2afdab32ee3bc778c453435735d780224aef9a97c71fd02ea671838948a25715

Analysis

max time kernel
173s
max time network
185s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
11-06-2024 02:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9cc1594d93a6ad0b71986814473ebe66_JaffaCakes118.apk
Size

23.0MB
MD5

9cc1594d93a6ad0b71986814473ebe66
SHA1

f89f5d6ef7a45887932b92deb5dd8853e9300dd7
SHA256

2afdab32ee3bc778c453435735d780224aef9a97c71fd02ea671838948a25715
SHA512

4a1183d89ee8eee69808419ba1baed08169586813abd6e8a519e00574a752e9aea6e5c01dcd8f3f2c3e0894899eb88c4be7d31417cd986968318ffdf1977a66a
SSDEEP

393216:Fba9VL6ZX0/bigbR5DKPKlagNu0xl/oWy6hXOYYsHtsH7ZjBHMX:qLrigbXDKP4Nllo6XNW7Zjg

Score

7^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.smile.gifmaker
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.smile.gifmaker:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.smile.gifmaker:pushservice

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.smile.gifmaker:remote
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.smile.gifmaker

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.smile.gifmaker
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.smile.gifmaker:remote

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
16	alog.umeng.com

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.smile.gifmaker
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.smile.gifmaker:pushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.smile.gifmaker:remote

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.smile.gifmaker
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.smile.gifmaker:remote

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.smile.gifmaker

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.smile.gifmaker:remote

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.smile.gifmaker
Framework service call	android.app.IActivityManager.registerReceiver	com.smile.gifmaker:remote
Framework service call	android.app.IActivityManager.registerReceiver	com.smile.gifmaker:pushservice

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.smile.gifmaker
Framework API call	javax.crypto.Cipher.doFinal	com.smile.gifmaker:remote
Framework API call	javax.crypto.Cipher.doFinal	com.smile.gifmaker:pushservice

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.smile.gifmaker

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.smile.gifmaker

com.smile.gifmaker
1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4267
- /system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.smile.gifmaker/lib/libuninstall-watcher.so /data/user/0/com.smile.gifmaker/lib/libuninstall-watcher.so com.android.chrome/com.google.android.apps.chrome.IntentDispatcher http://www.kwai.com/i/feedback/uninstall?c=XIAOMI&lang=en&country_code=US&ver=4.50.0.2271&vc=2271&sys=ANDROID_9&ud=0&did=ANDROID_fb7a284e272045fe
  2⤵
  PID:4442

com.smile.gifmaker:remote
1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4309

com.smile.gifmaker:pushservice
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4457

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.smile.gifmaker/cache/event

Filesize
28KB

MD5
35813de780384e26805bd264440ad7fd

SHA1
fb71aa36bb2db2b055ba16ade790c45f386a7128

SHA256
3ba97ff0cc3c7a0e3ab79b0b76bfe851199c059701674fc6edbcba34ab56ccfb

SHA512
53a567afc2bca2755d66f0de8e5f3a6dc1f799633475682abc1be6d405e74d7fcebdba535a80fed17d069408d1ed38f5cb081d842162973a4382b60fd0d8542f

Download Submit
/data/data/com.smile.gifmaker/cache/event

Filesize
32KB

MD5
060715e95fe238d43695e6c1fbeda8e3

SHA1
d898baef8afa069f43e9af41642dc6d367ed428d

SHA256
9cd7c2c92f9ea3ecf8ce19674e3e39f435c66d26498f1843467c29aaebfa1698

SHA512
120492b46fdd07cb768e752e19ec10114dab7674f699fbcfb6e66be9f203bf9a1a0b5b27562822a2b9b23a8a1080595b9128cf3584467351999614c0d257b55d

Download Submit
/data/data/com.smile.gifmaker/cache/event

Filesize
20KB

MD5
30699455f33e613cdbb5fdf49f76d700

SHA1
687a7de1225c5f5ed983b26df46668f7748909b6

SHA256
1a55dd2f57a94ca05b47702b7a3c112dc40061a23f1e3ca90cc2e302b971e743

SHA512
a39a47ad35c6d0da64f3ca6b96b7d8be83b0715a97f46faf787fd92d191ebdf2c48f250cdcb5c42828b5e5c70328ea8c10a565e26d201f6a9c5581457dfaf881

Download Submit
/data/data/com.smile.gifmaker/cache/event

Filesize
20KB

MD5
65bbdf468bcf0c35a274d84026a5d9fd

SHA1
755c71f9129e73a40b99bf7a4bcc8333cbdcdece

SHA256
9b1586eb845f27243f7f2e78db70721a5b2c52cb08b87958bc800cf178c4284c

SHA512
adbf580153f375ccb6765056b4e1b72138f233991ab44acd76d41011af657350c74dff15cc69f929bbb6ccccef7395fbcd9066a7d477ac64cc6e58bd3c2c4e9b

Download Submit
/data/data/com.smile.gifmaker/cache/event

Filesize
52KB

MD5
caffaf655c39b0815c28d5adb9251780

SHA1
46e4abc6a8707a0f612e4afeb6e1d25c9ba99c3b

SHA256
b0ad9cf64748172788d84dd3510ca6532c6ff5a8f478e35d9aa2e938d68dc97f

SHA512
c8138608b46e895c6cc8e259c06e92e6ca942f2c277f16458b04e5609a8a79c81240e265ea54b732559096609962f241ab51eefa18936f648eb6da40e2dd97e3

Download Submit
/data/data/com.smile.gifmaker/cache/event-journal

Filesize
12KB

MD5
ad2b96a5d4c2e91579b2179aba333c97

SHA1
192d30f521fbdb192300a927fe487eaf773fa4b3

SHA256
f179c2d8a9937f78fb82909675ea9339975e67bd6665a29e1626465ade0bac3a

SHA512
ebb5f2e8b6a18e7de82eadcef13719f56728515f2783df18a8b233e9a83b22e8959f37af853ca9956eb10a81e8276a2dcbaf6e377df025083226e0c8451421c9

Download Submit
/data/data/com.smile.gifmaker/cache/event-shm

Filesize
32KB

MD5
3b6c5ca4ececa09626213f0fe3637e91

SHA1
e862175cd5d1e8c3dc08edab3321ab35ea1e5b82

SHA256
14d768559067d38b4794c122392f3e08be153907e375fa56a12488f585e91c45

SHA512
800c7c2ba57a55277e6fcb8929512deb4c95e9b1254cc820d43d556015acbb7dddc2c8388b1e7166171753e951629a803f08e4b4adfa4018e04ee6dee9b48024

Download Submit
/data/data/com.smile.gifmaker/cache/event-wal

Filesize
32KB

MD5
582abfbbda366ffa7c6d7dc1e302168a

SHA1
3259bf3ffa7e7cd3d33cda629cba33821299093d

SHA256
56f65366ec0ef1ce814512ff07557d16c847e58c1249aee63c81792b1e97d1fd

SHA512
ae0ccd8ad572d71156b4b06dc91501bcef27e9aa4d91a009bfebfdf6d5bffdf02e2c3e1a1bec636ebc9358af24281676c29988db50cb3912725cf31f389cebac

Download Submit
/data/data/com.smile.gifmaker/cache/event-wal

Filesize
12KB

MD5
c55475643439d4cbbb6df1f271bbb82e

SHA1
e81d39f9ffa70282ac972bf2bf0f56cd9962cb5e

SHA256
af49f369c26452158cd7b57bc3cab253d9e3faf43fe282ee2295aea67d200dae

SHA512
a67f3a5f474d34f7acb786e0fe26f9adc8f7b817ef81860fee811ffa7a20ccebf4868c771db681d8cd8d7d273e65567bd774d68bdcfcd6bb228dc04b58a13ed6

Download Submit
/data/data/com.smile.gifmaker/cache/event-wal

Filesize
8KB

MD5
8b7017ab7c9e33011e24c195349df649

SHA1
688c2a6297a9c08e45929a60b6f5861dce04761c

SHA256
74afe21269fccc0a3015d7e840af1197dd2416f08ee5d27a6bb1324972884e1c

SHA512
d0c2fb63ad701f36baa2ea6e0b7a51fbb17c5c2fefc076dcde220dbeb76e735e9f8979358deefdebc3758510686f23254c3eecbe4b11216f80ffc3e9accc3a09

Download Submit
/data/data/com.smile.gifmaker/cache/event-wal

Filesize
8KB

MD5
04ff174126b3f1d71a6e26e252f073d1

SHA1
b62dd231183509910d21bb732a88cc94d522d92a

SHA256
a7f07931cd6cb43caeab9fb4746a30d426f32c9a93b5a7c5c39900527b31bd4c

SHA512
f8bf5b959c524266e96d6572f4bfe09e44f2e6f298836ef8cdb945915985c56453a75f1af1d46edd50f1e9d8417d7e674823d93ccdacc41d198b02134e42b082

Download Submit
/data/data/com.smile.gifmaker/cache/event-wal

Filesize
28KB

MD5
0d3e99204c6401ea499fe9e6d9855497

SHA1
09829f00ca458eab7374d5079393a2cd69a2348a

SHA256
63ad014cb50908591939d6a1536f85eece807425af4f4e8a1f9b9eeab13cc5ca

SHA512
8d9a50aa9abd17e508ed3ac35a3033e8f9e550d1088baa951f53e6c4697c5ac026d22b90e36e27341d64baa3f0202bd89ca97583e99feb25f8c26b5776c59c68

Download Submit
/data/data/com.smile.gifmaker/cache/event-wal

Filesize
32KB

MD5
019e8d4136193c62a3630fc60fe02b5f

SHA1
bbbde104ea3436a56dc9e1d2cb22b7cb27ab7b63

SHA256
bc5499b3da0a2dafc31e946711105f3dc56e9a15a9342cf3cf883bcb3442905c

SHA512
01a6c5571f86b7db875f3024774ca2258b7588167787f6025fef23bbaf27bc78bd528b60a295f63fdb5cfc0c7008ab8eef1e9161a673c837fa0e1f499112d15f

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/02a62f0354c0fb86ac5507c00581867b.0.tmp

Filesize
1KB

MD5
bdef41d77825bc12c633671c8fdc8a47

SHA1
9908cf4a2be43b573bf3454c9ba340dd28f94a84

SHA256
48f558bd4ae1337b7f206c86f97002358c4e42859b127aa5f5f3f9e6166081c5

SHA512
438eb8fa64ba46b489d47963118ec593e07b8409979b36efa2089e7f911bff578f604c0ceb1e070944100efbe0bc001469cce5f3a4c5f390f434d2d819ea83bd

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/02a62f0354c0fb86ac5507c00581867b.1.tmp

Filesize
26KB

MD5
7f672c9ac588aaffc2866c16ed4d5290

SHA1
fe88023d6b01768a3c9657d01f752d63fe49670c

SHA256
6c1eaba3d014553103c6c33de89066a4c5c2f87889f49b6d469d08b1120aefbe

SHA512
2bcb4450428ec173948bb4a4e913a24e4d1e51cb3092a176c9dff73963812a234c5254b2f18ed885c9bab73a561bff612b01ffb2971399ff7fefc060bd11c5e4

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/22a264c2a4ced2934bc85db1ec75c841.0.tmp

Filesize
1KB

MD5
161928b0d7b3db352fb78e98c0ce1082

SHA1
661dcd7fbd1b8f4225475debbbae6c15ff54e207

SHA256
4fb1cfcc73d59ccd4bd440b3db33a92a4a7550832f03c4e7417338476aaa645f

SHA512
2c38d99e58150cfab760dae56ac9d681ab2de2845c187f8ef0fe53ae7bd61dbd31feda05ecd9c454258a2ca5cafb098327be57f2ac5458b039f75f47756c7a6d

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/22a264c2a4ced2934bc85db1ec75c841.1.tmp

Filesize
156KB

MD5
a530d0cb02d5a6979ee892d86f3cd0b5

SHA1
8e746ffe26d849e83192381ff524182bac514d97

SHA256
d45537ab040b1bbfe0c231d82ca4b33c9af35f5c141b4e57df4dd63fd9c76e1b

SHA512
35661fd24a00404c70dfa19119f783eae73b13c6344cd7dc1ef256395270a0f7c0bb1d3927c081df2d8d1c30a74afe472e7da82b764ad415b938b9dd02835e1d

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/4bd518201d53a754cc814439bea0ab98.0.tmp

Filesize
1KB

MD5
4f57713d754ccb60f82d49b92e731c94

SHA1
dd4e7ee6dff497a29c3ae972e2a2f0653315adea

SHA256
46799bc7fff7ecf46840bd93fd5110b095a9e921dd6c9c4d0260ae544cf8f8d9

SHA512
169653c1af33735ccc717f535397528d4bce7e72fe342d85170f47d984a9b838b3ddc76535c61933e19c799b953975c6d7e58ab416bac9d27d4e998f3be71034

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/4bd518201d53a754cc814439bea0ab98.1.tmp

Filesize
13KB

MD5
60d9e5669ceb24f53ab4ab241a313377

SHA1
7ed8d2230b7f3b3e6132354388fb651fa9dac9a2

SHA256
286baf4b2203896053e5902ebbc1f7e18a39786a4e4be69cd7dc13b55d61ac14

SHA512
03b82cb024e951a075dbf53dbc4e26fda53ad9fce82ad5c043ca04b757299a3208bae1f74b7dccc39eedf3ab48be7128635d9e182d3fa6e7dcbf7e4f7bf94dd3

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/5e381d4e571c71bf208b619e26598898.0.tmp

Filesize
1KB

MD5
4fe8b394c4abba0def39da244fe21afc

SHA1
33666a53104f395201aeeef78c17801597c9e80f

SHA256
5cb26595e5a3c602f0c91cef112f202e063a456e6d217d9560a821c56e63dc13

SHA512
1733106dad96809e2357eb8c8060f7d38b373f4a6217b1fc7d16e6f22848b981c9548a9bd5756351250eed16316ae5175ffa6ccd20754eb70f2deb38141e7df8

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/5e381d4e571c71bf208b619e26598898.1.tmp

Filesize
23KB

MD5
6124160a8a0127892b784f5b7f8f4cc5

SHA1
e5d11209cfc9e0f87ed004d4bc6a5afa331b233e

SHA256
fbf592f0c2e0e4c3f6844c53475177cd229295c95326901b710f0eea880e6c1a

SHA512
d08474ed1e0998c842370522ca77cd575856d113c62ccf09f79fbb5fe82fdf5ff8f3a488ae0ab7ef8e3e3a9b8bdf52308105effcea6e2c5036fe51babcce9c74

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/8a191a48a10c02ec35b46dd5ae70edef.0.tmp

Filesize
32KB

MD5
7b50a1b39935738752d100be36b7cf61

SHA1
2e8e234b63f3cfac46e9a0860dbe54d9c99c7fcc

SHA256
c16b7698392d6de0e9aab60804919d4ec1137d2be030b5ab5e14ef4d96ea748b

SHA512
5bac61015fb541f3bc9da14d3159e74a5dfb4ea0169708b63cbe65d4647d2d8391ad382294ede009c9886843a58e30854b4cca92f0f96e9463556caf595e7d91

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/8a191a48a10c02ec35b46dd5ae70edef.1.tmp

Filesize
17KB

MD5
be7c88efbd3711e9733d29d016ffb136

SHA1
01c0fcf2beb231828d253e3ad2cc3e6ded0df117

SHA256
fc1198487788cb561dad5925db044a96423f1a110ac28f857a188d3826bd5e70

SHA512
a4d3b640a3b82652129d43a1854eac66e4b96dc5d16384044afbf327ecc3556d2dd7df3f84ddc1c455c50924d4db41b46a91b7838dc76c9aacfac3ac7f3e38b1

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/980b6120d58a8fce04e96420aa0909bb.0.tmp

Filesize
1KB

MD5
5f0ea1e8ed21e2eb3195b962859927af

SHA1
b8d86a2110c7321a095f49a2e9297e4ed647389b

SHA256
551d919ad39f8d7800606e39877962871a90f7a1ddf585a728bb177e95b6e0e9

SHA512
dc7923d2360a89888ebb6c2987eb70c14814edca01cfd45e26d6c9644bcbac152570f4dc2ab688aa2142a2726f0f896ba68ab8382e722b6e61ea4e8a3f65b2e8

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/980b6120d58a8fce04e96420aa0909bb.1.tmp

Filesize
7KB

MD5
5135a3be89c1991ed755c5d8b15a3add

SHA1
307720a8f5b96931d13f4cc7f893ab2a4517b7d5

SHA256
5b27292098e74256b160e3345a3099e80ff9ffc7cbe406360e017ea7af2e7543

SHA512
b9ba24e81ddb5a50686b0ee8380d03e4ff207d5123b24ae23334d1bbdd7472ddcc60f869c76baa8b94718df5c8fb7aba59ce167a3eab95ea2ee39f5b983edd91

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/cd7837831f58ffed7c20dcc7f27b6e14.0.tmp

Filesize
1KB

MD5
ca91ca5f8ff569a6655731fe3022f97a

SHA1
c996952f74adfd3053cfe3bcef4d87c2e413073e

SHA256
be44bece78a0af432e1e1eee449722bb78c26f40f31e7824d4dfa54a362f2ea6

SHA512
ab180a4ca5ba0c92b822ffdb1f3062b6548664b88e66bc6c5ffc4f165f27d5b5b6da3e83b89e1a191cfcc7b39082a79eb636812739ab78be56b226c5f889776f

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/cd7837831f58ffed7c20dcc7f27b6e14.1.tmp

Filesize
23KB

MD5
556918a7bfb6b006318dec4a71d2c97d

SHA1
17af1555bc481888b87a0451e5b7c30b8877beee

SHA256
1ae2517af82feee99d2682f5467ebed06d6becc15b9b609e6fdd5f4fa618ac96

SHA512
ff9276d536ac973d6397b755e557c924b14935f2adae13f5fe7c59cb63c98a17fe13eccc89da6493755812f1c02358a2ddccd67d0b0546269811e4411c9b8f89

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/ffa7863e68bad28bc7cbab7a6c291c0b.0.tmp

Filesize
48KB

MD5
bd8a61dfec7ffde7a8a607bd6b10bb2a

SHA1
b4f7a2e707ee2261fb2501542f048c77ec1d4cb9

SHA256
acacad8f35b15e5a5063347c708210b316af25a3e825e9d4d5023839ba8bb8a6

SHA512
e0530e4c8f97a8c8af35003b555e20e295a0cbbb19362ebf66e629173ca38dfc9482ecbc5b5dd989390c02fa311bb11c7d1d90deee8ac3a4f96c0276db3f8a87

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/ffa7863e68bad28bc7cbab7a6c291c0b.1.tmp

Filesize
32KB

MD5
7dda9b6bd53d84042d72c7312590578e

SHA1
9d8e7369a863d279cc842bb76ecd6e4fb46699a8

SHA256
1e40dad126f8c83456201504df269b35152d7fdc94bce251c84921716f4a9d52

SHA512
e3f8825e4469748019ece6f41aa68c6d1761ecfe0d44c6f61608da1b84889315748be1b6a5317c1fd90d664a81f5bf9809490c835e5200ab5476226cfe45cd01

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/journal

Filesize
745B

MD5
9ce071188e41d0f7ea83cce42ea7ea62

SHA1
adb776030a41eba2ba0db338202f206561fe1711

SHA256
4f3cca0e0781ffbee9c9e3aa1403b0edd2892b5de4c56fda45a373dc1ff80653

SHA512
6a8e56c270ddebf1d6baa548c9c82793934411c4899436e9e76dc4460001db5f1d363638aeb727401c17b37453bdf9c72b0cce6b0665166a55eec20754103c8e

Download Submit
/data/data/com.smile.gifmaker/cache/picasso-cache/journal.tmp

Filesize
96B

MD5
ddc270fd5b406683a6d93a584ddba1e3

SHA1
589de4f0a52931f1f207ad91e69d61b4e75a0a53

SHA256
dfeb0a49002c365fbdb26f764405bd23167ba3dc4dee05c275231eb3e563d035

SHA512
fb9661d0f9e1f47adee79be8003b8ea18ffdc0f2d6e53602f4c997529960fe04efd8964e92f604dccd481a809a479594f3b14165d88646558fdf4399a169c2f1

Download Submit
/data/data/com.smile.gifmaker/databases/ginsight.db-journal

Filesize
512B

MD5
57860653de538db9599a1991ee7cd8b7

SHA1
a76948a26addfd5ecd3959133594410dcec85376

SHA256
c71675345520f00c1600c291b71b4e5461d75cbdfa909e30471b6f186878bce6

SHA512
7774f620f1ae7b3cbbb655961634970aa62b2539fafddb2ae1c84a522f820807adfe308e909c88213f852eea47eb3a4cd04515b034a9754a7b75adbd11201dbd

Download Submit
/data/data/com.smile.gifmaker/databases/ginsight.db-wal

Filesize
44KB

MD5
1b1624e11fdd3d9c82a7c1350fd56245

SHA1
3f58e986867c71d9e6462520df402588d6b42dd9

SHA256
399a049bf7cbba50d769329d9ae0225fea19eb42c648ce5bbc85502015e6092d

SHA512
83a57807b7bb5ddc279d6915b44c79c3bdbb9f27ca45e9c3d8658af7b7cc700e77c5fe7f601706bd01144516db132814c8e5c0afba04236b5943b5b398dc907d

Download Submit
/data/data/com.smile.gifmaker/databases/google_analytics_v4.db

Filesize
4KB

MD5
49551c75a8255f3cfaa017decd8f37ec

SHA1
c06813787f212175531f2c48f695aa5ae0e98c57

SHA256
a04588233b518203aa25d1a4c5a6dfa0f5d748d890154814475c0566c8f613f8

SHA512
ec308c5a3d32def64e01b6a203441ea0650ba4aee145361f1f2fac06fe6002820ccf072d41e0b1a2144a78a21f073ddb8bcb7e1f2d01e320ea553f568279e4a2

Download Submit
/data/data/com.smile.gifmaker/databases/google_analytics_v4.db-journal

Filesize
512B

MD5
9e6abf46c10f284242806cba1d82c586

SHA1
1a61ca13815a0bb3d51a5c72a538181c2f67c607

SHA256
97291b14fb3d2111403cd9826dccb1f78920337c10a4f84114f33ec1ecaeeb4c

SHA512
0f347217daf6a7d32d0066fd20e10fce2265c2894dfbad882e16d8c6c4f9bc080a213ecc1c3ef02dc7811afc799f1761962c67262d253fc8a11a150858d4b75e

Download Submit
/data/data/com.smile.gifmaker/databases/google_analytics_v4.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.smile.gifmaker/databases/google_analytics_v4.db-wal

Filesize
52KB

MD5
aae57d147354b35e0a31d562f7f9d6d3

SHA1
1b924912092ee440556d34211da3370a75d8191c

SHA256
9fecf896e1ca1811c0e294f1d8b90e9bd42b1c01e652fcd19911de3eb81ff223

SHA512
01c9a1c32d87091c319efbbff19e317d82fc1a740bfa6fa512f34275536b2657272690c43fd0cd65b4ddba7636b8922229b55bd3dc9b8b49b8ba1814f1d482bf

Download Submit
/data/data/com.smile.gifmaker/databases/kwai_log_db

Filesize
4KB

MD5
0f513e0937b13481c5523171b32e2dc2

SHA1
811b57d6883b362c8a6546004f0ff1aa65461744

SHA256
4108a91db8dd88b518ae754df80e2742d78400e323ac2578665b89234e6a47a1

SHA512
eedef18947d048bc9a466404de4a83caa79b187da3e2d870950af432e3cdd76052c443ffe6d4b5ef4dd0d282aac463404375111f0c816df558842fce3bb5c3b8

Download Submit
/data/data/com.smile.gifmaker/databases/kwai_log_db-journal

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.smile.gifmaker/databases/kwai_log_db-shm

Filesize
181KB

MD5
6b94f9f638ad74c9c9eaca25af5dff66

SHA1
471ccdc2a11d89f3dbfb7eedd4064b9527bcf836

SHA256
e9a869e2d5c31a022bbdf38aa89ab33c5cdc7650d93dede6faea1bbf75e67469

SHA512
9ce3665acf255406d61a3ce40b3c31c54dd1eb318313f71f884cf060b7837384dd2f3b5e5bc7cb5052dde228b4255bd0f73308c29827e5e343c914097f5823a2

Download Submit
/data/data/com.smile.gifmaker/databases/kwai_log_db-wal

Filesize
32KB

MD5
95f0d0bcbc08697daa27829ae864a2a3

SHA1
4bfbdd64fe8464c6e0ff7caccf7711c28b1232e6

SHA256
1ce12b168a3f5160cc7cf81ea64d71c8072a0d37550385dc5324e885101f30e9

SHA512
93eddca1159394d1b1f723c4782dadeb4a2c3747a7afdc31771a5fc0b0a482a1f1784e8621f2583a9c25c33f9c7dca6904f6f95d6d589ade1acabdfd9b78fe7c

Download Submit
/data/data/com.smile.gifmaker/files/.um/um_cache_1718073765424.env

Filesize
606B

MD5
e40f142d29732ff0f563b7d4a7ebfc0c

SHA1
f63ba388460ecdc99398827e31ac3a9da77a254c

SHA256
75eaa49184c0ebb871ea54c8d66866765bb33459630e582885266c2fb437d67d

SHA512
494eced5daed3347acb4ae82bc63348e44cb22aa0aeea7c483df90ff1bc5d06bac4b43c6571ea9bbaa9d1217df6eaee5ac8b7162790c778017d2bfb016da8110

Download Submit
/data/data/com.smile.gifmaker/files/dex/filter.dex

Filesize
2.2MB

MD5
134e0120813af6498d0a73a70ef48910

SHA1
4f39e99efcd73cb75430ce2a873424f7089027f8

SHA256
6b4dcc34a0e05378efe9f14b2805dd8fe9b98cbe896f8ff323f728bcf688b877

SHA512
aaf29c18a7f388fe5dbf09479cc4a4bf3b6dd6036877e62d21c754236f7d9ee636c28226c26f46fa1e3d8bab4445df9c96f6214f5c670ded9a0aa6d348eaec3d

Download Submit
/data/data/com.smile.gifmaker/files/libcuid.so

Filesize
129B

MD5
7fdd3c634c18528529f8775f520d1d58

SHA1
a998240814b4d975e80f7eeff5919f827a2b2cc8

SHA256
15aa9c6da8d477a707c645f2b571ddfd651ac148d4e6e1acdc01e381df36a9f9

SHA512
0d1b8239b6e6e1bafddd95edc9b36546dca1f6dbd0a6920834b6d1db11eac4bc8fb4819f0b4e31be1b4af87974574cbb5af3ec27ccd88723eb415e096b99211a

Download Submit
/data/data/com.smile.gifmaker/files/umeng_it.cache

Filesize
310B

MD5
6a18c852a84df62dfede7d77f792701a

SHA1
af4e652bfa0aa4d2875f8d73d4cc4228d32d28b3

SHA256
84b54365076c992a9d137cb36db358982295e38cac388c5c3f0ab636d6f56467

SHA512
6dc08703319c960e792e8913af5a0f86962718483a772f14083d6ede83c535705ef6238a90b5630036e0b77a738c3038a418b747bbfec75a216172e991b0e4fb

Download Submit
/storage/emulated/0/Android/data/com.smile.gifmaker/cache/.cache/4f0beeafbc8745394f9f07ae084bfa77.tmp

Filesize
29KB

MD5
16ad7243876f7d9ed22571ff24f27459

SHA1
e5ce0fe32df6da4765b5da0648c75b88092fac11

SHA256
d995fdc80dc2807cd4f7aa4f6c89aa4ee13be5eefaf018c40626326780f6d6a0

SHA512
a58146a4897b0228d49590c4f6116009ab6391dc930c8b9bc6a8f57d6a9c239cba064affc6c8801a6ea27f3f7da6489f4aec4756c0a6f70dd267f76958c4126c

Download Submit
/storage/emulated/0/Android/data/com.smile.gifmaker/cache/.cache/hot_pre_fetch.tmp

Filesize
29KB

MD5
5fe17429e820fd52dbb8eec6969587fb

SHA1
922e619cbcec39c8b5d866721b9993dd6242a864

SHA256
0c2d93eb3e48af246b3497702d788193935e939d0f71d88b7f6d6b70f7d17f0f

SHA512
478c25b20a5629fdd2db0ed672de48a9f0e1b1f05d69da42a0c830a3e89cb613a0a874c234e8669c72654ae5e01d5d681f97a702104480091275461a8271b8d6

Download Submit
/storage/emulated/0/Android/data/com.smile.gifmaker/cache/.cache/journal.tmp

Filesize
12KB

MD5
83b3e497476860803b5bf6f6d1a7a8b9

SHA1
b059ecacd1b1cc5b944bd0137459452f13984d10

SHA256
95a89a14ddde8a636fdf2b13e5f0b06fa3cb83cca64fa4f82280d19731495abc

SHA512
79a4c65493acad07b1cc17308d6a1b4f2d7cf0568cf47f5465f5ed04c406de6562e23d7b2f0d36d1cdbc85397fe8bef6325e0c71db90c55bafd4af451cdd748f

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid

Filesize
498B

MD5
3c9c7859b5b96ee83a9ec877df4ed592

SHA1
546982062c3c4e086ac9593947f1276c397cc793

SHA256
88356505ae7bf6569430fcfc89457452141c033695e756787c6775d63dc7c5f2

SHA512
99080960c4df523451deb8a332f5ad137b6ba2edef9609763b8ba5b9e42ae6420243e10fb3a6535d10b00b4cbd8b0e510eba2e9bdbb5592e60ddd058bc8fe481

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid

Filesize
89B

MD5
bf1251c298701e9ffcb4d74d31386a63

SHA1
113aa34056690701bde6a3798b2dd8a37d84c7ce

SHA256
e79c9f7fadf04a17dee1dcc9ca1dcd9d5499eb34c5ebcd3496a0883c5cc5f048

SHA512
6533a2865be1303ba73121f4faf4954002f8f7269ad87fd2f9a52d166f06acd067c5aa3c3629349ae81f5a3dbf3a885a396423a23575eb13930cb706558185a1

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid2

Filesize
129B

MD5
0a794e5f01597f39e61564cb72790acd

SHA1
43d51dbd4ee6d7602b16e6174293cddebc798a16

SHA256
18529539ca20368313957945f4b7addace6e0f34c34af5b2b86fa30dc03e5bea

SHA512
8caa27556442c93c0d5291dbcfce6d3d8f2d7dc9b615c9a9e2bdfe16c10f0964ec0f32db7a1cceae3d3f4f51a05a875bb7f898281243c376d9b8e802960ec964

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
b2dc9f13b9d2d6980e56e48554c852c8

SHA1
3e9efcec6972b18d4590ff6f016933e38905abae

SHA256
53a3875745169e1f07aac1c6533d0c621644f9cc41e68278e540574b7be163b5

SHA512
134c99b58b29a380cb5087f641c34743aed78835bf3c246ea39c2c655a5a15278f3bb38512a3394937803f802dfb7c21379f5d0e27f04a4cb909ebf963f1cf09

Download Submit
/storage/emulated/0/backups/system/.config

Filesize
52B

MD5
ac7fe017e6fa0a41fe5982dd05f19f1f

SHA1
2a83b0b0eb733f63ec6da81597a014bac908b36a

SHA256
38c204bcc3c981d6c3ab5a425cb0f6e42ff0aac72ac87b509d37e959a8f3b4c4

SHA512
604b5af4e52555d5af5f2dc5f0cac03bdf851c84867717f083e28fffd2b8ab622949dea30af8bf6576b20aeaaf9ef29b3be30bc51eb1fcecb80efff0ae834aff

Download Submit
/storage/emulated/0/libs/com.smile.gifmaker_.db

Filesize
68B

MD5
b59e8ab4e350b057fb0bd77f0c1ad57c

SHA1
6982e6f2d04b7dd15aa54d86126a98e24920a502

SHA256
2ac751914ff0742fa01ed5ea8fe8d59152dae60c20cec8a01462391a6e1aa074

SHA512
864f9a83500121908a349f5c5dd7076a2d97a7a556fbd74aa2d40bcb1a5952f043ac7b7b3a27fe96df5372c0e0c52ac24b19899a0670f04a9bfbc41fe2e2acbf

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads