3789da9be03f771f00bf7d272b2719c0864e21e4634a400997df575a3bef1e22

Analysis

max time kernel
137s
max time network
167s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
10/05/2024, 17:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

302fd3fe75abe2f5480fb3b9255d3543_JaffaCakes118.apk
Size

13.7MB
MD5

302fd3fe75abe2f5480fb3b9255d3543
SHA1

a8015eb9d43909218c0f9b87e0002607ede09837
SHA256

3789da9be03f771f00bf7d272b2719c0864e21e4634a400997df575a3bef1e22
SHA512

6acc5df9173810025ab4afd59aae34612dd7dc686be7e0e649fbb3320e88a158f11b997412f1c3faaac2ef0169ffeb0c00c156046f4a9d1c6f32f1f3b4ce3c1f
SSDEEP

196608:y/4XkTXg0goc1xg/ekbOAUAvhqYUBP4hw47kA+tI87uChS11XeK8Mng5alUSK/iZ:vkT0vgIAxhqshD7Xv87SvXTPlUUefA

Score

8^/10

banker collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.baiwang.instasquare

Checks memory information 2 TTPs 3 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.baiwang.instasquare
File opened for read	/proc/meminfo	com.baiwang.instasquare:channel
File opened for read	/proc/meminfo	com.baiwang.instasquare:channel

Obtains sensitive information copied to the device clipboard 2 TTPs 3 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.baiwang.instasquare
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.baiwang.instasquare:channel
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.baiwang.instasquare:channel

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baiwang.instasquare
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baiwang.instasquare:channel
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baiwang.instasquare:channel

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.baiwang.instasquare:channel
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.baiwang.instasquare:channel
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.baiwang.instasquare

Queries the mobile country code (MCC) 1 TTPs 3 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.baiwang.instasquare:channel
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.baiwang.instasquare:channel
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.baiwang.instasquare

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.baiwang.instasquare:channel
Framework service call	android.app.IActivityManager.registerReceiver	com.baiwang.instasquare
Framework service call	android.app.IActivityManager.registerReceiver	com.baiwang.instasquare:channel

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baiwang.instasquare
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baiwang.instasquare:channel
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baiwang.instasquare:channel

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.baiwang.instasquare
Framework API call	javax.crypto.Cipher.doFinal	com.baiwang.instasquare:channel
Framework API call	javax.crypto.Cipher.doFinal	com.baiwang.instasquare:channel

com.baiwang.instasquare
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5103

com.baiwang.instasquare:channel
1⤵
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5421

com.baiwang.instasquare:channel
1⤵
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:6078

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.baiwang.instasquare/databases/MessageStore.db

Filesize
36KB

MD5
19a05dcf880d31204f174208bc9399dc

SHA1
c876535a95a8738b8f1754b5edb633cdb0a72c7b

SHA256
299fed89df333a68d9d2d80f64f93a8cc80b56e1f74c6d42fd8b4765a4e970d4

SHA512
9d8188c8ac084a260881884479462dd63ed9ad130a96bf3eec62d3058d46598eeecddb87fd0c4950f6dda6be9a1f79f53868b74d46a4047bbaf61903420f3c65

Download Submit
/data/data/com.baiwang.instasquare/databases/MessageStore.db-journal

Filesize
512B

MD5
c313349bfa6122671d0deca36822a900

SHA1
c883234112ae04427d8d2d3867f5b338761604bd

SHA256
b0a461be36d8cd40008ea639c6534f58530c30dcd22e3abe57b33f980fcc3683

SHA512
a2755b179bc6035bcaeb79a935a43a48068d61931f515fdcf994398e069480d3c03eb3a6be4cc5035b266d462980f440dd6794ace2663e7cda9085c8b7a8bfb1

Download Submit
/data/data/com.baiwang.instasquare/databases/MessageStore.db-journal

Filesize
12KB

MD5
c7173c19782c24ede176d5c29c4ebe2b

SHA1
7a48cac7b9fd1bb75a3a46c5ffc1dea492b9bb48

SHA256
27a7d680fd155132bd0e22e1f42600f9789185acc8600acbb8085d0ae3fe1230

SHA512
5ec6b13feae10af3d29c49c9f7c4652df1b51e43f357258aa6912e09889a0f43f72dd277c7fdefab04e72ac2d1cb3f861b9eaf254a2a91434c9b71eae847149e

Download Submit
/data/data/com.baiwang.instasquare/databases/MessageStore.db-journal

Filesize
8KB

MD5
4e2187506ab91722690904e7ba30a085

SHA1
e4c3e761b1f3d0cb7c10c622de167552b8073b5f

SHA256
b37dc2251f5a1b9843bf38334c63c3c46ecc0419be76def433737564084c9c8d

SHA512
f8eefdef42dceaea6d354d0452131d4d05cd3d612f269808346a8ccec67679c97c5f4200409d3fd73dee3ba267a5327d0eb9376449f86b16d0065a990a78a7d4

Download Submit
/data/data/com.baiwang.instasquare/databases/MessageStore.db-journal

Filesize
292KB

MD5
86dfa69b5171c955c35b3df7f36e23f6

SHA1
6f5f4e72f5be7d7ef6063203b2cf7622392a0a32

SHA256
3fd4a2d351d3f526c08b6739cd510ee5834c48c6bda10cf11f9f7f0c93a43808

SHA512
e128fcc91acffc653726478ca729602f79fa7e91a71f8fc8f4e8b34e43928c0b6d39dd7706f3e2ef80c56fbc0c6ce4b0fbab1296b91d96b99e9fbff6922f2d5c

Download Submit
/data/data/com.baiwang.instasquare/databases/MessageStore.db-journal

Filesize
8KB

MD5
78beda2081b8a8ed022c6a913735a223

SHA1
48c3f23b49aaf736c16132a277147f0105f2f699

SHA256
50f6480f1013d7ca90c84234c4ec048c39b82ee2e2babddedfa7c1a76aaf6fdc

SHA512
d3853d23493967ef3e4dfdb4195ea26b78f5275d4c158c9c1f2a45dcc261bd30e1cc9367c1940e594611f1de0f280f679d649d15a0f3f0624a8ad30f7adb7f2f

Download Submit
/data/data/com.baiwang.instasquare/databases/MessageStore.db-journal

Filesize
8KB

MD5
29feeb4a221d18c1b0a15aecff85d03f

SHA1
14bbf2a9af1207009d303ecc6d2ed43dc3fdfeae

SHA256
5e0128c752cda1b43224e3249a246338c2d7aa2f01d90d91b10a2c6f572f5383

SHA512
89cf8a23fd990223bda1ee66f77c1a008f7ed9b0f874e670d4a689d7794a606dc2862db369b48b5072d3ee56b00a7a7b5ff8af0fe86ddc23c483ef8511ea78c9

Download Submit
/data/data/com.baiwang.instasquare/databases/MsgLogStore.db

Filesize
56KB

MD5
22172b15094e115901c1f367b1dfea41

SHA1
278b609ea92427947ff0554fced93833be496a84

SHA256
9873f91c3564a7a8ca5f58717c069e4bf1c7c38032e84add295a16a62e7ae0e2

SHA512
28d99a62cced478a23afa12040f828a07729a323332d767f7079471ee8645b04aa3d0c83f45d0dedaecdb2b892a2753a779bdf3631a5326ec70c9b2c029d8317

Download Submit
/data/data/com.baiwang.instasquare/databases/MsgLogStore.db-journal

Filesize
512B

MD5
6cc5ed992116633f6e5c7b7f2eb0d9e1

SHA1
88962005e9afd390408638e139941c9924b7b017

SHA256
214bbf670645de9d14feb423ec28eaac511a632ba757012bae1e9582ddec9044

SHA512
c1466755d648ddfacd223e290e218b69218eb53fa1de24ece90cb3756dad3056fe4786b49acf65433497cc997841414e0038fa732af0e51c75e6955c3377bc44

Download Submit
/data/data/com.baiwang.instasquare/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
f6eae4fa43027d62fa4ef621267870b0

SHA1
44e9e2821db3c5e8cd28fecb9b29473cb2d6262b

SHA256
487aa1f714ab38a85a84e4167e6c5acf205618659d43887a69342bb2276bc5e0

SHA512
c07c91f839672e2fc6dd07c48fcb4afbd24152beb1df50a63013b97964377856d1698826c728eccb04e8e303419eae116f86f00e067c0d6ab617a88a632c0890

Download Submit
/data/data/com.baiwang.instasquare/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
95367aee2c3fbaf9fb9e9c3a2cbc2189

SHA1
5bdd436772ce00db6a1cb4c149d41d0b7444b52c

SHA256
494a3be74e4597572ba1262824c0ccb509dfece06555c3247f90235318f5b1c4

SHA512
eb63bf68eb6a34e12f180b6219372f8d5c16c957a009fadeec1f80c45d46060e2baa65973568216ac8cf57f4c91c32010ebcf83d9d7e83caffdc5bb67f92319d

Download Submit
/data/data/com.baiwang.instasquare/databases/accs.db

Filesize
20KB

MD5
d95e1280cc553509d7b5b7851398db12

SHA1
121eb76ea37f3407d0f3b56392f6f67893fbe649

SHA256
58e0eeb309805e54342d5ccb3f9006751543d5a1306898dad2c09048b294153c

SHA512
f52c432894144ad581d36d447ed61ac50485dbc931ddd9b2ba5ce399642dcb361502e6492f28e05dc7cdbd5f19126bbc6cc09e62586b73bf449da950a6de1284

Download Submit
/data/data/com.baiwang.instasquare/databases/accs.db-journal

Filesize
512B

MD5
ec4c0c310bb970170d44b136a4217db4

SHA1
05f08fa2bb77d4a7c2404d7b844d6ebb7041c57e

SHA256
92d7825e37945b3572070bc633066f080c098abd894f7b8d89a2cebc43a5ba9e

SHA512
301e1418134865253a4ac7422cd74a5c4e83b8ed14268f18b493611c8d8507c79c6b71e14b87ce12dff4a9a3366640b8a8b59d05113827b6ebf022b3a82d0b3f

Download Submit
/data/data/com.baiwang.instasquare/databases/accs.db-journal

Filesize
8KB

MD5
e1927b1832b45c5f65c73c55db789574

SHA1
bc812a149baa5e00172c672bd99e69b6b2e33348

SHA256
aba88403384948eeaa3ee28abf788ef58782f357d2415e70e6b6b6e598e77784

SHA512
db0d06993678ad8ac087f429ea0118536bdd884496f97ea6d6a0dc366d5693e1d35819a6ebbce44016ca3bd290ca4b86f396b5fadf7f8e948774af18b2250b82

Download Submit
/data/data/com.baiwang.instasquare/databases/accs.db-journal

Filesize
8KB

MD5
4bfea438e25574c6121ac5620ea30dbc

SHA1
3a6f8c07054e74a116375be7ccd60a45c90ba8a0

SHA256
2cce29bb14fd1296d87d9be6ba2e63449cdfd207c8cabdd901aabf784abde352

SHA512
c0273db4bd69cb445fcb45e1b4a8de4275eb4d16ef2c69f0e17bc873bf8fec14b2d55d011abe15b2dc7074bff9ae5be04d882ef12709fa403bd23cbae212b2b3

Download Submit
/data/data/com.baiwang.instasquare/databases/altamob_ads-journal

Filesize
8KB

MD5
17704367e5adc15f3f4f19e7072b3157

SHA1
f9a2d466ceb72e23119f7f836dda8b3e6c6f6f44

SHA256
50d1c9ce653d2093e87de79095ca5dc35be6a64da0ecbd4ba9d8b56699eb176e

SHA512
47d5db77a8fa3cbdf6b2625f1e1c3005c09e8bff61a8eb621c26051cb4923e8e365531f320eaed02610ee870f1197f24a2b14126a1f482fa838430598efd5cdc

Download Submit
/data/data/com.baiwang.instasquare/databases/altamob_ads-journal

Filesize
4KB

MD5
2135e12435aaea8b2d44683cb53e7337

SHA1
6608971196891303350e40ebf88355078ac2c59b

SHA256
e0a477068dfce2d8f450130071dde2bad82cfa81802d4f8786d8693fb1bf5247

SHA512
e049d0b86df1bf8b357ad24236c36b19043aea8683d328b28f603cadb55c1b540a1a6d47dd56c054296c4e691fa1c11a24d780e0cc55517d24ed7106d4b8b942

Download Submit
/data/data/com.baiwang.instasquare/databases/altamob_ads-journal

Filesize
8KB

MD5
e661037a671133252d1671333bd59315

SHA1
523940b81f1d1217786fadf57f8fcb34bf1b5567

SHA256
9a6b73eec072649db7f4710a56c63cbc4f851a8e2cf0f7c0f30be8c8f259281f

SHA512
5b153db37a55a0b5767fe6db8ed6477aa57009b68db70c6d502aeed9bf44ce11c14560fd8fd01360588ebc46b51e80388acdb7b9bc37c7ff55bbdff1939471d2

Download Submit
/data/data/com.baiwang.instasquare/databases/altamob_ads-journal

Filesize
4KB

MD5
a4c5314c6c8e37cbf428c4259c65ff39

SHA1
4279183e47612bfaaf41076719af18426c48dd88

SHA256
e08679288ba5024000899de65e8c9a9e5e393f9198353c33f6f4582aba9a551a

SHA512
acc7e9bc2c284ced015942d81bcaee0578430c86c0fa8ce066ca340f8ce82f5dd90291e11263409e267e4f380aa47a945f49ddf8f11523f05ae08466c3394971

Download Submit
/data/data/com.baiwang.instasquare/databases/bat_statistics.db

Filesize
28KB

MD5
acc3b379cdc6ece73974c4cea36487b9

SHA1
88dca7d4d11151dcfa372efbb9786f9a68580830

SHA256
f4b24633b142572cae35e26c622b80b0af5c573cd3bb02b1353aa2f9ce36989b

SHA512
ef37780a549f7a42ed759511e2dfc955ab356ea53b914e1a72734299ce7d435cd6b4468370669ef6c954689579544272e4be36e96c63d9c64388498aac249bbd

Download Submit
/data/data/com.baiwang.instasquare/databases/bat_statistics.db-journal

Filesize
512B

MD5
28613b56a4e1fc5afa4a75985e0eb087

SHA1
2b376ac27720bee223ca9722c21452da96dca742

SHA256
693c348fa07d23c0c2af2424d18941fe83d440a9398313f77cf5dc9082292f8c

SHA512
a221c08db738095624e5a5c6a3e95c64b59a89c1a071a7864a2c2d90045c2b69d41ac2bd6955a22c4b4dd6e5c480ce289d0dc5a7eeaf6134b58c7c235101e676

Download Submit
/data/data/com.baiwang.instasquare/databases/bat_statistics.db-journal

Filesize
8KB

MD5
d7de3199f7305879b6a76bae0c5a5366

SHA1
62570f57ca68b3df61c7268f80a86d5dad81dec1

SHA256
d586e2cb5d5a8c776db5cddf5a30490a2104a7ac2da6cc463262b0d9c9561908

SHA512
14399d454a7ec3471e239396642f46fdb19804214367f8deae5b56be3385bd22f12641d121d2450a01a9f84e07a26bb9a7455d2a1225c27fe4a21e42da90cfb9

Download Submit
/data/data/com.baiwang.instasquare/databases/bat_statistics.db-journal

Filesize
8KB

MD5
253dea1b569c91bb745f38966e05de43

SHA1
d7c1fd7a5b2bf3aeede536e39de74b754859cf3d

SHA256
09b4cb92db0d055bdb41ae66b46e9ebac18bc086770aa89c1d7e84ad8ebba251

SHA512
06b344f277e2c32bdb1eb35505260af2288d54d31423c693f5edb3d5d91625ae73b9d849ea0be986f2db353c3dce70e4caca025f7bb0a30116701860726241b0

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db

Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db

Filesize
36KB

MD5
67c12933d1e0e63d9801a6aa43092ce7

SHA1
b6936908554e4a1986b8eb08289e2d3545e8ff74

SHA256
abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

SHA512
db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db-journal

Filesize
512B

MD5
71febb2002d72193ca8e6c773c06b9c7

SHA1
7e0c1222327f571cbe5b90381297878e946a1a86

SHA256
09944fe89155a11f5671ac6c713a0dfde5fd93f1795047a0ad6e35ca9a2a789c

SHA512
71252e36e33198f9ded7be261efc082bbc04fdf098546896b06c8e4dad3b705a39af972ea0ff808ca24d6f787f21ae982e6565ca9c3e7bb2c03306f9eb880156

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db-journal

Filesize
8KB

MD5
4a8c97c8512046f794ae28f815c2affa

SHA1
4f302224bdeb37c91dbc2210ffc138e416b45d19

SHA256
235fabf90e9c7c967b5af46f84d3439bedba939a7e9331963d34c828fdc6991b

SHA512
bdf1cfba1de4b7521c623c06af69e3ba209f82a5b48d4982ba0a95cddfee41ac150e4ae25ec1ecb03169ee93f7e061d8dbe744461ba5d570ce8726cb1b73aba4

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db-journal

Filesize
8KB

MD5
83ca258b66ebae54f38b2356d035bf83

SHA1
d823bf81abba0c8c175465a3513ff91ad2423c7d

SHA256
3f1dc333d90b49b23bbdd1501ef8dc1a713c53801256361532e136d6c872649c

SHA512
13813dbaea54e9e29831527b895f1af93d9fd553a47b8a0e35310ca6b50dbf7bc12f613ad757cec084d635131ad32d94a3e1d9da9884ff8aeea012abf6879cda

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db-journal

Filesize
8KB

MD5
d41a3b941d8badeba9fa33d645cb3e23

SHA1
5dd68d2e8c2df897e8093eaf668ca2a18278f23e

SHA256
088081f025ee93fe34aa43ade0e23e8046420592ea7e0fe8e2251baf6a2233d2

SHA512
feb97262fd46ffca9ea45cfd3365dfb4ad4b8086d17f414f7a515a2412eaa71fe183fb5f91b96690ded2716854bf7ddf60372a56872d512133ebdc16ba0c2244

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db-journal

Filesize
8KB

MD5
f7b3ea2e4d08c0f3d0639d840069a01d

SHA1
39fefe8696704e32663eb871ce2c8b4c5375244b

SHA256
75f00a6d62d5a0501000470b2baa2f900df92bdf821a8b3ace19e4b4e5a192e5

SHA512
416bae7571f05f16ccdc62d1481887e161ab7e06697e067e856d60e997c2d340d852f8536969f99ce42ea273788f9e4729b2046b4c4dee4966817a1dd5da7abf

Download Submit
/data/data/com.baiwang.instasquare/databases/cc/cc.db-journal

Filesize
12KB

MD5
69a99246bf1adef8d850cb885df5eef3

SHA1
2d4323fa39dd189a3de0eb4cce31e83ef8fd9aad

SHA256
2ea5cf80e833a6a541d89c1e08397ae2ed495c03b3da1c9eb550aacd1b098671

SHA512
06420f51a153cbc3f6da945ef17bfa391fb87785477e61dc7b09ce3cbf3ecf62069d0fddb0eaf94ff31d1026d5c547793910a8ed84cf0078a736c68a54dee55b

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_cache.db

Filesize
112KB

MD5
e95a52c2e85322145d699e99a84d98b8

SHA1
db8ef2a840f50327479b4974f1edfa9b87ce975b

SHA256
41ef88692d3d90b85aa1f90ced819323c2c576fb693e4ce42d5f2d98767db325

SHA512
d6331a0be5fc2cfbbe7d49f37825c40c1d9aa918c998c40bb3e370933d8cc72b3dd7a0e78ceea79ea832dd25db7ca9df10740b8b9dc3cbf864982771b8091ce0

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_cache.db-journal

Filesize
512B

MD5
0e25df7ecf34e26fbfb66092a92bcf57

SHA1
6f1b01a16af99185633c025fa063a3f4cf8cfabd

SHA256
57070fab2eb6f8b0732ccdc955ab9baca861397ed51aa44119d7029752ad9d14

SHA512
82d6d7249fcb275bda96b935a3a3930c8e9eb83835ea3e4ecc75bcb888b53408844fb6caee0314a902316c48bf5a76b118b7ec13e592af13b12385d04a3175a2

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_cache.db-journal

Filesize
8KB

MD5
47453489a454d40ee15339b55eea2d35

SHA1
c42ca1d3f9e8c4065f38cccb5dbbdcac8f057c38

SHA256
2fb776739df0432e50446b0d7d0fe4e698c623e00492f1fb307a88ee803609cd

SHA512
ec584408efcb2d660edb3b0f09fd1533c775cb8e6fe53cde70abf3b087acfb19cd47c31cd730b17f31e4eb75913ed2b163567e0500c7c2790070a1d0d3e0c966

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_cache.db-journal

Filesize
8KB

MD5
366a282c344160153e3b41bed9b7cf2b

SHA1
191708045da077384d7855d36fd81f8563c798cf

SHA256
5df8cf81c09d87e8f2012f147b418f2b1f5b0d921d8407162d6f0a5176c30a07

SHA512
843e7810aeabe4b63bd02edf762b7edfd9e7c473f4e7b13ee5ecae2a083ce8930e3fff7db58644b50c3e60a3393aac4c68158e1a044f55713dfae707f2ade927

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_cache.db-journal

Filesize
16KB

MD5
ca5551e93b8d1a27e8944a2c6c58302c

SHA1
bc0fa9d79fd24c7827c122b866c55e7f56cc9c5e

SHA256
a395102de6be6fa84d45da0aa84f2797e1db1efc32ab976a635b2ad44cc361df

SHA512
66b8f7376fb975a77819eba1ca51809bd843cdcb7443b15800b587a132d9d0a5c10877b8b184fe29560ffdaa28ca3f1f8d98f177fe87bf9c5542a42b4efb239f

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_cache.db-journal

Filesize
40KB

MD5
7c0a6e6275feb0fabc88abc3afeb354e

SHA1
f3c4637da37751211b8db841dd6170c8cfc0b595

SHA256
6e3f6d6f476ea8fc2627eb8f698073c96a541f128738f52f21ce4f3499dd3d67

SHA512
e7262851732e9205bafee6ea67ede680914c79568256746e4c3065341184037fec71fc59bd17cbd0d63b69b2c38746471bacf3902975224a5e2805bea7a26683

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_cache.db-journal

Filesize
16KB

MD5
66ecdfc062a353f3a8c419acae8cc735

SHA1
feb4b78dc01011aa3d5e6af09e83d945dd9a8c2d

SHA256
b707ee6d92e18554f32b312c16bc715e1468b1ae0a6629b2068e6d0693f5dc7e

SHA512
4bb6a692628f1916a65a582a76995e17b4e9f570af19e83c68de0232762f944e690a8beb306d2337dd3c07e3064b441af9a1dbf5152d3a45eef69abf976dc268

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_ts.db

Filesize
20KB

MD5
5fd7cda2ea7c834b9b6c00a16118796b

SHA1
8a8e06ea95a92936feb461361b4de4bb916c670e

SHA256
9cb1858c65741a1ba8088c325826b07c7137057f63a0e03100761d89c33310ba

SHA512
d6accbf3655986590d09fc0db9b7c26da156d33bf9563dd9d8f20c78bb75c5821cac58b5d531e54c860356b62380e26b47e6711256464ac5d0b0599cc6ac1a3c

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_ts.db-journal

Filesize
12KB

MD5
ea628e04765adaf4238a5dcdff4bbd51

SHA1
a801947619ea8c368efe9c006a324dc6339ac60b

SHA256
885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

SHA512
c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_ts.db-journal

Filesize
8KB

MD5
5f4bb1d4dd54f926a2bb65349dd054fb

SHA1
1e00f4d6c1ee3127fe9df1efe8d6b009f65a6d7f

SHA256
9aba709ff1ed64aa73fef0fb886666d081afdcad35c0ca531ee5414e75634b0b

SHA512
953eb57fde29f1d23c23d2aa788f3540395fde6c596a7d21418eaba251d9493840594b3b16cfb24cd686fa754405a02fd33e60cc4e85f7073b5dcfd7839d7dcb

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_ts.db-journal

Filesize
12KB

MD5
16bb79bc75094147dbadb55fc202bfb8

SHA1
cf1f40beef72fc5882e1f8a3c78bc504ea54dcdc

SHA256
eea44ede7383fb69826f41071d136cd11502551dbcb69a614953ec00b31a913e

SHA512
3bbabadd7aba6c00baaba1b965c459a3081724263b921f9db8807155b08b068d35e18ca6c605641f08b81339be1b2659bb2daa8b1f95a0fb6575535e6012ae3c

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_ts.db-journal

Filesize
12KB

MD5
1949d3e5d7a653e2d6a571aa5f74f231

SHA1
0e2380e213519406bceef93d97ebd42b3f66d1cf

SHA256
b71015cd9a5215cfcba4c124846cdec2e2197b92d08e61402f10c8f7e2157301

SHA512
f88a2b8308d8b74b03ad761df6f189e7d6e29f4c5ff777ea4db0af81898d7a5b4ece6a7afcbb0faae3db4f20578cb318715c5f1940abb6f36082724a5ecc97e3

Download Submit
/data/data/com.baiwang.instasquare/databases/du_ad_ts.db-journal

Filesize
12KB

MD5
01b839f3a9387a746d4854a41248178a

SHA1
c60db27394467b86f8f48723472f6da6edcd810b

SHA256
9624cd83ecf206eabc033468837fde8f20b84856ae6a9083b06369ba983207fc

SHA512
3821769c6490e408e72d76a199241adbb0d186d1b511d575d16ec97823f9ba1ae0fa1207cae8f6dd315f56bff20dfdddf08990014db40eca51e08d400dd64db6

Download Submit
/data/data/com.baiwang.instasquare/databases/mobvista.msdk.db

Filesize
52KB

MD5
7b3956d19c45b3de51877e94585f01b2

SHA1
8d7758fa469f43b91525b84164c13f0a9b91228d

SHA256
14831b1cb01ab626f99527b675ba9177b4d84d467b98d5c62e1df30a50c9a2f5

SHA512
1b6deed7d0e444824d9c93caa203c954ec0d0b773666d61c48d3c2f10569e4d7977512ae9ddb4b311ab2b7280304e1d36989f74b3d3958338055b2633aa653b5

Download Submit
/data/data/com.baiwang.instasquare/databases/mobvista.msdk.db-journal

Filesize
512B

MD5
5ead921e86f6f4786f3bffc65120dd92

SHA1
9a012051d83d4c199f34107cacf8787c7afcc2c6

SHA256
df64e5cb2ec52b9f37ad3a44c4c9c6e57d33362e327c12a814080c4f997274c9

SHA512
96727f7a9d65018a5c031aca155cd6e74d7398e493e21b95ed5bd1f8ed6728316dd5313f16e76b404f33a6d30abc7f1fe4c752778f3f949287341833fd7af3d8

Download Submit
/data/data/com.baiwang.instasquare/databases/mobvista.msdk.db-journal

Filesize
8KB

MD5
4d96c0fe0ce69c9b85964e63823558d4

SHA1
7efde71bcb3ae0e80bae6d1e83b86e4e6f3ea81e

SHA256
21e883704a653001bab178cc983cf27f4da61d65fdb9b2023370a89c4586f613

SHA512
ea764494a46fb3726f7064379a80643a59c2dbec557a7c4fdb5912a20ccd47bbdc4665b8cccc667c8c69003699bdf3ce937ad3cde4fadb4e8137c26e18119417

Download Submit
/data/data/com.baiwang.instasquare/files/.um/um_cache_1715361644881.env

Filesize
1KB

MD5
7a0b88e15c45254bf36620be89d8fd8d

SHA1
2729061fef8ea96076bcdfbf378f64347f94f206

SHA256
868f47fd4812b2137deb6949e11759a5ca5ef3472e89e194bc1b8aad3c5d0a53

SHA512
94b2c645602efbc0a6e1fff0332d500bcf9fa0bac375c6d3f690b5cd0914a6dbba8d2f2830ff1a67be40fbd9784ec672abec269c143319e7d58a7caed288b101

Download Submit
/data/data/com.baiwang.instasquare/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
ef1bc8f29b393e1c1393c2e4e877ce35

SHA1
ec29cb4e7aa9ada12fd584f8830265cdb5bcf86d

SHA256
85ef111f09449aa6a3edcfe448fa0a434ef35e1f7a8069e8908c47194e75be3c

SHA512
b00ec6cd7bd63164f81e6b34cbacff74d1f91ab47697419b8169a40e7081ad29a3d686088b4cbebdaf34b0152369d21be1075ee941febb473f351b85275fd73e

Download Submit
/data/data/com.baiwang.instasquare/files/altamob_device

Filesize
605B

MD5
b0e38c837954cef839e7093ddbc5fa76

SHA1
20ef13be27b060d45719148e9ec2a6036d092ddf

SHA256
46bd8216b38fafc6d7f4cfbb474389ff84a3e00ee0728f3515acf0eeb669f12a

SHA512
4d80db857d661668fd78f4fcda1e63df17ed1b223b2d35a8828f9759ce91a3f14b72fe2d958380cff9dbeeb9d078774dc5115ce57bcfcb33e94f32a1cb6b696c

Download Submit
/data/data/com.baiwang.instasquare/files/exid.dat

Filesize
56B

MD5
52f22f416b550357fb0e5cf7168ce59d

SHA1
2f7a169eb46a7f44901f146229eade9fe850f2f2

SHA256
975bb996b0b8c6673eda693b2a57ac9f097123248a3a2e18d4d59ab8150be385

SHA512
c7a406b9fbaa01d0155578cb5a3ce7451d9c18ea1027f7addc7556e624d7baa55001f4382010e9ff59a472b94bf75016dc104494450e525a34c73dbb01e815cf

Download Submit
/data/data/com.baiwang.instasquare/files/umeng_it.cache

Filesize
431B

MD5
a7856c9087f22e133945215208225d2a

SHA1
3a58e077ab0a65e212e31d11c05e758b34bd7525

SHA256
8a90cc02c523d17c74deea3f6940fbf001c5e021c6935e5e36f6012bd0ef94a3

SHA512
b750cfd151700e34374ae5624d96c662a7ca523f6a531e29c0b44aba4dc00e6117e7294aabd964ee012b1612548cfa763c68cc127f4b81577abd45d159c1fab9

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
b6d908ca37520e81ab465d75ed66b88e

SHA1
5a5effa7fa0a9619ab7b22fd15bed2d252a49cae

SHA256
bb806e7cf153ce2d94df68afcbff910c170b7f62978d174dfe1534c26a25c9ae

SHA512
2aa11b38d63a98e640ea7eec0eff08c63fc3cb44ee95f974ee5fc15a166f0ae6a673c9b39ca22d524fe7c0505f4c5a3290fa9482cc9b7d85970498caddcaa218

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
d5395dfebd18999b5842396604e0dd01

SHA1
f26621edf4390feeeab3d02bae858b778be65931

SHA256
962a58d747069902ea13ae7c62cac267073ee3c77f6b78891a771372bca5db4b

SHA512
5a61a498dd3721ec8b509c16327139811932d35dc46f1c9928f8035914f43561886d6d0c70d26906a18afb2c3c13c164448a2e54a6177f4778a393bcef06c8aa

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
408B

MD5
0de45b7d035f371a7ca55f335a6cff44

SHA1
6ceab73bac4b761f4bffdca3821ad4653d02bc4f

SHA256
af19710e3af81dbb3e00a7a55ebfc316097adb0c97a838bd662a5bd1f3a568b1

SHA512
81100ae8ae4c3a76cf05c6054c1259b87d87607b8efef64dc5921c788a7c5fdb4a130064f1b25e955039003bbe40da00baf0c7bd0f33637e3ee82637d2d032ad

Download Submit
/storage/emulated/0/.a/track_id.bin

Filesize
36B

MD5
1dc9f22dde48e3b08a4a4e720761d86f

SHA1
669b51746440e4e026d6996717d993861b9105f7

SHA256
a6b8bc91027f0b009e563eec1265dffaac9bb1eb71c5ee5c7a4d740dd5541b1b

SHA512
87b4db7adc280eade21e81b60565576586897618dd305bc7938e7e0523c4cfb438cb8a4a3d70d514fffa65aa264445b61d1e44ce28a1624ede74d795d9c0ede6

Download Submit
/storage/emulated/0/Android/data/com.baiwang.instasquare/cache/c2c02e20a0a6436e9545b2c845087d82

Filesize
5KB

MD5
ac22c23868fe900db6a7056add41d433

SHA1
5bf476932659ac92bcc04b05ed25b9c168034911

SHA256
eba03a249a1b509420cca59557949fed582171b496081b4a1bbd437dab09a163

SHA512
35ec5ef4727884f854339680cb74db61b32458deb511242a0bb2beb51769517af373b4af2b5761c8ad5f5c340c7a5e8b64ff2b24b5eaab9a946493c1e14fc5b7

Download Submit
/storage/emulated/0/Android/data/com.baiwang.instasquare/cache/cb4ec7830ec94f71afc5086a2e98caca

Filesize
1KB

MD5
4013f922d6e2b5127df7532c533abfa3

SHA1
d2c113e1b1527a8525d50ac571499d2cfb04eb1e

SHA256
8592bbbcb58d5d04cd7358acbda5fe0488fcb60a101ca6a36e9f7f0f2f0ec00e

SHA512
99103ad0ed45dceae56810e570ffc612d69a7713fbd85208301fdd0cca77dcb12e4d61699b9431836e6cc239375eb22d5499fcd16802e60d2ac0c49c168709d4

Download Submit
/storage/emulated/0/Android/data/com.baiwang.instasquare/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads