agent_smith | 4570f15c81ebd9043d82560bc80008f78f59fca9754415e67b52a045511c1a59

Analysis

max time kernel
2938787s
max time network
137s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
25/11/2022, 09:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4570f15c81ebd9043d82560bc80008f78f59fca9754415e67b52a045511c1a59.apk
Size

10.4MB
MD5

8205837d1fe12e2488ebce5152f6f567
SHA1

1246804eea6f68eb963751ae0118cc3b8f697611
SHA256

4570f15c81ebd9043d82560bc80008f78f59fca9754415e67b52a045511c1a59
SHA512

3479223c4f95f6be9ccc4b90421e0f84722df5b4314806a8e37e8c5b8d9b241050922330e1d9f6f30e980c6fda82995dd1e1e257eb9f84923b10ed8197a1de92
SSDEEP

196608:kEMf0ItfsmJXybK/36RAUBfu+d6PZAUx5wiq9qRs5PbjoqRpcpHllAdHYjsazr/U:/Yx2mJCbK/3UAUhnd6P/WiqwRWbj9cp8

Score

10^/10

agent_smith adware ransomware

Malware Config

Signatures

Agent smith
Agent smith is a modular adware that installs malicious ADs into legitimate applications.
adware agent_smith

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar	4470	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=134 --oat-fd=139 --oat-location=/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar	4087	com.kuyinaidianxi.fhuu

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kuyinaidianxi.fhuu

com.kuyinaidianxi.fhuu
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4087
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=134 --oat-fd=139 --oat-location=/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4470

com.kuyinaidianxi.fhuu:service
1⤵
PID:4191

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/4087.yaqcookie

Filesize
8B

MD5
e1cbf8de1cc18e94dfe46a8fda2b632a

SHA1
35c179407459c399fdc3c96eb4318de2cdd0a827

SHA256
4c93621496f70c1c9c5b391fc4ef88173bb965bd6031cdaf844bd5463370ae26

SHA512
0a17a1d11c6e3936a311d628db402856dd96f3e9c01e7154be99025740f4376664f20a1abb1c2d49257f94612363f47ce2ed63e348f128444ec82a2a984a5d68

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/dexMethod.82560842.dat

Filesize
15KB

MD5
61c2a9b3ab06706f531cdaca9644bf9d

SHA1
3b742630fe31e22f7d890e6edf0ee9354ee4d1ad

SHA256
db9da36f3af0af2f1ceab64d4f2ecc20f10a6e78560782e7170e7cfaefeae511

SHA512
88af1117acf8895ca36b1726c065f88b6f0d867d36cf2344b4c3a4692c2080c1a6412070981c42f12dd3e935a6e310150f644db5bdd2efe2520d6c2dc7084826

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
395KB

MD5
48fc7312c48a8d2cb26b203406239a8d

SHA1
93d1c493e53d208200749c7f050a217826c1d2ee

SHA256
86ed9d1157bd3d2211b9fc2cf132ada60a7350fc74a6f52c6ae8d826259b75c2

SHA512
cae08950b2be005b3fb2c22ba51d0e752f6156012afdd0f47be7e5656c9aadaa2a6e1b7e94ee49af088e7143a61fa744922ddc4cd94b2cef0da9de85143b920a

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
671KB

MD5
f33cd96af660946aa40d4942b9bc2e37

SHA1
3d99e7538d5ab712df74b0fa9080594f8525ba97

SHA256
37ff5da6acb1f68f44b5c56b287c4dd9b2540a51a42d826276c01ffe972f992a

SHA512
59e80f5300ea36a4a6aa722cc0285cfdd08bb11456ec7852776a4a9a81f4f5781cad19846acac7330c681f17b712fff83b7b5fc4b16085a7536ea5221700be69

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
671KB

MD5
403e7e695545e66e0de7213a10f3a601

SHA1
c1bb797b4b891974a79be1bc720e85f22269d38f

SHA256
9d96c8440ff8359104fd7e1589d47939fef7cacc6b0c5610e7df3b2b8e74c166

SHA512
326413397737b7d7d81c46b11c5e12218cca8a39e4908079151333cae18b7f12dc18ca91764f76a68ef39d706a4a9cfa3e3067e82ecc061594dce2028da7f4b8

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
180B

MD5
611d0374e676767b718d9b2cb6fb8b77

SHA1
3bc57d08e06f90734aed8b12d3cbdf3dcb46c563

SHA256
213d171a6a16d13d72b49ae5a9d558479cc468ec18aafd465249e87b3f009904

SHA512
07a355dcfec65eb59618eeb85ac4ce2cafac99c38cd8d32f5bd5ec751893e0107d9ff1b848e38732900c155b5823989e9d967c2560396f4f85a537fe7815169f

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/libyaqbasic.82560842.so

Filesize
63KB

MD5
ef807eef9a86eaf2b3f0f6161f97a5f9

SHA1
3d5c38dca967d0f609a0b02827e7024bbdf8eb0e

SHA256
1615452e2bf6c9ad92834380d8f102b27e1708c0e3f10f5240270e5c189159bb

SHA512
5ce7f1cdf240294b37c1deafabbc81f39b7b3511b51e2ed16f5f97f0ec148edda6b1412c70f1110c0c65c581489ddcf47a0a64b85f4ea3c1ebc87f2cf7804f95

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_e_qq_com_plugin/libyaqpro.82560842.so

Filesize
53KB

MD5
eb044d4f1a9c5bd759baeb4316331478

SHA1
88f314ba678ca894f88c5e6f822f5623d7ca09c3

SHA256
f0ba39e8ebc0b161015db167f6e74017557273647da740cd8b46be7d1d9a59fe

SHA512
e88734831ade103b3bcfa391e3b9705df442502f44355ebb057bcee5bd3d5a963fc65f26774d3d3d31cf6a7a7459eabc81cb70dc14d7267e267e1ac53264052a

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_permission_sdk/cm_cn_permission.json

Filesize
17KB

MD5
8fc67d707db12823acf821598c94340c

SHA1
f7d6c8ba690e4de0333d14c4e063dd77377c0a3e

SHA256
904b058c8ed4885c28ae33d55270d368e7f3e29f9e1b58dc4829bcc96f9ea272

SHA512
506eac15f0415018a6c3b65da335d0b785c933c24df93e392037ee5020511e113a8c05ed805646c32946cfd3231c68165f49277f224478825d3a9ba72a500a25

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_permission_sdk/cm_cn_permission.zip

Filesize
5KB

MD5
5f441f4589bbc4cfba295ecb0db7c6ce

SHA1
127e06e99b82086c4b33e4446a63e634405617f0

SHA256
4cd713a010ee92e249ef5e66d9e3d4d3c44800efa17270df0546fcd0d548f405

SHA512
544d43557f47618cfda36899d813cd100aa47b476025cb584dfb42569456612c7e6a382c83c39ea9495fb67f59c0643f2fdd85721351d9ec35310c85ffcc7d76

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/app_permission_sdk/cm_cn_scenes.json

Filesize
79KB

MD5
ee6c53b81e4dffea2e16b01c06b06d7e

SHA1
b019e6ae3814515178a1ba99212e0debe40d6a56

SHA256
5bd45ae6899ce3eff81ad574185a21e85507bfe3f672acc71d2b4caf8768085d

SHA512
7e874d7dd5be5081b9be578ba996467f2d53e3bb869765e6c12da71f079f69a49c82ed8d5ab12dd1a7cfc5b2aee50146cce4de8829e19a42a9caa361a6bb8e0c

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db-journal

Filesize
524B

MD5
7f821f16be70c060c137f35fb30ec54d

SHA1
d43d51611d85a05bb49bdbad40a0673f101213ad

SHA256
8368cd387b18d202e92cf1629dbb96ad63e11d15c46d3df007811ca281ef0be0

SHA512
07ffeebab924edd46a1fac06468d8cb0fe2be58c04bd23f2d8b99f0960bfa56526d9211de551e763ec64e48c13502ab535fc9a6ae0901c19ec9dcee26f56a0c0

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/ad_sdk.db-wal

Filesize
32KB

MD5
21b2ea69d9e07fd65eabce12d466dfd2

SHA1
a60021aae32739062182531c7f25b4f688377e3a

SHA256
4eb5bb227a6508942b35a924c7c6a42c0946a184e88c4f9cbd3c7fce602d9579

SHA512
f38badbedad6749a2d8b5a30a415c9c5db920b23b0896f2149c072ca882ad1ce66bb17789c3dfe5c059e7ed3af6289458d9bca3980781f4142a0ca8902a4ad44

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db-journal

Filesize
524B

MD5
72012395890f454cc8e85eadbc929adb

SHA1
24da2243cb751b8adefb9bd5e4c670cd63ca5999

SHA256
a950b473a57d5db8ac524a790c2e832f7daab9f33394f7c5f77299355fe778bf

SHA512
eb5a85274360ee014dee0e4ec24f9d05d6485285895d180bd34c8e2ceaa032c2d822ef346582588425c7829c114f29a7ccbffd408f36f05b646ccaae8b15f542

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/cmshow_db-wal

Filesize
60KB

MD5
d110600c2607b8a99bb90c95cf981900

SHA1
8dac56264289193a67db69f67e76e88227ffa930

SHA256
a69f059a7a95f2eb596722c951bf3706b66c876953dd8fd8c76bfc3881cbff41

SHA512
31b6d6025d1dc570c80ca3f3f0490e231599e7edfd07a8c7379978d89a8192d7e6267fe127cf130100d6007513c89ee9c25d0ee5a39b246bfe7d5b5c4fc3fc63

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/share.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/share.db-journal

Filesize
524B

MD5
3f2753391dc81f4ea97894925951003d

SHA1
91862e0207c8ea6e163a88b322f38f62b0ce62d1

SHA256
94944e2555e2c2f85445b072e5a59c514266d1d384060f6cd4368d673de05080

SHA512
74987196f6cfac3bfc98168c29ea3fe380c7f87070e84c6ef5bfc023cd75e1fd31773e97ea0ea89c238056f480c16194030b87f8ae181195e7a1ae661400e669

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/share.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/databases/share.db-wal

Filesize
60KB

MD5
16293020cee84b2fd909fc1380de47d8

SHA1
4a9faee5ff0dd6b2e147b530dae0522109ee0621

SHA256
3afb010220367acadfba67731e4b5baa5669682821bd5f2685686fd8c07bb2f9

SHA512
c19fed539c3a70f9e0b15b3f8143eef5561993f014e78eb7bf5fd0c22746ac99d0454893c9e49417c1aa140a5442ae3cae668409c5f0eb4e2904771cd78991fd

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/files/intro_video/intro_video.mp4

Filesize
1.9MB

MD5
e5535dac571d4054963ef2dbec7bfa77

SHA1
6ef35bccdfe8219746190678613344bd700adc78

SHA256
a2b6552fadc7d043b57462d7e86a2ecd633eb94a2e5298aa561969a46d2c7d9c

SHA512
c02764fdd22e590f66fe250de24411476298fe423df148aa4e3d6f464eb9940c954d9efdacab30787c28cf84f2d1d810ab9200f79ae24235eb50049faa8e852a

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/files/intro_video/intro_video.zip

Filesize
1.7MB

MD5
43068654679b5a5a7d57234fbcb65fd6

SHA1
c50ae8653c2b1bfa88ed362e9e1c003bbe995e27

SHA256
d845d51bfc3340fa88871d86b32ebe7f77a6afc88828ad44abbc4a735cdb0243

SHA512
647a49b07f0a5894aecdb4643aad82844fd64cbb8e9f9e72d17d4d4aca3e7194a52032e2b89ebff9ee27b7bc7b15a60541561bf4718032588a7da6ef235ce4f9

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/files/kctrl.dat

Filesize
109B

MD5
66437951243fa5a129c1979f605fad41

SHA1
cade495d13366a5e9fab9f2ad4c0d5f6c9edf695

SHA256
80ef6c098f47750ea9eab30d91fd61d5451fe3bccf9c79a1a3e067b90dc2f2fb

SHA512
61bcef1935f120effa8c7a5a3439dcb2d8d4d4a56fd7b1d9d017249d03abc53c3c4fc68e8ebbfb5f47144f88df28b867215194a0fbae307f2e108ed3f871d6cc

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/files/kfmt.dat

Filesize
4KB

MD5
5c63915eb384d35fb2607e940ffe8699

SHA1
9e9434f8994c763ea2d81aad000bed4e973e7e58

SHA256
e8ae0c20d83b24894f4861100a3b41d08f8d121e6c38614dff7b0dffbb4e4eb4

SHA512
aba3dc55d5e568b3ce8027980ee3503b69c4203c8976a20b8122af0c1dbae0e88614736f3d0875e680429027cabd071870a5ee72ef823289b2c0a39b4e334953

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/files/umeng_it.cache

Filesize
415B

MD5
d743507b467c1a28ae162a0038e2ee32

SHA1
0f2539476d604e8acd2adbd697dbbd43b1ca80b3

SHA256
793146373f35422a67f407ff7ce559bc96d26675c36a847cc57f29119858d81a

SHA512
5e5ac0e36e4e46bdc6c15db7f930b77ee7c19158bd77a328a21258455d5dc0388671044b0be9f33b84f366cbaecbbf6c902064cab3c250d7a098fb8336c75e82

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/CommonConfig.xml

Filesize
144B

MD5
546f173854d0b51811f42ffc18f2ade9

SHA1
d0625ef694ec8f7e8422e8068c5fdbdaad1f20eb

SHA256
d574fdc31ff3891db622a268d183ec84dbe310097c417ec0690f4b11ac138edd

SHA512
5b486aabd2ea236a6bda4256fb0cab68b1370f47f4b7742f3660f5ac44aaa3bb8922a4738e745ecedd78727cff3265be89a269f8b1cdcc66303257e50af2cb35

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/NetAccess.xml

Filesize
113B

MD5
d03f7c337a3398b11887e7fc4cfb3fd5

SHA1
afc882fdc3d34508782a8b209e379dde284b3ebd

SHA256
469e82370d9f7e3e57cf4097f7f55e5b920c20106f604dffe7e33154c4f20363

SHA512
c735b71c616a06b7e9b287ebaa359cff7103ae69d0590ba50d08f7f0e08e0161390cab9aba12759902d113d7783773ba82526ecbeca39b38d1b355a5c5113a53

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cloudconfig.xml

Filesize
138B

MD5
f3d90e681c60de91538a9a0a8f12015f

SHA1
3b4a10dc5a30304fae5c978f8eaa0b523977b8d7

SHA256
2e5e841e4d336270b3bbaee841d2a843a5533e855a195a118cd7dfed85b48a59

SHA512
66ae1ecdc2a7d867e199ec967e00e3d038491fb332db1246dd90f4c620cef2005cb76044bff331985e02735ad8b9d144a444bc6e59d711811902a19fec08c314

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cloudconfig.xml

Filesize
212B

MD5
84874d4ca80e6ca8dd9e68f1d6d9ef7d

SHA1
d9b0ea5b6a5214dabf955bb17dd5f9d4a576d97b

SHA256
52a61ec68bb10a43af3a92cb740fabc67547f6a15e7f9bab78994db71fd8ae33

SHA512
ef909060d2c2051836efa086bdee468b86cb14f6b864bc967ecf521d6ae7d7934445ca516d81dc179d1c63c1b31e988a76b6b82bb713bcea5b7332d2e2dd2a75

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_preference_settings.xml

Filesize
133B

MD5
06c59dedb4a63087a4d8f83b99fcd7ca

SHA1
6dc9007c3a959c885e54578a056ac05e9dc82125

SHA256
6480584d856e4e16c8fe07c64a5426ebc6c808e1ffa86fd71ede5344a044c2ff

SHA512
c24d7bb5203446ee19a75e750483490b8805adb9a217cf95540e234458058dcc1f8fb10dd556ccc4e4968c5fdf8bba081e30fedc130e0f0aa2c6360d811d9791

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_preference_settings.xml

Filesize
184B

MD5
aa9e37bfb4a6c19013f991a95798a160

SHA1
3ff1a50c2854368550dcec0862bcefef7e7580ba

SHA256
878e8183141dc37b74cdc8b8e89aa5ce0dd197ad0d45781b34180e29913418d6

SHA512
2dca58df0c110bc181bd8b17c7d844047c90287afc8868976a765021732cd5efb64731d1c931f9c063d4cfc58a9721c424a04401e92bfccdcbb3dec343f3895b

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_preference_settings.xml

Filesize
243B

MD5
14f6aeb894f56b0e48f1f51b714dd124

SHA1
177a1248b6d5543f214863f7f87e38543d124d7a

SHA256
1e729ee99b43c815f017b723b3bf4899b04fa219f467faaf92c48b1cda493e91

SHA512
0583c55350fe5da139f8896d9b6a5556838a9e780c493b7235defe230fc270f0d3cff668e656101d8f457c26c9ea395cecbc58ec933b60072366b25d6e419a1b

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_support_config_name.xml

Filesize
113B

MD5
69b1ab57018c103e1fc37909f29db655

SHA1
707d5c4283ee205c28ebc995ecb4c7c1d1ea480a

SHA256
2f9cd24f1626d06139e7d80bf97f3825dd5baf9be3daacd6f13c74df614640a4

SHA512
18b4a8bc932dff894fdb89a6e6eccbfe32d871e3fa510e7d58a29963109f4918ab26ce9106bbd0075f002468fb356ba0c50838f0133ff787046d53f9240e3e6a

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_support_config_name.xml

Filesize
176B

MD5
3f860f71ad42d997252809be69127a8e

SHA1
41e6c4cc1e74abd1bdab59e75ee816b924a23598

SHA256
2153e5f88834684ad32738a59df6438b94c6ffbe09dc2e07a0d4447f4bdee4e4

SHA512
a70ccfd63377bdafa0cc3d4fa3c0e089f159e3d42251593768b15066c7d225f8721ea08030fe0aeaaeaa852e5ffc3d77c25b4caadae534c571ced0eb5acff643

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/cmcm_support_config_name.xml

Filesize
241B

MD5
3b30c3bb4644ae965e6db1af7610f3f8

SHA1
7f906ff6ca71dac29a1e6fad38cba85b6969d815

SHA256
e78127263c733de1ddf47ea558212f253c16af9815efe6fb3952153dadbd02d8

SHA512
dfd5072eefac0024e77a0334b20459925ecc320f429830c48af8da583281dc9e01794d3f1ca746b517aff0629e67883c1f697625f6d3d6875b065bfade079662

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/com.kuyinaidianxi.fhuu.xml

Filesize
120B

MD5
959ebc6d340942d1faae6f157c6bec53

SHA1
7b2cc690f938ea2bc583a9344e10a80252b8c230

SHA256
fca76a5acf16c355646cd637a0bddfa96b81e69e498c3dd6061723a024577a54

SHA512
e12d6de56751dd0fb767cb844b3ec56e35e842eafc3d47f3017d8e1f548118107995b2052ada09aa3d879a7baec0feaf2c41d65f3a32e2edd58d60454cb38de6

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/com.kuyinaidianxi.fhuu.xml

Filesize
331B

MD5
0d8e4ce44d4148a5b610be1a8142fbbc

SHA1
f90e48aeab664209c52c8de57918f580c209d3c9

SHA256
659c276f953295c3de90cab4b367dae5d9f3efb784a3f2b1537a6fa10ab66163

SHA512
c911ae83130b304837fa39d2e0d38e84ce5c4de1602e035423599f8192672ab147deb54b830ce8a7efc126b366db935761a37033fa59df44d7ca0c086d62ca7f

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/com.kuyinaidianxi.fhuu_preferences.xml

Filesize
132B

MD5
fa3b3f6001b2efdcaa0fb25dda34363b

SHA1
a32d086a38842417c4b6d58c6aa6e5ccde8f45f7

SHA256
4238033423b6fc6c57b6828e4ee528c280c8d426dcb2e795a375cae6d88d20da

SHA512
42ef6383c1fe9399896a839e543664272196a946b80fef5b22c52df2768d1811deb1fa509ec34eb5836c14523a70cd7672750398290778eebc3c2b8d95ce859a

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml

Filesize
200B

MD5
d1cbf7bcfb5c08305544d3d935fd1167

SHA1
22e9c316dec71286f3aa0589bcbc0923a23da78c

SHA256
21e1634a5f4c43365cc4473883ffa024d50064b948eb53c0610e557e2079fcfb

SHA512
3d786fe2590b81c93ddbb781c3e469d214b7222b8f342c77caa686e536152aa3f47496116ebf6f25d38a4c99ffd78fefb0675a2d35302c2b05f90a714f84d949

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml

Filesize
248B

MD5
3a8228accd6d424a826bfa4c17243f31

SHA1
9f67539ed4f18ff14aa77f8b4e4ef00a06965f13

SHA256
164be8df6aa30ee44482749ec63fd1f4345531b78afaf957a3da1cb735eb872b

SHA512
dd396fb4d995e03c2ab5d34cd2cf7486e8974aae2a0864a5358ace59c8b64633473d16fe4613269625361b7a97875b3581f7412297ee6638df8b38c85fb235d7

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml

Filesize
248B

MD5
6d50b5821d59e9e7917d0b12238ffa9f

SHA1
cfd252887d1be036533cf0f7590200bfb41538f8

SHA256
9b14559efbcc7497fe776a0425e90e5763d2fe8e71776c185213f18b880f9a8c

SHA512
2f688339c094f2f76036cd39fe48e8a3385f9fb37948b107600655e4956c1112b40fd4670f8ebeb71bd0e7c081c2392f1d92c47cd7166b17e0bad39f7e53329f

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/tbs_download_config.xml

Filesize
248B

MD5
6bf8482acc732963a5304f10c0169662

SHA1
2d954defdb3cd773bef6c6c5a2e87da70041b308

SHA256
78812f28ad4ad11471bf000f710b58149be98f95bc48db891b59a108a225863f

SHA512
d3cbad73a90d90360fae649ebf4915392f3c4362e632cecf744b1f861ff1e6b01adab549b841520aad7f95ab6319f12830e890a5b3abb07943261ea3e2db9caf

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/umeng_common_config.xml

Filesize
116B

MD5
02c4fe518a7dd611485179eda11e4a32

SHA1
ab1d49a40e952fe8185eaeb21a66d0e87233b891

SHA256
fe794c8c9850dd3176ff5cc78b57f249fff3b1b418256fe048964f48c783b143

SHA512
207e569078be4e0ec2415eb6a1320ab9f6dca76973a64b20cc04e9109393d79bded5f419f6247bb3b044b699a49336fcb37deb15cf7709209972b81795cc94e1

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/umeng_common_config.xml

Filesize
176B

MD5
18a28aa4e578f1e965c502bdcb453dfc

SHA1
74889d932ab075c463ccfe8f073529548dc36bee

SHA256
eb71349c4a20c6dab1f771c7d1249dae7c44b13de6d375acb9f773c30caa2264

SHA512
3f02bf2dc163793e3fb8d26ed586c16d954f7ea07ff29e5d349a7d51d17d40d70ce9bb753ec50324a984aab92e74a9fad187dbc1d9e9b959f42f57c718c64045

Download Submit
/data/user/0/com.kuyinaidianxi.fhuu/shared_prefs/umeng_common_config.xml

Filesize
241B

MD5
89def997220a6a97f0d6bdcc38536086

SHA1
6d5ff19d4fdccaf8945510158d154108de0cecff

SHA256
3e921212cb37c68779bd44a433609bc0afe833aa2122ffa1edd2447fb62f56b9

SHA512
3d356f82b7ff1bd755d75e3942535536821569bea7a9c1b8146740309da671990330c916f660d5f56b19c68376685126f3df4676b41a7ba27637e17f08972e77

Download Submit
/storage/emulated/0/Android/data/com.kuyinaidianxi.fhuu/files/tbslog/tbslog.txt

Filesize
2KB

MD5
8cd5d31cad5aea2c5e1cf382918c2e7e

SHA1
0be567ab7a4842571be2fe4bf88cdb45d8412247

SHA256
15d8bffc31380294cd5cf3875fe3300b0443d30d2fdfc6121e6e85418f9bf208

SHA512
8a95bab2a1585993b98d2798d9d7ad0af4dee63f9f55fa5d2d352cef4db21feb34f0ebff7db0497a66a2288f91c667f294b55a02966084c703dd5c40ce20a205

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads