0d29ccb109ed85b30ab4de6bbd8ab638402daf47a9ef120d7d9d047eaec30cb9

Analysis

max time kernel
176s
max time network
186s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
28/05/2024, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7cf981402cb48a6be067ed72fa610e94_JaffaCakes118.apk
Size 2.2MB
Sample240528-psy4padf8x
SHA256 0d29ccb109ed85b30ab4de6bbd8ab638402daf47a9ef120d7d9d047eaec30cb9
MD5 7cf981402cb48a6be067ed72fa610e94
SHA1 c40716f3812483244bde61f843423b7956f3be75
SHA512 d28b8a191c8ef54f2479809ce5e98c1c33ec1f4f1aa39cef7aba3af51a75841e183515a00bbfe0969f21c48c2db0cd469053c8530cf5964da738f55bd5b1b355
SSDEEP 49152:IfYflGxxUAAi5hjXJRZecPvVM1oPkp6M7tGQjqzbkHU4ghHn7r:Ifo5An51McPgu8jXqzg04Qr
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.wait.hero10:system_inner
/system/app/Superuser.apk	com.wait.hero10
/system/app/Superuser.apk	com.wait.hero10:system

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 2 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.wait.hero10
File opened for read	/proc/cpuinfo	com.wait.hero10:system

Checks memory information 2 TTPs 3 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.wait.hero10
File opened for read	/proc/meminfo	com.wait.hero10:system
File opened for read	/proc/meminfo	com.wait.hero10:system_inner

Makes use of the framework's foreground persistence service 1 TTPs 3 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.wait.hero10:system
Framework service call	android.app.IActivityManager.setServiceForeground	com.wait.hero10
Framework service call	android.app.IActivityManager.setServiceForeground	com.wait.hero10:system_inner

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.wait.hero10

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.wait.hero10
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.wait.hero10:system
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.wait.hero10:system_inner

Queries the mobile country code (MCC) 1 TTPs 2 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.wait.hero10
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.wait.hero10:system

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wait.hero10
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wait.hero10:system
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.wait.hero10:system_inner

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
48	alog.umeng.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.wait.hero10
Framework API call	javax.crypto.Cipher.doFinal	com.wait.hero10:system
Framework API call	javax.crypto.Cipher.doFinal	com.wait.hero10:system_inner

com.wait.hero10
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Makes use of the framework's foreground persistence service
- Obtains sensitive information copied to the device clipboard
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4550

com.wait.hero10:system
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Makes use of the framework's foreground persistence service
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4749

com.wait.hero10:system_inner
1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Makes use of the framework's foreground persistence service
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4831

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

ua.db

Path /data/data/com.wait.hero10/databases/.ua/ua.db
Size 32KB
SHA256 b5e0cee4db060068c11f2d8a88960b2ba7d6d4595de7f6b7d431db0843f8d3e9
MD5 74274fc5c37db08b29b3843a01c6d337
SHA1 df28c8002e5d58b335e070c31ece04fa20871699
SHA512 50c26e97cc76ccd3f17e27524f6ecdbdbda501c4263d00ec0a0a6b631e7bc55580deabc2916ac6fc497676261a0bede11e7da9a70ee62ace584629ebfc5d7f59
SSDEEP 12:TLZDuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbV/OwQo++zohJP5PP:TLD4PPvP/BlmqygGSZQopMhJP5P
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.wait.hero10/databases/.ua/ua.db
Size 32KB
SHA256 d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5
MD5 4cac7d31fb94d5c9581893537f64c5ed
SHA1 96bef3288546196ac3058b5eeddbe9da1d999fe5
SHA512 0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747
SSDEEP 12:TLWXmZuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TLXj4PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wait.hero10/databases/.ua/ua.db-journal
Size 512B
SHA256 2dd056d8640061ce95e341e38d9dc6594774ce7b9e5fdf320b0b8a9664c2d057
MD5 e1ba52d2e01be603fa54a928c43e5b11
SHA1 f57af0555acd0c1d96c033929575b5bfdc915265
SHA512 cd2b42386aa184b409e3c31433c58f43a688ab9853da3aba94462cb6c79b3ad580f8ab2f0c5134bae03dc45939f60e7a97cc968679ce101b61f315582453960f
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.wait.hero10/databases/.ua/ua.db-journal
Size 8KB
SHA256 16db1ec12ddf24220ab42dd3d2d07f72417404439667600a39c8f968491cb40a
MD5 47f50048ef5b61a364c77a4772537bc3
SHA1 15df089e3a3cae8776769201cf59a74ac5a3259a
SHA512 551274be4948967d3076bb03f13dafbc46b16202ce8633ee9f3c032152d9e07b8da66aab923468a6b5f96883195b7cbf3f42c54caeacfe69ccde3aba03329b56
SSDEEP 6:7+/l9bn1opg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwM:7+t8pqLiuWdYRmBEyPbO
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wait.hero10/databases/.ua/ua.db-journal
Size 8KB
SHA256 fe6688a72c6e25dd2cc17e494b74a5da0f66a496e5d854722dd2ded7b64b26e2
MD5 914e72a6a2c4d251c2310f9ceaf22c60
SHA1 93edc69da71cd72008b4c5653dac6a11bb475678
SHA512 c3b0768580a39618e0d4d2dba7a7fd91fc20f86e8eca211b7803493ec5194b3a38e9ee26a2fdd96b7430006a46e10c62a3857fc7e1d4dfb1c8bfb810eace6b71
SSDEEP 6:7+/l9iOPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKJlC/K:7+t0iqLJdeWRmBEyPbxK
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wait.hero10/databases/.ua/ua.db-journal
Size 16KB
SHA256 e0a0811fdd5a33a4f526fe0d5b73ebb98a85db79b5b687ce725eaa02d9b6c2d4
MD5 dc45d01ec0d5519ba4a36a3e90824506
SHA1 e4dd6d4a072766d00f331ae02f2ab8b561edc4ec
SHA512 a09bc1678154e1512506cddce8c7ce0ba88ba40802b98e8cb7e46ebe2278b129dbfa5f536063bb2a944b80bd271a35e8de25c278db0678acd6d880b6d7d33d57
SSDEEP 12:7+t7wqLsmuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbC:7+tkqLz4PPvP/BlmqygGSC
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.wait.hero10/databases/.ua/ua.db-journal
Size 12KB
SHA256 7654dd9ec65c00fc64925b9cdd525018827462039c2820810093246eb16a590e
MD5 fb7169ad510528921ef27a7521504e00
SHA1 c815ae45a532823b0bd194895050515461ca5c17
SHA512 daa0196e0c5001534e1eb7fcca6309b5fce4f78f0f1f72d88d928143edfc3ee185991d7a26f78245858727fc120644bab7ff50b083dcff437f0124104347bcad
SSDEEP 12:7+tswjDRqLZDuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbE:7+tsQqLD4PPvP/BlmqygGSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.wait.hero10/databases/cc/cc.db
Size 36KB
SHA256 c422190539b6414072fc3950da19a17985c0c4c2172740b2f74682b520af5231
MD5 4cfe777c9f6e7859f5efe2197401d8e5
SHA1 bb3774e8879ad5f6db0c37f151c3d6bc7b4b207a
SHA512 6be469864edaf8eaa110f618f8abd27962da92e20945dcd38073ade2b60b10f00552d54d5db9d9f75ca133213031030e71e2e30113ff033e5ef507a28fe0b1de
SSDEEP 12:TL/0P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLV7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.wait.hero10/databases/cc/cc.db
Size 36KB
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec
SSDEEP 12:TLg5P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLF7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wait.hero10/databases/cc/cc.db-journal
Size 512B
SHA256 2af12ef4c15bc4f1d47c85c729066b8d0cbb4099fcd8c1f575351fdf072b899b
MD5 725537daf52f5126db666941d00e513d
SHA1 e667a89b474f9112a54313576c5a6369580c70b5
SHA512 645e259895ac037f4c225497fd55f08728937ed1532385ab75c2a79ae4f69ffc65d77f4bb1695e7376a4868ecfd306af7bb1b451f627e39427f1aae86b9c4b85
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.wait.hero10/databases/cc/cc.db-journal
Size 8KB
SHA256 d1394f50217be3646dae5ba540db27651691c66fe543b854ccba42d687e5dd33
MD5 42b544ba0ec9f71b266207d31c07f263
SHA1 35d327e2e1474efd8a78692f4ecdb5854fc3a02a
SHA512 3772fa13547e4987dc6bea381fb8cbebeffa9c42ba4163ca9896373c995e3323f03d64170955685e83c7de4479982656995460daf8b3d6775e0227cf1685b47c
SSDEEP 6:7+/l9+yHn1GhWWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK/dn:7+t4KWqLiuWdYRmBEyPbmd
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wait.hero10/databases/cc/cc.db-journal
Size 8KB
SHA256 d058f728c81c18ddbe8a3771531ba33cfeb569fda5a2607ce642e8a286f80e81
MD5 5e99a4be71468673e51b2f3b14431a8f
SHA1 744a7f371cf5d43b3604e2929d0324358a1afe7b
SHA512 ae8f510e6b0322f2ef1db251d5956cc77c209502c2cebda503dc591a6f6094ca3d94bcaaefc5e8db3ef1d9d910f44331e696512807d49e7fc7d8f686a1af6cc8
SSDEEP 6:7+/l9gZgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKNtM/Ygun:7+tq4qLJdeWRmBEyPbCsYr
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wait.hero10/databases/cc/cc.db-journal
Size 8KB
SHA256 ada7998bd4c7fe28d959a9f30969bf8e6b26c2db85d8b696315565d30152d842
MD5 db731a2708b5e311d7ee39f384d0ca3f
SHA1 da283570e3a9248f1e75d395fe863e32e98d3bfc
SHA512 f388476277c8b3616cb039544ecc42083e07aefa83f3f53dd7b88d8670532d46e5749fb52a0a507d3942be1cea58969841d13778152b92e62cc982eeadf50a02
SSDEEP 12:7+tJWFnqL/0P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyT:7+tJWFnqLV7sL7yot3BVrHotGGS/
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wait.hero10/databases/cc/cc.db-journal
Size 8KB
SHA256 f8800378497962e42be93658cd23472adbfaa245f0f6a9f620d1474eb924d586
MD5 dfbc3f712c83804a33205d6d5a00b039
SHA1 645134947f3f2fe2b32b7da68964e96917b4d35f
SHA512 e0e48d9dd596d0e8e2623b3831c3e3044bb93ff2fdecce8565661318a6f02021a4d9f6365dcd5a80bfc586b7ca910ee5b07f91dfcfa7551b63ef9059472d2847
SSDEEP 12:7+tYUDqL+/3P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyH:7+tYUDqLl7sL7yot3BVrHotGGS7
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.wait.hero10/databases/cc/cc.db-journal
Size 12KB
SHA256 7ca2257704a0a18f0167e855e6ce1a61fd51516e9d11f828952c0038e6cc1bc9
MD5 0ede5a84e496244662e13ff747d1e2af
SHA1 4be0c62415b1ae01c941b1b0e635ce8b9d46be71
SHA512 b41560c555d9ffa4ea3e373db76cf36fb3840940639739a587c6f637c97d3b78d9fc34dca856c2b5ce9e3ed0ff7909db1f7b0eaf169454b287f33847814a403d
SSDEEP 12:7+t7mOpqLWEmlP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBy:7+t7zqLsO7sL7yot3BVrHotGGSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

1004

Path /data/user/0/com.wait.hero10/app_crashrecord/1004
Size 222B
SHA256 102b45b12de0933902d35fcbf67139a06ebac20eb57f5bef38520546944c8838
MD5 5152747b3208179e257ef7bb44400bf2
SHA1 1e68a4e84df76959808977cc8f9fa70ba3539e28
SHA512 1be60a1df766917221674c35da1e1f029e58831ee0536b7f5155410f4afa1ad8384fadb7799622f0706631bc3dd12204428d0bb78ea0f4ea2f7f4b9846879877
MD5 SHA1 SHA512

Submit Download

1004

Path /data/user/0/com.wait.hero10/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

ZIRCO

Path /data/user/0/com.wait.hero10/databases/ZIRCO
Size 24KB
SHA256 508320c3ffcb83d4adc9e6d3f28c178a5237dc3ee89655c46c4ff890c04c6961
MD5 e768eebb3418cb032127d69e205da787
SHA1 873f232ce8a704c320cf850f9a34502a66352355
SHA512 78c06dec647f495305655b83a81247fe0b79f89c8475a8d2e9b103a540e6112284ad88b4ec900a1dd30b1c6e255f8f7bc0863e1eacc852edf221d7c12793ffb1
SSDEEP 12:TLjq4Xa1U9Q6LTSFbyYAyO9eFu/9Q6DfRmBEyPbD3Owzkaq:TL0O7qAT91Fz0GSzz7q
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZIRCO-journal

Path /data/user/0/com.wait.hero10/databases/ZIRCO-journal
Size 512B
SHA256 2782cbfca56fe2bb8e1f6802c357661d622a160078ba3f30bea488affb205c8a
MD5 a46ebbfe63b872fcdfcc254923727230
SHA1 ba56c118b7cf75e91577b485545de9c7dff7a2f3
SHA512 627db6ce0b6f4da170483d6a079dc09410516865128b7b8590208db5b2c576b3362136c0cc4496d4b4afe1547e6cfc6ddb72ec17946d3651ce4a0ded02bcae4e
MD5 SHA1 SHA512

Submit Download

ZIRCO-journal

Path /data/user/0/com.wait.hero10/databases/ZIRCO-journal
Size 8KB
SHA256 86863ddd8e816110bfc9d8ca838d13a9cd96512b6e6c9d43cdd951aa0a8cbc8d
MD5 2cdd5c20f0f9047a1d65cb1904518670
SHA1 46f59d2c1705de22e5e47d495c7dcb66d296df3b
SHA512 5fead4beec7c0da5a97d0d94d887317dcf740db7181ada950bab4aa9360e6a4f849b9e46c26690733a59327be440be7763afea1169cfd0c076e6639c73df5465
SSDEEP 6:7+/l974n1zvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK0:7+tsqLiuWdYRmBEyPbf
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZIRCO-journal

Path /data/user/0/com.wait.hero10/databases/ZIRCO-journal
Size 8KB
SHA256 c1a0e68b17608649b27f8adefcd20b8a80b1238f4d1ddbe8ca31a6873ccd1876
MD5 487520cff31db9c9bb0d62a66b2a3cc8
SHA1 085992bf4dac5c8b6408ce2f30937b4dad101628
SHA512 b25c0340613b964fd6fe3e4c93d7457197f8b1f24474f4c85879d142b74f99e7fb4673f1ca44701e11d7c759303d79208f1476dbc407f3f7fb4dfcd5a2def8fb
SSDEEP 6:7+/l9tSHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK24//L:7+tUqLJdeWRmBEyPbH4XL
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZIRCO-journal

Path /data/user/0/com.wait.hero10/databases/ZIRCO-journal
Size 12KB
SHA256 293c77f010fcd453248ffd4d7fe8b2c799f63f7b98b7fa67cbe6404ed70c25e9
MD5 010aec0c108901cc1ce82df99c8cb9af
SHA1 b9de9973f480024a65a9cb1fd7b3cb4e0aedb42f
SHA512 a339a1d5ce0d3266da80c0eabd2d4031fde4e50e9a983d69918421c83e6e96ffbcbc7ea5578cb96f8d428a569c3c316ee0d8e28362e55555a9535c698e1b708e
SSDEEP 12:7+tZooLsWqLTq4Xa1U9Q6LTSFbyYAyO9eFu/9Q6DfRmBEyPbM:7+tWozqLEO7qAT91Fz0GSM
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db

Path /data/user/0/com.wait.hero10/databases/bookmarks.db
Size 20KB
SHA256 bcfd750cc2e9e493b8d6d5f16d5c8d4283473237a6d18380f1434950565bfa4a
MD5 eb631c671af9782283e6c56826bd6e0b
SHA1 cc65993d0205ef5996cb9945115556519fe9e526
SHA512 6e307c23b3bd4aef78d56f1934d0fb018a593ce14c780eaf70e24e5d4d67b193563b297d92732e9694fadc8d1b045162ac9ef48877b469f018791c3b7eab8f63
SSDEEP 12:yTyTViuZa4OyNTSFbyAERo0K+S8oJVl9T5PbkHO+q3dfRmBEyPbAVOwG:6yJiuA4T7EWozOHOvt0GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/user/0/com.wait.hero10/databases/bookmarks.db-journal
Size 512B
SHA256 a010b0ef72d13983259d10b0f16ace5053787004a2fc6a7e246fb0743a0587fa
MD5 deb3919dae706520d1a7afe3c3bb78ee
SHA1 d5f4e47d0fb289f13b2b588782fc4903c8d0cd26
SHA512 2586cf4dacef363a7fc6290fe390f263b65eb534e16023a96bea38aa238358d57f9f219cac7fb5a55284677994399ba0f41b03fecc933ecb405a5ca7579af543
MD5 SHA1 SHA512

Submit Download

bookmarks.db-journal

Path /data/user/0/com.wait.hero10/databases/bookmarks.db-journal
Size 8KB
SHA256 994259a4c44e175e77ed5ee55fe4af9f19af404dae5b68557b3b1cc63d762b1a
MD5 e02ea33e5823d4a5788a8a8a8cbbca9c
SHA1 97125d5279130c3f83c579081b9edbd609cc0d69
SHA512 37dc9a59325152030d3d2c4528f7f71daba83c60cf1799c4af8a264c51b8a8997af08e7764a9369bb9bb0a15b72299a8dce06cf9c157b987d90ddfbb06b90cd3
SSDEEP 24:7+tS9qLGQUXBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGST:7MS9qOX85WuAriStwwuMN5meposST
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/user/0/com.wait.hero10/databases/bookmarks.db-journal
Size 8KB
SHA256 22dad6b0b76de04b938075b022e2a383a3ab6476824a963ebcbabc7a8086d8f4
MD5 aaafdc2ba22f98a595360e3d85f4c97c
SHA1 c87eccf03a96c110473b273755c4d8fa1cc3f5dc
SHA512 7b4c30bdcc78d6b5ebd4af33ceb7673f78e7704a12c8a5d4cef179ee916fad7f7ca2361de92013c9d14450f9f535f83fe6adf5adfb2ef2ed8d418901245f0e2f
SSDEEP 24:7+tnqL6gQ9XBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGS/:7Mnq2NX85WuAriStwwuMN5meposS/
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_

Path /data/user/0/com.wait.hero10/databases/bugly_db_
Size 52KB
SHA256 0da71321d3de9bac8855c025c751ca50ccfa2df16fdb7824de8834399bba692b
MD5 1018b0ee56c6d05c03297a60cbc6fc8d
SHA1 fc1752b7cbe88ed8ac2dc4f04fe3cf8c58e52638
SHA512 26c083b77ed41169eaab31c3efa52978bf621733b793073a3e4406f80607a97eaea9797a994992bfc0ea945fe0d6568ee8c60aa9a9f1245883c734c2754b1a8a
SSDEEP 48:TjSX85WuAriStwwuMN5meposSGViEiIdxBCiQK:z53AzwGViXIdxB3QK
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wait.hero10/databases/bugly_db_-journal
Size 512B
SHA256 148d459c97d27dfcba81b82c5583461084ab527feba5c215b64512f2be975a25
MD5 a183fbace840c3db818e4e1d9fadee8a
SHA1 d6ab6cbc9bc1b58af3d188d38ffab55563d8e766
SHA512 5289edc5f58939a2a0773e39617a8e227c2899e53012efa3e7fd96b3d2c20270a17de8b394bd25f6a25d03742d34d458858f357f1ea7c3537493c3fc4e8dfaec
MD5 SHA1 SHA512

Submit Download

bugly_db_-journal

Path /data/user/0/com.wait.hero10/databases/bugly_db_-journal
Size 8KB
SHA256 9ec3d08dddc8146a0f5a455e0b9bb9876da456adaa069e8c114294b065444364
MD5 aebd3b0c5e01e4e26f5efe5d4941a538
SHA1 b5706bd3ae3ab13b3fa29c1225121c45163bb979
SHA512 118510733db52488b5e57514c6717f336d8797280f8d57c89a99f33ea1542488c8d35ad60c3028264312ee9295f977b3f56c4ce55350489f548d64186bc9bcb6
SSDEEP 6:7+/l9dFn1Mfg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKB/:7+tQqLiuWdYRmBEyPbW
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wait.hero10/databases/bugly_db_-journal
Size 8KB
SHA256 1c9f43b2043cb62272387f565e17bd30e800fc9e4de83326918067ca54ec3ae9
MD5 d551f0b224e7b8d30b41a213db95dc0d
SHA1 0171dddb666972a2df39aae573158565d8d19e05
SHA512 9b088e893a528c45a54e129b4b909796568e14d5c47f96eb398530a48f12e78f07a1dcc65a672a8d6796c63f11b9bb0be9eb06943790f9b1bdbc74fcf4123192
SSDEEP 6:7+/l9YPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6ZVM/V:7+taqLJdeWRmBEyPb1ZqV
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wait.hero10/databases/bugly_db_-journal
Size 8KB
SHA256 e77d424dd5562526b6ffa25f867e133cb970d7a96714fe6417969a9668d85c77
MD5 ae1bd6d82290a71c7864c7297b314834
SHA1 05c9cac89336ac9984da17fb182a1b88b7f5024d
SHA512 10e7beb61244a79f2d970a3c6810c8e07f309130daed15f9a3e2283f266c12b521ee09ff25d78b6ec78aeeeef13eceb7b4b7916c412581aaac8fe8382d1329fc
SSDEEP 24:7+tXqLLQDXBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSt:7MXqeX85WuAriStwwuMN5meposSt
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.wait.hero10/databases/bugly_db_-journal
Size 8KB
SHA256 12428a7603f8176f85a4da03a2a91924311529ad71d471071251aff92d016176
MD5 69f3f8ce0c4f7d6cac194bd24712e0bb
SHA1 effdcb529e371e913fbab73cbe80fb3acfa6a841
SHA512 d129ac8e409f031681f76e82d8abc73636c15383baa61908460e2a62d61487e796165796b785f83d8bf8aeaa6e5b36dc549ea9bedb263c1ffd5164299c7edfcb
SSDEEP 48:7MBxBCiQKNqOX85WuAriStwwuMN5meposS1:7UxB3QKNm53Azw1
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db

Path /data/user/0/com.wait.hero10/databases/weave.db
Size 20KB
SHA256 9041bc32bd13ba721f721221300d4bc360ecb432968050993a03204edf6c6f2b
MD5 cd6837c095676c6450e4b5bac11a71ea
SHA1 a3068b117cea57cf9b4d49094970141c1a6b1b1e
SHA512 139068b915980b92cf3a294a00772f1f8c235260a23e935112cfd27c86a6b858b3e71439a8d80268d8410235114e97293a01876f5b74768a2fb3e95c8addc8c1
SSDEEP 48:TeX85WuAriStwwuMN5meposSrhHf8CiQKYViEiIdxBCiQK9:T53AzwrhU3QKYViXIdxB3QK9
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/user/0/com.wait.hero10/databases/weave.db-journal
Size 512B
SHA256 33d009d4be0c5c3a4be1e053fcec966b3e5bf9cc3ff8bcd3055e8ffaa800e490
MD5 94e066453596bbff31eaef50a8f3cccf
SHA1 c7c33cff4a14a61eb308d2cb1c2470ff85bc92f2
SHA512 20d0a450dcfbfa4abd3eea99a888d543c2bef4b4926971756e7d7ca1cfabc037e85a95ec01a693dd9a51c5f80c6c008e5d493904b88b98de719ca2ff5487e194
MD5 SHA1 SHA512

Submit Download

weave.db-journal

Path /data/user/0/com.wait.hero10/databases/weave.db-journal
Size 20KB
SHA256 03387fa4a2cb9e6d97e6b7b989e823d6607bbd1141c8b11aca71f0e65eba4572
MD5 004c40749493124b1cfe9dd83381e8d5
SHA1 c795469f58059125130d2d6e6f4de1a74a2f7468
SHA512 ddc6b5c842322697f057ce5ee65b205dd1e63a86eccaf2edf0c8cb7ded3736a27aac2da993d6db3e6ce04883510e99700ebf0581e58a9bb7f8437c4c7fd8f849
SSDEEP 192:jxKk3iexhQKs2xKUgQK5huQKYViexhQK3:jxKfY2h2xKmYJoY2s
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/user/0/com.wait.hero10/databases/weave.db-journal
Size 8KB
SHA256 fa5c4f02c6dbd3c281482e673f4ac6616b5e29a14a1741f8fbefdfb7c369e947
MD5 794d5fb6b006c03d73bf4f6b760f857e
SHA1 4f4127488c26fad682a4dded380c452515b1ba1a
SHA512 c8b792a57cd3d561e428580ba3a361768b1a36d1c69e087a84e72dedba96606f27ad7f406853f31ed252c77df8ae534b17b30204da5169fff2a54a9dae532205
SSDEEP 48:7MrhHf8CiQKYViEiIdxBCiQKlRqeX85WuAriStwwuMN5meposS/:72hU3QKYViXIdxB3QKlRW53Azw/
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1716901417944.env

Path /data/user/0/com.wait.hero10/files/.um/um_cache_1716901417944.env
Size 1KB
SHA256 96db055710273373e33afc967b996fa6fdc4b60db55fb6ca3471c1821329ea26
MD5 08c2a91aa0b6b27e534f797c0da4698a
SHA1 2799513e0aabce32c8ca68995531f10d6302cd52
SHA512 f7897eea6a7bce0fb35b6500e3c059de2d07e79007cc667ebef510e5c7d112e3d5e40dcf3f63217d672fd3782eeed2fa5a1affcb146a1e784c86770b8db76c27
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/user/0/com.wait.hero10/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 f4688f342ade293c2a042cd9d70c917337c5bd0eb36a9d11f4be56a4bfddc55d
MD5 7ff9fedc978cab0c37acdcb5bb4a7c0d
SHA1 7d7d7afaeb79be4699a29c5c3723f8bd97fe991b
SHA512 1b92bb556dce53583956b9134348d91c194ab07946f4907b6e6e9b8efb0e3bbf3e5967c5187d651dea853641af007991fe4d095cdf3a625f1f84a54bad6e99ce
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/user/0/com.wait.hero10/files/exid.dat
Size 64B
SHA256 7ac1b960f0453da8b39a94411540f7cf93128fcc60af01bd06b5f0bd2eb99afa
MD5 68b1bda9af2316b8a50369ddd8fb06da
SHA1 0cc78e671311981fea8bb8c613cd0fabe3ca42c5
SHA512 14488872c5fb27c28ad80a70781f6785135a75f5b54d051ada197e0e0f32839f7e747780682adf4f9399e1dabf1633ec5b6f5581a6c4168e80abf95b015af38d
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.wait.hero10/files/umeng_it.cache
Size 350B
SHA256 df80004aa1451483327a65acff8cdcbc612b674486b50df65d5a9a2b1e7a15b1
MD5 65a7a6880f84b7df263a9ec3c9f1a3b7
SHA1 ccad3cd14af66266c2a149ad549d0f39b48b7f7b
SHA512 5050ea33d5bd58984fcabec8c0dbc3ecdfa3a18163357a55445d23ddff4193d0932a56cef25f742967b481fdb7b64982b58164293e738a9d969cc19f80c459d6
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads