e8a505213fd3e84459e0542b2dad670be1e0a40145796c7a8cc9d0f92d7f3bcd

Analysis

max time kernel
160s
max time network
186s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
27/05/2024, 03:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
77bffbfa5b6e051605841f1ab1625639_JaffaCakes118.apk
Size 7.8MB
Sample240527-dwyrjsfd78
SHA256 e8a505213fd3e84459e0542b2dad670be1e0a40145796c7a8cc9d0f92d7f3bcd
MD5 77bffbfa5b6e051605841f1ab1625639
SHA1 1b581637eed1225e055788e1eb46883564b8b606
SHA512 41a35431d75180783eee3c076ea71e4217e0b1b23b7976f47213bb3c44c87b62819988b6ff0cd73d6bf26e7663848dd2afa84283cbe4775893c6999ffbb1eac8
SSDEEP 196608:PIzx498UW9TKo52C/WnjzNxtmk/clbcX+5o5:PId88aoYC/WjJ/AI+5o5
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.freereader.kankan

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.freereader.kankan

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.freereader.kankan

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.freereader.kankan
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.freereader.kankan:pushservice
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.freereader.kankan:player

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.freereader.kankan

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.freereader.kankan
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.freereader.kankan:pushservice

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
38	alog.umeng.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.freereader.kankan

com.freereader.kankan
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4662

com.freereader.kankan:pushservice
1⤵
- Queries information about running processes on the device
- Checks if the internet connection is available
PID:4720

com.freereader.kankan:player
1⤵
- Queries information about running processes on the device
PID:4897

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

0b70b295bc4035666a9d7e3fed440dcb.0.tmp

Path /data/user/0/com.freereader.kankan/cache/http2/0b70b295bc4035666a9d7e3fed440dcb.0.tmp
Size 708B
SHA256 125a8300291d55a2c304650fb1b9affac06440185e765c4045b966da0e16e0e9
MD5 a3ca26c55f0124102ed7113eab79e057
SHA1 6334746ace46331632fbe2f0c35a2aaeaf652581
SHA512 613074d23f3904c3a3e1600f071433abc8078831a1f18e37d4c5c75059af623da3ccaab14f540092ccc276b7853e648b8d9240f0be8e2106ef9f1d9967e902dd
MD5 SHA1 SHA512

Submit Download

0b70b295bc4035666a9d7e3fed440dcb.1.tmp

Path /data/user/0/com.freereader.kankan/cache/http2/0b70b295bc4035666a9d7e3fed440dcb.1.tmp
Size 237B
SHA256 cb1cd70f1f385f370ab4642d8ec5223a61c8ff5ca05b175431eee96ac04985c7
MD5 d07d26683f3bcf028f7b032588b0d977
SHA1 0600ce3b7559e6e51476103636adae6f8605cf97
SHA512 972fbc811d3a697fc79e103bef00fc3a660c87452dbd78dc84e5c5eb9d320b1b413bd1ec7686ba0a727d6fdc64932d7c9d99b7e1827d48fdb9811c5c48e9dd7c
MD5 SHA1 SHA512

Submit Download

874b0f13cd565c050fc6fd1cd79e5d4b.0.tmp

Path /data/user/0/com.freereader.kankan/cache/http2/874b0f13cd565c050fc6fd1cd79e5d4b.0.tmp
Size 701B
SHA256 e368a7f3cdc616dd13603ddcb077f34c9a0d3ca1d597691daba2041debc50ea7
MD5 4e5d7feacd6df03c5cf01861595c39dc
SHA1 16d5ef60ae75a5bedead94b63a11ad030c67e22e
SHA512 a13d2c36bf7b9143dcbbd47ef4abc0e6ebbb80eae09715a5fbd6eb4ac4453cff35607175b52632a2188754a99e859227c568267ac4141286b7d2ed0550ceff27
MD5 SHA1 SHA512

Submit Download

874b0f13cd565c050fc6fd1cd79e5d4b.1.tmp

Path /data/user/0/com.freereader.kankan/cache/http2/874b0f13cd565c050fc6fd1cd79e5d4b.1.tmp
Size 21B
SHA256 4ab7375a0fb33e130e5b3dbf78bb2378e1c58100886f4a737b1d7bae5db8c7c8
MD5 0d159fec3f3b030220a933e9a29e8853
SHA1 4bec08c08bdd5c3ceae1e8f4bb5ca0442f2cfd7e
SHA512 c29a109a347d1aafe1eeb1aa340a19875294af56eb6ef583eb8b2fce9ca8aa0ac3c157185ea84401c9a1630c1bb76c0f2869aa63d8e8a3d954096ff391c27339
MD5 SHA1 SHA512

Submit Download

ec8f08831cd226c5a9380227382a773a.0.tmp

Path /data/user/0/com.freereader.kankan/cache/http2/ec8f08831cd226c5a9380227382a773a.0.tmp
Size 714B
SHA256 bb7b81bf317a0a0c8ac4adfb54b567ea44951fb666ac36b085f19bd57afced37
MD5 e7ceefa8b5e5095f4060b437d130ba5d
SHA1 492a3a0c92e5baededd4af5bed96f44b3aafcd45
SHA512 8ee43bf800840cb677cc6e0bca038630b31a2b72448715ee767f23aa0c9d87687036d742071f47a24e40fb4b165540ac2b8133551d13549a5447be9aa3c92766
MD5 SHA1 SHA512

Submit Download

ec8f08831cd226c5a9380227382a773a.1.tmp

Path /data/user/0/com.freereader.kankan/cache/http2/ec8f08831cd226c5a9380227382a773a.1.tmp
Size 12B
SHA256 38667e60226bf99701916900a2a265233dcc014e1206c173ade921d608824b53
MD5 f2a52097d7f03606103253314c4ca024
SHA1 36cc882ab0dfe9f43bfbad3d4250951a80b7a2f9
SHA512 cf6526aca8465b7bcc7c419960796aa7dc5c742c0d43ec7f77a7b9e1450f675f98cba4d47807f2754208faf58be4463e54812618f31afc2553244135a43bb3ab
MD5 SHA1 SHA512

Submit Download

journal

Path /data/user/0/com.freereader.kankan/cache/http2/journal
Size 245B
SHA256 41ddf9710c69146fc75173f872cf9eed14d1703752cb54033937ffb98fcc284e
MD5 a612a34157d58b653cc84669919757e1
SHA1 aef2d8cd0acc374155a3284605160e15445a4fa6
SHA512 a32a6dc2f7f541c848d2f6105237fb70e2c36d7967c96f39f8b46a18f03938742847fb579f0fffb6bb21130098e2e72832201b6f23451b88acffef3ad611fceb
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /data/user/0/com.freereader.kankan/cache/http2/journal.tmp
Size 8KB
SHA256 1cfde67cf08d4f13d0c81fe791d57eea0862c43211a868c823b975dbf718dd01
MD5 7e6bb4a2add34bd8c67714bfaf164afa
SHA1 b5f6403774c07ef92752a442d8b4fba161f4609e
SHA512 4bfff5e052bffd8da27f08f7dbadfb2fbe5c40dac73bc6ed3513d1a14416e1da9e298b59371c805b79758822776d4a9948f4eecea1e3cb2c73c1d092fb643701
SSDEEP 6:7+/l9TYPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKM0//J:7+txQqLJdeWRmBEyPbmXJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

mistat.db

Path /data/user/0/com.freereader.kankan/databases/mistat.db
Size 20KB
SHA256 5d30199815f2b0bb84c387a7766fe692c8e31c797fda9c07ea43deef7f7c1626
MD5 ed8fa9dfc8a4cf63f9243ae6d24d1a96
SHA1 18f8b1f07471c0135dc4e2f1f5e522f0ce7b6469
SHA512 4257c87d4d16ea9c557e51f74beb2a1cd6dc67355a3ee6e24aefffbcacef2c0088f7b4c0ae606014b7113f67b41e3d74947eb305e13bffbe5aae8e4d3333edbf
SSDEEP 12:TLRhUDayNTSFbyoftMXsWllcV/fRmBEyPbP/W8Rc:TLHa5XsSlHGSP/Wec
MD5 SHA1 SHA512 SSDEEP

Submit Download

mistat.db-journal

Path /data/user/0/com.freereader.kankan/databases/mistat.db-journal
Size 12KB
SHA256 48bef559d450cf4b5624535f15cd254fd71aa60c7e54839bcb96b89d19a378ca
MD5 196c601be6306e24247d79cf24aafaa8
SHA1 5d468669d057f4865d1ddd41b8b2d844e74b625a
SHA512 a76fde738fdb341394dbf4353a0b94b3b01ab0c146f50284090f8dc44a3147a08975a4d026ae77a2231ee47a7107f7303974c004810a7b61667d630bcb1da592
SSDEEP 12:7+tecqLmaUDayNTSFbyoftMXsWllcV/fRmBEyPbY:7+tlqLXa5XsSlHGSY
MD5 SHA1 SHA512 SSDEEP

Submit Download

mistat.db-journal

Path /data/user/0/com.freereader.kankan/databases/mistat.db-journal
Size 12KB
SHA256 3b63d58660b571c108eabb6493a9c7b8205b7fe6a5c103db9ba3ef1e1db1dbdc
MD5 4f7fd4c3d68a56193d8b9c5933f8bc06
SHA1 6fc460b42b8358113e4c889e45009a3cf5e17c84
SHA512 17c44aa4ce6f348fe539077d1212f0f45e59761f6c4a34b157eb84d1dc997b149fd4a8c1260574fc92030d3d29e30f6f899bbce57f9ec83f6b6a07baf6af9153
SSDEEP 12:7+tv8Y4l3jWTHqLyKPUDayNTSFbyoftMXsWllcV/fRmBEyPb6:7+tvT4NkHqLy2a5XsSlHGS6
MD5 SHA1 SHA512 SSDEEP

Submit Download

mistat.db-journal

Path /data/user/0/com.freereader.kankan/databases/mistat.db-journal
Size 12KB
SHA256 7e06f79658517eb160dc50a188fbbbbf0371349501233d4055b183f0c7c2fa50
MD5 72dbd9f02bf35d55ca0d2b26e6e34499
SHA1 87855b8f8aa5895713e134b0cff56bdea3cba4d9
SHA512 7eda0d563469fda55fdd46e730571967f15c1281ada7d7216501e57eb7b82f424571efd77a874e88f59a66455d8f282f364b1443e9710fb1fd3877648e83f743
SSDEEP 12:7+tpQl3Cs4l3j3lSROjqLWRmxUDayNTSFbyoftMXsWllcV/fRmBEyPbhn:7+tCIs4NV8OjqLxxa5XsSlHGShn
MD5 SHA1 SHA512 SSDEEP

Submit Download

mistat.db-journal

Path /data/user/0/com.freereader.kankan/databases/mistat.db-journal
Size 12KB
SHA256 b605f1946b8543962766ce8f924c22e94e080ed3f198b93c9ac84278328662a7
MD5 cb2a83d0e10f7f50d143ad18b92ae475
SHA1 41870444a680e1d2fcdfa340aae886ebbe5e54c6
SHA512 7ef3ee4507cf58b88caf30126d25bb788dcf54c9f8307f091941fcc8b52f3c046e00d30cd6ceff5f6193860f401de6e79685c615164455dc8b1c1f7bce8fc2b3
SSDEEP 12:7+tZ5Rpl3zBrl3Cs4l3j6cMRHqLFVUDayNTSFbyoftMXsWllcV/fRmBEyPbh:7+tvPIs4NOHqLHa5XsSlHGSh
MD5 SHA1 SHA512 SSDEEP

Submit Download

mistat.db-journal

Path /data/user/0/com.freereader.kankan/databases/mistat.db-journal
Size 12KB
SHA256 c553b779b0ca914f0664114746bbdfe1b9f55923c87b06a9b4fc60c4d4ccadfc
MD5 77e24a3cc654ded61d88fd6ab36f2fb2
SHA1 a005b3d8285573ea18853a43bc792c3e1055d734
SHA512 0b57903bc2f0af5d117340db7cb4ab9be8c50c0502954ec19b33af728fcdafeffeace92b69730a8437107ad02eed52df22cc488d9a5b24743379dbf222985093
SSDEEP 12:7+tovl33X/l3zBrl3Cs4l3jGMRnqLyWUDayNTSFbyoftMXsWllcV/fRmBEyPb6:7+tGlX/PIs4NGunqLXa5XsSlHGS6
MD5 SHA1 SHA512 SSDEEP

Submit Download

mistat.db-journal

Path /data/user/0/com.freereader.kankan/databases/mistat.db-journal
Size 12KB
SHA256 d150bdc8500e27b51399653fbf736026315bbc2a520311ce16c49809323e64c4
MD5 bb99604c07d8759434e7a6893b05b253
SHA1 2cf8c1425d2b4575b8bede1fd028468f88c4d256
SHA512 1157ae10ffe891286b1655f15587369060882cc08a8f0075c659c53efc5e617d0dffd111fc22621a000f66d6179b21ad4b7b8ed36fe8b12620b2193a997469f5
SSDEEP 24:7+tSdgJn4OBAlX/PIs4NvqL6Oa5XsSlHGS6qLna5XsSlHGSrW:7MSd2zsohq2NZYS6qmZYSS
MD5 SHA1 SHA512 SSDEEP

Submit Download

mwsdk_analytics.db

Path /data/user/0/com.freereader.kankan/databases/mwsdk_analytics.db
Size 20KB
SHA256 dff10562c62e6c5123c5077706bd582e162c8801965895ff1fb13489ed4c323d
MD5 318d1d9fca4d5845211e42ae147cee52
SHA1 56789d509ef3d5fece6e2f13f421f5510b8312b7
SHA512 3d07b7047d482ad2c61d5a64e9115c7743236ac690ce892dfdf71444ad37babbf83359e5336cdf1906d5631df76936b59457922db591326012af8557ff535503
SSDEEP 24:TLxxA+/avi7qFGSEfkoF4fTm0G0cBDAkoF4fTmre:T17/avi7qASHk4L20Kk4Lge
MD5 SHA1 SHA512 SSDEEP

Submit Download

mwsdk_analytics.db-journal

Path /data/user/0/com.freereader.kankan/databases/mwsdk_analytics.db-journal
Size 512B
SHA256 b4d0c2f7e41a33af760bf340df1e0ef5c3e680de34080a1be3869ccb8952a296
MD5 752a0a7174c6fb7f62d5b152c6d28805
SHA1 0c9f2a2bf220823f52da45ad85eb59d8a8c36982
SHA512 d4f5a41bd8862534f9173092ed9bbc71f3e6f97ed4a1a26c4f8cefa13b35415e0a058bc9b36d3c67e990c455746895853b5be0a485e967a532491fcd4c4b7458
MD5 SHA1 SHA512

Submit Download

mwsdk_analytics.db-journal

Path /data/user/0/com.freereader.kankan/databases/mwsdk_analytics.db-journal
Size 8KB
SHA256 e4a654bd6f6520a9e7c23727757c42cecc0dca5a81e54355c542680d2f1e4b90
MD5 a148bb678defcf6f4fc52fa4e11c5cd1
SHA1 dfa24aad2aa18fd5f9dff145a90aba720ac73eaf
SHA512 189ac1da94b482927859b311daea0cc023e328fc0803bc773c4e334b31a1b18a3fb234bee993701e47f561e31d3dbe439877612fbaef63e76e87016f9eaf2372
SSDEEP 6:7+/l95Fn1Qg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKAOn:7+t3MqLiuWdYRmBEyPbvO
MD5 SHA1 SHA512 SSDEEP

Submit Download

mwsdk_analytics.db-journal

Path /data/user/0/com.freereader.kankan/databases/mwsdk_analytics.db-journal
Size 8KB
SHA256 4c809a53beca3b3abde0c8ea4e63020d1421e00c373b89eeee0b28d1fd4f903e
MD5 2622fe095eb505ec747ab60e3acfd91e
SHA1 b00d01be35a4f68a7fb2b351a649fdaaed94c13b
SHA512 be78cba902bd719df39a3dc9f7d79e8e897cd4e5fbcd8d06189ef9472e17df5ec372e84d1c0236e80fbabc7a6ede215e6ae82d06e15681f927a03625418cd5da
SSDEEP 6:7+/l9sPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKwU/xn:7+tuqLJdeWRmBEyPbmx
MD5 SHA1 SHA512 SSDEEP

Submit Download

mwsdk_analytics.db-journal

Path /data/user/0/com.freereader.kankan/databases/mwsdk_analytics.db-journal
Size 12KB
SHA256 ab8132d4fc758e7f357a705337761a2f2f99b259a89c25c7b8302d24c2719eba
MD5 3943a3fe0ecd424581d8e93fc10191cd
SHA1 7e8e987f6c58378137531c67cdcf0177d11d6305
SHA512 60235c132567ac2b9096cdc7cd955ff53c97442d0fa03010ba4844e7bdde1a5ead38478ce8a637ab720da2b3534a620e72b2404f85af448df24ad9837b11e0e0
SSDEEP 12:7+t789AqLmaA6tqyNTSFby1uviBkcqIzztRmBEyPbBe:7+t7pqLXA+/avi7qFGS8
MD5 SHA1 SHA512 SSDEEP

Submit Download

mwsdk_analytics.db-journal

Path /data/user/0/com.freereader.kankan/databases/mwsdk_analytics.db-journal
Size 12KB
SHA256 577abdb324ccd28e04c545145150ad369f86ce8ebb0483537d84ce528eeed546
MD5 3c808a56d098ba4d2281e9a2014a521a
SHA1 caec4e89fe52c00d7d5fcf9be1a52752ef7bb866
SHA512 09a0dd9bf7df7315b582c341e1f661e88e9ef4635c48f751f6bc4ae3477b9b37004cff065051c09f0fd953d8cbc7d1fe5eac55f2684b2fce3ed67bdd58716c7f
SSDEEP 24:7+tQ9AkoF4fTmCFJqLy2A+/avi7qFGSPo:7MAk4LLvqeg/avi7qASPo
MD5 SHA1 SHA512 SSDEEP

Submit Download

zhuishushenqi.db

Path /data/user/0/com.freereader.kankan/databases/zhuishushenqi.db
Size 164KB
SHA256 22d51e5e3c9c54fbfc72fa447b25316179b6080fafc17faf974404fe573bbe29
MD5 2b72ab86fdebfc7c0a31c849fd9b53ca
SHA1 4b74f7da76a5e4757bdbc7267b621662cd49db1d
SHA512 eb76d578174f7e655833cb43b5bd603b0f7bab1c6804dbab52017204363f84d07bab1b59ae1b50be934b6d89930d09c3fca25fcfa0495552840ed4d6158d91b2
SSDEEP 192:GWG/8fMwcPR87OMFGY9m+9RPyY3F7MnExA8SI63SnBN:Oc7Misi
MD5 SHA1 SHA512 SSDEEP

Submit Download

zhuishushenqi.db-journal

Path /data/user/0/com.freereader.kankan/databases/zhuishushenqi.db-journal
Size 20KB
SHA256 d67fc13e1ed71b8f91e3d40dc3df2c3f5dd89920778a1b9d74b611696f315d99
MD5 a1cc69abfc62b18f6672daa99ee951b1
SHA1 269056c4eadb5a999550f1c8397bb5aa43b90241
SHA512 3cfd8a72906c303b1276f3a8285a74f1597f6b77a18d8f1fd6beaca4487a0a48e6566041f59e8b431f6962e5769e899795579afce58ff7b40dd8a6099ec6bd11
SSDEEP 12:TLmaUDayNTSFbyoftMXsWllcV/fRmBEyPbAVOwG:TLXa5XsSlHGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

zhuishushenqi.db-journal

Path /data/user/0/com.freereader.kankan/databases/zhuishushenqi.db-journal
Size 8KB
SHA256 04e32a6a41384afe51dbfc07de949def028bafdd8bcbbdafadcaac1681045872
MD5 9222207b8b1f7966b8a5047bc77eaec9
SHA1 e9c0adbd967ffc34f2b00e6dd88926c5c390159c
SHA512 e518604d590f9f17de5623de8d68576094964f19e0ac87694aa093ec646d4b64b7465c393bcbb93fe5566c3c5753b99d3b77018f04e2c77b1b8c72ed17702b72
SSDEEP 6:7+/l/NmXH1FWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKgA:7+t/Nm+qLiuWdYRmBEyPbW
MD5 SHA1 SHA512 SSDEEP

Submit Download

zhuishushenqi.db-journal

Path /data/user/0/com.freereader.kankan/databases/zhuishushenqi.db-journal
Size 8KB
SHA256 007c49eed0f2c278265c7433b1f1425da90e11a35290709831557a3f7407c479
MD5 7b5bc87c5e37507c7bd9b665efc2c5b3
SHA1 a0b093b410f8d23ac63c37388ae98fa41f65d5b4
SHA512 b47e40063f21283563e5725b09c7feda08b2b6b9257a147bd2302d5ed184cbf7b2353aa1b636027a3da45c05fe47b5831b108f7923268c6d5575daf31d3c8342
SSDEEP 6:7+/l9nOn1vxvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK+:7+tV2RqLiuWdYRmBEyPb9
MD5 SHA1 SHA512 SSDEEP

Submit Download

.imprint

Path /data/user/0/com.freereader.kankan/files/.imprint
Size 773B
SHA256 b3476ecb9740517d266cf38e570da10d716f97c819d600919fd9229d6673e88a
MD5 90600d97ee1d77fe133cc3574ccd02a3
SHA1 93c481459a6fc016112e6f85f94bd1252d13b49e
SHA512 fd146e0c54adffaadd3b313975ac202e0d24f2f16d297e5193c507109cdfd46e0c9ae27b92169cf6598402b09ee2e94de7303c2d0c85868c8ec5742fc9c8d7cc
MD5 SHA1 SHA512

Submit Download

bfd_cached_com.freereader.kankan

Path /data/user/0/com.freereader.kankan/files/bfd_cached_com.freereader.kankan
Size 151B
SHA256 e5e329644f866615eb548522e3c7dbbeb0eff101c4fc08a4b35c2a5cca3091a5
MD5 3f62c516f4701f83bc6aa0403e564fca
SHA1 d989ba5119d6b76c7ba39032f34c5237f6803365
SHA512 21aeb328202798887c2505eb05624587749aba9df4c48561d5e8fb39f3c1ba47c85e099b3a6988a2f4fcaa9c2bdfb68a00dde7982c2376f76b654c5626d67741
MD5 SHA1 SHA512

Submit Download

bfd_cached_com.freereader.kankan

Path /data/user/0/com.freereader.kankan/files/bfd_cached_com.freereader.kankan
Size 295B
SHA256 35c83d86fb920c6e0c74ec57b7c4988d0ff23ab0da7f137aaa151ce65a8688fb
MD5 72aa31c5c67356ba4a2073616a5db5f7
SHA1 6af6266d29d8661e0f39407e0e94bbf627dc6594
SHA512 1c3ce6197dc1d6d4b2eef2483c7b8fd2d6750b32408a8af27f3a1d10e0985065ddfa0abdf1bde987f3ba20cdfa96b48d3dbfc5c527a0217baf55cb0aae171adc
MD5 SHA1 SHA512

Submit Download

bfd_cached_com.freereader.kankan

Path /data/user/0/com.freereader.kankan/files/bfd_cached_com.freereader.kankan
Size 652B
SHA256 85a707f2d5863d1636fc3abfbeab19793fe08bbf2a78e1570e389f7083841a82
MD5 4c366dc0a7485041562479c43badad16
SHA1 f6ba55e804bb63f0f39d5a464c76d9f2d2453b56
SHA512 c1bfaf9ffe308e83c37b952d2366a59e5f6a2e12ec81943f702dbf721c374e3660d5c2c8c3d11255322f2315761076e518c99ea5a999948590cc96cc5ae590d3
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.freereader.kankan/files/umeng_it.cache
Size 76B
SHA256 6c27e8829efa45e64b9ed98cc7b055254e6f73b1075ff82d2fdfc343d15dc54c
MD5 1968ffbe2cf036e4ea9add4400cbd9d3
SHA1 7abeec936091b786fd7a055bf97bade814ad9241
SHA512 d51b15e0e9ae5e1f33412481efe77f6a776c6a5605f00d78bdb0eeb1c2682a6bc0e93c2888ed6425131f270a0078c5b487d9db171147f2c1f5e49f7153c6bb34
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.freereader.kankan/files/umeng_it.cache
Size 148B
SHA256 174efa259fba0f7a025adaa5481a63079cee9157d39bc11ec9c7710c6efa8843
MD5 b132ccdb8d94b076371bd71a588a2ed1
SHA1 8f7e1c8fb90d18d6fb84f618a366f775c1a82811
SHA512 1b40bd1849e99ddd7159a656d6fdfe6c80dce888fb4be16771af9db9a0f772c7534e6ea43c462f6e037534a53c727c7de0861cec8b24f1f0bcbd60334800dab3
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads