2baa1ad9e0fab133cee08b346fa50685816a73405c6544c45caf674d6bb9b3d9

Analysis

max time kernel
128s
max time network
182s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
18/05/2024, 12:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
54cb327d99be77ebcbd298743209e426_JaffaCakes118.apk
Size 17.9MB
Sample240518-p4cd3acc8y
SHA256 2baa1ad9e0fab133cee08b346fa50685816a73405c6544c45caf674d6bb9b3d9
MD5 54cb327d99be77ebcbd298743209e426
SHA1 d5e021177dfd113c02d4a3a8620eeeae4a9462bc
SHA512 1f5311a58ec0b8021517b0799672c5e349c03e0197ab9465cc591965e7d61afe200109eadb7d77ef7562d04ee19999ea9767821bc19f64b55abe084139d17695
SSDEEP 393216:ffV1hRpDQyFauwD73FmZU/lOO04swOlLM1iCf7xtx0zL5HAW4MPy1f:fffiyFjWVSYOEKMZfjxeD/kf
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.yc.liaolive

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.yc.liaolive

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.yc.liaolive

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.yc.liaolive

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.yc.liaolive

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.yc.liaolive

com.yc.liaolive
1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5198

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

1004

Path /data/data/com.yc.liaolive/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

1004

Path /data/data/com.yc.liaolive/app_crashrecord/1004
Size 231B
SHA256 07c092c52752c7a142f0c5b1c9bb9ab8ea332a68d441bef27befd03692970ed8
MD5 3fcd07cfd0c2f4ecd30d59160684ebfe
SHA1 d448aaf7486a3455e3fbbdb73828826ad08d010c
SHA512 2a76045936c172e9021c74d08ebbeca5730531641d0606708be4b22532c5600d05cab3c546938fa82c57d1ad2d406ecb2c8defb429205cf728730e0fd855f8b7
MD5 SHA1 SHA512

Submit Download

ua.db

Path /data/data/com.yc.liaolive/databases/.ua/ua.db
Size 32KB
SHA256 7b18c5f90aa10919f688ed7be95b9dc70c7853d48e8ec9a6dfb6e7310b118f65
MD5 62aaf1a60b3eab54c07775a1b2d85f14
SHA1 89a35e13d71a6c2ab80b8c936b9782cde999502b
SHA512 5a30a36709bca845f23a5e2d27edd3a3e25897b6eeea71ed4679a963d088d602614fbfba0a639fe7500e0193af5a693c5c8f55b2dc6a2872debb34412f67b0bf
SSDEEP 12:TLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbV/OwQo+TrXewFwrX+oPP:TL6K4PPvP/BlmqygGSZQo+FFg+CP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.yc.liaolive/databases/.ua/ua.db
Size 16KB
SHA256 26cfd3b9b9eb1a50b2b43a5ad9e3f53df2c8edd28f906dc5f583f4d843c67c16
MD5 cc456bc9d47ad581cc7d2a15bf58af8c
SHA1 4bc913130364cbf74f340aaad3fc5cacab179c4b
SHA512 0cd04c43fae8e0904c1e026a4b7234dd929879925d79281337cef10604cce390fa7066a896a88530fd4cc5d245029a467ffd799cf570db5d731a80f0a740c955
SSDEEP 12:TLWXOJuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/j7erXdRwFoR9CctYNF:TL/T4PPvP/BlmqygGSP/nWdRMwC2YNF
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.yc.liaolive/databases/.ua/ua.db
Size 16KB
SHA256 f5ac93837ea12394f11d3975baedee14e44952b8f7ee7ad59db3e128df12dae9
MD5 141cb7f4b6a25e1c4543e296a021ea70
SHA1 2c04f1effcbd593441a335961c34ab1de84d1209
SHA512 bb3b39a4a62f620d510ebc3ff1613f971ece6f2c19c71a8c96f40322085d61e6d6a7e10b0844f7a07b73a3a6ffcdc63ad910ef34448a6f8a561010a9ba9505f1
SSDEEP 24:TLr4PPvP/BlmqygGSP/hdZdRMwC2iRMwr5NF:Tsvf8SP/1TMw6MwrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.yc.liaolive/databases/.ua/ua.db
Size 32KB
SHA256 fa5140568beb67357c0a441eb4decc9b64a015c2d7c4ea441d1cdc32057dc6d4
MD5 d4aa9ece6328579081b1e15d1987d3fd
SHA1 a2b5afe9c0ee7967336d55116f5d23335c453878
SHA512 e018c93d36712de842cdd381fc58fd16acf8e975e89338080fae903b67a2224a8081e77318a89d906e9a5f3b3c596d66c9824ec4f5f169e8eaa52fa74d587a97
SSDEEP 12:TLgiuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TLb4PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.yc.liaolive/databases/.ua/ua.db-journal
Size 512B
SHA256 b9caf95494138059eff1978b3f8aaececdf982d5ba3b000b58a00df35b614fd7
MD5 5dfca9f63f61f1635156eda0d5558739
SHA1 846b90a5b0ed921615a9b0dc48fcebe52852a9d9
SHA512 70ac1400a9a61f6dee1b0ef0aa43368211b6ac870c1b9e6efd11941c95b709c9f370c1cb2c56ad4de2ff1ca9419329f7bb24c9533c61ddebd0c7ff61771f1e9c
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.yc.liaolive/databases/.ua/ua.db-journal
Size 8KB
SHA256 302356f48984ca02e18ed31577c477944addee2498c5ae7990fffec17927166b
MD5 689eb100ebd10a6d0bd450cf5cd79c7f
SHA1 515fef614d23aca7bb4713d7a60418321801e031
SHA512 d433dd171f9d49c8abb85178650b5c13cf3aad5a34eb9b35d543b05dd588ef47d4ee66aad527c1d8b00de2466069f44ab4c1fd47d5288613d98cb8b87e4d091d
SSDEEP 6:7+/l9DGgOn1SIg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8n:7+thGgEqLiuWdwRmBEyPbLn
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.yc.liaolive/databases/.ua/ua.db-journal
Size 8KB
SHA256 1d47c9f6af7626303d4dd182bd63d346c1d5849e431be323c5b2fa750940abd1
MD5 015df4a68856fb036abcbecedc7dac16
SHA1 ca640d3068c66a3ac5a12d601097737093a30f36
SHA512 ad2de4878df0d21b8b973fff043e59a71a9d51363e0bff4ec7bf0399aa3ee5b31ae9ceb4794ec188a1444f6e850f2c9c7a6b23153c0c47b7e6c0c140f327bf95
SSDEEP 6:7+/l9ZDHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKgx/W:7+tHvqLJdTRmBEyPbPZW
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.yc.liaolive/databases/.ua/ua.db-journal
Size 16KB
SHA256 3c0f1ec4091da19eeb867c6a96cfc3e4babd791c132f224f88ae65fb0944ce78
MD5 da0bace75ac96d406c7d622f1c045fd1
SHA1 b977b02ac46495c5c6321fcb810619313ad1c3f6
SHA512 aafd34060083cc956b584162ba6e05c816172d716c02d3f1bfb10d5e3caadb72318f425afac6ae99911db6e69d30a765d27b3f90f7f1071731fe12d1fe86a118
SSDEEP 12:7+t7bN0sR4RqLseuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbx:7+tFeqLb4PPvP/BlmqygGSx
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.yc.liaolive/databases/.ua/ua.db-journal
Size 8KB
SHA256 8369afb854a964d2f2d7eacd18a0b86bbadbda8fee5faf9fd6a7a640c5afb285
MD5 43cb6b50db34d7ac4bb9587defd87af6
SHA1 333e74f080b5cb56e8c8a3d9f93814fc253c2e83
SHA512 adfe79c650a479d40fc4769a48ec247b13d2c3c6c2cd35ef489cdd9bddc30682e7f5d93fb1344536b51dfd31e4fadd5cb1fdf3a7b035e3d3c587b93694ad47b5
SSDEEP 12:7+tZo+TrXewVqLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbk:7+tZo+FVqL6K4PPvP/BlmqygGSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.yc.liaolive/databases/.ua/ua.db-journal
Size 12KB
SHA256 e4e1012b791547647746adff9b6d3507b35012069148f25ce0cfd7469362e53b
MD5 6dbd8a5611d7a23dea1122e85df12885
SHA1 0d7dd837a5538acd336396846ac20c1c1c3a1857
SHA512 9f2e85ce6a3bb5c627d97dace5413c6f00da5fff73f31af3bab705271bc095394d2088502382cc0f447b4b698cf7201e0639dd40676bcb5f001d87c0a3c00e11
SSDEEP 12:7+tjvoGCGHqLzNuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbp:7+tjwGCGHqLr4PPvP/BlmqygGSp
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db

Path /data/data/com.yc.liaolive/databases/ThrowalbeLog.db
Size 20KB
SHA256 256fb4171fad95478a5a6615ef2bf8cdbb9948eb7f60ee6c909cf5480436128b
MD5 a852ebc3321d2bc807b23175a6a71edc
SHA1 645a7fd33cf75a23628d576e6c6fa5b454d16f13
SHA512 145ecea475401cc23e175ae5410fe8bea6f2b2aa7f9dcd40ea048cc60f57f48395cf6aab3681c35a3d275d20e79a342de3e8e2302ea2ee234e53ec9f34b5a831
SSDEEP 12:TLmcOyNTSFbydJexF4bb84riiKj2OVRmBEyPbAVOwG:TLPTpexi+TuGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/data/com.yc.liaolive/databases/ThrowalbeLog.db-journal
Size 512B
SHA256 490dae61866baf385bd44c5198b1215136a209dce8998db8bba386c3f5874869
MD5 492d99d9e24840d429374e99cf787363
SHA1 61a0f1e8986bdccd496a1df4fa585e5347919e38
SHA512 57297b25b45b0fa5849cec1c3f99517f364b7a50ac3b9fa91737fe82d931bf748a5f83208bb2d8b7c1c53f9cb4e68e6102a551f585fc4d7a498a37bac72dca7f
MD5 SHA1 SHA512

Submit Download

ThrowalbeLog.db-journal

Path /data/data/com.yc.liaolive/databases/ThrowalbeLog.db-journal
Size 8KB
SHA256 8f007114ee9c3a50d8a8338fec781b3bc6f1d2804af46ce20c9227cb4777c7b3
MD5 879281bfa101082ffe0c82a25ec2d013
SHA1 fc3ac1957a4194e447a4621ac7c84ac198ec3d90
SHA512 acf9339acfcc6cb10d8943ecedb2da41218ddf6d73a18fc345cc9882da1e53450a8f27f57d961c0ae4d8e866af07b3babb2abda099d8594417904471caac1097
SSDEEP 6:7+/l9+n1Hpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKoL3:7+t8qLiuWdwRmBEyPbh
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/data/com.yc.liaolive/databases/ThrowalbeLog.db-journal
Size 8KB
SHA256 950e9248fed05f8c472860778b5df67b5ee7f1d139748482d18d9fc67414bb56
MD5 944014b466077ae2515296a2d94f8b28
SHA1 a53177a868ea500fc422d813c59e86b9bf28c75a
SHA512 2865bfb22b178a9152ad6f8c2bcdc9d84c8dde0d1caca3c0beb4a4c5f37915f048c217e8bd6edca03b9f982b639d27f20aed35ce05e07e650d0b747fb6560066
SSDEEP 6:7+/l916gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKuHOtM/8n:7+tK4qLJdTRmBEyPbfHOts8n
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_

Path /data/data/com.yc.liaolive/databases/bugly_db_
Size 52KB
SHA256 3821966fd0c9af11a797914c033a1adbd7844cedac51eab20813dcff88693066
MD5 8a28369f056f07630f8f70cafa65c2cb
SHA1 e73f4a93c8dc5ee7487918ed74ef4a9c1749d4ed
SHA512 adc197f157d92051c6da9c4dc6c2e74b26b82205aec0ed2d396c9e44381e2c5afa1111c65ea763cbf4fc3563e486e36f516fafb2bde0d91009b22cc69c8afe5f
SSDEEP 24:TLKXQEJBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGScYGwB+pWsWhtKPeQQn:TOJ85WuAriStwwuMN5meposSzsQsSK
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.yc.liaolive/databases/bugly_db_-journal
Size 8KB
SHA256 622e4e520297c22922e55d1291f626b17bf732600b1a7f7e597bb7e03e49b4f8
MD5 af6090834c998ad4c0a0eecab158bce1
SHA1 2678805a6e84914933ab91a6ec8fdf5c8aae40a8
SHA512 a2dc5aa6fbffa15a766594b3230145de324f5b90c954f4e13c19ee20fffb76e2383da62db4c45a744cb567754fadd470ff7cad2303dfea10a9d8d9f056ae6a7b
SSDEEP 6:7+/l9on1vfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK6f:7+tIqLiuWdwRmBEyPbLf
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.yc.liaolive/databases/bugly_db_-journal
Size 8KB
SHA256 a0c773dd0a5a9023297d068e47299cd86a40001ec4a33841745752dfc56c322d
MD5 fdb3b817935df92892b3f13d82e55db6
SHA1 b6d331cc4a1f18077eccbba8ee62aa9de80c5a42
SHA512 8ce55a5760470f8ed4e578add8bd99a59c8c6524f17df113404d1f15c7c148995460a576139fc6ebcf931c5dd09d6bc322dc74c68f9eba0b48bea1849d3ff403
SSDEEP 6:7+/l9D0GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKtC/Q:7+th/qLJdTRmBEyPbOSQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.yc.liaolive/databases/bugly_db_-journal
Size 8KB
SHA256 ce36c74a6da4910e666ba135fb41352b31c33bc24a146a51b065c9e08cfd03b8
MD5 5742958800b07d12c00a5d973359191a
SHA1 419d93c82acbe575f3ec3e8e0015927992225740
SHA512 c10264c576bf6ba2b263b111e8010dbb5e2b1474f9252e5c834ac63f7081656cc1b710636d63a135a4d80896562f7654259041ff8c23c9c6d0e37b311dc7e089
SSDEEP 24:7+tXqLLQLBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGS5:7MXqE85WuAriStwwuMN5meposS5
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/com.yc.liaolive/databases/bugly_db_-journal
Size 512B
SHA256 6b8120bb40e54e76f7b825362cfab917d88dff49a95b677afd5af589e08f0676
MD5 003f4e529af7954d6183ef8ecdbdc1fe
SHA1 fe9190bccd1e4f458557e0d7d0accdcbcddccfe7
SHA512 ec3bcd50e62f7868aaddefcb48e25bede395b379d831295dc95fcf32334d597a40ccbe1b67682d30e09c9d82fe873636177f56074d18a710ad3580206aab1ceb
MD5 SHA1 SHA512

Submit Download

cc.db

Path /data/data/com.yc.liaolive/databases/cc/cc.db
Size 36KB
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
SSDEEP 12:TLgRP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLt7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.yc.liaolive/databases/cc/cc.db
Size 36KB
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
SSDEEP 12:TL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLd7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.yc.liaolive/databases/cc/cc.db-journal
Size 8KB
SHA256 2b8432d2c9aa49c5ef2ade244cb1a171d4f53bc62dea932760c079258c500f0d
MD5 d7964915cf8ca537eeb5333fb06973db
SHA1 1ad754d03384b842d2c829733330d0abf5635fba
SHA512 ab738652729ce8c6fc2287cba9376588f4c78d977a6862c48e2311dc181ee1bd06b398ded115613c4f22f82f4e3f0d846c1a6685bd3ed74e26c929724ff86e83
SSDEEP 6:7+/l99vllGn1Zpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKmN9:7+tQqLiuWdwRmBEyPbXN9
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.yc.liaolive/databases/cc/cc.db-journal
Size 8KB
SHA256 52a5c4efdd762b78159e8b0b7ad7b1bfe158448dcf97873494b33c1a6be27463
MD5 9d9334547213f580c48752e8d719761f
SHA1 33d54c5ee3c1a9fa2e850b4af43838edd30f3f45
SHA512 3962f14801ad86c7859159631331e49b03041b893bdede547970502f54bb96a20398a3b704fa993c2c37d61265e67ab517f5e1a6b7e8b08d038e6cf79a2fba10
SSDEEP 6:7+/l9LOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKn//D:7+tZiqLJdTRmBEyPboD
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.yc.liaolive/databases/cc/cc.db-journal
Size 8KB
SHA256 bdcf0268f5ad9dd9d554345de5e242b1e228ed0a85e3f0eb40968932681b0e40
MD5 98955dddee00294d6f27f035ba8ef214
SHA1 b23705897c9b005cb691a7ba1b703b6cbc523966
SHA512 0e44a166a1c43eaec132af7806c7d57be00067831242aacc6e71a52c55107c014ddc268b6160d66f82ef5cfe9e256d012ba152caf82d9a51c6030c6c9045c822
SSDEEP 12:7+tgP3qL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPl:7+tS3qLd7sL7yot3BVrHotGGSx
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.yc.liaolive/databases/cc/cc.db-journal
Size 8KB
SHA256 b42acbc73064227d0bb1cb8e49a5d13c13d3b3a503177b74a78c752fe2d88802
MD5 d64ae9f5bd1e4ca96c7acc2697fd5b36
SHA1 ef821ddc0a0e1fdf3f63e39eb859cf34f2e691a0
SHA512 dd8f3c2b477135c9e40c50df53f1d22b7fcddf44e96e9c0aa723b6ea3da72a5e0e1d470cd20a4a083ac90b94282f4efd8a3925c1f9e7043420c2b28f4a3d4c26
SSDEEP 12:7+tfl+WqL+/E6P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBy:7+tfl+WqLpr7sL7yot3BVrHotGGSXQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.yc.liaolive/databases/cc/cc.db-journal
Size 12KB
SHA256 03464bac14b147bc935335e9cbdf66dc0f84f40cf4216b410ace28c347d69153
MD5 1355adf165ba4dff9dd3aa75654d3638
SHA1 0d13471e06266de7ec7aaccae5fdf97fcad262a7
SHA512 785ec0d8eec6cbdfbf81b738810f0ffe7ffbb4f4dfe50e53eebb168f4604eb24055d799d296114fa6bf0bde76c8cec0c5b7e4f3c2bbef6a0b8e03e16a900b264
SSDEEP 12:7+t6m/EqLWEOVP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBf:7+t6rqLEe7sL7yot3BVrHotGGS5
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.yc.liaolive/databases/cc/cc.db-journal
Size 512B
SHA256 f2cf37618ee214b0c3b6970303886686a8bbaebdbd8165bcf073f52556d59d05
MD5 13981dc33c7c501e29bd9b9eaf368f84
SHA1 e7ce6d36ff97e2d455b86483c5951f2eaf153790
SHA512 4f138707d6d5d883254ab9a65181977c73e01775e5263f6e4f7150b76c5636fcdbe99e60c258586b5c1fe808221b9125f02e6bef36e4bdf2f8c5e06f40509990
MD5 SHA1 SHA512

Submit Download

um_cache_1716036902329.env

Path /data/data/com.yc.liaolive/files/.um/um_cache_1716036902329.env
Size 1KB
SHA256 4e2ddc63882a88bad2cba55b525ce872298305ddf7c5a451b2070c8ceaab4e41
MD5 a334f3e47323fdb65823bf5c1af9e877
SHA1 10afa9a4e8efcfe1bfbc8f88650bbd057552fd87
SHA512 7cd52e45466eea434c2b782846bfc8cd188e12d2898c3a7e558a9351dbacc48f245e1870e29a94e7c0b363eab933367591a331542a6b39f795d49432eb24d908
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/data/com.yc.liaolive/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 741eb959ae25abd951e5b620f2f74548f5b1f28b3219d7b5cb4f779dcd65cc4b
MD5 5ab052e4bcab77d5242685915bff1f38
SHA1 33c09a6145e4eb52be652dc5f246689de1448031
SHA512 69e8cea311fa70c78c6e8e700c16deecf9665750f96b2a54d5d8c4454449ee2786f342a8d5b9e949c6efaa7d34051d3735306b2f20c1159b2fcba9fe929e338c
MD5 SHA1 SHA512

Submit Download

domain_1

Path /data/data/com.yc.liaolive/files/Mob/domain_1
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/data/com.yc.liaolive/files/exid.dat
Size 59B
SHA256 a57f9d97b75e8b1e78a1faa4e14b6f6792c96a09ccd80dc782fcafad1e6a1f07
MD5 9cce1a7f0c2a58819f3ef40265988bc9
SHA1 4033e0e7a5f9b90c7865a4e1de079442f7d162ed
SHA512 46f9d0dfd36f0249f0a1663d727ca7585a3f6e1b29db8d277991235aa89fa582c073c7e633e09f846c05a1b4e94a5b1c59fe9a8b85454d786a17d45b7a328f1a
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.yc.liaolive/files/umeng_it.cache
Size 433B
SHA256 a151204a439c36d96cccd694045f2eb0c95525bb271541de975be5866f0d69f1
MD5 a1fb756d92d0789d18d2948612e45faa
SHA1 d07fcf24eab11d68d2119cf23ff24c7b069d47b8
SHA512 6a0839667c4a3e9b6bf86d30e07217abae06586e0af19532ddaf68ad0991fd5a5c0fa745a6cb17de0355f3e6bb52a4666f4bf00f6893430d853357dca22bfa6f
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 08cbf1bace16a80d5d7991e5d9eca3f4807aedafc8e43c0f03d66e04ac2ebda4
MD5 ab78084355d0e1dd779b4080856626d5
SHA1 b4c881f56951c6cdced636003f5e5d6efa471c22
SHA512 86165349898747001f5c992a67065b6c381143e89daa3d1601e0a5767797ff927a09eadfe6d8a0d0433fd30aad0f11b1f1ea8cdcdff60d305c87090f5b9921c8
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 9a3b9a92527f1b80f0ad92aaa8823b4e54dbd06565d731399dcd46ae1535956a
MD5 934f51d4f3658a33087c3dc300a4ea39
SHA1 235f9b5c3d6590ed4f0f0174dc677661ee25fbee
SHA512 0c11573c87b8175872f779c6ea2231ca995ab0017abe2cf4d4d0185698a3266b27760b04d3fb411b44b9deaf84fd82584d11ffca6909cdf59d9f248cf16ed713
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 408B
SHA256 2b2c9755eb1074fce618466a22c134ecb3c9a7d4d994aab0d400c9d1561f069d
MD5 5780f745d6d8938b475e7e74bfc0ec73
SHA1 3a56ebbd29001dde9b8b14258a3dc9a80da896dc
SHA512 f69324cc258a3e48f554eaa5d2abc6026aba71cf782829da30ab5539d2fd0a796ca4b4e789da0aaa5685c30f6d97a1c713fd939c087ae954d72a59cf92831dda
MD5 SHA1 SHA512

Submit Download

828e6baefdf1fe01e456b890d7e6875f744613c201c7f101ae3d9726f032c0af.0.tmp

Path /storage/emulated/0/Android/data/com.yc.liaolive/cachevideo_live/cache/828e6baefdf1fe01e456b890d7e6875f744613c201c7f101ae3d9726f032c0af.0.tmp
Size 17KB
SHA256 ffbdcc5c06b6bdcfc0597c994052c137162d1160208364f2b2eb97e23010b7d5
MD5 73653c8484eb7feb7f2e26215dda4703
SHA1 d915233f81f2c46892d9c3bfc621d2d651fdb408
SHA512 2e9cc612017b17975172576e6469172606e12d7567489570a159b2d2ddf15f4953862a951ba36fa99d6bcd324c88897cb77ae8a9bd7669d63c0b4f8c241f1467
SSDEEP 384:GYEMsI0Fzi9wjhNUDVUpOfx0zRpupJLpmq4fsa+TYPiJ:GNMmziSdNmfQRpIJVmq4h+B
MD5 SHA1 SHA512 SSDEEP

Submit Download

journal

Path /storage/emulated/0/Android/data/com.yc.liaolive/cachevideo_live/cache/journal
Size 179B
SHA256 2c215ce3df6ac4b503813f1eddd07ab3f1741a23d5911b0b175a146f8f8fcc01
MD5 e76a35fea4bc9dae0a9ae9f512f59e99
SHA1 1082179319446ea3607a781ab0a6f82541cbce6a
SHA512 41a7ba2791e7a70523dedd3beb88fa4ed62cf52827e5c36873ef4fc75d8202509edcf288461138045c86ef693c6b30468078d21222222cf33f388470b6489638
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /storage/emulated/0/Android/data/com.yc.liaolive/cachevideo_live/cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

5ac714da7be6d534dd74c84a097f98e0

Path /storage/emulated/0/com.yc.liaolive/config/5ac714da7be6d534dd74c84a097f98e0
Size 344B
SHA256 bad46e50382b73c66bc73a63a90c66f198d7a387ebb890279eb8ed1960e5dbf5
MD5 4ac291fd990a7997c603129c524cdb10
SHA1 8445b41c0033079bb9227cadc3744d3b7f9a4d19
SHA512 f41a4b242355e4108cd04f2d66b5b3f7ed94383c4a18b1a47e0ad4b7c3edaf4649721130ba3cbdb8252e5854d5914fcf297d56d1defe9bf71ea912695005f695
MD5 SHA1 SHA512

Submit Download

imsdk_20240518.log

Path /storage/emulated/0/tencent/imsdklogs/com/yc/liaolive/imsdk_20240518.log
Size 77B
SHA256 15aeb78f6922fdc6e7ff639866c6a1893e9d63b7119d8ffc8ea44df50adf0b82
MD5 b184856e780f17e4e8d016b5c0bf9b96
SHA1 d8fb38918c71269d60387c9969f503d98bdd19f5
SHA512 8b44db812b0d9088adb065e468b73e4758760c2ecdff6661057bf5028746b39a42b54e62b67b0dd044581968bb64e5a9c2aa95efb1051688d3f5646c62a4df35
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads