8f4cc1976a3e818acacf95ec682ff046b93f556a703860357e5d18661bb68b8b

Analysis

max time kernel
134s
max time network
187s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
21/05/2024, 21:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
64cdeaf37991c3d1126e69ef5c582326_JaffaCakes118.apk
Size 17.2MB
Sample240521-z7cjcaag97
SHA256 8f4cc1976a3e818acacf95ec682ff046b93f556a703860357e5d18661bb68b8b
MD5 64cdeaf37991c3d1126e69ef5c582326
SHA1 485c1cf98cd9fa79d81e307507c6a2312c9f0e08
SHA512 d66d2c2fcd0f673cb1e4f99740fd62fd94bac8d5fb4b04b530a9758ca03f72cc45c5d1b8fce80a86d31e7493978cc242e79621568ee12d54fabd5ac51fe71657
SSDEEP 393216:fXJUdFaZ5nfv97zq00JuIej6txnLFSxdJbSbNA35S0IlW2r:fXJUdFc5ve4IkUbesNAg/r
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	cn.zqhy.btgame.changyou

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	cn.zqhy.btgame.changyou

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	cn.zqhy.btgame.changyou

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	cn.zqhy.btgame.changyou

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cn.zqhy.btgame.changyou

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	cn.zqhy.btgame.changyou

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	cn.zqhy.btgame.changyou

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	cn.zqhy.btgame.changyou

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.zqhy.btgame.changyou

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cn.zqhy.btgame.changyou

cn.zqhy.btgame.changyou
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5192

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

1002

Path /data/data/cn.zqhy.btgame.changyou/app_crashrecord/1002
Size 233B
SHA256 d080da4a3c53b40d1b154dd960718e03717536af18bae279f511a617a74115d7
MD5 6c5405c0c1ad31cefa1033d310dc24dd
SHA1 fbe013e51b0a0b304e453987ee1fa7c3caaaf26e
SHA512 1e7c47128227b1d3ab58a95f51f6b0c861563b525559a052be879f2463f48079308a52f20237307791227c7d1940560e8f21b9e83078019d19d502f8f71f9a87
MD5 SHA1 SHA512

Submit Download

1004

Path /data/data/cn.zqhy.btgame.changyou/app_crashrecord/1004
Size 233B
SHA256 f5700ba5373355111fae4e90f0084dafc58d43460737ea13028756f3c3859440
MD5 5ccc122615c45c1b08b6b8d3ab5b81a6
SHA1 a02263f4f1d004487f7b08940b279baf7aba60a8
SHA512 fb1b2139fd05692cce4196e27717e9b1fbcbec41d5c12f474db37ac888e8007ad3cf4b45393965fe3edbc24c1c2835783f8865de0fc0de88f195817e2252561b
MD5 SHA1 SHA512

Submit Download

1004

Path /data/data/cn.zqhy.btgame.changyou/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

bugly_db_

Path /data/data/cn.zqhy.btgame.changyou/databases/bugly_db_
Size 52KB
SHA256 af8c62903782027623a38f12b69ce7b73bbcd6f8ed0c8495e4982a01ac27dcd7
MD5 e372ed481999d24b63568cda04bef9bf
SHA1 e685c88d699f74ab27414aeeedab2be9c950dae0
SHA512 a452bf6885641c343e0935a014ba1a4a8af9b038a29dfbdc713c3e8bad51f3ec00943addece69e7f84e2495b939fa163d91a974d0b057c72b2a17fd707a28ec6
SSDEEP 48:TU85WuAriStwwuMN5meposS71NgL/wNtkeCizXw:753Azw71Nkor3z
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/bugly_db_-journal
Size 8KB
SHA256 3cfc935da5ac0f8c5056868a186962fafb394de840c14519bb9583af88481579
MD5 90ddf50805df175f0d1060750512bc46
SHA1 4decb43d85a111328d492b929f0205bb98ff4755
SHA512 9e3c9d0197b0712c6d97d994ba243279487706c1c188bd6b0a2df039542df1716e76336d1364b0a2a7723f939d932a2d5cca125aee08c97919ffefcdc0872289
SSDEEP 24:7+tnqLLQLBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSe:7MnqE85WuAriStwwuMN5meposSe
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/bugly_db_-journal
Size 8KB
SHA256 27097df343d8b9130b4cb185a9563e6f7f796b1ea90dc26108d4217eb4ab9106
MD5 357bd2772ab1bb037ff26d57a99124fd
SHA1 0c250bd0b12bc66d1a5c955e564e99caa2acefa2
SHA512 7a2192648833b28fe7aec1989a36049979bcfd74985944cf482dba4638223b280ee69f9afa167d8112561956148ca8008dc69fa411a8dbd3860575f7d87eaffa
SSDEEP 48:7MFtkeCizXwIqOJ85WuAriStwwuMN5meposSi:7or3zbr653Azwi
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/bugly_db_-journal
Size 512B
SHA256 4f646ce6f9a24f1a8a7256259e129260c5c0e8875e1c3904f93f14c2ca66f184
MD5 578eb006d80694837efa04209ebe705f
SHA1 a5007f5746033aec8f2e9f6f53a0be28e8f090f4
SHA512 e61630bfc1fbdb98e1e1dc4682125069d4e0deee71834161a8d9db315af85fd54a8b5da63f172a7911ed55201b6ebb9d5d1db251f9d1bc77a2f0d748b52a4b5e
MD5 SHA1 SHA512

Submit Download

bugly_db_-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/bugly_db_-journal
Size 8KB
SHA256 2d30fa6ed2ff4158a33ac82e8c46a3d0d2a88b21372239b748b785e38b2735cc
MD5 5e524eb76aa59ccc40ed015e53d51338
SHA1 021a2b7efe0f61f0770ba74f37ae1598a2841510
SHA512 504e396f9ae0a28fbc0ae3872582927c719b4dfa9f9d3bfe6a740d09f46eb2e69c9bb56c8c0600a08c504697425ffb81b97ad32151d8fdc462ab7d775ac38e33
SSDEEP 6:7+/l9pBGn1jpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyZ:7+twqLiuWdwRmBEyPbDZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/bugly_db_-journal
Size 8KB
SHA256 5219f62c5773a6d4af712f4248530b2595c5fff751ba44fcc24818571664d285
MD5 06938460d34af6d89fd8d8c1f7f4d529
SHA1 7fa9381401159862f066dfc58ecdeeca9683c567
SHA512 b0c1a8af26d20871c86c7081e6865bf977a07b46fe63d1bddb910ff09aa45bf9774638d098a8698d97826bc5e90a5b07a1fc882d000c200ed5c63f47529e48e2
SSDEEP 24:7+tp+qL9QOQBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSN:7Mcqk85WuAriStwwuMN5meposSN
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/bugly_db_-journal
Size 8KB
SHA256 8e4c60c5f1fea3b9714d676c6ef5ea4795446407c402cfd4dab18d71817df9ad
MD5 363410abfa5269504d3e16e25e9b5360
SHA1 40008f8bb9c91f60ea5dd7149828962394ce7f9a
SHA512 ddcf3695a5cc13824a67a6b19b08fb0849fe4baa191d82d605292ac61998edfebc020164aac18992978c3d388a8a9f8a34b6d8e13cd0eb65db0f273843bfb47d
SSDEEP 6:7+/l9OHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKt/1:7+tGqLJdTRmBEyPbO1
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db
Size 36KB
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
SSDEEP 12:TL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLd7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db
Size 36KB
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
SSDEEP 12:TLgRP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLt7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db-journal
Size 512B
SHA256 f477644b0769bb1e0f0c759f5026799a138f7e15ca0a83255e1498c0177ade58
MD5 b96006360eba916bddead10cbbeb2270
SHA1 c7f3cf739fb5ae6754232f684ac7971832a152b6
SHA512 43ba94b7ce768fca35a6aa6b831d125fd8bd70f49f3865cd6aada8f1f2f623fb7233074a5cb6300ec67654c9f80c4b1b985d4547064b35f8d127caae3265b841
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db-journal
Size 8KB
SHA256 5a6b3cc69c843454f1b7272236d6e153a41afdf824dae899083c75a3104c3980
MD5 777f5b75155f7fc6b2f6bd07528d2d92
SHA1 6afbcb6944d8bb9e3512cddff736cfa85b44bc19
SHA512 8ad9155600b3bc946b121ce493f150e41b8be00b8f67ec814ad6ccd41cd8f97fb4c2acd0b9a0feef8f30109d9adeceaeed24f044871f8dcc95f81601884ec6c6
SSDEEP 6:7+/l9QsHn1M+Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKhL:7+tE+WqLiuWdwRmBEyPbq
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db-journal
Size 8KB
SHA256 679ff5e0b8c6d0b1be89eadfea58d592874eb2a80ae4ea511501c3f0fb541aa6
MD5 deeeb8b8234a3a2a99b1c3753e764b7c
SHA1 2fe1dc2534b6cbe01602e294af41b934404a56cc
SHA512 c885f13a2551b287c28d7ed2a8b5387e9ac455b85611d541fd93d1fc74b7a6b8b6b2769ab4bea65fc76343e81a45bd805d8d671cf70b6a87d633f58360a6d87e
SSDEEP 6:7+/l9YPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKWw/1:7+tWqLJdTRmBEyPbe1
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db-journal
Size 8KB
SHA256 6c9017f7b2f237124715b41e7403bfa270faa2f82e82c8eb97bae51598c567c9
MD5 973e26369511d1527feb126dad30de6d
SHA1 10c0b8aed6cb7048b97d6ffccf4c42d99ab1c6df
SHA512 427c516b0fd14a7891b4f6c2fafc584f87ff34c41d3795dfc4e0ec7ae8c1250af57adec3845414128d282e9363c68083aa1032978cb71a54b93367f9436ca0cb
SSDEEP 12:7+t5cqL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbx:7+t5cqLd7sL7yot3BVrHotGGSx
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db-journal
Size 8KB
SHA256 208e11e1cefad4fbf69e934b6d75d865954e340e1f1d348ca7b99ad5773c69d8
MD5 ea5b14c117c24ef3f15b35e8f3db0227
SHA1 cf814af1d3372cf711a3938a09671c55ae04a9f7
SHA512 37e6d99f63c4e90eac8ca526e51f400e92acce4859674acbf4eada11c04909a55c04bdad7ff62180a6e447e61419215579d637b9b89ae85c0c7a1f64fd3b2c0d
SSDEEP 12:7+tkFUqL+/E6P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBET:7+t2UqLpr7sL7yot3BVrHotGGSM
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/cc/cc.db-journal
Size 12KB
SHA256 a6c406c5be4ca0556e1cc18d431a3ceac99f2543b08dd8b962c02969be63c9ed
MD5 e45bd073c5f1323727d67e879ae4ed31
SHA1 77be764bbf31770e72d01ce219783cc5f7a8fb98
SHA512 7fcb1f833f040a0af52cb3ecb14e4b23ab7b9c9337d1fdb1e53e22b7d0edfe9d482da0a808447c79cf93a5d726a72e73e895fd217348d29195efa9c1ddbeaf91
SSDEEP 12:7+tpmYAyXGALqLWEOVP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtv:7+tpTrqLEe7sL7yot3BVrHotGGSe
MD5 SHA1 SHA512 SSDEEP

Submit Download

okgo_server.db

Path /data/data/cn.zqhy.btgame.changyou/databases/okgo_server.db
Size 24KB
SHA256 981024b525f8039b10d7497173e810d220a212bcdbcd5ab3aa91c318a24ad5c5
MD5 17ed434da73bcfcea3def1d33048aa5b
SHA1 3e4e44477c17647921072b58d2dd8620fb38dcc0
SHA512 6c0289c6f57a4b59b16bb0759782f709c0007b59acf9c07feb099918c3f052ec2f3d46ef4cbdd4a99305ec0e524e53d8296718235c38dd8ed5d4e43a104794a9
SSDEEP 24:TLCyvxyN1wVYnihcxGmAaA4QzU9NEGSzG:Tuys1F5GmLcz4TS
MD5 SHA1 SHA512 SSDEEP

Submit Download

okgo_server.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/okgo_server.db-journal
Size 512B
SHA256 47cc62b165a81fb787785f5708c6718140d603c8551972fa56237017b63ffaa3
MD5 d375db3db19b01912b200f00cb3b0d3c
SHA1 d61655385a9c042066baee7b7664c88255c3ccc5
SHA512 c5269aaa3a0083f74bec9a38d179d05fe3f16a16ee5b8d473dd6e1d9cdf62a8968c04ebc60f45eb7f7eec4bd164b0aeeddbaa18a5062837a6de623467588a271
MD5 SHA1 SHA512

Submit Download

okgo_server.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/okgo_server.db-journal
Size 8KB
SHA256 c037f7d8042ccf4828aab737c73e7d4c94e9ff210e57f0d71fd87a44654c3dc4
MD5 449148c91571941d331583b42b4f4bc4
SHA1 7ac9ea8474a29c6f3a57d7fdc206ed51c2c541a9
SHA512 86ea5fbb43cfc6757b6e2a99e188f6f01f7123998f0f65e3ab8f4834dc7a13bda8fbbebc3ae479d83a492f23c024d9e1ab695649bde71e7537ccecc447dd0a89
SSDEEP 6:7+/l9A8I/gn1RIng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKP:7+tTwqLiuWdwRmBEyPbs
MD5 SHA1 SHA512 SSDEEP

Submit Download

okgo_server.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/okgo_server.db-journal
Size 8KB
SHA256 947a5dd26da6a319ff15d97556d36a05dc77041d91d0ccf6d2f78e7e6a65835f
MD5 14b8bc5c2244204d2d0910e006f12dd8
SHA1 0d9477961d37f392bda4260ffead210ebc12b69c
SHA512 c36450d494a091cf688ac32619b9295af1a25e570ab006f2df750d179ae16bda479b75f2d1d64bba234b2feb29f8014ecf0550938c526337c0c1b82146301529
SSDEEP 6:7+/l9h04Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6XZ/y:7+tgwqLJdTRmBEyPbLXBy
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db
Size 32KB
SHA256 f41f55cddb3787950e22a43f3b4cf553454d073654d21f0e350501c082f38c23
MD5 f4f3efda6832034eef4544e27dcb53e9
SHA1 c321cd30d6309ed86f79ec7c9d475879d6c6d2e8
SHA512 6093d7e877d251719a150a728be70d0a8ce23f7d57910d72fa783a1e108ff45cf9633d60dccbd80f4838de52c147c2ef76cb7d7f1877702dc414d80f48a1615e
SSDEEP 12:TLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbV/OwQo+NrNp0BBPP:TL6K4PPvP/BlmqygGSZQoErNp2hP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db
Size 16KB
SHA256 7c3c4f5ebc043f7e6e903e035c49c76525be20d85f4f8241bea2e2e646da05bf
MD5 2701fc07c437b5177a8b8519e5ec1c68
SHA1 21a9c6db77592053b5c8938c49504ad54a83018d
SHA512 43549f3d520249b5075df22886489adf55f9e6200b19d05ae76435227c17a4ac0eeff4f44ad76cd8a2a80d795d4df934685a81016fb576f72f843c9b17d99c19
SSDEEP 12:TLWXOJuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/Ccbhzz9TpItly:TL/T4PPvP/BlmqygGSP/CcbZz92tly
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db
Size 32KB
SHA256 f017754818540d598be648e26ca4591a20576181f3e2acba6b7d4cda14f7c557
MD5 aa3b4af0e8cff3bee9cf0f3f4227b845
SHA1 d4b4759790919a1aec3f487a2783a9e6fb177034
SHA512 3ed28482976827c31209f1433fb909d4f0f8eb77aea743af43880db77e63f1d3128a96d2b335ee193160943e0c570e188599c348434f34e1b1ac1754f54a8bb4
SSDEEP 12:TLzNuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TLr4PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db-journal
Size 512B
SHA256 f002f336982a36ef9d01e176bddd786594ac4dc00d08c29baa48ae7a10394123
MD5 d5fa3fe7fe7dc7e05b84e6d93e630a10
SHA1 b0357427326d8312c1eb26df2c428593bc469149
SHA512 c0d463c5e89069e00df3f8f9a41a3ab259f78fea42cf5a5b346bfe0ca87bf14b803deede96b0066b45bb73116f4945cd18a59cdff53ac11d24883ff35be2b358
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db-journal
Size 8KB
SHA256 1521cbddab5c5d4a107c0fb13b74ee86a287788cbe68776889eae20295af5ca8
MD5 4af91d0fa6bd06bb1340d6aaef11482a
SHA1 533a332a208e24af24ab731034b2df89fc81e42b
SHA512 e0e1c83dc399bfcb35f729f7727e2e1a2b7eef12e1cab923987a34ff2a4219f91ae07920bca8fea43d084e467fb028ba557c9b327e7bcc40edafd820178fd275
SSDEEP 6:7+/l9T6Hn1MWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKex7:7+tx6JqLiuWdwRmBEyPb3
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db-journal
Size 8KB
SHA256 c185997fec14328ee995cf90e260c3045b324d90183d54b11b1f89c50fb6061e
MD5 bfe05ed2c648f82ae3ba5ffae86371b2
SHA1 60d3f8d69ce8068dc82427e8d19e144de904e46d
SHA512 9c0bb168642949ec7378c46a72a38180137389d9ae385a7cfef8c22269f1150d6e16be6f2ede5702cae4ee0dabde504f597e024a983627561fb839b08e413c5c
SSDEEP 6:7+/l9DyqPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKQ//mb:7+thyeqLJdTRmBEyPbNu
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db-journal
Size 16KB
SHA256 db04841bc823d8571db5abcf68a2dce112229f65f9ea6305ac2efb0008868aaf
MD5 baa466f97ac29599c082abb45761e8fc
SHA1 2a6529aa32a09fe5aab81b9fbc1f0e4d411ab12a
SHA512 f8c0f319c570a46b7bcc0ca39790a40c10dfe07d50c2c9e30fd931170ae752a3bbfb2a907e3a42eb2d6a9c0fe53ccbe445db0f51b87e362e68b55f26359ac269
SSDEEP 12:7+t74jqLseuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbA:7+tsqLb4PPvP/BlmqygGSA
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db-journal
Size 8KB
SHA256 11b695103e7518de6ac1aa53d33df69f10f551f63179ced200133b337b839ca0
MD5 7163ed14d37a82d9d598b07347974606
SHA1 291b23594b94579a68022151806b1fd6ad4569bb
SHA512 3cae53b14a3985a574fdee6d209158aece6a4bafe37ae1863bc5131ecd4f72e5c2875cc8aa59146a45825abfe60e5c3923344874b476c2b40b060437c1fd2fe4
SSDEEP 12:7+tCo+NrNviqLZEsuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbM:7+tCoErNqqL6K4PPvP/BlmqygGSM
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.zqhy.btgame.changyou/databases/ua.db-journal
Size 12KB
SHA256 663a21c5bcfbf7e5b28c55169b145d2ec589a4867de84c87c22ae8f509b3caae
MD5 f38b1d00a0dac5aceab403c6419634ec
SHA1 4dadf67480bc2081ec333a1e1e1d9fed289be47e
SHA512 98c0f2dd439b729b877703da830a6fa03742fecae4564fa26ccaa6a61ccea5b70952805604d2cd9e4290c273141200bcf3649143970b0d32ddfe08db1dc667be
SSDEEP 12:7+tLYiKpqLWXOJuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbc:7+tL4qL/T4PPvP/BlmqygGSc
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1716326774619.env

Path /data/data/cn.zqhy.btgame.changyou/files/.um/um_cache_1716326774619.env
Size 1KB
SHA256 7dfe5efe4939b6c7d5aff7ccd877fa78701ba2ee12aad6fd25a3ad006aa398fe
MD5 ae9b63c4088a56135a6654d5eaa1f33c
SHA1 e8b98b78328db8c18e54598df8eede7e0b7d378e
SHA512 94c7e752bd663ee84a6c857932bcb3f44c443651c56491c91b614bfa3b825d80c91ebb7dc3aa09b2a6260866d4e832c3c69cb80ed78e3539625fea53c986179e
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/data/cn.zqhy.btgame.changyou/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 60bfa712261f47c2fc49f1753e447b93e4cba6a76228e722e4297e1868e8a631
MD5 3093dc655d17179454509fe847131555
SHA1 b1d96fea95d456e8e73a515a250951a60fe88719
SHA512 cedf0dfb77bdf43f81e81ab6d4270f01a26e37a28a154692e4ed8cae5ce30ab1d90edb645720812ef584cb336a90e6f3c1964823563309a6f5764eb16bc0312c
MD5 SHA1 SHA512

Submit Download

com.tencent.open.config.json.1106641430

Path /data/data/cn.zqhy.btgame.changyou/files/com.tencent.open.config.json.1106641430
Size 1KB
SHA256 8572be02b59f4d514000939ec04a9b4e2380c55265256b724a617d8d0f4c6940
MD5 f526172de1566b34fdcea744710d9559
SHA1 000cb54d9a008a807a1c5a3fd2b2e7cb41e7939d
SHA512 dc81f0fe345b18c96b1638c67b9ef4c5e60059dfc4a02f3c30a23645d4847abeef46cf467d044c42597115c48052ce0e8ea24328382114a544c5dfd039a95e7d
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/data/cn.zqhy.btgame.changyou/files/exid.dat
Size 65B
SHA256 e36434cf6860203722b11617be211d42b1b18e0d8d59edea3a11bb83e347c95f
MD5 75d8d78ee7f8e776a0a9d5b407bfa49f
SHA1 9d2f39c6aabbc9bc98756a1f748af7663529ab9e
SHA512 b9adb8f6d0ae9ef0ee92b16562099b5f20988349bf829fc5bb6635691970081f2a03e721fa9ffdb086c9c075c847a07041011d947d7ae3af6f2b303bfdaf9326
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/cn.zqhy.btgame.changyou/files/umeng_it.cache
Size 433B
SHA256 aaedfe918fe83246f4f705e2ea8385bd8fbb565360474c843e6b9e2f56d0ea8d
MD5 9df052bfd1701358cb90f4825c5727c3
SHA1 84dd9ff65f00fe5d36e6d14e710f46a8299841e7
SHA512 c9de1bbaeeac2e565c17ac73b83c40e9ec5b6fbb02aa0a3f00b550fbb6911b302bac4e593ce6182fc64cea3aab28e3aa349038fa1bc599397b3a2af9ec6ae128
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 2223b1b30431a78c31b44cc55b743c42cc590ad7f3635142ba21ff1a841666e7
MD5 4da148471acf141c835f18a5717f52f8
SHA1 74c663e8e4046d6a5ad0832dbbbaa226f7dfc96b
SHA512 4b058079e8ecef58fa8c469888a5fe9fdcc8c688cb9efb7a655b1aa3c37d06968876c7ec597f12818c4e6e664983f6d5cb61515439de89b30aba7abdd66e7da6
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 591b30e0ab043729c6bab20c7bc31b370f4197b36bd5c382969090ba7fdd1ec2
MD5 1d1404584ff777b2f931b27ff9bb1d9f
SHA1 0c2df14f609544a7fd42faa2aaf0dac27e322c3c
SHA512 cce07c13448a32197686d48d9720ec3e7514bff9c3a6670873a21ae6cee2fb21a304cb19017ee657e41c4e1295a30572d27e12a362b89d579f6186304c0df36f
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 408B
SHA256 ed3250fbc1816ce1c5e7f8a1b69fd21ae7a076c8f88b8f85d48bd7ef50fd6008
MD5 65c079253f02e586d4a8972e5357b566
SHA1 eedcd32aca75b0e9d9d6e63ef6f866ac61fef493
SHA512 d8190c8dc29e5a0e6de71a89395e1ac8f1ae9d6f0770238c7fc2e046c5257344b2521aadf098cc012c16485bd82d23610de23d148e1d33300714983dded4f5a3
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads