a647462ae8597926e4e012c05c34e57cf098955aa7e0977c7dd329a22d2bcbd9

Analysis

max time kernel
178s
max time network
184s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 20:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6fd28f610a0b49c2aa8b2052df467d4c_JaffaCakes118.apk
Size

13.8MB
MD5

6fd28f610a0b49c2aa8b2052df467d4c
SHA1

a4bd913939b450dbaaf676bbbeee75cdfcb76b2a
SHA256

a647462ae8597926e4e012c05c34e57cf098955aa7e0977c7dd329a22d2bcbd9
SHA512

bb287255fe6e9fd3ecd3a41aaf2f1232d72ab0118230f9ee253a8d8891dd75af7b880186f268ea7864b040c9151d5a28b544be62d0f639a333180bc1a1161894
SSDEEP

393216:mXd6nf7tvbPwGKiT1oY7/Ddme3Ctlkcn3Z3YPxrFQ9:mt6jtvbP9KiT1oY7rqZIPxc

Score

8^/10

banker collection discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.uc55.qpgame.wuximj
/system/xbin/su	com.uc55.qpgame.wuximj

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.uc55.qpgame.wuximj

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.uc55.qpgame.wuximj

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.uc55.qpgame.wuximj

Loads dropped Dex/Jar 1 TTPs 5 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.uc55.qpgame.wuximj/app_workbench17498/apk.zip	4314	com.uc55.qpgame.wuximj
/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/apk.zip	4476	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/apk.zip --output-vdex-fd=86 --oat-fd=94 --oat-location=/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/oat/x86/apk.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/apk.zip	4314	com.uc55.qpgame.wuximj
/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/apk.zip	4572	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/apk.zip --output-vdex-fd=114 --oat-fd=112 --oat-location=/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/oat/x86/apk.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/apk.zip	4314	com.uc55.qpgame.wuximj

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.uc55.qpgame.wuximj

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.uc55.qpgame.wuximj

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.uc55.qpgame.wuximj

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.uc55.qpgame.wuximj

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
31	alog.umeng.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.uc55.qpgame.wuximj
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about the current Wi-Fi connection
- Reads the content of SMS inbox messages.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4314
- chmod 666 /storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.smspay.apk
  2⤵
  PID:4458
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/apk.zip --output-vdex-fd=86 --oat-fd=94 --oat-location=/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/oat/x86/apk.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4476
- chmod 666 /storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.recordupload.apk
  2⤵
  PID:4555
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/apk.zip --output-vdex-fd=114 --oat-fd=112 --oat-location=/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/oat/x86/apk.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4572

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.uc55.qpgame.wuximj/.ulibs/decrypt.so

Filesize
29KB

MD5
d7cb8b5358b1c095511cf9edb1c13354

SHA1
2ecc10b8e73597d54bd13b7b2046477f1bd40939

SHA256
e551db916184b19a7dbd2393e41b54543cc5eeb10ce3550b5219695ab6126998

SHA512
c73123bae60da7a98c56f7209a5b43b3939e774b288790a8392713c1eb6c1ae4902948d2e2faa07648df5d0e9c35753cd6ca4c0f2e9cb67c3fa45eb6d5599cb4

Download Submit
/data/data/com.uc55.qpgame.wuximj/.ulibs/libunicomsdk.so

Filesize
25KB

MD5
6cae1508b702db4ebb19682c7261b4aa

SHA1
91eb197382d14418747125763e08c90779e9c887

SHA256
4928b78cb26c84674be1eae723fba27e778292a75c22191fd241f9709303b9b3

SHA512
45ad054078c1909f32f2ebb124f983546a3ef9bea38919883b884e345a79e0d37d0741553d17770f03e39599eacdd6b05c8a7d4910c48a569b1ba759922dcaa2

Download Submit
/data/data/com.uc55.qpgame.wuximj/app_workbench00920/apk.zip

Filesize
160KB

MD5
7f3676d5ada4281722937bad50f1d6bf

SHA1
9f0c195aec735df4f919f5f1b92e602d92167cdd

SHA256
e4b52a02a9411b9da02c09a8c87cd28d086d306d8a408bbb6d0bf3ae41f5d774

SHA512
2210f90529950b580e16371109f97570d5ad602d5ce4428ec038daac3d2d29066f9496ee34149dc38004650caf5c8790e834463f5cab278465d363ed7f179ae6

Download Submit
/data/data/com.uc55.qpgame.wuximj/app_workbench17498/apk.zip

Filesize
46KB

MD5
fbb0eef62f25d702f0aba6a20d403009

SHA1
d2a38681023a0ce2f5b0812e721d6f3c20134cea

SHA256
5e2eea169518bef0404fa9619412107052416ccf441f1c133b9f7e8de9e907b5

SHA512
91a7d2fc77be5b3055ba623bd71da64251254bb367341fd9e3357b7d49d02bc58b03fc108e78a375bdff755aeef79cf07c43722e4f4ffd483d54535addad2b76

Download Submit
/data/data/com.uc55.qpgame.wuximj/app_workbench17498/oat/apk.zip.cur.prof

Filesize
340B

MD5
791a033cfd2a47016c5fa0391e11f2af

SHA1
2375ff6403534e57f331261b184e24a5635326a4

SHA256
a9b3c8d8300500e9dc43b8662e8bc486dc64d06c782d174b97e5817cd12e81e8

SHA512
7704c162b01b2caaccd1492fc967604151adcd1299734d2b42e1ffea944216700af710c47ddd14d049f3219f18782594981c0087e67ca457677b7fd0652fdb1a

Download Submit
/data/data/com.uc55.qpgame.wuximj/app_workbench89868/apk.zip

Filesize
35KB

MD5
3d559c7859c6169f8ea44847b8cbe5ee

SHA1
de97c82c9b34f4b8f06dcf0268f9c193d669f40a

SHA256
8dba6675fa361ccf8701369c8bea2490c12cee14b39d2eb4a2532e4dfa257114

SHA512
4ac123cfe657e6ad244d1430ec7211d849d35adef6eb30094f144b0659ab47b36844e6309b117ab9a05ce00b3eda2830b693a1e36eb117dc3f514ee9e5120581

Download Submit
/data/data/com.uc55.qpgame.wuximj/app_workbench89868/oat/apk.zip.cur.prof

Filesize
182B

MD5
b9077eb1c2b57a3dcc210db3e6537f31

SHA1
4ae4653ee0b80ba4cd07638f45071a32ba905f2e

SHA256
75d440b7c311c6dd827733c4782b58340f0d84180683a0f386221d48745567c1

SHA512
4559a5e81c81c7467611def93e17c4a68a0df400a51cf203c1b4fe8802c0d5cb4f89bd4c32d8fa1f10c2b886d1485d3a6278c8646a7d50e7b64410a2fd44e785

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/Data_sync.db

Filesize
40KB

MD5
5c98b8adc40ca8782853e6dfc92cf2df

SHA1
02fed606ff994a6ce84fb122a0f73974abfc96b0

SHA256
7f5b5aea2a617ff2c08907d03fe08c6287f60fb6755682bd0e3b76a8b5af3c2d

SHA512
b2694f7e7c0c357a845be84e89b5a271196ec826fe64fe4318df2ad4e27c26ff3ed87caebdeb60af02ac6e4dc60876c649543efac34d8f2beb42e9c97b7f5400

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/Data_sync.db-journal

Filesize
512B

MD5
034a3ee83f65845e255a032d7386d7f9

SHA1
51ff5602080c29b1b38e9fd2be3ff349e7104fd1

SHA256
b5c5ff5fda0b33c2a597b834259ceb91f41b5044229d8f538780c2ea46001585

SHA512
ad914b59d64d60551e31b0fcad54754279622ad587d633be33c3df60d0a09e075cca11f2eb0f194b29b93a80dc8c6f66e54611c90117c246d8cb7c5a93b43160

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/Data_sync.db-wal

Filesize
406KB

MD5
a075f96055818e2d7b1ed033368a6415

SHA1
3bef04eb770fd7e326afcad928a65ce295240539

SHA256
fd35ba6f5629d7864ce309461c7f6bf46f249561e5c45e8dbc69df4977aaddf2

SHA512
d1fe1235221b358db3144626cd626ab4d9282fb258d4d6613eddd64e7632f412f98503096d53279766ca4a5197df3cbe412da34a5f498a91327e06868cdbf2aa

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/TestinAgent.db

Filesize
24KB

MD5
eb67bc44ad33ef62495c3eeefd9d8073

SHA1
0cbc6570cc6fd7006b05d469ce23076d5d8fcbb8

SHA256
513418e0d52ded20020eb90feed984994fc3e09dc7632dce0848e689e6149c42

SHA512
eda9e83444b4e4661eb912c14f2049245c5b28c3123f8af3c393fa7fd133708400edbd1eaa597e08ef39384efc582d1fadabfd70398802c5590df338f9ec736e

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/TestinAgent.db-journal

Filesize
512B

MD5
cd6234db5bae5bc0b12b584e35178a93

SHA1
5e3a448b485d626195f9f6b58c7cd33f4f12cf06

SHA256
ddf68e7073cee21b3eb40c4cb9f2943fcb73f141a7b093559633473f584dca29

SHA512
3e5977132b10da519d0837bcc2a1975845d722f210da06918c027629e8de33b58789dbaa216701a0f3913b7fabcdb3f974e033a267c80c0b348c0d099f914c91

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/TestinAgent.db-wal

Filesize
44KB

MD5
9ddc5971eb94cb2f9543c8f2e41e16e1

SHA1
9c41b714c20b7edb157119b81ec588f3f2b29fb1

SHA256
db017b36f53a95327e039ca095d5e557e9b34911d8c593def84d98c7ad32a1c2

SHA512
7561711e5b72cb312fa6934106ad080d90bf08e9d738908f1058e426ec1885d4d0c03ec5b3c153f620251261bf37dc6d1da4ab29a4571e8024b12a37b3e36369

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/downloads.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/downloads.db-journal

Filesize
512B

MD5
62891f2ae839f8cf2aaf4c978ed8d11b

SHA1
002fd9c977f276876c54074a3e67f2a0b66ae10d

SHA256
42ed0022caf9d7b9a73cacf73afa64d6ca6ccafa6cde064e01fb4071f61cc8eb

SHA512
ce35d52ca0dccf233a118d457f1e53d1de0024f3f0f9908b41f1437aa4de5aeef30cb3e11a06dafbeda4baff6190bd2cceabaabc705e1cde72b966b3a5bdb007

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/downloads.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/downloads.db-wal

Filesize
36KB

MD5
1469deedd3b7f76ad3c21581d45790a0

SHA1
93c534ff7a625f2597e0e5273be7fb7a882352c8

SHA256
ddec3a77ad30d5ccc8c65d8e4513fe60d42cb5829ec9a761d88b39a5d0dcf843

SHA512
40dd7cf970aef2d779c88c43f0384455c158cba189e42c1ec1654c3639900d7a2cb270102a7667b50edcd8a9e465d988ed5007aadfe7c621d2a7f29edc1e9e98

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/rep.db-journal

Filesize
512B

MD5
f6756f1bd44add8350e0b631d90f712f

SHA1
5e8cc2cedd4fa6d7b4e1feb9bc8688b44d0862a7

SHA256
c51dbf3ab8cda528a608c43b63d8ec47eb0f1028a26feba15f659dd835a006ef

SHA512
c7920528cc4c97878a27dfdf4673ade4744d299415f3a010fdaa83adfcd6199a4d465856fa8169fc2e861b480cb2f1860281025e38679e6e3d0cb4532be514b0

Download Submit
/data/data/com.uc55.qpgame.wuximj/databases/rep.db-wal

Filesize
36KB

MD5
8a0fc6ba379a1434a7140550ed46948c

SHA1
9c5aa40b3374fd1893dcd0350bfc7bdb3c309378

SHA256
601e0c83b46603bbc100a05245890d82348b7f5394fa500cae20c894f00c2bae

SHA512
fb588782b079da840151809f00c5da21d8e0f2fa17af65e56ca719d32ff856da9937027f958d6340856013911776754a892f0664eda53b51c0993ee98a9445a9

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/classes.dex

Filesize
2.6MB

MD5
6b8ade73f3fc2e83c3099dc4aa0f56b3

SHA1
d14b5f036ac6cf003d1d10d9a3be5327f449da33

SHA256
ad81a8406f2885f43a260c65c8ad58ce6b48bd112207f21a7785948cca526084

SHA512
a0139f30b01d8095374e3e0531c62f50dd9147fe13ca69ae7786ecda8040b3d53481849dd7a8093e5c6ed009d8bde2a9278d1b42f2a3ca83e3a5948201a4f425

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/umeng_analytics_cache

Filesize
153B

MD5
4e8a41badd41b1ed7eaba415a9e13ac3

SHA1
e3110933663c707b4e11b1b6a87a3a1352804b47

SHA256
5b070f364a9ff7450998f35608680e1cd12b7da5d495e063c596f3d1369c0ecc

SHA512
bc3ca380bbeba9e936ace59b3116d3259dbe876acdd7a4f7ff23812d8e9a533d0e19a5bdebe5aba46bf6adc25fe50fb6b4b9e158a81d2e0da41f83296693168f

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/umeng_analytics_cache

Filesize
243B

MD5
ac613648105bc73d5df60b29a7d06a48

SHA1
d0f3ce503d27c14f9a901b1cb60809b1b1341957

SHA256
b4b77ba6321abbeae7dc21acf5b5f3717b29e594e4d69f81d8ec4b20c816c927

SHA512
697d715a4b50eab86f004cb764b48732fe2e60baa6fcb9296163a533d5f39a0085a0cbce34d6ba4f4ca03f6f3a6ae921df306d1b8933f8ba8a6919b114f462a3

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/umeng_analytics_cache

Filesize
243B

MD5
920159bf600e843dbc0ea50e93b3410d

SHA1
7528e1d1bcde745f14dd064caa530706af8d88f1

SHA256
ae1d78d657d0ec93eacb9e03207cbfdabceebbc92d356cc875992f4efe3f022b

SHA512
5aa5525829a4d60c7c3ac76de2ffb0c1affcf8e8b7ba1c03e6ef4bcef77bf616e2adb905889b034a2770b761aba8c54259e742822d3b15a5e745f7272b0f8858

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/umeng_analytics_cache

Filesize
243B

MD5
1e262ce98da9f65d7bd76e6e2be0d820

SHA1
12d52ea5814e620024489ea9ba150cbe23c8088f

SHA256
d2b5400144371aeddf6753c039fdc18bef19cea095d0ff495ef0b3f7316fc88f

SHA512
921bbad9111464618abc10a0500501796f03c3456106036b5d4812e021e5f29c9134352ed76b156d429269ac47562288e4b7d182f4bfa5edd1191f1e6ddc79ea

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/umeng_analytics_cache

Filesize
243B

MD5
eee43b324ade54d9f888a81b55c1cd26

SHA1
279ba8fce611b6d91d9c34e2ef982a526d3fa96e

SHA256
f286a5cf616af314fba71c36f1dc0050533b6f7ba9cce3b77916c986f4cf8ba4

SHA512
a1865135130eed64c0ae0dc63908389aac284d3c9f2bf0b453e07b7519eafd0fe2b7950d1ac2fa743373f4c3a60321e04fba5f133f3ff338483819cd83feed62

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/umeng_analytics_cache

Filesize
246B

MD5
8a3a44419eb304251de32bca405d619c

SHA1
a96f88ed765c1850d093b49d234f835385c937d7

SHA256
859c2f46e46f0c863c56412f00e75f2c986ccb55260312ee949becc914732985

SHA512
baee1ff35ca9f588472604cf512f31af946aab37ddf5961b8d7d1ae58cf268e997ff62b44e750cbd52689a057977aa68e8dedf5dca3b23c624b4f6bc8fd4a766

Download Submit
/data/data/com.uc55.qpgame.wuximj/files/umeng_analytics_envelope_cache

Filesize
621B

MD5
8cdf02f70adfecf59b46bc844ae46a40

SHA1
84c9770982b81f2d51ef1cf56523079e1b3d32f4

SHA256
9c70b8c85a0f94d2c47f2be6191d55dfe88740118af8e2209d390162187a3925

SHA512
0c7b22f08fd5b73bcd5b52659baa009f7300928a9e41a41e11b12855da3354d13f7869600f4c52b9db24b04e42329fdb0b982a23cb660aa4e82ce87ed96b62b6

Download Submit
/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/apk.zip

Filesize
417KB

MD5
835dc9fdbca71a743afad61748f2f3fd

SHA1
cb80139d4c7028873fdaca03727abd6817908cf4

SHA256
b98579e2ec99c1fe897c64629d85851cb82f41c2e122e7c7643e78d6b8b36b34

SHA512
d6d90e21359340aa4b4c5ce7f5cb4d1b1feea15c553f0ac006fa46e84a560406fda4cbe652bb1e584654fb84ef2da96bbd0ccd7d7f3c5a7deb96faae17fe9509

Download Submit
/data/user/0/com.uc55.qpgame.wuximj/app_workbench00920/apk.zip

Filesize
417KB

MD5
206527e4e5afe9cd89351af4951071e4

SHA1
24d8000c3b49bb67d9fb567546f24af523812bf0

SHA256
3bd9cba18a21d5fde97c4bb405c113c0130d56c05c8ed37ed4a1900f13697c69

SHA512
7ead7c90ba931c87fe6589922e42f5610da4f58daaea319cbf4cf4602043a9b7bd997e89aaf120cf5573711f6f75a353a4d3267b2fa510969ccc1e8fbe0a8eaa

Download Submit
/data/user/0/com.uc55.qpgame.wuximj/app_workbench17498/apk.zip

Filesize
107KB

MD5
21254ecfa758cf1fc8b8d37c53861dab

SHA1
d7493586cbb7ba0dc3f984b35e1d0dfe3378649c

SHA256
e549f60a8b5485fab4fc8ec905d306b49dffbce521267da8bfeaabf581176ef3

SHA512
21db8434bd684e703eedefdf67676a6c2aecf49e096a19ff96ca2b209ce4640c8f28e686fcf390c0654328024abdef549e3546e3716501ca37ae3cb329f27a76

Download Submit
/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/apk.zip

Filesize
83KB

MD5
0bce4bbe2842a4b9095c578830236d18

SHA1
106a69709af3e8326f7d6ab1d679b61699d394a3

SHA256
8e17edec35636923952e5f94020ab14ca2c9cd834378d411ec3194577c361a1f

SHA512
1fdb53e1cdc7a3f3d5c65e072975ee51cb3555666bfe731ee5d06285d974b4f9e1048e0635f4093e1c1aee54b3ca78e5d4ac27af948ccbcb13493a0913759c02

Download Submit
/data/user/0/com.uc55.qpgame.wuximj/app_workbench89868/apk.zip

Filesize
83KB

MD5
bd25f3e4796360948d5092ab1570da44

SHA1
0c68ae7cbffd436f877947be8546fa05a804f768

SHA256
4bb367551f523f8eec53724cd3bbc91815ad088b0ba90c6e14d28c9fa8811f65

SHA512
d26edda8c434be4b308519ea2eee415c254bb0f5316a256b0a0f208a81c2a5d831127aeb763820a3cf6a63d933e98e142fe8e5e15d4ffbdf8e1fb1f974148ce3

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.main.apk

Filesize
50KB

MD5
6a2f8961c75ff474d6e62f87d2ae700e

SHA1
6322a924e3e533a5fd556cec52c2e4f4c0580464

SHA256
83d06c3c2c9e52b7703409b33900e86f6954e4946dc475ce7538a86b76f94c9f

SHA512
6aa3badee9e9d2637eed62c4c582c630cd0bb5b9b622f025b10f7435fd10d7934857f2470e70de80e3c20e1d04681d48d82041ce324febe1ba258677b2b195c1

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.recordupload.apk

Filesize
40KB

MD5
2149a6f83bd5ada02f9c4e66e1f16378

SHA1
7ed873b29c8088a704ec57c59a5e5847051e9a9b

SHA256
5b861e755afb702beaf86d00148acd272bef338e5f6bfd23d4e95ace55f6f6b5

SHA512
18782ffbfe29159d509258db437029381cf2a483bd677ac7a71c1d27462a76f9aa754f45606e292fdd48d401c18954a3532066c4e0c8600e03bf538b5987d920

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.newsdk/plugins/com.skymobi.pay.plugin.smspay.apk

Filesize
184KB

MD5
1a4244d8d15916c458745b86d5d93aa6

SHA1
83bdfea695fecbe66b4936f0a28173810bf7a584

SHA256
18960f77dac0fb8902306863b55bf8e7f98842217b7b70e1bb7a93a644551149

SHA512
2a6b579bc74d3d7767f934664a6622d7d54cdd0b00a701ddfa055b3c87216998c6c321860d3b01501b272ae736b550e10c665dbab052aa7ca2c1a1726930b00e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads