720fc7c8f1445a1b45fe5f31131fec762daeec91af761d410a631fe6ec7ec9a8d9984793bb1d006c2070f190f352776e39c0eb916a5a5448fbdd0f

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.garanti.cepsubesi(card)/com.garanti.cepsubesi.png

MD5 ed59741b6c18887e92f06d4df52a2031
SHA1 14277066192a0bfbde897feca94b236ea6ef3080
SHA256 199b6815f7f1ca2e090f71b6485f281577dd18afee077ea3639a09d6966da91e
SHA512 e606771d71e3382072ee5ab7e3c65d2ca62b9d7a8c0c6e2c7350a4561e2978bf02b8b10ffebedfa0794475ea5447c9e086a416a67efe235b17620b342f5f8204

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.garanti.cepsubesi(card)/index.html

MD5 d8afae64dd01b773becd6f08a35902b1
SHA1 ad6fd2f4ff0994571e17736e1e5350392a6d9f90
SHA256 5c260266b7ef960df7282223a1265033a7cfb5366b0bfe8da0bdb0d7c4115cd8
SHA512 4cc9833c18a713fe07ec85e08117e4eaa66397169d30e1f99e1da6e40b53688ba7c0e2d693283ff647e628a30fb5b51a9ba79f55128243602e349bc58e3e3f82

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.google.android.gm/com.google.android.gm.png

MD5 5323d82f3436ccee500262d80d9722ba
SHA1 bc305cd5f1f69a7779841cdb8558c448e4aa8791
SHA256 5f5cf4034b076d69b2c2120c5914e1035c6c01dc52b7f40a6b678c634e7e1bb8
SHA512 01d5e85302eef8144572bc26dedad6cc9844abcc44c1cd463775b80c20565da48f02add8a75eac356c19444cc883f6788feba394d3ba6f94b147b43fff64b85f

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.google.android.gm/index.html

MD5 12020b706c0c2a74de58eb58904db33a
SHA1 49ce97f53411f94f5411ad0862888f2d7eb108b5
SHA256 bdb359014be5f359a7624e7b937349eadca47a9508d2b37c4f3daf51430064a2
SHA512 017f232f4aff95935e18eab6b9d3a15ee337e91c42eca01e30495f4367abd789e699f9fdca0bf4af2343a4b67dfff394494d896b64dede34ee0d458962d72125

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ingbanktr.ingmobil/com.ingbanktr.ingmobil.png

MD5 8551e529bd57b1e4e4549d044ed8e04f
SHA1 118131864c4264185ebf07a86fb1125100cd6cc4
SHA256 46f69ca631a83780cec2f6004de31da82affb298b2397e4ed442790f957d4c17
SHA512 2452f913a0b5ccd4674c8ee4839b37db81d41fd267f8b3ed7d5b0522a87f46be4f1c9728741e38599b2dd7e4d44fea33b9fb9fc4016d47be192f5df0f10c8c66

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ingbanktr.ingmobil/index.html

MD5 948659aa16855fb481f728c223b7e8a0
SHA1 b078f4f6f3d121c8e274dcfaf6c227cb0d408fdd
SHA256 8f3827c142c7e4dd0e3b6f8fe6fbecf98bf0af398495b5dda12b7353af39ed70
SHA512 36a0abcc2bdeacb8bd0cc8ab3bbdfcf212e9a62bf7a45bc0c050d25e486d06347137a5a4d3f31822631fcc58cfa202eafdeba25a5035e0c7fc7dcd1da18d01d6

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ingbanktr.ingmobil(card)/com.ingbanktr.ingmobil.png

MD5 9857ef48ab1233065c2c51cd1fd947e0
SHA1 de4dbb3923f8cf9e84ca7a2f8f1e04808d861dd8
SHA256 75262d9f77cf7340a4280c4ea56e0bb9fc6fb489a3a6b472484660127fee0a1c
SHA512 93c99acaf22f982e432bd22422cbb8a4484dd76d5e18ad8f67d474c6d941208563e64c10e6251fe7bc18c27e8bf21c764b4184fbbe57ed88e78aea18591aead6

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ingbanktr.ingmobil(card)/index.html

MD5 af834d45222f04f115362cbbf3c5c0d0
SHA1 e3bf161ef08030cbabeedf2ea271822c736b5eae
SHA256 babe8afda33894f80be55be18a7811c2cc534bc25e41cd748548f863039b0442
SHA512 f45630c713299d5f1c38cfa71cef7ceb6d85f7218e02f74911af7ec65823de970c7bf034e3f834d8edf2e172d24b09fbd4461c46005fa53151b85955e720641a

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.kuveytturk.mobil/com.kuveytturk.mobil.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.kuveytturk.mobil/index.html

MD5 13bf20c903ca5659da3270685a052444
SHA1 484df57d8eabdc5bc927bc4dc23a1f15bdb6c8f1
SHA256 0185b0cc55387a9d843112b65ab39fb57f9d9cd9d41257a0672da202e4e99017
SHA512 1f59763256e5c9ca1a0301071bcb60c96fb0462a3756303df00a65f51bdb4330fca26d6119059c3c1130fec1d70915b3497857f63b3f2ec5b79e52737ec0f119

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.kuveytturk.mobil(card)/com.kuveytturk.mobil.png

MD5 e045819aed5db3a26f9b9ef0326aab04
SHA1 ee7cb70a4c54bf2f92a9c747f715fa314139bed1
SHA256 1c7214711771894eedce23355493334c7aca7cfb58a6aaa6a32020ae8ee29eb1
SHA512 cda81bffb0f5c8979571ac2feaae5e9e98b2f874ac2c62930ff197af125208cd6bdbcfbe770ab45168d62258714b560091d002358541669bf9d6a580fd3369dd

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.kuveytturk.mobil(card)/index.html

MD5 9e516b58969422b4c1d6f2231a0bc401
SHA1 e7f4f105f32043ba635302d4e271a77532a344f5
SHA256 954c2b4d9f2bf0cc0cf85b69f2ed4c6b72df247ea078b68b1a81c22c4f8cddc7
SHA512 4c3947f6f2c89fe3cc6d6018c2f70b308751e3b1dd1a749022820889befd1f2a8aa99cb8177a39f388c9ccc545dc7124922858290508f659563540ee3324e962

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.magiclick.odeabank/com.magiclick.odeabank.png

MD5 a76ead6114872ab355d9d997cb9c4d8d
SHA1 806d31297ce89ea74eb79f5f24cb0d68fdf38580
SHA256 a76ff54bf87ccafd6b98303c5a337bc34888a0d983422823b40e09ede5ba6e16
SHA512 ffeab13f0862162713614231125a1b30effa90da37441aec080f9ba3c230481a54b65b5281041c05c1eea391c09ab943462362c3c7b1cab9f4512c30dfe8d86c

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.magiclick.odeabank/index.html

MD5 d1990a73c5dca1a80638a307b60f8292
SHA1 e79f63d9c69ab59e5ccb33de5bcb2eaee2121ecc
SHA256 79e183a1589038ca819d69870a01497a2b9a7c3cb486bd8c44c080d436a3cf86
SHA512 753576a281deb1f64760dc1e21502612522d3623c26ade7833eb6169f95cd8b5ad70d0dff9199bc63c61329f5f47e267d3d9fe8e2cc5766fde969fd9ea2b18e7

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.magiclick.odeabank(card)/com.magiclick.odeabank.png

MD5 a76ead6114872ab355d9d997cb9c4d8d
SHA1 806d31297ce89ea74eb79f5f24cb0d68fdf38580
SHA256 a76ff54bf87ccafd6b98303c5a337bc34888a0d983422823b40e09ede5ba6e16
SHA512 ffeab13f0862162713614231125a1b30effa90da37441aec080f9ba3c230481a54b65b5281041c05c1eea391c09ab943462362c3c7b1cab9f4512c30dfe8d86c

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.magiclick.odeabank(card)/index.html

MD5 5d35fb4fb40accb271172eab3a7530b5
SHA1 2ac0f808f5ab3b8643675eb4ff008c514479280b
SHA256 a427d7afb58b75f92147d4a63a6996bcc71066bc1c354abe1a7addbd9c2ed8fb
SHA512 ebd685f8aceac82bd0425de37fd5c0be83f6c30aa94071a7035c6d5e12dbc165276d70aa13e1647fab2850d57a5cc3ac56a7f264f7265dbdf62dcc2c642dbe09

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.pozitron.iscep/com.pozitron.iscep.png

MD5 af561ee69b76d3c5c33effb6ecb6696b
SHA1 3cc5fff50d69ca851b10f62f881d2506d027747d
SHA256 830819c68459dd1708a44c896d6a38f79b8c5fabcd385fb813adbf21e803f4cc
SHA512 26726d02ded9e7ef7e95d721fb354dd917874e1fa5ea8d8bcb376f46f8c21d5810e182047ac169ec4c5b4b9afcad64c45aa3416408887e64a805b13c802a87a1

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.pozitron.iscep/index.html

MD5 81de19d95d72a50a7b26e147c9577d3a
SHA1 fad14cf8ae6ba3015c88b5e962e0da75d8bd59c7
SHA256 00b1cd62ceb8e97c9e5e2b14e4fb6598917e9469e8be79065ce83042241b2876
SHA512 71fe7f7aaa415813d841ee5e75b50c4d69beeeddd9bb0811f3a866b3e4b904220b1b4ecfcc6bc2719e05fb636bf9b288fe6943e2d6a680614925c1476af63daa

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.pozitron.iscep(card)/com.pozitron.iscep.png

MD5 f726fa4a4a475416ce55a12d16235f2f
SHA1 ad97e105a7c3c5a47a52d5c2585952d9e4a2706b
SHA256 fb301566d34876139c8e1ccd736bb6442e5a96aa01e844d34a7fb15b77907937
SHA512 d68a91724e0b149c8f45c31a88c101d4c44b34bf6cf15614edbbbd0b4cda350726005b6b1429143680b17c75b619c8dc89dafe248820404f9714f8bca5f9884f

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.pozitron.iscep(card)/index.html

MD5 8e82c9660117c452830452993de60c71
SHA1 48ea0cdd06a1132677644150a4af81a10b1faa3c
SHA256 bebfb5b72ef6cf7bbf4707cae256d4676573196935ab49c9a5f61e8b5e140405
SHA512 643c85f586e4e9054e7350a53cbe584aee396473d53be56972651e8ab80372c7d8e306f265c9b4dec3456e506692f14eb6ce402a17e3cd23bf6fff975be11e77

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.pttfinans/com.pttfinans.png

MD5 a54d37f9fcae599175cd5035761c86a8
SHA1 40a9f328b3c7c128c8d0671371a9f64e05a1f876
SHA256 c6e1a2df447781da79ca5171de49902deff154984991669d50615ab08147b2bf
SHA512 ecf96a46b324f0c6a863017526882685ea7d0f52c772f11425aeae72ec0f78e9a5b8c8cc018076799bd156f98676f497ab7c0709ae36e037d91b30f138bce06d

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.pttfinans/index.html

MD5 882217d255f1074d2f84a4e14533f89c
SHA1 195ac00f3103bbc468493030d08c814e2fee1c5c
SHA256 72ea42ad77f96cc6d51c8da9d9d36c4b181f228f30831db7d1c4cc1fdad76401
SHA512 5bae1420a86010802941bd98ea3bca168b1aad8728bc277040cc5efbaf3acf31476b6078e279aadc5345bbae6cbd91cbb0901e0060ab64e61b502d19ebbebb84

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.teb/com.teb.png

MD5 46514ee974260e55c8a63334cd9c51dc
SHA1 98c5a7a2276db91f7920cf4df570c941473df8f2
SHA256 aee4bf105b30bb45f18fb04e2ed07cd8e181a74e541a7bfccc2f2151cd77e24e
SHA512 80facd08a6813835a177d2edb3efabe92f5699fffbecc3858a3d90d0c49b21812614f4e6b9e7f3d9f02c6eb8236d8a2f0d49f55a1da3a8e0f5692234c8edd36c

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.teb/index.html

MD5 f06e36dc9ebc43c883b1f940c81ee445
SHA1 22f328d81ab19cc06116da0d173dd7b704c3ed1c
SHA256 dcc43e0b0be30bb79732714b328de17f56c33a789428fa264c5d3442c1933b01
SHA512 d6ac4043170b63399281545db07dd54bc382d50de79b7a16abb45027a75d70036d5cf6f597f8a4112007478d98dc7968c716f5fb4ed9bd15056ad86adbdbd523

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.teb(card)/com.teb.png

MD5 caaae898970fb43eb0c87e084f15abc5
SHA1 cd093f5c79e33fdedbf4c45e66f6b2a01d40fbeb
SHA256 5c6a91cfa00807ce2416ea521c73445f930f11f1e5a4e540bc933a3b0d182d49
SHA512 ef1d475e0a78fbdcdf7fefa97ea4f6142a992be4a2c26c1da7b1fbc743949eda36880132bfa5c0607a36d6a54b8d745b4edb9ec761f6ae8c32c5637f608b4f6a

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.teb(card)/index.html

MD5 8f07dd585e2b568bd237a7229a43d8ea
SHA1 85e75e11102093b8d2f2b4cb6a9ccb28114be8b4
SHA256 564bf19e9193c34ec65f5ee8e30a8b2269e57a67ae9635cf34096c65bcf39844
SHA512 1414951896740c839b93ab51de137f7e3966a9a1f162f5028d943b45062a9560af68a60f1ae0b27124ab0cea350d2531d2b2d96fe4189193b279d12fec2007c2

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.tmobtech.halkbank/com.tmobtech.halkbank.png

MD5 f6e8b6c56b0f8d7ed630d7fb4cef8db0
SHA1 2c8721d4ff36d81aa3e796cff21bc3624e955323
SHA256 2b922d56c95feac670c43564b025635ac1917a6ffeeab4bb65170fe1634f8205
SHA512 eea3b38da41f2d694d4b6e8d51cfe652a6b0dd3f980d20f14092d82a6f9eba231ba0bbf8ce240180fdbb9d566b58316dcdebb094a62c704d632e142538a489ba

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.tmobtech.halkbank/index.html

MD5 256ecbfc4a6714fdfbbf4f38a2365be2
SHA1 d4b95173a1f39f040a2f7b800e3ef36b8dbac22e
SHA256 1b30478fee769a3b7dbaeeb5aaefd9111d0ab4d36d6f5d30f895d97f6a76e324
SHA512 af89ce82d41898f81b08f994ac0265efe33bab619ed4b08b936c615a3c0dc968f68a3d3ebf6976150d0d772374cba927c84034e286ffa63b649482d38829b5f5

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.tmobtech.halkbank(card)/com.tmobtech.halkbank.png

MD5 71b84368d36c309dd0c53046d16350ab
SHA1 5723d6c02863df74c6d46a3bffc37b93713ced37
SHA256 9ff18a1ecf9d04265acb777926785acde47cddc4ec7457111781a206960fc50f
SHA512 fcfe4ce474044d5cba1452fa21bf07647bab259b3399f73ca147612cf635c6a0e1a328f69e437c09670149fe1dfe4605592b5226cd69633685bb22c54feeb650

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.tmobtech.halkbank(card)/index.html

MD5 6b011aa6456c1ae0c5c678db06f12dee
SHA1 546b11f8fafb8073a5f1dead6fc39a79fa305e6e
SHA256 8001167e949d01a6a7fec86e39cbf18ba5199e97aec4799e99fe18aa6676bbcf
SHA512 b72f4f32010cd10e33166686a563c056afba887e6dcf1911c0141e73eaba44b463a131c90cbfc6ea415806dce5131edaddbd059f77234800884085e225147570

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifbank.mobile/com.vakifbank.mobile.png

MD5 326fcdafdc2a9edf3e3222a3956f40d3
SHA1 1ec1337381e75094bf8348d2ec63bb7cabb4d4fe
SHA256 61e976eaa689d81d44ff1a5330232d07262df05e97fde1174f7719cd019964a2
SHA512 1f7d2596276374caa69c8239526ffb367786f06e90022c5e1e7509fdbdd2cfd993ac47cedb9cd91eb5508d301f327a2d02e552788bf1de866c29e7ebf8c458dd

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifbank.mobile/index.html

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifbank.mobile(card)/com.vakifbank.mobile.png

MD5 9a4a4674a121952cdef80c70a434a7aa
SHA1 0fce774979cca47569297100b78c03069cff0938
SHA256 c71532a1c805459bf2bdaa9de688194dcbd75f91a02a4ca0401263b6f9b38bdb
SHA512 39d0b9e59c1828c724f92dd22527a5e72c3887a7283ffc4b1499a72eadf94a7cdf2db88ddf449532ee1d36e587eedc66dbd2e7c923a831d7998ae9f4b0c94682

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifbank.mobile(card)/index.html

MD5 1d1563da76897e9a7654bd875e20e200
SHA1 f0549f7d537365e9ca1484a751d89d62366cbb84
SHA256 d97024bb0600ae20c1618589862703516055bba4b6a90619e3325e37514d1387
SHA512 05b8a9eeea159cd0d7baa31cabb51a2a0afd92e575e7c00f840029d96a755b7ccf2b861be8a5a03480bf88c89c20be0e54ecc58852115e430207fda9c0e9041f

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifkatilim.mobil/com.vakifkatilim.mobil.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifkatilim.mobil/index.html

MD5 a5dbdd4b48ff9427fc164a3fde7d9bae
SHA1 3bd920d5b71e43f7d2c6eb3b2ee87f743c1e6a2e
SHA256 ceacdc189d62a8ea97a8584bde2a0ea4745ed4c69f6e7be106597ff1a2128d63
SHA512 4ee3b206b12056692bd9cdffa5c2e719dbc86cca6c58b7697a980accba741ed4fa6f82a621cf2cdf27f238a79efe84b6896fc1f0543e9efbc0d817a473acdd45

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifkatilim.mobil(card)/com.vakifkatilim.mobil.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.vakifkatilim.mobil(card)/index.html

MD5 25bc45d09804ab434b99053f71095dde
SHA1 9318547290260eced08145c0a73d33d9e1f22faf
SHA256 211d946230a06ec740bb8504a0712990031e6bb5545f0e00da8de48d754561b1
SHA512 e4f04a843c77a795d95f14ab689e581b8b154b08c2590fa5e2c0bbd0e6588224d17d0359f791deb9310742e51d01df21d8155e89565ecbb569687533a7b4dd79

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ykb.android/com.ykb.android.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ykb.android/index.html

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ykb.android(card)/com.ykb.android.png

MD5 edc5a35c46d78335b3dfd2e5fbbe42d4
SHA1 43d84c0a474969fbbc9bb3939d6faa744d3283f1
SHA256 d4e9b0823d3b3caf6f445a531c805b6a0b2b1dc43948e3500a0f367e99fbcc7d
SHA512 b6bf87f20edbf2b396ccfe3f76d54f08d1b6559572506ae4b1e8fc3288268c189d89ac1882c79cc6f0a2fe24bf937f35dc9461818017da90feed002da1580bb6

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ykb.android(card)/index.html

MD5 3896463513c93ead09705fc7103a586f
SHA1 1c8f6cf7ae90d41030245c3d8918f34c141003aa
SHA256 6b0348a6ddf4351d53bc99f0971fdd67a34f6c811e1e971870fa0eee74c2b2ee
SHA512 11767d9fe52b70bddc8af70ca736963b63ebf95d902294bc768d086ffa5883f5a6c7dc767c90bd3be202b637739393bab73e5f8dc763324f4ae00ebeb6a2f6c6

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ziraat.ziraatmobil/com.ziraat.ziraatmobil.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ziraat.ziraatmobil/index.html

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ziraat.ziraatmobil(card)/com.ziraat.ziraatmobil.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/com.ziraat.ziraatmobil(card)/index.html

MD5 8b65a234f08fbc8465a6ca3df029982b
SHA1 50df77c76d9cd73cb15b2a49d857cb0b449ba848
SHA256 c0f89c1cdb496cdeb0abc23c9344d3f49a69ec90610fa2c230ecb5644b8a00f9
SHA512 fc957dc95a394b39a668e2df0b901dac5f89595e0b58ad5e2c935e2abf89f9ccf512715959e1360c6c40e9e7431bed25f5059bb1c1e4a7579a6367a2f4602482

/data/user/0/com.loducwqi.ocuxbeu/files/inj/finansbank.enpara/finansbank.enpara.png

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/finansbank.enpara/index.html

MD5 616079ae092313d865ea4b9be346af68
SHA1 b7834de5b30525b0653e4ae25ddf2e8cbccad43b
SHA256 42f77536357ec046cf7d4852360657f9c691f84dea11721ed18a6e8f155bc6e2
SHA512 b0f07630f8c7dc20917fb5eaa8d8526270bb486fc9f97d35d92ea3673b739389905c43f34d7a797bc7e5794d949df2ec890151058deaaaa045c0658f1f71743c

/data/user/0/com.loducwqi.ocuxbeu/files/inj/finansbank.enpara(card)/finansbank.enpara.png

MD5 673bc02be4bd6cd1db58ee73b72b7aa2
SHA1 125bef8527721a917f94609cb4887562f1073115
SHA256 5dd03f22ddc4912d463802576aeb3287c02f948af8b095c85b7aeedd01cb6c0e
SHA512 fa8bc6708d1d1c9942ac0fe3f518899ecbd7eb459f1b6e985b141ef898396b97661ec60d999fde345e86871a1170afe5b0e576936cbdd4564eddce7f34799bca

/data/user/0/com.loducwqi.ocuxbeu/files/inj/finansbank.enpara(card)/index.html

MD5 c46f693ae82b107389fc4f37be0bf5b0
SHA1 088c6cf8eaa7ed81f387f5d75a914b4b64bc3e05
SHA256 577c528a78ef84cee275b28af459b01a3044f04dbb71159c34d682ddf10c0973
SHA512 179b6a2bedecbecc5fc8e6e29cdfa417c198e5fb2ee94aa4df6ebd87f982d4dccd504db3f2c156349f5665052c85875a711509e02cb27496a19f6887867f4de6

/data/user/0/com.loducwqi.ocuxbeu/files/inj/huawei.settings.pin/index.html

MD5 67faaa440e9ca2d872bb7cc3097562e6
SHA1 3cca16eb81f99efbdc1ebb69e1964c871517b981
SHA256 ac8466103be3c241162ea40be35751833034ba2229fa1bfeec49c864ef90b3cf
SHA512 9d145deaf031cf363d687f3cb5243fe566126fa29c4939deac201354c003415847e9f1f9dd8b7d7de3b862362a58ecfe3472dee12f03e63a2308852ee92b0d85

/data/user/0/com.loducwqi.ocuxbeu/files/inj/samsung.settings.pass/index.html

MD5 b56e47ce9c7f0127710eea06b21de16d
SHA1 86f992767acc6136380f18421476c7700069decf
SHA256 8c055ab16fe8f5069d8feb2854c4d97b6da9aa6145970d1c476755bed22c360a
SHA512 e8116a6aa130fbc6a207bd1fb57f00b7ac364c0128cfd0a52d3636c2b17ae0a9fbe81b98c1d5b393ccc6cfeaa9169baaea539c8735978f916f9d96b90665c513

/data/user/0/com.loducwqi.ocuxbeu/files/inj/samsung.settings.pin/index.html

MD5 d73c9bbad80057e77e65c655088e69c5
SHA1 9dfbddf345d50c38550cea628bf3da74ebe3d337
SHA256 35192a5fecb1f0d5b189c9296b4c16cffe1de27d993b42869f38d89da3a280e5
SHA512 2cbe17ce718179a6d2d24024edd4e138a6e7cd801d5904722f6a12b58919e9da9a75254011dd05866897aa5d62b102893ed5e132cf603d888d782613e756116d

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.hsbc.hsbcturkey/index.html

MD5 d71bc3a1645ecb6c35b266c67b6df0fb
SHA1 08fb6bc0b523ca2383fb04464e6f1667bf1220d8
SHA256 e9dd9ce64058283d0b544e075c19f15a8e1e3e0eb5adebd282d9eb84ab06ccbd
SHA512 de448668e6bbba80cdc7e8d2bc193c998dceb8253e76436a337d8c906ba03719c358b8849ab3b13d0d4ffaf5543c2d9bdde5d73ffd95b07551af9068e3cb15cb

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.hsbc.hsbcturkey/tr.com.hsbc.hsbcturkey.png

MD5 b72416107f6b3e1478d3429b748afde9
SHA1 07ac50e8f27cd22f2f0d9fc401cdcc4db065ff57
SHA256 dde188a9ae843f14978c1f827400cb7c5806169d6ff82951feb3748fa3b0e485
SHA512 a5afdcb19f07393b051a1fd53052a334f5a1920d7466a51a987f9223b2973a1745f378498676460289eec169361c74be54e6745c23da0fcff0890661f66a3511

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.hsbc.hsbcturkey(card)/index.html

MD5 a8ad0a6200e657cfecac95b5f17e6783
SHA1 2e7ff0f53cfba6fa98dfaa0c586714306793f155
SHA256 640acff0bc802d3af8aa29a583be55d13dda67dc792d7d70b102851ed095da18
SHA512 bcb815acef5edb9e1f454efd3790752153990498e3ab19cf54251b18d661d4e7599d02f90e838d7305e9b5127b0e375cbfe0c86c0fc0bce6333317af08876512

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.hsbc.hsbcturkey(card)/tr.com.hsbc.hsbcturkey.png

MD5 b72416107f6b3e1478d3429b748afde9
SHA1 07ac50e8f27cd22f2f0d9fc401cdcc4db065ff57
SHA256 dde188a9ae843f14978c1f827400cb7c5806169d6ff82951feb3748fa3b0e485
SHA512 a5afdcb19f07393b051a1fd53052a334f5a1920d7466a51a987f9223b2973a1745f378498676460289eec169361c74be54e6745c23da0fcff0890661f66a3511

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.sekerbilisim.mbank/index.html

MD5 6cd08dddc935fb8f4e2d54d055fd2b5b
SHA1 fa6c5dbf21897d28e99acf896b7b4a3ebfffa429
SHA256 3675189ec3dffbca7ecedecf05e19e9227abc23aac528509133cdcac9e69ab1a
SHA512 9da7e761d0e70130865cd27975795e2abb6057f4d516afa2dc743c3450be637486a44a8c187a0d394643b7f6194dfa44bf6deeb0ff8fbf56483966eca7b9f117

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.sekerbilisim.mbank/tr.com.sekerbilisim.mbank.png

MD5 2d11ab69a25c890d90289030b1c53366
SHA1 c486f806b8e085b27d62ff0d8b693ba8bb56202b
SHA256 952e9e49db0ee6440e263b03a64170541e6df06572bcc8bfb7dc8fe47cdce87d
SHA512 eadab4713d210b162522bcd2a57323f9f5d85fb0a46b2b2dfb5b6b6dfa3f358d4e11b01131194f7eac6c63cbaaef7db969b7836d2d1d55fde1ba28512c14a463

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.sekerbilisim.mbank(card)/index.html

MD5 f0c184b1dfc03e8247f70a4a26f8a91f
SHA1 e5b978969e891a93fc2575cef33cda62c7423d0e
SHA256 a45a4928072df76a8c29034dcff4391481be3b227386ba9f12b6419e88d609ad
SHA512 878e6bc8ac34a94127cee77990255b89588f67b1ecf1f9badf72634999e161327d1a3009f2b39e221fd79e24a3a8cbbf08225139ae1b56c6579592798513566e

/data/user/0/com.loducwqi.ocuxbeu/files/inj/tr.com.sekerbilisim.mbank(card)/tr.com.sekerbilisim.mbank.png

MD5 2d11ab69a25c890d90289030b1c53366
SHA1 c486f806b8e085b27d62ff0d8b693ba8bb56202b
SHA256 952e9e49db0ee6440e263b03a64170541e6df06572bcc8bfb7dc8fe47cdce87d
SHA512 eadab4713d210b162522bcd2a57323f9f5d85fb0a46b2b2dfb5b6b6dfa3f358d4e11b01131194f7eac6c63cbaaef7db969b7836d2d1d55fde1ba28512c14a463

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 60d0f9bf958d94cbcfbeca294251853a
SHA1 5316fb8821125369114504b9d191a5ed1b0255fe
SHA256 b25a183c4516dade01c01f877b28e0dbb5799f8d1c6d4d5758b3118a32f671de
SHA512 903b5de315f238b6c09139ba15a04612ae7d85aa272bde9b52b6d9ff019b4fc5164b1d8ab3ce64913bb1a7f73db2d0c9a2669b9e749d4fd4424932509c663b26

Analysis: behavioral3

Detonation Overview

Submitted

2021-08-01 06:03

Reported

2021-08-01 06:05

Platform

android-x64

Max time kernel

5331s

Max time network

100s

Command Line

com.loducwqi.ocuxbeu

Signatures

Hydra

banker trojan infostealer hydra

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A

Requests enabling of the accessibility settings.

Description Indicator Process Target
Intent action android.settings.ACCESSIBILITY_SETTINGS N/A N/A

Uses reflection

obfuscation
Description Indicator Process Target
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A
Acesses field javax.security.auth.x500.X500Principal.thisX500Name N/A N/A N/A

Processes

com.loducwqi.ocuxbeu

Network

Country Destination Domain Proto
N/A 1.1.1.1:853 tcp
N/A 216.239.35.4:123 time.android.com udp
N/A 1.1.1.1:853 tcp
N/A 185.199.111.133:443 tcp

Files

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/MultiDex.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/tmp-base.apk.classes7041619464504746113.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/multidex.version.xml

MD5 ac88991c16b510bb513a6de10fb0747e
SHA1 f11ae7f0190ab01ec88b5ff5ff8597c57264daff
SHA256 64f5fc2a104b0241c75537d57abf3985860c87fa052c1e0d477acaee74bcfb39
SHA512 6df09af00dafd9c4c795cfb04b8eca151ea5ad78605d268e321cc102040086a64667b86c69b77e36730d374ea947883d4c279b7e02f736ea6156227efbe79b1e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 dfc66a90dd46514575236c87d2a5a17b
SHA1 c93fffdfcc992b82fc700bd594401dfe543af744
SHA256 409c24e1c83ffb8d4d8d6c5917f5e1504026d736cde502f890f236b1d1572470
SHA512 43d5c3bc3c8761d09b77bb8b238b45c0539faef9040ee64a8567f9adc598046aeec1d2ac54232b9ba6912cfd801ca6cff80f9fea439420f70f41c1fe5009438d

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 12d6ab1d27552f5788e1667ec0eb1360
SHA1 f0c1a775a55b7bb45fe65579b526cf4360c0c4d6
SHA256 52e178aa40fd1c71b3a4e8fdfb73fba744ac754430d94697f4d2aaa6823c0d18
SHA512 87eb0dba3f5fbb8801a5b8a07849c8634698d64333f77d548f4596221d2f3d7cba7288ebb0fe0b7f9357add2636b07c6e9cd24aa887dd6cce6d22a1b7e2d3d32

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 a25eb30e94b3d8c1c8d6428a96f559e4
SHA1 00beaddffd2475856a37db4d157c28a9c38044ca
SHA256 0fb8401d802a4709b7f3c49b74404d6d2f8327acae03e01c57912afd4d052a9f
SHA512 9382c23e60af3b15f35b99fb3087d289f424b7fdcc3c51aebd472332324c6a561c9b1e28666267341da39815dc348c62f4efb809789d8eca7973704db579f025

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 bf0321f14fc691f717ceddaa692d12aa
SHA1 50164266b4d9af6e13aec5f571f6ca66be14b7d3
SHA256 b5f102aa29504c696afca5b749cbd7e46ddfd3e6d06f7e59a82d28b81cd10eb1
SHA512 5a2024313b38018261a5a4a3051c27409d20f64f627d9bda70125188b13aada701b81e7b596168dfe838d1563c50b85ef182d561e7f023050d924ff5e57dc6d6

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 45532c622db043e28a1513f29c1a7c80
SHA1 4d4208652fc398ffba40e4dc08360b8e17aaaebd
SHA256 e076dfacdb11592f3e59abb010aacd3387d2605ca78e2c12baeda64a7f67facc
SHA512 d1cd2c71ba6b3179d57c30b9e6d9c9076f17df3cf38789fa05ac990305dd1c4f9105f4d9e7f2be61c3ba00a87112054cbf7c195f7fb0d1aae10ec098204a5d6f

Analysis: behavioral1

Detonation Overview

Submitted

2021-08-01 06:03

Reported

2021-08-01 06:06

Platform

android-x86-arm

Max time kernel

5350s

Command Line

com.loducwqi.ocuxbeu

Signatures

Hydra

banker trojan infostealer hydra

Loads dropped Dex/Jar

Description Indicator Process Target
N/A /data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A
N/A /data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip N/A N/A

Requests enabling of the accessibility settings.

Description Indicator Process Target
Intent action android.settings.ACCESSIBILITY_SETTINGS N/A N/A

Uses reflection

obfuscation
Description Indicator Process Target
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE N/A N/A N/A

Processes

com.loducwqi.ocuxbeu

com.loducwqi.ocuxbeu

/system/bin/dex2oat

Network

N/A

Files

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/MultiDex.lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/tmp-base.apk.classes3982077481865397519.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip.x86.flock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/oat/x86/base.apk.classes1.vdex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/oat/x86/base.apk.classes1.odex

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/multidex.version.xml

MD5 e054aa5e58c3d2d37bd062082dca7de9
SHA1 c54fdc2937f5b22338cc284167bd597d4cdba2d8
SHA256 d72f9c4569cf3202ef3af311c35ead05d50e2e2dc159e8940e601bbec7ddc89d
SHA512 b0c6a8c48e79b211e4e2e5695a4ce676fa85d4b23f847f05699c31797f1423fb1148ae92e12ba4bf74a415ce75d5e2b983ef1850da7db711bc9be20a66528929

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 9815bbb9d9350898f681f890097a498c
SHA1 b0b8b63f06aa4579f6333088b2c46ed801826afa
SHA256 ec8a90cc4cd49c0898a929b4822e2e6331dfacbe1cd9eb93dbdc85fd893c9461
SHA512 f93a786892b559539a266448682773fe1db2319396939aea745af1ad35ad0ce1fdd4d8d33c5d26918e70481fe7d2ed1bd54d5730579b40d9fcb2c8eb43f4bfca

/data/user/0/com.loducwqi.ocuxbeu/code_cache/secondary-dexes/base.apk.classes1.zip

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 50d93032527ce96c98d2fe616edc2cd9
SHA1 72b700e714b4d5c7eada14ea10a69c2c5c2fce03
SHA256 8854bd4c080b8ebe2ac75aca115e6f5aa7af14b8e0a9a9e193ad7a57af09a4e6
SHA512 ba816098f1be378aa8d181579838212bedd529cb1633ebb2c85cb2d27f8912413f01c07554b1d6002343a2b2cfcdc1894c69d856b72849d49ad7f513c92debb6

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 8d61e5ac6b466071247a78e08f01e523
SHA1 841cef9837bf2bbaa6c567e2d38d49cce717bbe0
SHA256 29735e743d4ae015af564f049e95b91c842166e148c2698f960d6d4dcb4a799b
SHA512 eecf0d6e879d68dca39f351b94949b80b350df9931df10830d2c6cfdf3ac0852191b249186adcfbfe620677a5c3a7c87f97e80a5a2d32a1d4e535be0de8325f3

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 4e4b72d2ef0abb6265b11d0feadf64f8
SHA1 51498c3103fca52cb1ee6ceb7b4368161e60a349
SHA256 f17114d24a5457f694e25d376a737792fcd05f4160fcbe656061c6befc2fa2a8
SHA512 3a0b8d39a5562919bd21992b2b3e37dcdc39fcba507e8883a2a54ccec12f0b4d68476478b6582e72216d1858f1603861c1cf6d47cbfd1b66754287a4d9070574

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/prefs30.xml

MD5 2703c2433242eb7df82f8725f8aded17
SHA1 adb4d1155aba8bc80540bf8505c67b2413ab3169
SHA256 bd6689dfd67939fc6a7b08bc76ce0e831559b29bf774e9e85bf6a6a6e191a505
SHA512 9714034f5ad7ea6d5db46221f21f76b48fd3af46e412ac78af04fd57fa419756a8212c8f6c41dcca0f524a535387d98c6b31c8dd364090f6b95c50471cfb9f89

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 09347509a391034970e911142d170083
SHA1 6ff48deaca19215dc8eefc429fc94c7d24adf22e
SHA256 b589dc3eb0cb7f24f5545a0a48acf4f0487dc1bd4a36f63b9cc9f076244a28cf
SHA512 d924ec20cf1f884dda5aa7cdea5856a126b25f24f6b16bc69bb3eaf4e3a765554dd5208721986d37342e12ec8f5379d9c348580dae92d2da053cd53183b647c5

/data/user/0/com.loducwqi.ocuxbeu/shared_prefs/pref_name_setting.xml

MD5 e911ca90797aff501fa87dcfb6bc4045
SHA1 4be603837bb442cfa8e84c4b35b0585c1c878519
SHA256 5463d77386fd4679afff189b332abbae4b09fa948b278b18151ebb3d3d4bd67e
SHA512 d94565988852130c7fd60a78947383fc05b55c2fbdaa838d8116457af6f3091a1c72ca327a3242b8428b894e6a7657f84a4a7cc41d5f10f77bc23bb0a681d42b