50fc37e9d42145ccf211c876654d21deaef6dc441ff3986f7ef0fcd3efb3c1b9

Analysis

max time kernel
2582562s
max time network
159s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 16:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

50fc37e9d42145ccf211c876654d21deaef6dc441ff3986f7ef0fcd3efb3c1b9.apk
Size

20.3MB
MD5

95768f246b88ff42f80a3230c03bccc3
SHA1

7da5ac1b3c39ec2711afccf261413723d9074296
SHA256

50fc37e9d42145ccf211c876654d21deaef6dc441ff3986f7ef0fcd3efb3c1b9
SHA512

dea5f3eee6a66e7b7932a3886c32c8c9d3db9e47b1c35016ef349190df8bb1a54e7b433ef041d55423410a969e9ae9f30d8a93fbd87252590373b6e81dd22127
SSDEEP

393216:xn6BZHDkpa7w5uNu+nnvgvmKmU3aD0VYQ1fmYwb3TFOTS3bnuHyBX1oggpQ9c7aN:xIDzNu+nnvgvmK9u0VYQ1fmYwZSulogv

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.duoduo.child.story/app_plugin/PlayerUIApk.apk	4300	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duoduo.child.story/app_plugin/PlayerUIApk.apk --output-vdex-fd=50 --oat-fd=49 --oat-location=/data/user/0/com.duoduo.child.story/app_plugin/oat/x86/PlayerUIApk.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.duoduo.child.story/app_plugin/PlayerUIApk.apk	4254	com.duoduo.child.story
/data/user/0/com.duoduo.child.story/app_plugin/PlayerUIApk.apk	4283	com.duoduo.child.story:pushservice

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.duoduo.child.story
Framework API call	javax.crypto.Cipher.doFinal	com.duoduo.child.story:pushservice

com.duoduo.child.story
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4254
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.duoduo.child.story/app_plugin/PlayerUIApk.apk --output-vdex-fd=50 --oat-fd=49 --oat-location=/data/user/0/com.duoduo.child.story/app_plugin/oat/x86/PlayerUIApk.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4300

com.duoduo.child.story:pushservice
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4283

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.duoduo.child.story/app_plugin/PlayerUIApk.apk

Filesize
120KB

MD5
b6efedbe01c85955be3d81ac826c5395

SHA1
9a7548257c3b00930f598d466233916b52ca6235

SHA256
a79cc67c556e99d0da12d0dd7239f92d1a6b98998ce5d962fdeca047ecb904e9

SHA512
ee65a1e42c42375976b99df0739891ece4e3783cad6215b2099fa0d5685100123c0f6416a9b9fac65f8703f3294c62d662a31938997cf7ce82ed53e6144500bd

Download Submit
/data/data/com.duoduo.child.story/app_plugin/oat/PlayerUIApk.apk.cur.prof

Filesize
120B

MD5
fbfca97bc3ff992fa052527c4d2115c2

SHA1
fee59ae2b310c26ef16529992d05ca173d3a0f9c

SHA256
eec1e4ca3cae0260c2f45c04a684d8e03d930cf893bff9343afd528e6ca82a08

SHA512
403f46cf70f423da5a4bfdf0e1e507fc90a6a48194d24adf85f1e424c90c0c61a130981358dd40c10f455edb19da0f6be16c9f382c6ca6445c9f150fa21f8749

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db

Filesize
16KB

MD5
82b7d05de74c28dce00f9795ff8d7a23

SHA1
72269ab997180d3bb6ab0e5a9e9ba52320e97ba3

SHA256
f4f4be5e6d16136124efd9b13c9e76dc10cc4a8ee105f9db177ac6b3218c5455

SHA512
168caa906e9532d066758172d998d6f73063a08b7c9e02214393b1e678e170cf5e4e3fa2bf6bae3d330d5270ae8504ce77f5ce9e083d359b1f19e12e6ebde0c9

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db

Filesize
16KB

MD5
29c67ac5f96250c53c28815a6bee62f6

SHA1
bcbc43390e37f8547458cd506346486b6a424ff8

SHA256
0209e9eee26eba8c3096855360436bb9997c28d2e940bf55101a2104987670b8

SHA512
185d89aa96f220bd07f1f83f0adbba5562b0f2a3867843f51de126cd8414f5701c717b76eb601655a092315efbf55fd0208e9897bd13d738ca17355e9e1e2553

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db

Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db

Filesize
28KB

MD5
322dea2e406b82ee1e70460dedbd2480

SHA1
d9bda6136b2a84c3574a35172ce0008d0d4567aa

SHA256
8aface0366bce657ba05efa864698270381de5fbf4b24ad43b384e664f461d64

SHA512
5e2937d92ad234ca0e046c1d121b1ffac58351fdac74363f8cdd0e45a48f4d8d9e188c188ee5c8c1c97ea534343ab140814c32bf55a90d54b2142f377f68b52b

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db-journal

Filesize
512B

MD5
59d94b6a5ef2e8059a2859935ad1c115

SHA1
2319d8d6794c78d0359c5b7683cfe9b612ddfb1c

SHA256
867626ac66556e88e3592c1abd75a5fbbb37fcccc21c7f6f0c6c97432a6414ab

SHA512
343a5d4882f27e0f6e3843ae981cd18abd3c8e6ff30a4333a89281812222230d1731397f78fea978b85339bfd3afbf489a2eaf3fa99520d55e93b511c6d2c62c

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db-wal

Filesize
11KB

MD5
f2a324e4c16ff95486ae9cd84200f1b9

SHA1
f569b464865f0175545e22816081a2dc01ac63e9

SHA256
1fa234a2f8aab48399db7575d1a58e8ee41f79f616f205b3a704d95b7dc8831b

SHA512
59e82233a0f9ed97b3bf3e21827ada954e1d63e90c729373e7ccb4374c7715c1f4851328611fd45e4407e2ac1a74f8e2e0757a3dba826f0b8a378ee84e236df9

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db-wal

Filesize
4KB

MD5
368ac19556d997539ed5d493206fcaf3

SHA1
af43dc3a8dfda326003802d59dc36ea45b2e5dee

SHA256
368023ea0f133a94836708d5a208c617477bd5cc04c2a5aabf5b1ca7f30f7783

SHA512
32f72284c6b99996324fdb8dbc1f366e1fb5541425b2234c39b09487b3861f05273f8011a26b698db60359e53fbb5d2c1168ba04af171c641434da285c3a140a

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db-wal

Filesize
4KB

MD5
faf776683456a34ab8353b62d954c4c6

SHA1
b8f59674706873b2dc55e313c73f2818976395ad

SHA256
b155fd0caa4cb5248334cef79dbf04cb4f9bc8e9af27a35f7b115be93ca793e6

SHA512
cee5bdeaa63cd68d948f82f64cba6ed546bf1346870f8b2d3bfe27c1e7cccc282d5ce7ad3470023b1bcfe630a3a8809c293b57bbe07b4756ea0100b8dee2e5cb

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db-wal

Filesize
8KB

MD5
d742b23e5d10cdcaeefc098df85735f6

SHA1
cbd5665bf7e3df9b2085f1050e9b1853a31278c6

SHA256
d827cdec886dd72b746eada02786a5f4e1040615df69bc50608e0b36508c30d1

SHA512
d18ee1e25179de3428bca07ca9f432068478c8a2ff67067c450ce7d654cb1cdc0874779cb6cf6baeb5d94ed44c03d730e323133b3a58b43ca646328f9d5c3230

Download Submit
/data/data/com.duoduo.child.story/databases/.ua/ua.db-wal

Filesize
8KB

MD5
257ece53f83507e8a884a6df7c2de201

SHA1
dd1a9b7026699134b2d99264bbc8e48403db014d

SHA256
b27a3b40f354b2a30779aefc96fb3a03ccd15130819f4346217c73a44fbdbbd5

SHA512
794f7dd5439bb194fd13c5c373ca2a2268121cf0077c0223c57a366112eca1e19dbe9f9ce9fc4ed9907466e33f6349b268e6e63dfed8222cf5e7a21568d3b53c

Download Submit
/data/data/com.duoduo.child.story/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.duoduo.child.story/databases/cc/cc.db-journal

Filesize
512B

MD5
2ce22e0d3843108f33cb2cafb13d9937

SHA1
906c395d756057cd200a826dd032d9f3fb884eed

SHA256
8fa02fac18678b835d7a56b4cd21444611458281681f04984ff393d08a87b473

SHA512
c1f8bafe1a32f31caeb08f2549fd5a2edcfab4341dd13cfdcf5d0dbf9d7cd47ec5349079d8b784e29b4135a136eb1bae5b09f1424033a54de28db4dd5c45b715

Download Submit
/data/data/com.duoduo.child.story/databases/cc/cc.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.duoduo.child.story/databases/cc/cc.db-wal

Filesize
48KB

MD5
3eb7e2b896a5b34ff2de935ff5f4582e

SHA1
c8fbde270265cb0dbb149d8b4dab50c833a677fd

SHA256
f2ae496b0ea4d432502722a06e5a1d2364c0cd074b5d6df25cd27176f195d0d0

SHA512
b0008606193bdfb3c29bbc6f102ad3121b7743017840b4ccbd74027d71e5249d1c7e0bd88cc338050416c6bfe92c2f2ef301b3f5f65dfef137f5a5279dfa1c4f

Download Submit
/data/data/com.duoduo.child.story/databases/cc/cc.db-wal

Filesize
16KB

MD5
276aa576d3bc0a0ede267ee21fe7be15

SHA1
d41b4019b60590bf5115d55300c840e8fc8b86ff

SHA256
ca0039d9ebc6271a5888b80bdb63261b33ad99aad8b9e58653fcb8276ecdc450

SHA512
64fe3b7813d0a80044c676c3ea334526760773120f472bc92a79571cb99f27c0b1cff31f439bc66d11cab666396d3b195a31e3a85efd0be1e00822b2aa1cb1cb

Download Submit
/data/data/com.duoduo.child.story/databases/cc/cc.db-wal

Filesize
16KB

MD5
404e353b4783a420e7fd4f767de2302c

SHA1
a4f85d707e1bcb2f0e4e4c5d00235979cd39df6a

SHA256
84b087cd765e6fb5da2703469ce902d049caaaab242a9b98b30dade979705dab

SHA512
a4d831e85ca4f5fc6cfc7ddf937c63ce0c4d44435df741762748b475d2a7cf19b64e5de6a464a88a1ba4939d6d1d6b04ee50e7d882ab18c51755120109bf5cd7

Download Submit
/data/data/com.duoduo.child.story/databases/duoduo_story_house.db-journal

Filesize
512B

MD5
37b99932941460d193f0b6fe29be5262

SHA1
3cf75710a92665d34457f44fab24b67c1cb4ec87

SHA256
92919dcc93f4f2ef5fa7e02e561087e589c607840a52741d6e7d66611fd0eac5

SHA512
5f41c368c5684adea7fb394e9b485a2274d4647421f0ff8f6109d22b9977810768ebe1f4703ded06a8e3ccb40ea127ae03df95c35d6847531a1c4fcde4c8228c

Download Submit
/data/data/com.duoduo.child.story/databases/duoduo_story_house.db-wal

Filesize
16KB

MD5
cb16a6613a68e560b2a28c0303ff3a60

SHA1
9ea24c3c93247c80bf99aa103e22777cd57264e6

SHA256
0ec14a104833a52012ca0c600df2885daf044e0dcb067f8fca0223dbadb13988

SHA512
634ec65b7ed9ccddeffc275f7ea9011149fd1318606b18d305839c88f736169503dc3de6e5c58643e29e155e2dd70fabce1e766f0b99b6e56e8c2984619a42cf

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db

Filesize
20KB

MD5
9e1bc5283050ce692c98f1e6166c88a9

SHA1
1ab8e81d5e181027ab4507da2bf82ac32572a4df

SHA256
58ab9ac5779616435a9aee586702ac8c5b16be436f6937dc0e673bb2fa805e71

SHA512
dfccfb3562891dbda65ede5da62248b468ebbae7d7b7b09963414a8a1c132bd8449bb33099b2b079e381eaa330c8b39f5b9d6241bd941ba63cbcc3ca19baf7ef

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db

Filesize
20KB

MD5
38616785cca0600a03205f84fe330b4b

SHA1
6ac41a6bdcae297d56dac5fdde70be5faccf0832

SHA256
b05c698d5827005da5e04b4fbdcac53cfc83405247353f8e9e145969a820a4e8

SHA512
7ff2901c032607f5fa1f24a48056ae85fe8d67b6c5649233fdad7b66950d359b2fb933344bf1e2fe6255a00c593de7bcf959d201fe8b6ad214249bb31f855a08

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db-journal

Filesize
512B

MD5
a49e627d10e8fb7b9ba9bc78cbb5c094

SHA1
0ffac21e2cf6c20108910521c9027d867ebc0bbc

SHA256
ef1f356188befcad133137c45583eb7d0305d662155bfe4368ba289862d93140

SHA512
e59182e237312b6e710e495a4eb59f4c789a2de5fc8eba71aa674b2ea7567442e140d03ecf1161ee3ef50aa586684bbdde6a1c3d8413ad289a527e112d0fea9b

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db-shm

Filesize
28KB

MD5
93d6502c5bd4872e4fc102d0f1a0aafc

SHA1
c7f8933a46a2cdda7ea74daa920c59578f4e2dff

SHA256
03d0ee770a23517ca6dcd013e1e70d090945d1b13356749982ea57b65e839124

SHA512
9cbdd08dab58809a2503af9e6c101c67345aafdf7d0952a23a8ed5d00b62ea793a6a8127287a141f82a2ca6a523d5a48218ea3d09ed335206318d5d297e513e0

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db-wal

Filesize
8KB

MD5
827f3ddbcd595509ccddc2aa5cd02936

SHA1
e80424dc2a0bf96ae37235c15b670e6df8932df1

SHA256
d96a308c385f266a201c916306a0f1dd846c176a4580f233b3b74863d179953c

SHA512
a830aabfc720d08902ef2ae0ff14090241fa0e56e7fa595c573aad704609045a3a8959643295cec549c42434355448c0a13b6ce2c80d0404ef7c2e0c1c677277

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db-wal

Filesize
16KB

MD5
6c4e5a39caecaf26ff59f6e85b65267e

SHA1
d7ebe7dcf180c4d26ae5542431503b6949b8606a

SHA256
bda65e8272ad9752c102972916dea3c5bb5eb8662d78cb5776937a8f88492e7c

SHA512
a1fa6ecd1b9b4d23bb982a2613bbddf4133b47d03c985bfb73aa15cd2a466801a3a367b19e17cdb058fc958b57cdb720958d79a1fe6d0f2d3cbb233025986b08

Download Submit
/data/data/com.duoduo.child.story/databases/ut.db-wal

Filesize
32KB

MD5
a4688e98da40df131c11bc1ad18c044d

SHA1
97f5efb5e0ebaf3845b4f05cde3814603d0215bb

SHA256
c2ae8b978fa5ca608548612b6bda55d1290835102e8969fd11865eee82d0134c

SHA512
402f058275e611626edae941a354a84b4a95fa3eb4fb1a78bd015851c0351f897deba24c40539f5aa6ca72878df405d3e2f81180273309ed4bd9f855ba65c300

Download Submit
/data/data/com.duoduo.child.story/files/.imprint

Filesize
994B

MD5
5e31a4df9d1464e1de2757e9b5763220

SHA1
ef74a6c3f975527c7331267ba2fd1414fbf76432

SHA256
e703b33800b32371340bf8be9eea6ee3d9cb2e16bd09ff2b1a07869ac175754f

SHA512
eff7c76465531d5d995304d50e80dd1b6b941c70309c116da8d20c5b41e827ada07f560026b2d6ffee8dbdfd09208457b772ca5e870cc0d6043945d055c943d2

Download Submit
/data/data/com.duoduo.child.story/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
e1f52017c5c28718eaf79309c6baf43f

SHA1
0d93826534f0c5ae096cf1714199e677f71345bf

SHA256
9cb4cbf75315acc8a272d02196183d56160bd5dc4f78ec656efaaeb2e27e15c6

SHA512
cb26a527e77b63c614104fda09baa39835242f84a125b7991e374d22faa2f5ec1515786d664bc8ac9f31e4db124c5e1b20989c58b13531bde06de45399f91df1

Download Submit
/data/data/com.duoduo.child.story/files/exid.dat

Filesize
52B

MD5
e0cff1c737e83a78e87901d37d471b10

SHA1
08fce1dd68bd7ea8c72abe26f22e54ded39a8c2d

SHA256
ed2e66607546a6a1b7d5c3af3682943015d29d455d9784e2db16c2f83dd0d5b7

SHA512
ca13654c5bdeaec93e17a337c10331cab48f75eb129abe5270f2c57bac95de57bc7be1155e8aef11148afa4f70b301d7877aa9ba4db2b3c03c874d81fbd7db62

Download Submit
/data/data/com.duoduo.child.story/files/umeng_it.cache

Filesize
498B

MD5
e6a386e6e70820b00c0be947003d1e7d

SHA1
d8d4f57cd2402178719523cc8f84a05f872f34ac

SHA256
9ac12d5dc4bf91dfde8988083dc3722c6a53e985235e97ef8c3638dc36b2b461

SHA512
f1228d597d324779e28559df5f6473620d0686b193141ab70b23abca3e432d2d5980470f5027b5c0417848ee528e5a325d2ead44fbb6a05626383f40025d8621

Download Submit
/data/data/com.duoduo.child.story/files/umeng_it.cache

Filesize
253B

MD5
5fe19ad4cc5655fa27706e2706477d98

SHA1
6d70ecdbf5f8d3dfbf345f95943adccf4ef2a733

SHA256
daa6e67288d16485b5e04819ce20c2fba2f4b52882f5c656dda200a0d63edd42

SHA512
8bcd8b9c4ae86d91ab4505d13473e3e2f96fb50322ff546830eed7c89393a243123d3a7a3ef6184cf2270987e786a145ebd4f2089b5b70c94e6a76bf8cefabe9

Download Submit
/data/user/0/com.duoduo.child.story/app_plugin/PlayerUIApk.apk

Filesize
242KB

MD5
0419645060f8bc1773c1d7257ae12f1a

SHA1
8c638c68dbfcc96b5e9f0b044643dc6010c647e5

SHA256
a6b7c178f7588cae9c2ea58fb7b317ddbb3620405938125c76f5573a5de5fad5

SHA512
03540bcd6ed4d3ef04cca22b33762e397ffd69a55c155d988f450ab3662b15546b81e1f2debe4e213df5b80378ea29de231b946278b9457d54b2962c6d7b2d4d

Download Submit
/data/user/0/com.duoduo.child.story/app_plugin/PlayerUIApk.apk

Filesize
242KB

MD5
19ee10ceea150991825ff1018fe9eb06

SHA1
9b2b63ed169aea09522d3f41f7638d7cb8ab55d4

SHA256
1543be80fedfe93b3e9b3b56ca59bfaf38615f9cf7145b126f47d4edd930bd45

SHA512
7816f380af7e8110809eb3ac151a5141c94d9041d01fbaf973fc52ced706773f1ae5d77c198e3ff1565ec51ce5f0f4e95beaa4b21b1bf959676bef3d919ae6a1

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
81bff85ca4685401c1da6586921d140c

SHA1
fdec3e9c7c2b6cb042d59125029d6736c7fb2365

SHA256
21f4466bad92c1e4441cdd312a19839fc43bb81a291aa2a04f1f11bf0c571a69

SHA512
5fdf829661afe139992273cb6831ebd946d1e517fb2ace4c468a44bc393afec252209639a0a9d0ca6059a03697f5957e40c70a89d6db600ea0cebd3dda0aad56

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
5cb5bb79ff56684b9a83b7335964207f

SHA1
309883feee4894c8d1af1a0dc5786d10c0f9c042

SHA256
f1cdbfcfb7a1fc3ba5e3928a09fabecd6d916a7d648a9c2ca036c166a7b2f65b

SHA512
12d881654807e7026725f560322b25612433d5ca86042df9a1239e90931cb3984c82c28c745761cc557cb6020cd434241929318a6c1da231be8b7394d3a172e8

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
7b236670e68fe070d2e30538a2f8c8a1

SHA1
860ef72fd6539a2bde221033554dd249e20d8797

SHA256
6c8fd711f6e5664898e4f15faefadff17eb3e9c1b1b00a1b108e86e850e02372

SHA512
a8e02f4514f4f4ac29d2785af21deb5d0ddbec1afcf8093eb144d17d80c08012264305a970598026f495921e434c085bd4ad7a56d8e6616e27738895fc24032b

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
437B

MD5
9a5d78ddbf1d536a0e1b94498c56c873

SHA1
0b4cda5ddeaa0d68867d423d7882fbff88869176

SHA256
89550b99eee008e3d65ed178bf5b249af9759a8c2338fc994630994e3a2ce3f9

SHA512
7bbe8edc9e573d5b155a8d0a8c92f3734d4f67643f6749b635dbf6e0e0049179d2049145a200989b16670f23ad06f16221e3f002885dc0ff3c4ae2a793728a0a

Download Submit
/storage/emulated/0/Android/data/com.duoduo.child.story/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/DuoDuoHouse/cache/test.aac

Filesize
14KB

MD5
5bc9d569cb424f60ca236e2238f8dc16

SHA1
98ee40a9f4c5fabe8afee6a9c0025e81050de615

SHA256
a2b09fe3ea5ccc8f7d4c9a564395718cb1e0e9b993997a7d9a58f861acbe6347

SHA512
960ed83e7ddd4c9fb595600c8565a4dc8439874efde26465a4ffe81e6e0168e2db90f490b31930d5945acff29e9e5044c830537d67bd6241d6d0d3822258e9ba

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads