88d234fb0a613c119071a0622f87d5e85402451180315b40e61ef5af9b012b88

Analysis

max time kernel
47s
max time network
182s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
27/05/2024, 18:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7a034d2d96bea71d11339e271b1432b6_JaffaCakes118.apk
Size 1.7MB
Sample240527-wlxevade67
SHA256 88d234fb0a613c119071a0622f87d5e85402451180315b40e61ef5af9b012b88
MD5 7a034d2d96bea71d11339e271b1432b6
SHA1 af07f970cf318383a5f67a32211398786a523219
SHA512 6d5245f988e27aadfe467412e656a4dad3eaa9ddf9a26b8d2bb76b4f38cf30dae6aae13868b579c7fb9c254a743d467c73fe2d5a3527f31beb52ec4b8ba38816
SSDEEP 24576:F4AE69dl0XJ95uGTuKkrUghtxx6L/d0EWAwaacDjAO02OZGpUgWN1lAnP8I24R6:i2lKvxCOEj6Td0EW8DEHZXgWN8nkKQ
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.fll.emaafx

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.fll.emaafx

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.fll.emaafx

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.fll.emaafx/files/muo/GfqFKXeOM.jar	4305	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.fll.emaafx/files/muo/GfqFKXeOM.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.fll.emaafx/files/muo/oat/x86/GfqFKXeOM.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.fll.emaafx/files/muo/GfqFKXeOM.jar	4258	com.fll.emaafx
/data/user/0/com.fll.emaafx/files/Plugin2.apk	4513	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.fll.emaafx/files/Plugin2.apk --output-vdex-fd=96 --oat-fd=106 --oat-location=/data/user/0/com.fll.emaafx/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.fll.emaafx/files/Plugin2.apk	4258	com.fll.emaafx
/data/user/0/com.fll.emaafx/app_dex/utopay.jar	4559	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.fll.emaafx/app_dex/utopay.jar --output-vdex-fd=122 --oat-fd=125 --oat-location=/data/user/0/com.fll.emaafx/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.fll.emaafx/app_dex/utopay.jar	4258	com.fll.emaafx

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.fll.emaafx

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fll.emaafx

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fll.emaafx

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.fll.emaafx

Reads the content of the SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/	com.fll.emaafx

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.fll.emaafx

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fll.emaafx

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.fll.emaafx

com.fll.emaafx
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Reads the content of SMS inbox messages.
- Reads the content of the SMS messages.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4258
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.fll.emaafx/files/muo/GfqFKXeOM.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.fll.emaafx/files/muo/oat/x86/GfqFKXeOM.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4305
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.fll.emaafx/files/Plugin2.apk --output-vdex-fd=96 --oat-fd=106 --oat-location=/data/user/0/com.fll.emaafx/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4513
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.fll.emaafx/app_dex/utopay.jar --output-vdex-fd=122 --oat-fd=125 --oat-location=/data/user/0/com.fll.emaafx/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4559

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

utopay.jar

Path /data/data/com.fll.emaafx/app_dex/utopay.jar
Size 30KB
SHA256 b825cde84e3dddfc147c71265d2259c422d51a7e56d1dcdba1321e3119b1df07
MD5 eb6089c1acfa9f12535e533aebee845e
SHA1 165e39ee07dcd9ed00fc2dc1ff466bc1d6b813c9
SHA512 5b1bc26bcbcf05fc331865fb4dd572b673a52650d68ab4d9b028ea15219e0d93c1ec17996953436801913388d78e25c67ea33aa93544d65e96a799eb06cc70f5
SSDEEP 768:89WLk9xMPR7PIG0CLUhgdX3IsZEdTkEDF7XG6LA8QCnpAJgm:8QL+M5mCYKR3Ew6LvQ+pAJgm
MD5 SHA1 SHA512 SSDEEP

Submit Download

740410100062013

Path /data/data/com.fll.emaafx/databases/740410100062013
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

740410100062013-journal

Path /data/data/com.fll.emaafx/databases/740410100062013-journal
Size 512B
SHA256 d4e842f0853c34414e96ce123bcf3706f58cde5be92c993258621cef98137500
MD5 ea7488e851e5302aba57b3641e107f20
SHA1 2781a42ffaf9ad2b043486dc9aea095d3570e8db
SHA512 0885cbf68d91415cf1f2bde01ad0fd08a8d6224f9e43454eb41ed4225884fc900d32d02e66f4559d4909237e07d66824c3885989927519418273de9cf9b2909e
MD5 SHA1 SHA512

Submit Download

740410100062013-shm

Path /data/data/com.fll.emaafx/databases/740410100062013-shm
Size 28KB
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

740410100062013-wal

Path /data/data/com.fll.emaafx/databases/740410100062013-wal
Size 148KB
SHA256 a58806774a851c02283bc0ce8ad5a7f230351df28bffb1fc06fb78a9ac557c9f
MD5 f5e921fb0ff447c04dd73aab616812df
SHA1 2160dbbaf88340f6344999b4ca165c8df18efa25
SHA512 76db512351515fdb2a60b9a27a2253ac6f9bda42f70d103b28f225db5356288ac15688c30121191e6b9c01501f710ec2d700b6f2ff7d6621bd1d65d9a63c08bb
SSDEEP 192:Ok9qa8t91hmOeW18OttyPcezpUut8szeyze3y:fYvt91h1raUuaVyq
MD5 SHA1 SHA512 SSDEEP

Submit Download

wochi_v4.db-journal

Path /data/data/com.fll.emaafx/databases/wochi_v4.db-journal
Size 512B
SHA256 2bbe80459cf3cfd24b062a7ab1fdeec264ed50648e1e60330d82efcc3eec4df5
MD5 bb4aa439f86ed29d2e018fad43653f2b
SHA1 f26546758f5e924a831d14db2984fbbcc7e68992
SHA512 dd18903ef2d8a595866f0c80fd03db95b581c56b6c15b67d46832f979d5a8c2919404768206b12812854e3f3132ea97c6a00ffb45e559d7b0c4c1805f2d69776
MD5 SHA1 SHA512

Submit Download

wochi_v4.db-wal

Path /data/data/com.fll.emaafx/databases/wochi_v4.db-wal
Size 20KB
SHA256 b8d6f9fe274492a074b97827343869af57590c1456f55e40495e1282e844652e
MD5 6f6ac60df9de2e922210793b341fe43a
SHA1 0b2306293a5a5868eb9c1c8186d705bbd33fcf2b
SHA512 458972cab9f07f49c48ded78d9a2dd1c8cbf993a0055373d7693584b99614d7d50de7f74cce72f330afa99216d4b631346b22094db0c84e9847574829d758126
SSDEEP 12:KupzdTRmBEyPbP/ICMixklqMiLOwCldribPzqDRmBEyPbV:K6zyGSP/Isxkl0jE2bPzDGSV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Plugin2.apk

Path /data/data/com.fll.emaafx/files/Plugin2.apk
Size 99KB
SHA256 de7bf40574754a5144fa5cf3bc5e97f7adc7f5abebb18c41e8f0631917db4c0c
MD5 3d216f8fddb9705a6720a285475837f1
SHA1 f053d23b284bfe2faf6e76d353ff052471e2de2c
SHA512 38be39da8f96abc87109cfd57b2d63ddfa72971f023024a5b4ce1f97cd905a96a94e19eea19ae9b745f28d02c6689a4473627ce57ec85dce2018a77e699620cb
SSDEEP 3072:O/hr91fY/9tdWXLqQRClwYJ4sAAq4/IZn8NxQNRmDJS:2B9NMDGLqofsAAbNI8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

GfqFKXeOM.jar

Path /data/data/com.fll.emaafx/files/muo/GfqFKXeOM.jar
Size 788KB
SHA256 eff147e722175f63c550d96d6f25027fccb1cf61be8fb6e77c82a2dc791da899
MD5 89581771f3890263ab94c2d461466400
SHA1 2d6212fa84ca61d4f2351d700b32d8add25175c3
SHA512 46cfd7a605950497628438fb997e8dee3a9ac0e8073d3e16af8ada542319eda2370643cbae74bd97a674201315ace90c7c043455a0b64ea814104634e6269941
SSDEEP 24576:5U7sbhMqfAtWilRxBB4AG6sTkU/Xwp5iXMgoXObKU+Tn:59UnBaADsLPwDiuXO2U+Tn
MD5 SHA1 SHA512 SSDEEP

Submit Download

GfqFKXeOM.jar.cur.prof

Path /data/data/com.fll.emaafx/files/muo/oat/GfqFKXeOM.jar.cur.prof
Size 765B
SHA256 24a1f725fa386be35ae2835e41d7f9343731f2311f0cb09387bee3e3641ee484
MD5 f589a12eae925c0e63821b5b4552a695
SHA1 45d04a504e21d627e9c86aba0926c5c13248116d
SHA512 4b31044de180c3c3856469a210f9877b7d3b3f9ddfd8cf6ef645695ce185f38743dbaf875755eee5f1633f69b7f1b51d6245b0aa5a0ee20086900134a10c6390
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.fll.emaafx/files/umeng_it.cache
Size 310B
SHA256 79acc6c6bdf048729f93b17b6331eda371ebc576186ddf8fd42d6169b97b5a55
MD5 6306fd161303838df35a8ae9b3fc3aa8
SHA1 7696873f422375448eb437040ae8ad7b9b9f570c
SHA512 b9170c6b2875a6a1e60567ea145c35156ab74d53b5a5ca71c281948025b74b6f692445ab073543e45dd8337078693f1cc41dcdf41f78072b0673308244427f50
MD5 SHA1 SHA512

Submit Download

yl_plugin.apk

Path /data/data/com.fll.emaafx/files/yl_plugin.apk
Size 58KB
SHA256 05eb3e1ca331b8c6a1f60f92abb2bddbac54a7b2c229ac07bf26c756297fe72a
MD5 5a4c666b43ee7f2b6995aaf3527e4a4d
SHA1 b205bcb022797f3b16635db139c7524c0c388adc
SHA512 c84fceddbf9928110fc3b85e0989b9cedd06383007ff99dea5a25096d8f892ab52d30ed9b52b72211449041f1274ead85bb42929ec269b58b6b0e616a8545e17
SSDEEP 1536:D0L/5wazYVM3W7ymXFSRJcL7KIBOWNMunou3faONts:D0z5vcKG7BXsRJcL7gW+ul3a
MD5 SHA1 SHA512 SSDEEP

Submit Download

utopay.jar

Path /data/user/0/com.fll.emaafx/app_dex/utopay.jar
Size 67KB
SHA256 83c996c0d067b5f516897480f427dfffdcfb49ab7654dac9b805376bbd49e1db
MD5 3b8bb9a8679ac8c24e8d179fc5bae999
SHA1 e6ea7a1095524087f481ba04321c4cb6fd2426f3
SHA512 abf1cbed7a8cf4a29d7a32a83f15aa0a6c9e2be8484c2dd8d9bf16a76e337b17b9c05efa0773598806b3d3da4fe3a9217b583abb9aaf5e3dc054dc77b10cae63
SSDEEP 1536:ycmJZ5F4TYHs8RFDNnB7u5EPNcwYNLg70:sJZzC+BnB7u5EVcvyY
MD5 SHA1 SHA512 SSDEEP

Download

utopay.jar

Path /data/user/0/com.fll.emaafx/app_dex/utopay.jar
Size 67KB
SHA256 6286a800597b845785eb664710253ebd20771737dddd5b80067e0e9d37c804b2
MD5 5220524411d0bacd600da60814d1ee9f
SHA1 fef7210ff44e757328bc0ff7aae7bb2191cbf634
SHA512 b2d8af5019c176d682634747d83320e609fb6122ef850f4069a0c78c2415d242087099cf60ecb03039a9ab71902a4e3b22e9cf144de89e506991fb93280f6a5f
SSDEEP 1536:ycmJZ5xSSTYJQHUO19/7U+rnB7u5EPNcwYNLg70:sJZLSEfH31hnB7u5EVcvyY
MD5 SHA1 SHA512 SSDEEP

Download

Plugin2.apk

Path /data/user/0/com.fll.emaafx/files/Plugin2.apk
Size 201KB
SHA256 1d83642ede6b16a071676e895f547d056543b5b4622bbc9b9b4ab45e47bf9ba0
MD5 ef019d14367b7346b1ae2419e9d445c8
SHA1 23d81fcf81f3a9f2a991ba4d0d135fe2a28aa188
SHA512 ea582f21c6054c37c679c798e93116c9c18c9544c0feb78fb949bed7b2cd3122c8d7bb8ecef329829c2531764abeb6200f0af49ede97c3b0b7448bdb65a34a60
SSDEEP 3072:1kVF+ursMg5xMFLchcmdbaNiikyqW+q7JDcN6W:1kVVrsMg5x6AhndcfxaV
MD5 SHA1 SHA512 SSDEEP

Download

Plugin2.apk

Path /data/user/0/com.fll.emaafx/files/Plugin2.apk
Size 201KB
SHA256 2c61a25f1ad5783bf82eea9faa2536cac4788ed3147bc1864d9ef17ea01be6a7
MD5 2a425e0fae74f20a2c475da937a619a2
SHA1 4d701c7e6d828aa96ba8a493720e7282c49ec741
SHA512 44c8d2a837b606de99055badbd4b5e708424ca9809b1583d13aefadc4d4af974658dc3a3f179fc3047eef7167151c638ff66dd6c8d38121b6ecdfb464d2a5a60
SSDEEP 3072:1kVF+urNfpK7fagHwanMuBwQS/EdaHgqW+q7JDcN6W:1kVVrNfQ7fHwiBgm3xaV
MD5 SHA1 SHA512 SSDEEP

Download

GfqFKXeOM.jar

Path /data/user/0/com.fll.emaafx/files/muo/GfqFKXeOM.jar
Size 2.3MB
SHA256 8b49dd66f8cbf5b436ad55e0b3b28932182df0c0e4d17e49f9a562e00cddab66
MD5 0770d86e8392b1121a5d28b4daaf260a
SHA1 7a0f025f8ef45dc5d7ec4efa4c5c611a033fe795
SHA512 a9c70759c46bea010f5a15daa38a2b18f74e912dfb51419baa323d329e4ec77cf4555530a9d78888d62acae5be6b72b6ab03f23b445afa790aa2c0f1f1b3f3f8
SSDEEP 24576:hhfZWqfcYzpqUPYhJA8EHu1+PKYuUaIvm:X/RJu6uUaI
MD5 SHA1 SHA512 SSDEEP

Download

GfqFKXeOM.jar

Path /data/user/0/com.fll.emaafx/files/muo/GfqFKXeOM.jar
Size 2.3MB
SHA256 b148c94a4890471e82a97332707d58dff9eb90b82d9631c594688749f8705b8c
MD5 6ee2ae794381fab459613faf39431616
SHA1 03c6539076fb3b06d7dad7dff73003202c6048cf
SHA512 9096c18ed8a6eae3367abd9f1374c13ceb7465b36e20b25393746e0183a98d58c7a44b4d689252dd833f6c232844863c49d998564ca54235ccd58b78d40a9c03
SSDEEP 24576:hhfZWqfcYzpqUPYhJ78E1Il38QiMILdWUWUzsaSPuUaIvm:X/Rx38TdVW8zOuUaI
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads