29f202953ce3a7f280a0107a6bd599cba9bf9faca5cfa3d1222de2372095c4c7

Analysis

max time kernel
144s
max time network
158s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
11-05-2024 17:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

35b065c77f0df7925c7c16a3f806b1f2_JaffaCakes118.apk
Size

24.9MB
MD5

35b065c77f0df7925c7c16a3f806b1f2
SHA1

8c2294c8ce542a6531f029f887863534530a0417
SHA256

29f202953ce3a7f280a0107a6bd599cba9bf9faca5cfa3d1222de2372095c4c7
SHA512

bad34c4454f58154734decf109f9973dd75c3e992d038d70b8ef8ac1eb1686175ca6df9bfde00fc83169d4c323142cff9d2bcf90bf4de30c224428fcd0f0c9c0
SSDEEP

786432:J3rSvmoGXXB/8iv9nyuNIt/pjvzF7OsgmwXbDmkY:RrW/GH5nvDItxv5Ovme8

Score

7^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks memory information 2 TTPs 2 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mtt.cook.app
File opened for read	/proc/meminfo	com.mtt.cook.app:bmobcore

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar	4519	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=98 --oat-fd=99 --oat-location=/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar	4276	com.mtt.cook.app

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mtt.cook.app
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mtt.cook.app:bmobcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mtt.cook.app:mult

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mtt.cook.app

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mtt.cook.app
Framework service call	android.app.IActivityManager.registerReceiver	com.mtt.cook.app:mult
Framework service call	android.app.IActivityManager.registerReceiver	com.mtt.cook.app:bmobcore

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mtt.cook.app

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mtt.cook.app
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mtt.cook.app:mult
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mtt.cook.app:bmobcore

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mtt.cook.app
Framework API call	javax.crypto.Cipher.doFinal	com.mtt.cook.app:mult
Framework API call	javax.crypto.Cipher.doFinal	com.mtt.cook.app:bmobcore

com.mtt.cook.app
1⤵
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4276
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4307
- getprop ro.board.platform
  2⤵
  PID:4307
- /system/bin/sh -c type su
  2⤵
  PID:4398
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=98 --oat-fd=99 --oat-location=/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4519
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4646
- getprop ro.miui.ui.version.name
  2⤵
  PID:4646
- /system/bin/sh -c getprop ro.build.version.emui
  2⤵
  PID:4671
- getprop ro.build.version.emui
  2⤵
  PID:4671
- /system/bin/sh -c getprop ro.lenovo.series
  2⤵
  PID:4696
- getprop ro.lenovo.series
  2⤵
  PID:4696
- /system/bin/sh -c getprop ro.build.nubia.rom.name
  2⤵
  PID:4725
- getprop ro.build.nubia.rom.name
  2⤵
  PID:4725
- /system/bin/sh -c getprop ro.meizu.product.model
  2⤵
  PID:4753
- getprop ro.meizu.product.model
  2⤵
  PID:4753
- /system/bin/sh -c getprop ro.build.version.opporom
  2⤵
  PID:4778
- getprop ro.build.version.opporom
  2⤵
  PID:4778
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
  2⤵
  PID:4804
- getprop ro.vivo.os.build.display.id
  2⤵
  PID:4804
- /system/bin/sh -c getprop ro.aa.romver
  2⤵
  PID:4829
- getprop ro.aa.romver
  2⤵
  PID:4829
- /system/bin/sh -c getprop ro.lewa.version
  2⤵
  PID:4854
- getprop ro.lewa.version
  2⤵
  PID:4854
- /system/bin/sh -c getprop ro.gn.gnromvernumber
  2⤵
  PID:4879
- getprop ro.gn.gnromvernumber
  2⤵
  PID:4879
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4904
- getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4904
- /system/bin/sh -c getprop ro.build.fingerprint
  2⤵
  PID:4929
- getprop ro.build.fingerprint
  2⤵
  PID:4929
- /system/bin/sh -c getprop ro.build.rom.id
  2⤵
  PID:4953
- getprop ro.build.rom.id
  2⤵
  PID:4953
- /system/bin/sh -c getprop ro.genymotion.version
  2⤵
  PID:4979
- getprop ro.genymotion.version
  2⤵
  PID:4979
- /system/bin/sh -c getprop androVM.vbox_dpi
  2⤵
  PID:5005
- getprop androVM.vbox_dpi
  2⤵
  PID:5005
- /system/bin/sh -c getprop qemu.sf.fake_camera
  2⤵
  PID:5031
- getprop qemu.sf.fake_camera
  2⤵
  PID:5031
- /system/bin/sh -c getprop ro.secure
  2⤵
  PID:5055
- getprop ro.secure
  2⤵
  PID:5055
- /system/bin/sh -c getprop ro.debuggable
  2⤵
  PID:5079
- getprop ro.debuggable
  2⤵
  PID:5079
- /system/bin/sh -c getprop gsm.sim.state
  2⤵
  PID:5103
- getprop gsm.sim.state
  2⤵
  PID:5103
- /system/bin/sh -c getprop gsm.sim.state2
  2⤵
  PID:5127
- getprop gsm.sim.state2
  2⤵
  PID:5127

com.mtt.cook.app:mult
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4336
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4457
- getprop ro.board.platform
  2⤵
  PID:4457
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4570
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4594

com.mtt.cook.app:bmobcore
1⤵
- Checks memory information
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4371

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mtt.cook.app/app_bugly/map_record.txt

Filesize
19KB

MD5
d5cab01cddf3255198d01885176033b4

SHA1
1df133e9d364a636f4af97460824dbbe1aa20265

SHA256
21524a03d3526bcf3535f4caabb0baa67585dfacbb04014b26aa0c7ffaa97964

SHA512
b71ff886a05b4bfb0a66e9fd37f5fc19f8d18462f97f441384d3b7b86bad09a11179bd79657830e349c438845122ddb78d0959ca624f5e09276ae3cfbae155fd

Download Submit
/data/data/com.mtt.cook.app/app_bugly/reg_record.txt

Filesize
304B

MD5
4e38f768886375a7f64d35e7207b339a

SHA1
a100c4b3d801f319948687a937999f48a4def0ff

SHA256
409cfab06058a919f44979e40d3ca9fc89a3973fb80e116651658951a1dca584

SHA512
61cfce2df883f51da559aa976a278bebada5984adab8b3388599f538aea3e9640015e2859bea5092c18d687bdd7bb381f31cf1ff37c0b03a5d2adf7d3a468815

Download Submit
/data/data/com.mtt.cook.app/app_bugly/rqd_record.eup

Filesize
29B

MD5
5ec758aba3fc538354888e38ac5ed313

SHA1
d35b6573d25b6e282a680a4ffe9ccfceebec74a4

SHA256
12eb72ff09eef9137e67ce8f0588607a28976e0e082b80125f7ff572405a582e

SHA512
13e094ecf0cad0cec897853bd3fad125b5ab07db68652cad4affb1b03da9d50a19815b268361a45543205cd54774148691a3433abb075a48ef0c846dae73ccec

Download Submit
/data/data/com.mtt.cook.app/app_bugly/rqd_record.eup

Filesize
46B

MD5
2bcc175a21501665093453c7fe584f53

SHA1
fcafc61ea2d83307dcf5e4cf07a283152db19678

SHA256
e2fa9464f10f26a8ff97c9a65f1a70273b1e5c085f60fffa06187d125188c175

SHA512
d013545ef9b32023dcdebba512e0afd22eee31d8aad7ef4af0b7b2b68684337257dc9cefc3e67837425c4a5ea73761940d6f25c07192197be55146b67d953b4e

Download Submit
/data/data/com.mtt.cook.app/app_bugly/rqd_record.eup

Filesize
61B

MD5
5b99e2eb3f63e2414ddb0433c75251ae

SHA1
16f27cdfe93902919c1482813cbc856bd4a1329a

SHA256
51cc88b7d2af99f2968a0cba72829ab1db52d516c7b0e8045b20086d7d5eda33

SHA512
90b464756213bb5713528be339bfa75cf927c3273c587cafab4058f6a2352025ac99598b43286c2c307fcbc68645cc4037e6f29512ecbc05de0328c69e059a72

Download Submit
/data/data/com.mtt.cook.app/app_bugly/rqd_record.eup

Filesize
612B

MD5
43e504e8adb43c06263d519131686d4e

SHA1
e3d12c44993c4d56aa7544eb26498d832d2ee652

SHA256
e89cf38157fa311af8e2dc00bb429ac4da9942d97ab97b217ed2c9718e5684d6

SHA512
9e4e8e40fe8854dbcdfe0ec88baa7e013167f9f1a9a60ae6000f0a1369030c9fe7adca14d27b147fdc73b357987b2e5f8c000dec4c33954ff5e46dca86d7f41c

Download Submit
/data/data/com.mtt.cook.app/app_bugly/rqd_record.eup

Filesize
2KB

MD5
46674681476e71b45da1a83250045b2b

SHA1
a9f0c25a97d9820c9cfa8e904972d82835ac791b

SHA256
eed5aef4c29a6926f0ad919677686be0bc7d704ce4cd798164eec6faeb258cb0

SHA512
79d326ff4d56c12a7451d1f51a30678da53d471dc2804f94aaa400922edb980a5b89e48119a6119ead3cd6eaa3e12a0d8263a868d13136881b27851c589f15e2

Download Submit
/data/data/com.mtt.cook.app/app_bugly/tomb_1715447924637.txt

Filesize
974B

MD5
ea0e486a2fbc1071e84c738e2f27729b

SHA1
3a64dd9ebec67035d484b91b34b857f5e38a4759

SHA256
7acbfe5ad275c5719943347589396b822ec4d885546c184378ead5826394b34b

SHA512
770dcd6e616b6a17d416d5d0481ef705b8f9ac1ba1619fa96b5aa5c21e57220970acd7a87a56f54e42c58612156b56b79705644125cea1a160253f4461189527

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/4276.yaqcookie

Filesize
8B

MD5
9fc4a8f623d65df6aa684967792d4632

SHA1
099d1e3d852af17d82459e8c536a813272913792

SHA256
55c76a22bb17496ccf9c0d3ab5a8ce5aff9ddf127cb160fecd8d252530e856b9

SHA512
6bfafe8c58499e117d29b0b12a247c7d4819080f9cb3f41a95c07de30b38317627e12d83a75924b147946267942f065deb3c0e5319e166e2f88b1dc2daf1517c

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/dexMethod.88934210.dat

Filesize
34KB

MD5
09d2899256920a9e1753bc06e1f18d0c

SHA1
0c2ab2d564854251a6fe9ec6bb057bc84668fa43

SHA256
49bb378adfa39548a789696c64d1805bf652bcd14e3a53a197e2afe3f99138b4

SHA512
3ec53c970f6856a23756015aac6c38b3d5d05d91b7443c3e96fae96496274be29d9d9f2444e801049a42c3d6c4143dc8e2b67508c534f1ef8ec573f7fc0aef33

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
622KB

MD5
d733c098521e80766457c10f2599c732

SHA1
b66a2a5fbd6703902c8caf9686800998920c5ef3

SHA256
80e5615c064610ae700dea28b6d6193f168303acce57bc0a8ad1eaf540770f4f

SHA512
c88da9f2d054bcd77aa1c642b96a24d8c0c1ab3490ce8e5e51781825cab699eb806870d1fa045f35a4a417f131df5f467ba1ea6897cc4914b56ef6b085c07270

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
180B

MD5
15c0b64e04e5f9ba644efe726b058559

SHA1
e8e6e3d1b9e5fb8c4e0b8032775786ef7c0284a8

SHA256
f21b8c4f81c98fef1adcffbd90a66995f8627b56cb2989fcd69eb66d9d0e59b0

SHA512
50d5af4638d4574722f84922a7dde418ef44398f612248b9a772ac8befb5036b8bb444222ce06a3f72496c2e200c6db3b7fd9f4d3da14de5fd89e990a87b0c5e

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/libyaqbasic.88934210.so

Filesize
114KB

MD5
96720c3353b98bb84faf94d4b86556c5

SHA1
2ebf9ab3a7a9267f8f8eab4e4db548e8e8c6be6a

SHA256
c059c8789c27ba6db46ab89a71b9cee773b8255b48b2b06b092fb068ceebfb0f

SHA512
b1482bb2b92515da31d10afea28aff0af546b11c0aafee68e83a9732c866eb7d21e678e4b6c58e266b224e2d6c08b8c5fae384e40dd33ba6d02373f67272d99f

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/libyaqpro.88934210.so

Filesize
109KB

MD5
f76d598f53b2d1c2774c8d15ab156f07

SHA1
1756f36ffd19710b394cc751077a05f0605cb7ee

SHA256
4e0d2af8866a08c7a3a59d62ccce8b8b067dc7c6dbfc4a2a8af9c13f7d936523

SHA512
927a46120a3e67b7b974a4361437cf3ad01745a9211e278f8f0549f133286b3b9db4e952069d21e4fe6372e51b5976941c3da3e652af2e158067b54e2671e5df

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/update_lc

Filesize
4B

MD5
dce7c4174ce9323904a934a486c41288

SHA1
e117797422d35ce52f036963c7e9603e9955b5c7

SHA256
0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

SHA512
d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

Download Submit
/data/data/com.mtt.cook.app/app_e_qq_com_plugin/update_lc

Filesize
1B

MD5
0bcef9c45bd8a48eda1b26eb0c61c869

SHA1
4345cb1fa27885a8fbfe7c0c830a592cc76a552b

SHA256
bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec

SHA512
91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

Download Submit
/data/data/com.mtt.cook.app/cache/backupRecord.zip

Filesize
8KB

MD5
60eb4daebf4086aecfabb9659c63475d

SHA1
05471bbd5ed70086a0a769076762f32a71799166

SHA256
555583c763a7f837a9a570d7a5fbf576e5c7e01a6cbbb9131ffa4ec6f705b839

SHA512
5715cc7c27f9d28962cda8c3ef518bc6970a5277a8bee83499ac1b33c744fc4d4151020a458e5b48bb7fdfc899922670f5bbe9de34b03805768d6612fb980a55

Download Submit
/data/data/com.mtt.cook.app/cache/tomb.zip

Filesize
716B

MD5
d1d7e051cf4dfd0c26fba8f65bb799da

SHA1
6068bd38be00bdc1048850772d69afbceecfcb66

SHA256
1c3561c0760b3e7b6665b6ec7d1d341656a930d10d7efc86ccadce6d683e8d73

SHA512
cb9c1bd64c4306fd0cb6222e3716b7925c92c9ddb5ac601771088605f8ad22f392fa38fd6576f81080f31d47d2e31b4e2f78e0478c960da918b7837c75c5fd51

Download Submit
/data/data/com.mtt.cook.app/databases/bmob_provider.db-journal

Filesize
512B

MD5
189d91b46095d7a8f498673fc444e815

SHA1
ae1d95286aae84f0d51a4c3daaa8c1282dc52d0b

SHA256
c224c4b737644664b9105035653a7104722ad83c71fe36b6262e9f22116e74c3

SHA512
508d5a909933e2701b3bd5d719daf98c03e4123c298e2858ce2baa4d15933c88533c0c23553e93d1779c2474a89ec5b1bb3ed516779393bfc36c4f2886b3fff7

Download Submit
/data/data/com.mtt.cook.app/databases/bmob_provider.db-wal

Filesize
28KB

MD5
39b76fcbb653e50ee87974d7f98209f6

SHA1
42a713d011603d21b910f0e03fe18b3d644d04a5

SHA256
227c7cf720e858f2ecc8bbd5f83ca3e52e4bf7c7d6c5c99fedef880a6bcd4cb2

SHA512
82c1ad09ed604a7552d98cc12e22a0a4a4f6fbde115eccb8118e36987afd41e2fc9e3b3bdd83173ec9d3e82eebe806835a04c4ec8b19aba7c689d3d1608c9776

Download Submit
/data/data/com.mtt.cook.app/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.mtt.cook.app/databases/bugly_db_-journal

Filesize
144KB

MD5
4a99dc9cd7867ef7d1f3549a0fd56316

SHA1
912c531598ef488e597dd1499fb34ff5e3eb3459

SHA256
8944a4aa7777850dbf4ddc24fd302f7aa521325b3d61c04a1e515bf28cdd5322

SHA512
e3b03f2060c2aa006b40191110d9c508b69ab3b039d8772ae834357f9f7095feacb165e855174f260a9140515aadbf7e992de1f36b796941b26d7f329187ef06

Download Submit
/data/data/com.mtt.cook.app/databases/bugly_db_-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.mtt.cook.app/databases/bugly_db_-wal

Filesize
229KB

MD5
5d762a5e82acefd2b6bedd23c15bb8df

SHA1
fb03f961992637a60714adaba7b76539ba3a0abb

SHA256
c3b944c63e6fa982bc3ba3589c4a3750bb5f3a89d1ca8afb1901425b706c7bdd

SHA512
2d0691ea046cb71ad1e97aa9c9c560aa68eacf3f23ae3b251b08abb852fadb6f5f2130b59301f0a8a87c6b3329b5b2dd193c4383bbdc1ca20267034e88d09fc5

Download Submit
/data/data/com.mtt.cook.app/files/jpush_stat_cache.json

Filesize
135B

MD5
8e0d52710727739371b679fdd18729c9

SHA1
d31b783d6772bc479c7a9b94a8d1b5c06f0d74f9

SHA256
73804a3962c26e51ed8f0e7bf7d3855a2c0fc48dd93fa00fe5c3ea415f9e806a

SHA512
cf27482d3ed107cde303798a29be787b3b6d8b3b2b784ef709ab42fbc22b9e5bfb9333f9f2fd63c96abb8570832f5458b2dbb8a947caf06b6db847b5ec300d65

Download Submit
/data/data/com.mtt.cook.app/files/libcuid.so

Filesize
129B

MD5
da1df0142e05aaeb53c6cfa27318ef31

SHA1
393109eb1f90b09a4718040482eea2ddc31734c5

SHA256
a0d33c0f6c9da23f0bc8f548daac0870a93b42259699931784c696b680c0d0f0

SHA512
197928fc766a5aed570a4fb1e1380ed758a787e67e12ef00dbae446ab4a330d461bc02f503af8fbf0bf924f373985cf8d8c86297ed2c4eb9ff008dff7131dbe1

Download Submit
/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
951KB

MD5
ddf5d9e4c80364b8197e05cc78c73265

SHA1
6922663fb7e5fbb8565d640236613a88010832e7

SHA256
eb75005eb952f3ad1cfd4bd2e1bb30a037b2c708032f52acab2d3d10889fdc00

SHA512
5ea106617fd6b19052176c00731009101d2b042a74bafff74b65424f2770975911582a03d7b0f3ae14f41b8ab1e929c68d43179f742d3d3fce4060a8199b18b7

Download Submit
/data/user/0/com.mtt.cook.app/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
951KB

MD5
39694be9ff6293c8c6095d7ca0d6b537

SHA1
6ca2047fbc37093c91c1ec7baf38b9cd85e47b71

SHA256
d819863cca9f506102af00965cb9ea52bc81a3ae2b58f07fdd603bec528dc8f0

SHA512
94a022b3935594625c1acc198a57bb600d9e9a8bcdde37628e66c47a829a932f064a1ac7932ecfc8b42d5d384e363d13df66f52c7648203bea09644deecca186

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid2

Filesize
129B

MD5
9b3eb999a44989df8c64bd422193aeaf

SHA1
94a7ee96ea28a66810d2568fb604e0d43edfd7e0

SHA256
98128d920d20b18d5a42760b04d1ae13ff09ebb00c95de648b244bea0585358f

SHA512
222997e7b8277e7a759fcdfa293cd34047f26ec706277b9335ad2f12407196c914a046be4756905b2b3d17aa839cef9d59007edd3e23313eee46b468065f226c

Download Submit
/storage/emulated/0/data/.push_deviceid

Filesize
32B

MD5
51e7615ed372ec569057f77e9093a60e

SHA1
64af997d6837dc9876812ef49f4c0e44e561a880

SHA256
8440195504cae118f02c99c3694e9c1b6ce023a4dbcb5594952cf232067f2076

SHA512
4e20ce5a2f1af65f40d305833e28b46b2976b3aa76279de6769261a5a636ad7c0f61177496bb9e60dadc3256b583c88c7a636c5282fcc2040a1955a4f4faca85

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads