fdc3825d3180a33fef9f7241d73a2c3347b13362dfbbff21db4aefd43bd8d59b

Analysis

max time kernel
178s
max time network
153s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
23/05/2024, 17:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6bc998ee75de89c557646ce976371f41_JaffaCakes118.apk
Size 31.0MB
Sample240523-wkn23sbb67
SHA256 fdc3825d3180a33fef9f7241d73a2c3347b13362dfbbff21db4aefd43bd8d59b
MD5 6bc998ee75de89c557646ce976371f41
SHA1 f0f9295d4e60754b97bdcd71f4d6e6d71011db1f
SHA512 0356e13d970ddb8de142a79647af554b62d1ee66d4868d2c3cda0d222d7c53ed7bd4dfc22fbe4e6dfa3346d726e3460eff0212402518cff726c2e9bf98475a3d
SSDEEP 393216:627dC0jfxfi8W07oUOF7zBh+hDcJbu67TV6nnpuSBODqCBcebabVshif:6JUfxfi8n7oUaHCq1u6XQpuVOZebk7f
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.feelingtouch.gnz.realistic
/system/xbin/su	com.feelingtouch.gnz.realistic
/system/app/Superuser.apk	com.feelingtouch.gnz.realistic

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.feelingtouch.gnz.realistic

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.feelingtouch.gnz.realistic

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.feelingtouch.gnz.realistic

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.feelingtouch.gnz.realistic

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.feelingtouch.gnz.realistic

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.feelingtouch.gnz.realistic

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.feelingtouch.gnz.realistic

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.feelingtouch.gnz.realistic

com.feelingtouch.gnz.realistic
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:5164

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

84161723390

Path /data/data/com.feelingtouch.gnz.realistic/cache/__chartboost/CBRequestManager/84161723390
Size 330B
SHA256 7a2a240b127d7f839918dd184eb9e4486f3e528a6d8c7de2309de26824169b83
MD5 b38cfc4004bff8fe0bca34131cf8888a
SHA1 507d53621b80e4b7c74004fbcba1afdfdcdf9451
SHA512 891ea2464d72aa77279a81e515745fa6b7cb3e44f649583886bf52230b207d8e4e779ad86bce7b5ee13f59ff1d85454729a7a0ef2635b2a45796b787c71949fe
MD5 SHA1 SHA512

Submit Download

cb_previous_session_info

Path /data/data/com.feelingtouch.gnz.realistic/cache/__chartboost/CBSessionDirectory/cb_previous_session_info
Size 189B
SHA256 8a78c75821ec52c89d26669bc2002fad55c57312c0a24358a2353643da6cbbda
MD5 0af644d829f9ca03f5cbdc626c99b7df
SHA1 4d355a0933e40b595723ff57a36c51b6efa9916c
SHA512 644223fda75e2ceb9b03eb04918963f3c5b55af7ec596dc528b5f4b6944399eedbfc2d72c7801602c0a58a8ee1b1a9b6322ee5eff39dfb1eab34b03aa6b93c05
MD5 SHA1 SHA512

Submit Download

Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568

Path /data/data/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568
Size 16KB
SHA256 8820846bad9e60b3e5d4b5d5b8f7dc59156e42ba0243705ac028a080699c93e7
MD5 00a091e790015faff0fe963b0386a52a
SHA1 dd42e5eb1b8dbe4bb948cb64d9411b447ff74e91
SHA512 c5d5a197203a1f4132953b7ebc329f4c9005d9e28172296288de6f1d5cf26bf4a7341d4d06534b8c74697f72f5a8e737e2660b8eb10f9691a7225f9ee5cd020f
SSDEEP 6:l9bNFluls1E58MkAmOQLu8aFYAX3GERX4PBX4ogLugMBX4suuK0DqiOw:TL8EE599mOV8aFd3dRmBEyPbBvOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
Size 512B
SHA256 9e791ab2b4daa9bfa12ff2421f9fdc9092f6ed53c743476aabe87f117b9fa5ec
MD5 bf1a0a925c83f19f2c847981dc96e39a
SHA1 e90560da14ce22d264f3781fe885ed03637908e9
SHA512 625a68ec45270819ee8a65c7a338c29af881fecae1b50dab73e45886391bef1da76480451bea2f284813af63b6a15082de5cc49fd164c465ce340193cf7bc9d6
MD5 SHA1 SHA512

Submit Download

Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
Size 8KB
SHA256 4af9a000c7d534e76523ea8e5a32bdeb7240b41ea7c54a1f9c3463ca0821fa9f
MD5 1907883b3c9462bb011ee86e5b4139bb
SHA1 ebdf36a86acd649fbe6a5a7be32cf175bb52745c
SHA512 e55589a159abf74b5ad799db1bee15cdd76a6b109caf07a895b53c7af501618554b913f6d5bd2935bde58de99fd67a0d5fef6169de1d5ebd6381259cedb7ac8c
SSDEEP 6:7+/l9nGn1Bg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKK:7+tEqLiuWdwRmBEyPbt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
Size 4KB
SHA256 28822d91a27245ee0ee348f4b22a676f6620c39b7b27612d83a95128d5efba50
MD5 a3d38912a4a5587a9105d2b3e72b2c38
SHA1 4971cd32dfdb14c8c12d0f01a5f70d3878907220
SHA512 bc8a998e2f04de79f142232e45a2a0a31608ec8c529057ccfb165cf102727ab8e1cf3e2dab77f0b35f45ca16c9c4f6085566e49021da38866414d9f03194b6f6
SSDEEP 6:7+/lx6x/GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKuH:7+txaiqLJdTRmBEyPbfH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
Size 8KB
SHA256 056d97ba0e09ebc1d1c28ba6c129a737161fdf34af46e7704e943d94ac0891cd
MD5 a6a264a420d5148c055a4a37b16ea0f9
SHA1 90142e37409e6f81dcb978dc15a4df3aba2bfdb9
SHA512 42d4d29e09a2f2d5a80aa8dbaa01d16e52c47cec6a1b6fbe14eb83de9c6513e4b6d02784e67755c4466c0dae4591e5546e1f6274734a4a75ba27a8c04adfb1a1
SSDEEP 6:7+/l9vNgPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKSM/HH:7+txN4qLmqCRmBEyPbDsn
MD5 SHA1 SHA512 SSDEEP

Submit Download

countly

Path /data/data/com.feelingtouch.gnz.realistic/databases/countly
Size 28KB
SHA256 c26f6405ff1be1b9ea9ed9f663ab907cf842e10392a8e0418f5fcd6ac0dfb590
MD5 0475818d3417cea42064c344265c8286
SHA1 7f77bf52419aeecd7fce50ced177d841f7eb072b
SHA512 0b9aa35e886b0baaa00328433b9451ce8f5f3a47d0ba6daf6c4aa5a816c2e6071177252632206d29c6cc996c22289c26e5ede1a1653ae56c88716b17102da7c7
SSDEEP 12:TL6eTgyCFQoV3j0yNTSFbywiyF9gDfRmBEyPbGtOwtX:TL6sgyCbTh2BHg0GSi
MD5 SHA1 SHA512 SSDEEP

Submit Download

countly-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/countly-journal
Size 12KB
SHA256 2d650dbdf3e1af7ba09b0686c74df9f51ab79252d30111d266bcb78bba4cc3c9
MD5 39d4c008944b139de6b30ed26847d34b
SHA1 4e07a9590ced0e981c61f056b23710e953005ea5
SHA512 1de99d56c98c13b71271dc0ef242646d1789efdde16e2fdf80b74d87e75947886dda0174489a0793afa7d5e8b15f9f4fc42542fbdb7c0f7af381117fdd244cbb
SSDEEP 12:7+tH+WnqLZyyCFQoV3j0yNTSFbywiyF9gDfRmBEyPbt:7+tH+WnqLIyCbTh2BHg0GSt
MD5 SHA1 SHA512 SSDEEP

Submit Download

countly-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/countly-journal
Size 8KB
SHA256 23726ec195ccea143e74351c03deb558b7aeefc196df4ab85dd130664767651e
MD5 66926d9240e1baf0235c1e1a1e567dbd
SHA1 fdde6df350479901bd0a959e92f16aa8a13b8079
SHA512 a265d8378c15c35c64371a0018637afb41ee4bdb34f3614efcaa5df2a879990c40a45d6bcbc7381ce240d7d0b44e4c516b4f0b7572a5abb9d6f64e816d6d0ecf
SSDEEP 24:7+tzQk+BeJMH5nceWbMvg7qLEW0yCbTh2BHg0GSq:7MzQfeOZctMvsqoWGFQH4Sq
MD5 SHA1 SHA512 SSDEEP

Submit Download

countly-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/countly-journal
Size 512B
SHA256 1dcf557ada8d4337f025de4e7ba4b88ed9514a516fd425361ea62542c742402b
MD5 723ebcdd55820fa67760cb701a0ab035
SHA1 07280caa8dbba1defab4022936e0c4a1376dcb61
SHA512 9e72998c8b7dac99107db46632a824a224dfbb609bb774c4836fe0cd68bb4fa9865ed5f765fb956542e6df3873ce7f0d65d61f114357fb7cc94b574da710854e
MD5 SHA1 SHA512

Submit Download

countly-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/countly-journal
Size 8KB
SHA256 00e02196d65a29d68861888820122c7f6065165522955a618b876816187d1431
MD5 c9592c6f2022d2d8b71b55ac190df328
SHA1 ce7e0ec7a9ee028330dd6f17f941c334235764f2
SHA512 ba1a5bcdcef992337944d6c44e5bd947a3ab65386716b93ac97a3514b697370f4dd87214b22503aabd64eda2e17d5cc5ba862b65c8af3df2e3c852c2fb66b059
SSDEEP 6:7+/l9KOn1LCfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK/:7+tQ8GqLiuWdwRmBEyPbI
MD5 SHA1 SHA512 SSDEEP

Submit Download

countly-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/countly-journal
Size 12KB
SHA256 562a9ec41c1c950371647dd97a7912b9ae8ef2b8c084538980152faaa956ca94
MD5 218e90ce0668e8eed9608d7aa01001f2
SHA1 b6c686e5fb9dce0a0fd9753d79cb5d51c9fec374
SHA512 4f2b99e651f9818f46d91d82cc1b0f98f5f15a79b3679aa15649662b5c4ef23ec03a163c0660b7e5080334f77074e81e61659fbc47f686b4e373413a8c9f0369
SSDEEP 24:7+tek+NqLYyCbTh2BHg0GSGqLIyCbTh2BHg0GS2:7MePq2FQH4SGqmFQH4S2
MD5 SHA1 SHA512 SSDEEP

Submit Download

countly-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/countly-journal
Size 8KB
SHA256 b6967b03008c48e3bbdb6a4866662475eb7693c122fbd65e4f575cb183e42155
MD5 572e86b629168a5a51b5323007d213ca
SHA1 3b2614b891bb3d236f6a11bcfb43e5fe0375e1cb
SHA512 14325b48527546eb92214b3fcbd2c7829acf410f8d4f522d05fb50a0555e4af4ba2b5cdfc1fbc6021384dc383fa375e08dfd37a6a0bc0d5f0e8d63742cc7f70e
SSDEEP 6:7+/l9lHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKkoU//W:7+tzqLJdTRmBEyPbI0/W
MD5 SHA1 SHA512 SSDEEP

Submit Download

publisher.db

Path /data/data/com.feelingtouch.gnz.realistic/databases/publisher.db
Size 28KB
SHA256 064f49c44b23e5f9c34ecaae76ce4e938437fa3fb969d44cd24b1c5021ad9d24
MD5 af4837e16f1ffc1d94168fb4fe7924e6
SHA1 aedc27ff00c72350d5e883f798a3b4c1c9216e09
SHA512 835445af80d89a9ec1ad2cf209db00fe850566538366d00f1fcac705137128a602cd98232e1ff6a0790f734c1cbdb8aaa7ebec74d3093aa279f7ea56196102b7
SSDEEP 24:TLweoehIIUVRcWv7SUdq1mC4S/3UGSiG+KCf8P:T0ktWRcWv7SUdK4S/zSzPP
MD5 SHA1 SHA512 SSDEEP

Submit Download

publisher.db-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
Size 512B
SHA256 331927408391295cd51b5859f531d58977727d6cf24ad6d12b1e5c3ce6aa281b
MD5 5fc2ad549161cce399d3f4708c7f1194
SHA1 9d3ccb21bf1c60bf8e054829f56d0301c19c7e55
SHA512 bfd4581441f54367691d4942c7bc32c3f0fc85f3afa3243f0be9862cdda3fdf74f18f26b75dd6bbe083b0c9fb72d773e99a0fe14ee69e7358f90a6638e879f64
MD5 SHA1 SHA512

Submit Download

publisher.db-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
Size 8KB
SHA256 7bc65608d690af56bf46b2bbe1e277ef92c59a0cae6e257ae37dcab1f50e285f
MD5 8a3ee8ddf3b625d9c6856d088a632aa3
SHA1 0f7a5bd60d16303a76b99e0c25954ee43c20ee96
SHA512 d2883bc1aa0dc2579a495e7bb2542c26240e85c561852b1976c2557d99afde492aa08087b248cbc5fe56087900a1a6a7e9603a6103934f1085b4083daff656f2
SSDEEP 6:7+/l9m0Fn1O/pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKrn:7+tRKqLiuWdwRmBEyPbg
MD5 SHA1 SHA512 SSDEEP

Submit Download

publisher.db-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
Size 8KB
SHA256 7ed20b4aa4244559f0a7a26573acd6fe0e9e831cb640b341f8d8fa591df95c56
MD5 206abe65344528fa82b379416e808f1f
SHA1 c18e1e16c1b5c4ffecbfa6d146cb8010a3ed0ee3
SHA512 c525727e39d8bb465678daf35e224d393a59a11ea1eba245e91a54c379be04bac322bb681e0319546931fa85282a9dd9bcc874f2e299858a26d546e5d40297f1
SSDEEP 6:7+/l908HPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKla/qd:7+ta6qLJdTRmBEyPbDM
MD5 SHA1 SHA512 SSDEEP

Submit Download

publisher.db-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
Size 12KB
SHA256 ead5f6e5e4268e5a78d1ea786d6b2ed653e16649993ada6c44c4ba592f8cdce5
MD5 5d85b7e45b5f32c46625f7f92848b15c
SHA1 2c1cf104e7cbcf6c40961963f6fd1d7400483172
SHA512 7d503ecbac6bc4ae2a8e1045e51f6951f64e955013d399c15b1cdd2c1f34d419c7e4f2b283e3d6ef2f492a8740e12fff04ab9826711d7a0587dfd1da3dcbea75
SSDEEP 24:7+t2zspqLCrehIIUVRcWv7SUdq1mC4S/3UGSS:7M2zspquKtWRcWv7SUdK4S/zSS
MD5 SHA1 SHA512 SSDEEP

Submit Download

publisher.db-journal

Path /data/data/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
Size 12KB
SHA256 159fa22e272a0fce04cb42917909282ce7116461e5d7026fdae9186b58f27822
MD5 583aa2e1c71df8b4337e3e3e985105c3
SHA1 5d8cf93a934fe5aa643d7dbb6ec9febadb15372c
SHA512 1c9955681b37ccce2391806d8f6507f5364769e56a1941f2700f4f985178a64cef39a89a81f0d63a158ef1d4febe76ad5ec102e0c951e36b6c661a8aa8da773f
SSDEEP 24:7+triWHf+qLEm0VehIIUVRcWv7SUdq1mC4S/3UGSS:7MriWGqom0YtWRcWv7SUdK4S/zSS
MD5 SHA1 SHA512 SSDEEP

Submit Download

AppEventsLogger.persistedsessioninfo

Path /data/data/com.feelingtouch.gnz.realistic/files/AppEventsLogger.persistedsessioninfo
Size 495B
SHA256 63e7f188607e7b43f2f853aeca5c3f1ce301c6c54f67c75b90dd878b4bf8e15e
MD5 84d745162f023ac3dfed773df922ea43
SHA1 3d6ff8dc6528bb97226bf3a32503fe466b5e758e
SHA512 f7945ccdbb3e6266b94d8d5f1f9d67eb58969973bcf5c4672bccbc049c020e6eeae1e3b0087fecbbae4c75a2904be9376055e2baa56feff4a5fa87e65c153e92
MD5 SHA1 SHA512

Submit Download

305e92b552f0b149f572e401c5e9b4fb1d1c5bbf57888f31b39e47b04b42e92b

Path /data/data/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/305e92b552f0b149f572e401c5e9b4fb1d1c5bbf57888f31b39e47b04b42e92b
Size 3KB
SHA256 634117884ad6e001da18755836bfb8a3ab8140a00d8e8e8a5ff401fb8fe31a4d
MD5 5de4c723cd74e72aab3768c822b59f6e
SHA1 6bcf0e7641be9d5f6a9a360239ea17180c5c24c4
SHA512 f3d074e6fba27f33522f58efbdcc07ab5b01ef3c7f86ad62ed4fb15a25441e8b915f9a5160713c01ed4fba74dafbaf0523f2a172a54e5fd8e8008f3799b426cf
MD5 SHA1 SHA512

Submit Download

72cc2ce4c849a74a571306657b38154530fc013c5619d2756cb44006b71281df

Path /data/data/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/72cc2ce4c849a74a571306657b38154530fc013c5619d2756cb44006b71281df
Size 23KB
SHA256 d65370d78e962ec8db098b0209f1de275bc20df21e4889a5ace5c818968c4091
MD5 cebd2eac9e5d22dde187020b1456ba55
SHA1 080d9bf7be8dcd1d0be2db35b9f377313e2ca64b
SHA512 3b90a1944af8cbd4f15b2f2c8963e69e3353b47a0ad1205ca79bbf630efd2a66f9e1fd66a3a862bbedc997af3ed29cfd9dde4eb6d2056aa074e24854542a9432
SSDEEP 384:q6UmD+p+lDTLP2Mjvd2E9WmZ1cSSa2haBT:d/D+4V9WmjcSb2ho
MD5 SHA1 SHA512 SSDEEP

Submit Download

fe34bfffbcd29b1755f133c19aaf4621aef426e082ee6ff530f12b91de36a0bf

Path /data/data/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/fe34bfffbcd29b1755f133c19aaf4621aef426e082ee6ff530f12b91de36a0bf
Size 49KB
SHA256 a84b4119c5ae21da53194e5dea2ee3f9bb12e51da81dcf8f1823305603262ee4
MD5 ef998efc9d10eef6fcd3d5dd8149c84c
SHA1 1c5089ba85c24230fea9b646e7c860354f71a03d
SHA512 d3c937fc1aa8490d5348a73efaab7d28f1af4e20b3e43189364344efbf6abc2e2d6ed6dd03116d014ce94346265e6c293e01545bf246d57d8ea477aac47ec3e4
SSDEEP 1536:+cwuFh5FbE2B2ox7WXTJH0i5KsXsFgLhr:d53x7i5Xskr
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity

Path /storage/emulated/0/.ftouch/identity
Size 36B
SHA256 0fe9302d260689764991e7b856e87ed3bdca2eeaff340d78c6edb4f22fe40e09
MD5 45fbede59199fdb33fd29726aff0f91b
SHA1 fa8214efda8a578aee1973956e01c23a012ad06a
SHA512 88e25e29949ec687a96c2e0eabc3cf7784f69806158d8c844b6270d986d410d78e6eacb0f50d31374ea8ef19403b999ca541af7735e7c5c5c69d343e067efe55
MD5 SHA1 SHA512

Submit Download

com.feelingtouch.zf3d_LANDSCAPE.jpg

Path /storage/emulated/0/.gameAd/com.feelingtouch.zf3d_LANDSCAPE.jpg
Size 113KB
SHA256 809e5efd83df13416a5a7223d8c09eab126b1d37f9b73a7f6ad9ae0c1ee1de4e
MD5 7c9b8726e2028a3e5bf0494db1d6d0bd
SHA1 c357d02aa55f78b0c458f45e39fc9b2791a6337b
SHA512 9342b01c3c567324cc9565bf0da781173e5040256609271023dd2c43f339567d0d04ce27d351418856a1a1df30d53b8bf1a4d98305b4312ec560b2107b9d2d61
SSDEEP 1536:x5q6/SGbNRU22R3c1j6iqvlh9dSvoLLcPb1sVx7tkedbeSwopmi0Z5C4iH6Ljy68:bxs2rjVqfZLcwOedaZTC4i4uTE+H
MD5 SHA1 SHA512 SSDEEP

Submit Download

banner_ad_ew_en.jpg

Path /storage/emulated/0/.gameAd/icon/banner_ad_ew_en.jpg
Size 124KB
SHA256 4e42c09176ee94eb91eb97e9942539b72e006152f9e6aa2ba97f39c176382781
MD5 a1d367e6b35e9cc2aa8a047ded5bb916
SHA1 1099eba0e4f588b02bb6f83b07fc8f5891f0e2a8
SHA512 882c91c4211dd753e77c176714e1c798a6216d7f7d369b5bc650d34b3e021f694a611d965dbf43b1f73fa0c19e7a7aa903cc8cd8322d7a51b6b3cbc823f0ed22
SSDEEP 3072:LxafBVGcTQtF27likv8GMsEHtBsgyy/Kwy3:daffTMMltv4tBs3y/KwO
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.feelingtouch.empirewar.png

Path /storage/emulated/0/.gameAd/icon/com.feelingtouch.empirewar.png
Size 23KB
SHA256 cc0c2ef416154deabe1df8a73577f8e57f87197ef4309b4f6b82f33307e5e58a
MD5 ad99b6eb4ce6ff8cd581b8a57652406a
SHA1 f79fed773182e175ac40a7772a38f7e730582e8c
SHA512 d5bcc55323b3a765605061d8914a9d6897d27a1747caea82ebcc60488d19cd744cde6d3a6aaab18615f66ce45b80bfc7ef0cbb4c1d607d54f5981ad14ebb5a6b
SSDEEP 384:dlRAzxV/KJplMKJ1Vjq00FtWAI4e5IEJanNklGYOz6nDhAl3ajAg7S7jxXeowkWP:dI7y+M1GW7Iwkl6GRacgGjoDkk
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.feelingtouch.zf3d.png

Path /storage/emulated/0/.gameAd/icon/com.feelingtouch.zf3d.png
Size 24KB
SHA256 897d091c5c145323e3269093e94c93e4c51f67264b112041f482d522a823c81e
MD5 3da6f40f896b20f24a822b54e58240ff
SHA1 9a83d1f9afd2ebafb71d19f765a437090dc64c62
SHA512 98ffe7100a953f54d04353d8fd432542146227716a064701e31632745a36c7424841d84133b808a1002d3c188df7c6fca0fb8a432432529d5bcb82c257148158
SSDEEP 768:1zYmRUsW0sQvbtA/0VvxRVZcfWo7pTpuXuH:CmRUtGu/0VvxRVGOo7lpuXO
MD5 SHA1 SHA512 SSDEEP

Submit Download

1381250003_28x28.png

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/1381250003_28x28.png
Size 539B
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49
MD5 SHA1 SHA512

Submit Download

3b06329c5c7bcf90e52abc7c394c2fde98a5b0ee_v23_phone.mp4

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/3b06329c5c7bcf90e52abc7c394c2fde98a5b0ee_v23_phone.mp4
Size 1.4MB
SHA256 3aff51357a0546fa877dedef623ec33b1a2839f61e57aa2999d1146c263db9f9
MD5 a4cfebc5368655ac7efa137644d99f71
SHA1 a00eff0a0dcf0573ea6082a1f487e8689118510d
SHA512 ff32586db3806d3c83871c01d348214a0a9e6c5eac32f69302d92561c65195709deccd61af2a2775b9175da7a454e02d681861331714e926bcf08063440ca453
SSDEEP 24576:bJ3pD8xcWkbVFvbHpanIodcAi2SInD9nGDYK3iCS+1HfA6A14h2RjQijbI8VL:bVzVaIodcAiBK9xuH4DqiVbISL
MD5 SHA1 SHA512 SSDEEP

Submit Download

65ccc08208ed22938f77841a9a26cace1d5940d6_v23_phone.mp4

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/65ccc08208ed22938f77841a9a26cace1d5940d6_v23_phone.mp4
Size 2.4MB
SHA256 7cf095e25cc2a2d31ddf21a86018d9dfc654f42dc32da1e7d774eeea014a3597
MD5 886d7deb5074a168e9b6899d8a61f435
SHA1 4eb924a7b8bfa756bebfcbbd8ff52a4646ea6560
SHA512 744e38e26aa01b4a09ee665cc924ae8cc7989bf51f46365d6e53f0b78151e6c9afa205db071fb8c8c7344ceb3a06fbc8016237f0547c4ec3f54c2215cc6caead
SSDEEP 49152:83v1XnIY+zG0kH+XNpyIdLkaIFDJhknJket3EHk8ewmzQhCRuVrbBKaplUoW:81P8LdwaWeRtPwm8hCRuxBKapM
MD5 SHA1 SHA512 SSDEEP

Submit Download

af4771131d55524cb2716b87ad4323c8f4400fd7_v23_phone.mp4

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/af4771131d55524cb2716b87ad4323c8f4400fd7_v23_phone.mp4
Size 1.3MB
SHA256 c8a9115540bb55f82b0574daf1ec9df818644e3e1eb58593c7a4b04c52f70946
MD5 895d6e3026c669f51b96704c3d92bf91
SHA1 2eb09bfb4f3da9aed4e3e2dfa577adc41f798447
SHA512 6f56219f3506204c82919bd7613bc02f6b8f4814da5d617aed361f3aeb5fad6f0cea3edddc48a58cfdccef3183f944101bc1ad189250d8ac4cd8a92276a5c144
SSDEEP 24576:AeK7pyREyyHYazaA5+BrsbC8F3+/ilyZSzb4f2ZDjhyJV1HLikkyTfDstQ:AhyRE1H/2A5+B6nwilyZbSjUJV127m
MD5 SHA1 SHA512 SSDEEP

Submit Download

e400459554819fc577181d21fa40e740d1f2ee92_v23_phone.mp4

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/e400459554819fc577181d21fa40e740d1f2ee92_v23_phone.mp4
Size 969KB
SHA256 32916c3ba637e8b278cd1956da26606a01ec55ec8d0838bb3a163cf77de190fc
MD5 044718cc94c37dc9d9464124b6602c0b
SHA1 63df616685ac03ede578aad6f696c1cf9ae50deb
SHA512 4f18ac75d142553c01211361536e7cf5c977a7faea0bbbbd16aa826ccbec8205002740ea8213a97ebd8e2a50ddccc7d490601b00f7b456a369156919afe73ccd
SSDEEP 24576:upKckBh1gKEidrHUeJLSRNTgFtEyoTSt+8UMEpJX:5ciTghidrHUeRgGpt+8UMEpt
MD5 SHA1 SHA512 SSDEEP

Submit Download

f449ab483733252eff5da69ad653cca6807c56ba_v23_phone.mp4

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/f449ab483733252eff5da69ad653cca6807c56ba_v23_phone.mp4
Size 1.2MB
SHA256 5512271b60c5d5cc847a477040d2a0c45baf143003a35b8a5e614375147ccaaf
MD5 9ddfda9ff34b7f2186dba714f8298abe
SHA1 cc6a71232a28b585faaba1cf28e597e5989cdec9
SHA512 4bc190ab0cf314f98bab1fa13b8f9fe870bc3b653e7f2f5baea36a3ce0b206248b96418f3091c499e256f2043dd283d5848246a58fc39cd7ddcb6364c62cc96d
SSDEEP 24576:+GKnDc355lz7z3PoqAZ8wgyTfMy7cZoyCFhqgIfNPJrCRgKavSJrCt3:+GKnA3fl3bovM+fMycAwFV1inaGg3
MD5 SHA1 SHA512 SSDEEP

Submit Download

o48b61fa_5ff53b315dae215081d7eabbcd161788ccfb2f15_v21_phone.png

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o48b61fa_5ff53b315dae215081d7eabbcd161788ccfb2f15_v21_phone.png
Size 344KB
SHA256 224c1259ae4ed3861b0396081d30fe1f562c83af01041d182bc0f410ad94434b
MD5 c1d6f3ee70cccaa1a1880a63fe6efca8
SHA1 5ff53b315dae215081d7eabbcd161788ccfb2f15
SHA512 0308ce78b896e42666c05c96c702b5bfc222b7a52e5f90e384606b21491d7c9138708b7647b558d38003739e43d1f872fd32c38f3bb28f7446dd398d340bbf8c
SSDEEP 6144:VpXqqk/T8HTocAEdWkiq6hqH3/ULMapoSynzC3uN4jteQZb:2qUgMZhk33yM7Synma4oQ1
MD5 SHA1 SHA512 SSDEEP

Submit Download

o48b61fa_e070219ac773dccc30b37c0d8d0eeb8eab6eeb78_v21_phone.png

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o48b61fa_e070219ac773dccc30b37c0d8d0eeb8eab6eeb78_v21_phone.png
Size 323KB
SHA256 30bac0243c42c231c169c6c804c72ed40bf1c7e249c0b0e76c38c2fd6098c5d3
MD5 8035cfa3a9f89111f7c3c83ceaad3a3d
SHA1 e070219ac773dccc30b37c0d8d0eeb8eab6eeb78
SHA512 089ff89fcd9a8e33fc1c64b740f783d53454bcc9f3d985ef1258b923803eb82f0b70428eb93cd56ea6e966d1cd65af37cc57d32ecb00583db524e4338fb63a7a
SSDEEP 6144:uZCI7w2zA3OHLTmWn7pSAUkNOHK0/sXNvyLAoxjJYrEHJ5qNf2EQhtIW:ew2E+HLTx7wAd70ysLnxjJY4HvCfChtv
MD5 SHA1 SHA512 SSDEEP

Submit Download

o50f0aaf_0a17511f6123690677cd5cadf2ebcbac83ae63a3_v21_phone.jpeg

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o50f0aaf_0a17511f6123690677cd5cadf2ebcbac83ae63a3_v21_phone.jpeg
Size 82KB
SHA256 420762ce4ac628e6d996352846f6a2bbb61461f89f8156fe365e45af630ea520
MD5 a6ba47b205fc15ca8b6f53df5a546e23
SHA1 0a17511f6123690677cd5cadf2ebcbac83ae63a3
SHA512 567c7d54a0339749fdbc6fabd57eabe935e6b549883a27a30e3b130ca1dbbaf87b1a5500eeafc5611917d7bd0ab9b3a86e386da2d86f184b7417c706a065e822
SSDEEP 1536:49Pl2ftOggH46T6MSZsEH9La52Fvp/0ru85CdzxYQrKfw9vNg4Eou0TtidRL6kT:ccfteHs/9Uk+KpdzvKfkG4ELItiXLT
MD5 SHA1 SHA512 SSDEEP

Submit Download

o50f0aaf_9e8544cf2275a8475f2cd6cdb47cb62d7ef45ab7_v21_phone.jpeg

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o50f0aaf_9e8544cf2275a8475f2cd6cdb47cb62d7ef45ab7_v21_phone.jpeg
Size 82KB
SHA256 57f37acd6029035ec00f8644b3852e6c0ae79c14cc8f5968f3e8c8c0fa909867
MD5 5a28373cedca3a5e70d73c39b91554ea
SHA1 9e8544cf2275a8475f2cd6cdb47cb62d7ef45ab7
SHA512 8bfefc8947b0ef4056705e84edd4bf30f25619fc8d34853ff706b2a66c27d6f96e60bff9291efe95e4b655d477c969d7c33957632c6e351c98d3b998ddbf5599
SSDEEP 1536:eSrJkIFtqOMdMD3LGQWkwVjUV3GouA9yel5aF5QqGP1yuLhLUA3eCGpT:VJkmUOMK7lWkwVIcoJ0f5BYfhDKT
MD5 SHA1 SHA512 SSDEEP

Submit Download

o65ba32b_453795f9db1774f741bfd0d306587bc09c97c98c_v21_phone.jpg

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o65ba32b_453795f9db1774f741bfd0d306587bc09c97c98c_v21_phone.jpg
Size 42KB
SHA256 c3d7eae8024859214bcf859891585d7bf4f4bddbb78f9aa8a0c186c9c37cb82c
MD5 b3dd5abc677705a792586c756cd2ad44
SHA1 6f7b0a59e070318180a3bbb04608b1c651f563ea
SHA512 33a19b2624da93069b84c0de8e4a47765486d7d5158450a41988237097a11ce5476d93b0fd1ea07348c0945084f680ec9ff921b3b63b2768e7271e8aff7e3eb1
SSDEEP 768:4vUAHL2aGZPUwJ1fKSWFtU4UCkXjpjZpbA8bztV5hm8PPsrZ4pAndVK8Fh6RrH9H:cgZneUCkX1vbAkhm8PPsKejV6RD9H
MD5 SHA1 SHA512 SSDEEP

Submit Download

o65ba32b_cc9b6c4ae8344ef3f37b5c43fd97b618f4530a58_v21_phone.jpg

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o65ba32b_cc9b6c4ae8344ef3f37b5c43fd97b618f4530a58_v21_phone.jpg
Size 42KB
SHA256 c2d7a6aee9060b8309924ad27cedd9682009e20f316d4c59f43352ad3ceaf83f
MD5 b351c6c40a5c7138a51758fc08c50d16
SHA1 75a9685ef461c7e0873b1655efe911d983f54855
SHA512 0c46019dc250f2c207ed85b7749730a5fe63ef718e334d91895a1624803ea329c5a91a9a0de3d49260bb1ddbb5cd9b763fb4bc02ea0139440f0570fd716cd7af
SSDEEP 768:HwgnBEX8TfUKRay7yDoNUhhfDubG0E8ndEiqwHB7mTXXOPaAdjV3sadnA0oXGrPU:HvBNrr7yDoNUhhTcEiqwhcXOCGjVWWrs
MD5 SHA1 SHA512 SSDEEP

Submit Download

oc07e686_75902b05cb9d515bf101c8be918d7054e412b337_v21_phone.png

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/oc07e686_75902b05cb9d515bf101c8be918d7054e412b337_v21_phone.png
Size 139KB
SHA256 8f6622bfb0bb33b4c840d364c2e3ba3bfc6bf3b7cb666bfa8bfa36df9a891f71
MD5 e88513e62b20f42e7458e08d0bcec741
SHA1 af35845996a61a413e6c6ab406280a416e03564b
SHA512 1cc6c3eaf814c1fb5c415e3863371ecd2f69aff71aff026390b028c40b8b885b7c671fe89f449c27158e2802b9672e5b9cff3d1ede6d1c22595e7fcf664498da
SSDEEP 3072:Jnt+wCkOsZsaNs1xJptlg6KE2kHGGnLCis1Ewg31o00a0C6:b+wSws1xJpAenLTs1ER0nJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

oc07e686_9683afafede4129827b437e84d668e9929c983bc_v21_phone.png

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/oc07e686_9683afafede4129827b437e84d668e9929c983bc_v21_phone.png
Size 139KB
SHA256 d9acbcf69a2099511709e3c8f451a31225a06347cc06f39a0962d448921e6f5d
MD5 34dc119d8e4d3da6bee137e7b29652b7
SHA1 07ce8cc17536a3b7c9dd3483c582842728fe464d
SHA512 2a9375bc02ccf381aec3d6f5f9c4e20cfbdfdd7feae6d7bf4752b558468f72cb8e246baefeedb99823a4bf2f4c07506f1fcd98cade3a5fa8b3afeb580b9da72d
SSDEEP 3072:14LroaOx8xpya8ExtfQkD2j4VcADbnz3TY0B+aMyrvgCpLpuMys3eV566hbX9X:MhySpya3xzQ4WibDHfr4Cx8VgaZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ocfe6a63_5f458a958915e9ded55ce4810448452f3bfc7b65_raw11.gif

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/ocfe6a63_5f458a958915e9ded55ce4810448452f3bfc7b65_raw11.gif
Size 199KB
SHA256 82b36a96e1e8315c7043ffff1249d87f3b93cd132a07c465d5570347a4237072
MD5 cbc5415ee284d959b09bb951b80ff986
SHA1 5f458a958915e9ded55ce4810448452f3bfc7b65
SHA512 7d2bb90aeb96537ee749a236ca898cadbc52f17bd4a8827eb3e9ff734b775153206743114033e920ea260013895c5a9d436159c48c795ec49a4e5b871bbb1d57
SSDEEP 6144:C5ia+HY6oGclFEGHgSM+hWDFvgVo+hWDF+segFrw+hWDF961:NfHYZxhB6plp+1p41
MD5 SHA1 SHA512 SSDEEP

Submit Download

ocfe6a63_bc475405f58bd9155a8c9994e4baa12d9a54d6e0_raw11.gif

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/ocfe6a63_bc475405f58bd9155a8c9994e4baa12d9a54d6e0_raw11.gif
Size 305KB
SHA256 5a58a82ba4c1398e05cf6ebd3ef936b8e7dda24d6bc28d7424bcdb64f694b8d1
MD5 c665a248b4a6f07fa2d8d3f773906f13
SHA1 bc475405f58bd9155a8c9994e4baa12d9a54d6e0
SHA512 d525b83f41c791215f96fc8f171ebc65336a2624ba7ff83d2cd4c998e822c79a7fe016b6de35f123faa769ef1d96603b38249f612d6f6e1aa99221ec43a07889
SSDEEP 6144:kZxwkSCNOzTAK7ntXPr4i5P6l/0yeoLebQcyH4l0:AwkVNITxJR5il/0yeoTN
MD5 SHA1 SHA512 SSDEEP

Submit Download

spinner4.gif

Path /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/spinner4.gif
Size 12KB
SHA256 7fb6ec21540ed959f2ba7842c6b95903267d612009748ca43692112582a70187
MD5 2fbc75a0bc67e70efcd02f9ca5ad178a
SHA1 e2410a028e70becf3c94c8b5c313feb53b125a5a
SHA512 2f3979093bb0fc2c5e2929bceedb223457edca5ffccdcafa909007003d9a74813d10f08ba58b818bc81f5c796c74c5c9dac3d165cd6603296a45cc8fccd0f704
SSDEEP 384:eAkoZ3U+/9yFG6a3GNoGb6GccUGbT0MPfx0pi:eIU7FPDrNN3es
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads