048e9f8d47817336d1dd147f3c2472576600f7e59457455e406ff3f19110818e

Analysis

max time kernel
17s
max time network
179s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
03/06/2024, 04:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
908145d4321e78182b7cac31697e8a60_JaffaCakes118.apk
Size 18.5MB
Sample240603-ewe5waba7s
SHA256 048e9f8d47817336d1dd147f3c2472576600f7e59457455e406ff3f19110818e
MD5 908145d4321e78182b7cac31697e8a60
SHA1 d310bc84dd7f385b8ff5af8aa42e26dd28e4e65a
SHA512 45f89a45978c5ea11e75197f530de98b6aafab08702ab9db8b6f954869861bb7d037fb07993bd6715c1164e6dd8faf88f29c99fad6dabd897c233e6fecdbdd1e
SSDEEP 393216:W5wiswqbO2HX7kNM5AUoHWFOZ+LS/9R7enrvpDHATurJa:3wd+X7iuWWFZLSrervpkTuFa
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	vz.com

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	vz.com

Loads dropped Dex/Jar 1 TTPs 8 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/vz.com/files/mmplugins/plugins/FrameworkPlugin-3.3.apk	4447	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/FrameworkPlugin-3.3.apk --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/FrameworkPlugin-3.3.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/vz.com/files/mmplugins/plugins/FrameworkPlugin-3.3.apk	4335	vz.com
/data/user/0/vz.com/files/mmplugins/plugins/CommonPlugin-4.4.apk	4471	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/CommonPlugin-4.4.apk --output-vdex-fd=61 --oat-fd=63 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/CommonPlugin-4.4.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/vz.com/files/mmplugins/plugins/CommonPlugin-4.4.apk	4335	vz.com
/data/user/0/vz.com/files/mmplugins/plugins/BannerPlugin-2.8.apk	4494	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/BannerPlugin-2.8.apk --output-vdex-fd=62 --oat-fd=63 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/BannerPlugin-2.8.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/vz.com/files/mmplugins/plugins/BannerPlugin-2.8.apk	4335	vz.com
/data/user/0/vz.com/files/mmplugins/plugins/WelcomePlugin-3.0.apk	4525	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/WelcomePlugin-3.0.apk --output-vdex-fd=62 --oat-fd=64 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/WelcomePlugin-3.0.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/vz.com/files/mmplugins/plugins/WelcomePlugin-3.0.apk	4335	vz.com

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	vz.com

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	vz.com

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	vz.com

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	vz.com

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	vz.com

vz.com
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4335
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/FrameworkPlugin-3.3.apk --output-vdex-fd=55 --oat-fd=56 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/FrameworkPlugin-3.3.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4447
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/CommonPlugin-4.4.apk --output-vdex-fd=61 --oat-fd=63 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/CommonPlugin-4.4.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4471
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/BannerPlugin-2.8.apk --output-vdex-fd=62 --oat-fd=63 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/BannerPlugin-2.8.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4494
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/vz.com/files/mmplugins/plugins/WelcomePlugin-3.0.apk --output-vdex-fd=62 --oat-fd=64 --oat-location=/data/user/0/vz.com/files/mmplugins/plugins/oat/x86/WelcomePlugin-3.0.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4525

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

smssdk.db-journal

Path /data/data/vz.com/databases/smssdk.db-journal
Size 512B
SHA256 30df7efa625894ba62ce40ae2297d098a2191323e0e7394311417c8b2ee05ce8
MD5 87635f87c8d623f8d928dae5b210a5a6
SHA1 a7ad5f662d732729724911b2f98999a357f3cd4a
SHA512 769a21e388a17fd2b4c27ae1227ba8d93b84fc609059d4fb467f73de0f316a3471d15bf3779c186f93a7372bfaa933dd5ec6d5d297288c8a5fcd0753b2aba294
MD5 SHA1 SHA512

Submit Download

smssdk.db-shm

Path /data/data/vz.com/databases/smssdk.db-shm
Size 28KB
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

smssdk.db-wal

Path /data/data/vz.com/databases/smssdk.db-wal
Size 213KB
SHA256 6fef2e3ef42223998cb897c10528caea2913c0153a4bfa6531154df723bb7853
MD5 5431f89d38f4497a694ea1d809c571dc
SHA1 73a544ce700a83ae40eebebd1a991d95c5a1ace8
SHA512 dd471bce5289508ce7ac763eb2096eb960c722185ba3c07dd23a06927a915a1b376f87805018b2206fc76cb9d44537e380d02641b92adcc8bdb1df1ce2ca3dee
SSDEEP 192:Eb7Lw2lVDZbY0+9PQnin3PsqP5K+Rw9Q8n3xCkX+LlLnFB8Qw9TSUaqfWsL7bsDI:e7Lwc49P623PK+Rw9Qo3x5NQw9Td4Qdn
MD5 SHA1 SHA512 SSDEEP

Submit Download

vz3.db

Path /data/data/vz.com/databases/vz3.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

vz3.db-journal

Path /data/data/vz.com/databases/vz3.db-journal
Size 512B
SHA256 f663a4afe0db396f62e6f1ec363dcfcabfa3777ceaf7c106759878f95e588dfe
MD5 75c3ae36e2f7bda43cfbac74f392ea59
SHA1 c384eb01f5b8fce355a1617e65769b0991129830
SHA512 9e2f59a5c7677d3b67e989371c5a9a6180e9b1fdfc5608b088bf3f1602b2620f321a03454ca5fe51ca5a8cc83a2f1da5c1b2d6413938d00ddd2dc837d9a85ade
MD5 SHA1 SHA512

Submit Download

vz3.db-shm

Path /data/data/vz.com/databases/vz3.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

vz3.db-wal

Path /data/data/vz.com/databases/vz3.db-wal
Size 205KB
SHA256 30a250f642765f44f45f0f38d9ba83bd4361f307b3377415fe4d8e9e221476f5
MD5 cdcce24a69923c130a1f59480925e6e8
SHA1 4a7febd58b7a6553d27291e91dea63e9296b3974
SHA512 99c7f3b107809978a5490e9b024fa0ccadd31bd7a2153dd9568d5aa300b2ea705003a50d90462409df46577b0f5194ea988de5a2c883864573730de9d4c3d7b6
SSDEEP 384:yp6h2bKCgopoFAoy/1ZYGWU6cJkCQ8/IeIBJYf:ypHbmMSA3iJA
MD5 SHA1 SHA512 SSDEEP

Submit Download

vz4.db-journal

Path /data/data/vz.com/databases/vz4.db-journal
Size 512B
SHA256 82501c0d064c6ad48fa1f7e3ea25b469bd7e3888a4e9163b79c220602c754460
MD5 abd760aab90909499104ccb4333cdee1
SHA1 c9e202de3d30cf5a5856254574e4f2bcbfd45077
SHA512 a8997240f363254058b1752e222a4db91c1d5b29e152439c7c5f13b770261104eb671dd9eb0ec1c1547b7eabb64b73de52c8b758b6dbdb99083ce253e2b4ebc3
MD5 SHA1 SHA512

Submit Download

vz4.db-wal

Path /data/data/vz.com/databases/vz4.db-wal
Size 44KB
SHA256 a035d500f5632142a51c6ae2afa5eb52928a903cc6b4d81380de92cc940f0908
MD5 ed76d8567d277bfa11e0e1d54a0f4a1b
SHA1 f228059defea47b1afa03f2ee225264e64129aa6
SHA512 1dc9b48b4dbf857d74c4612c5108b5f66c7a666a892552bb8f94a5e8e8a17d6038536994d65b25b0ce7a8d094983d1542be8eb1d5ac3f6f1473c7f2603a7543f
SSDEEP 48:/zNSP/Imc8ZycCY3j1AGX94CiCJwf6eVN+hoaSP/7i+:L0Pgx8ZycCY3jGOWCiCJwf6vCPN
MD5 SHA1 SHA512 SSDEEP

Submit Download

BannerPlugin-2.8.apk

Path /data/data/vz.com/files/mmplugins/plugins/BannerPlugin-2.8.apk
Size 53KB
SHA256 324291e648daafc5a213e3535ee76e6ec9964f7d6c611d301eb671f53010d517
MD5 848a0f6dee1f516e7ab7c03174370dbf
SHA1 efc3ee3430b0636d09a870dd0f5b0046f2d3208e
SHA512 5d154fa6eedabc9fc500c8b7645e780c5668789ded96599cffd2042fa1584c8913eb063e649c0d86e26496d57ac03180560328978c6661aebbacafd600c0b9c1
SSDEEP 1536:ALBBgNeASxUC0nUk79YukilDb7aFYPduSq:AVZVk7D/7aFYYj
MD5 SHA1 SHA512 SSDEEP

Submit Download

CommonPlugin-4.4.apk

Path /data/data/vz.com/files/mmplugins/plugins/CommonPlugin-4.4.apk
Size 527KB
SHA256 1bac6e3aa07a0fe1d29316d93dad4f3d82bf92f761971b61062a24a48296769a
MD5 31b1c9c7bf5548dbcd03f35e01565b46
SHA1 0c50f07520a40a0db28e6439d4386fad47ee1b8c
SHA512 56ab20a59808a11a4a0c5408380a301d0887807262332671f3cec8fe8d5338f360edbdba7fa1f3c8d3007888706545927126266cb98713ee21017fafa2d999d7
SSDEEP 12288:+Le2JLGMk3r0+YjD2aNc4zCUlOLNCJ4v7ZVetyke:oVGMIJYj6aCUlOUJg7ZVA1e
MD5 SHA1 SHA512 SSDEEP

Submit Download

FrameworkPlugin-3.3.apk

Path /data/data/vz.com/files/mmplugins/plugins/FrameworkPlugin-3.3.apk
Size 18KB
SHA256 47de5b649090505e1c7054bc3152b6b5f360fe90db35d2e32acfa2c5f7664ebd
MD5 b5d09bda650ec2bfb081844aaef26650
SHA1 d87a19cbf278b3e14309e9714aadc2b139cc3ddb
SHA512 2e16d25e8ae1d6d39c11c6a81745c8b2b66efb4f10472ccb97dc02224a5dec6634ff1b682d93d5172f878c1c10ef5787e234b6995194da4c786f037ab77dc5a4
SSDEEP 384:2UdBCUR0bRqX+X6Jjot8abgRMEafy6uiF9HjVM8lwM2O:5zlCOJJjv6pF9HjwbO
MD5 SHA1 SHA512 SSDEEP

Submit Download

WelcomePlugin-3.0.apk

Path /data/data/vz.com/files/mmplugins/plugins/WelcomePlugin-3.0.apk
Size 34KB
SHA256 55c5682f6b1046c58d71239118e34ae39c478458077855ea138472fe15972db5
MD5 53b5892acd6483e96ea19addcfe67da1
SHA1 9225a1b634136a74852dc556f38adae3a9b98530
SHA512 1bdd98905c1083aeab7f8170afbba375928b6d979425eb5a7823ebc496639380e677a4b4149cd9ff8e65cd1e1234074fc2b2770b1f956dcf30150e2f6b8549a3
SSDEEP 768:D3rXFWLKxe7X+Fu9kpP7MD2BvdHxNcO6uv/jPk+EFg90oPp:D3bgLKxe7wumFMDQxSruXjM+E21R
MD5 SHA1 SHA512 SSDEEP

Submit Download

BannerPlugin-2.8.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/BannerPlugin-2.8.apk
Size 92KB
SHA256 6ed1e68f8cc6dca011ec16fa2b5511b0660a75ee8a2132294c265f3a805bb700
MD5 b5a6b81944a05a45841cfd1f5cc790f4
SHA1 85fd03f01447f0043bdb8e08628bf4806bd9a164
SHA512 ee09a057f235df41b99ff39d0d74374754a03b724dd41d76ebd690ecc46b29624c296a2b2edf1f1fd0c28f43ee8d7bb8ebf0efcdb788d91c4f81b6e9783afb7e
SSDEEP 1536:NgVLN8dd0BJQ6sJlkFoZkXMp9vX076xi5tHusAgYLxecoC+xiEEReq3:Ug0splKXMpJkKifULw/ERH
MD5 SHA1 SHA512 SSDEEP

Download

BannerPlugin-2.8.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/BannerPlugin-2.8.apk
Size 92KB
SHA256 02ff817a82b417072f303e57fcb517d7f1f17807abe31744c8acd5df03c1080b
MD5 bc2187ed7449fcf95c4a3ccee26ce0d9
SHA1 fafbaeea97a4f4236c9ce0204cd3996b17e2b587
SHA512 a11b423df7a7b2190f43ee0828d3d59d03eb0d8a3def9c4a0349d3e84748433e15cea2c05baafaf4112b6b7ee733dd46d58d865a1d995e09921613f1ed8bd66f
SSDEEP 1536:NgVLN8dd0BJQ6sJlVFoZkXMp9vXKWZxi5tHusAgYLxecoC+xiEEReq3:Ug0splzXMpJa2ifULw/ERH
MD5 SHA1 SHA512 SSDEEP

Download

CommonPlugin-4.4.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/CommonPlugin-4.4.apk
Size 954KB
SHA256 a1a714988061aa11c89b66d6953ff6f1c624609929e76d251b0651499920e54d
MD5 ac7578e110e8f77a576a6f17898543b2
SHA1 ebe4729a430b96e3e6ceb6dc0c45f09dc09d8192
SHA512 e4390b64e81548de7a292941be26232716fbb5e57cbc130c0a8eb40b18e49264883f8239c3d5a768f4a1d7fde959fb491daf0dfae9357197003375b9c8c42441
SSDEEP 12288:Op3tAm8m1tVR/j9Exba2qhF8dt6W9pXNBb/154d2bd9Ked9ECJMRoIaS2pN9og/3:OpdAm8mnxkJMItbp9Bb9eTiECXvDkVG
MD5 SHA1 SHA512 SSDEEP

Download

CommonPlugin-4.4.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/CommonPlugin-4.4.apk
Size 954KB
SHA256 93ad58103c7f502d0f52191dca17572b045623fc95663f31e29ffe5dcce7aae3
MD5 8e9a5c92465e7d192f28d65134a7e8da
SHA1 82263bc635eef4733cd42c24505d22716a3c3544
SHA512 f7caf2fc4ade3effca5a1781e0c543859de277a06a951f13e0f0c7e17be597e199c3885293365df6cfaa1cfe9135be4215ff2f107a1f1f5aa2de5e5011788ac9
SSDEEP 12288:Op3tAm8m1tVR/j9Exba2thS3akr+dHigX9Eavbpdd2bd9Ked9ECJMRoIaS2pN9oW:OpdAm8mnxkJK37KEg+azPTiECXvDkVG
MD5 SHA1 SHA512 SSDEEP

Download

FrameworkPlugin-3.3.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/FrameworkPlugin-3.3.apk
Size 31KB
SHA256 9433a580293750e369bf25142927f974c5a132f066efda3b4d13f594015284e5
MD5 8505379d1f6c6d899ce2643d0f62cda0
SHA1 db6c07de7f674027b01ebf344ad42dcbbdb83e24
SHA512 4021c8bf083a60cd2983653bb25d9faf278dc9c592a324489033b0d6b6fbcaa5eceec20a699f0ba2fad59b562627f9aaeb170626c67adb8d09412741d73ead4d
SSDEEP 384:AweZTzXDFn+TylTLgvZL6KBrxcxqwOBUeNqksQWrBq+j8pX2RsU05Q8Qtfe0X/gO:ettn5E9Cq+QpGNWQtN96UO+
MD5 SHA1 SHA512 SSDEEP

Download

FrameworkPlugin-3.3.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/FrameworkPlugin-3.3.apk
Size 31KB
SHA256 9e50c350bcdf1516340c1e42299cc2df2ca2327c370e28184156d11bcbb79b94
MD5 1587722fd6bb9c9f4c44bd781b5adddd
SHA1 58ae431bdb6bde42a1a211b1fb9bad96437a60dc
SHA512 00ba9ee11b59879e35bedd364244ee8d6693e4d804b9ec68fbd6f4c15a5b04bbf34558bdb22059e15f5c27d8e08f83dc3a366841bc94b6a8b92a3ec90f04f94f
SSDEEP 384:AweZTzXDFn+TulTH1kNXHX+txfhJDeNqkAQWrBq+j8pX2RsU05Q8Qtfe0X/gC6UD:ettn8OJUWq+QpGNWQtN96UO+
MD5 SHA1 SHA512 SSDEEP

Download

WelcomePlugin-3.0.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/WelcomePlugin-3.0.apk
Size 45KB
SHA256 0fe1689b29f0febfca2c8daf82bb16b15f13aa71f76da3100dd5673357e8af43
MD5 2a34e1ad685e79e95d01f61c6feac5ce
SHA1 4927e639da999221faf902fc73b9aa6cbeae19cd
SHA512 cc7b80f058956aa0bef1609ef3e45bc54f3aa3d4128e2572e8e02ad82d2a0d89097b83a6812be0db0c0dc28257c99acb019fc03b89948015283f4c2413bbc5f6
SSDEEP 768:ZMuPFnl54xWzQk1nVlZRMcWS7xX4Qx1Xs6Q16NG2rQBoXGHZIOaoMWHBr3U:ZMunGxWzz1pRMcWCxDds6S6NGcQBDHZM
MD5 SHA1 SHA512 SSDEEP

Download

WelcomePlugin-3.0.apk

Path /data/user/0/vz.com/files/mmplugins/plugins/WelcomePlugin-3.0.apk
Size 45KB
SHA256 ca97f3fa04706dfc6ad5d05a258b439f9d6b9af0aa024301c619cda459c3bf16
MD5 2b9f1af0c5054c50c486a71e5d50a82d
SHA1 a7cbe068d43045287876dc77ca0838762a433556
SHA512 780954d99ad38edfc0fc89b5915741e11ba63f49d84094a1aa1c52b865ed957732275dbaa725cb07427d0d87f8d45d1bb57a45f3fd7475b14f4ca72d594d7de5
SSDEEP 768:ZMuPFnl5ZxWzQk1QVuZRMcWS7xX4Qx1Xs6Q16NG2rQBoXGHZIOaoMWHBr3U:ZMunvxWzz1xRMcWCxDds6S6NGcQBDHZM
MD5 SHA1 SHA512 SSDEEP

Download

journal.tmp

Path /storage/emulated/0/Android/data/vz.com/cache/uil-images/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads