Analysis Overview

score

8^/10

SHA256

42218985afceecb5d0efae5347b5f9b746945d72155c3fce344cd4832f6b5248

Threat Level: Likely malicious

The file pou-mnogo-denegandroeed.store-0-1718061001.apk was found to be: Likely malicious.

Malicious Activity Summary

collection credential_access discovery evasion execution impact persistence

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Obtains sensitive information copied to the device clipboard

Queries information about running processes on the device

Acquires the wake lock

Requests dangerous framework permissions

Queries information about active data network

Listens for changes in the sensor environment (might be used to detect emulation)

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-11 18:43

Signatures

Requests dangerous framework permissions

Description	Indicator	Process	Target
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE	N/A	N/A
Allows an application to record audio.	android.permission.RECORD_AUDIO	N/A	N/A
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN	N/A	N/A
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE	N/A	N/A
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT	N/A	N/A
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS	N/A	N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-11 18:43

Reported

2024-06-11 18:45

Platform

android-33-x64-arm64-20240611.1-en

Max time kernel

28s

Max time network

35s

Command Line

me.pou.app

Signatures

Checks if the Android device is rooted.

evasion

Description	Indicator	Process	Target
N/A	/system/app/Superuser.apk	N/A	N/A

Loads dropped Dex/Jar

evasion

Description	Indicator	Process	Target
N/A	/data/user/0/me.pou.app/cache/1689111357674.jar	N/A	N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact

Description	Indicator	Process	Target
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	N/A	N/A

Queries information about running processes on the device

discovery

Description	Indicator	Process	Target
Framework service call	android.app.IActivityManager.getRunningAppProcesses	N/A	N/A

Acquires the wake lock

Description	Indicator	Process	Target
Framework service call	android.os.IPowerManager.acquireWakeLock	N/A	N/A

Queries information about active data network

discovery

Description	Indicator	Process	Target
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	N/A	N/A

Listens for changes in the sensor environment (might be used to detect emulation)

evasion

Description	Indicator	Process	Target
Framework API call	android.hardware.SensorManager.registerListener	N/A	N/A

Schedules tasks to execute at a specified time

execution persistence

Description	Indicator	Process	Target
Framework service call	android.app.job.IJobScheduler.schedule	N/A	N/A

Uses Crypto APIs (Might try to encrypt user data)

impact

Description	Indicator	Process	Target
Framework API call	javax.crypto.Cipher.doFinal	N/A	N/A

Checks CPU information

Description	Indicator	Process	Target
File opened for read	/proc/cpuinfo	N/A	N/A

Checks memory information

Description	Indicator	Process	Target
File opened for read	/proc/meminfo	N/A	N/A

Processes

me.pou.app

Network

Country	Destination	Domain	Proto
GB	172.217.169.68:443		udp
GB	172.217.169.68:443		udp
GB	172.217.16.228:443		tcp
N/A	224.0.0.251:5353		udp
GB	216.58.212.234:443		udp
US	1.1.1.1:53	googlesavedata.ru	udp
US	104.21.54.13:443	googlesavedata.ru	tcp
US	104.21.54.13:443	googlesavedata.ru	tcp
US	1.1.1.1:53	fundingchoicesmessages.google.com	udp
GB	142.250.179.238:443	fundingchoicesmessages.google.com	tcp
US	1.1.1.1:53	googleads.g.doubleclick.net	udp
GB	172.217.169.2:443	googleads.g.doubleclick.net	tcp
GB	172.217.169.2:443	googleads.g.doubleclick.net	udp
US	1.1.1.1:53	cdn2.inner-active.mobi	udp
US	192.229.202.72:443	cdn2.inner-active.mobi	tcp
US	192.229.202.72:443	cdn2.inner-active.mobi	tcp
US	1.1.1.1:53	config.ads.vungle.com	udp
US	44.209.167.75:443	config.ads.vungle.com	tcp
US	192.229.202.72:443	cdn2.inner-active.mobi	tcp
US	1.1.1.1:53	events.ads.vungle.com	udp
US	3.234.175.9:443	events.ads.vungle.com	tcp
US	1.1.1.1:53	cdn-lb.vungle.com	udp
GB	173.222.211.32:443	cdn-lb.vungle.com	tcp
US	1.1.1.1:53	ms.applovin.com	udp
US	34.102.162.219:443	ms.applovin.com	tcp
US	34.102.162.219:443	ms.applovin.com	tcp
GB	172.217.169.2:443	googleads.g.doubleclick.net	tcp
GB	172.217.169.2:443	googleads.g.doubleclick.net	udp
US	3.234.175.9:443	events.ads.vungle.com	tcp

Files

/data/data/me.pou.app/no_backup/androidx.work.workdb-journal

MD5	75c2246017934670633a8a2a83c51d98
SHA1	d79539263865a80e9c80b449bac3ef45297c5bb3
SHA256	1f82007dc30720be87c6598c88caf203489661c3b2015b2dc857ae5fe80ab99a
SHA512	d31e60d8b2aa2a47922abfae5bcc4b59cb112f3f63301d0ef00ccf0cf4e5d8b1423a7cd8334d7ad34718b9e128e11a890769fc9ebe402607b6d4f057faa36f17

/data/data/me.pou.app/no_backup/androidx.work.workdb

MD5	0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1	fee434f784e73cc7916322e949f727caf8363102
SHA256	b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512	b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

/data/data/me.pou.app/no_backup/androidx.work.workdb-shm

MD5	bb7df04e1b0a2570657527a7e108ae23
SHA1	5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256	c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512	768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/me.pou.app/no_backup/androidx.work.workdb-wal

MD5	360633cf4dd652765b3c96195aefca92
SHA1	e393a7d91fca1cee93a7a82aac58d7efa5491e08
SHA256	ab97c4c53570707d4d5991673521d083d630ef1a1ce81bed93a4bb71d9b15e24
SHA512	744bded6b9ac5d7465f0e0b72a0cf7926ca3e1c2a54d68f14948a9e574a3c7e15a2fe98302d259ff065a8528900043bff34a72819c39a944cdde4471615997c3

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5	1a27fa46cb797de7e48d8b6a46e2f9ac
SHA1	1bb86b850e710dc1774700e3353704e4d48e5cf5
SHA256	bcfe70dbdfdc84b4a42e04dd3653679a398fe55edbc332cdc6c575c542039c4b
SHA512	78142493bb96ef03eead1f9596ad9155f640f701be24f85a2775d9d24157661ec41284709b32cf86c140aecb3c3587be31ebd5e03c2a623341746b7bc2e5e617

/data/data/me.pou.app/databases/com.google.android.datatransport.events

MD5	7bb3116be27f5386e129273ce635a9e3
SHA1	72499e93b03c402f81e451e4a3db8c7b494403ce
SHA256	572626778a20688f5267c625897d9a93e4f5c6c0be1ab2a258b417d8e450ecd4
SHA512	6be8eeba9927e8dda0cbae94e9e7b7ce5e21b90d9cb2849b26143d214f0f12f65fcf42905d0dd9b1d4a38deccf947b15fe29c56f0de5f0b52189015b2597d7e4

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5	ac92205ca271ca77250a3a8033bd20f1
SHA1	ff3cea03ce8ef36d7fe836a0d904cba994feeb50
SHA256	4c16396d6b3906c2191ab48cd147d03fda712607d42d5ad8a994a411f85aa493
SHA512	cadeadc099907c9bce57716b2a6aa8714452a1fb1fcb4255570e9e542eb510b429db9801e26ae356f0d884edc69703d1510ccd22a63e80fc09f0dc6114b121e4

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5	5f5b568651f226cdab3bd61afb6e4742
SHA1	f717912c2291ba9283e3250fe326e4c0e3f93ca0
SHA256	29c38635222a38f61d49e160d5e14180d0f60c782c5005a0dfb700ab04aab4e4
SHA512	63a67b2cb2cdfa324a471ef5bd29c05cece9efc487cd2a690f57d5615abec654e8f2f66bbfa194bf657a3c6d701a2c852f8dc427921c2e3447e369a92435a90a

/data/data/me.pou.app/no_backup/androidx.work.workdb-wal

MD5	39de1bfca68befa696528fd14efd129d
SHA1	6461644469960516ae1d7803ce6e4dbeb0bf343f
SHA256	64d098ab6a8e97786d6b73f73a65a3eb429f143bd73b0872467b8b0640368dde
SHA512	1c71ca983c09364547dda16a65bc229b412e72bf4fc4a6c22bc8a9d6c955e83275722d6b7da7a38feeba1c95532e44acb3f3362a391060f20b7665479e1a127c

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5	6ba287bf638568f3586f6000e95601ab
SHA1	da0cb803ceac66a7cace8e2b18c176e0db8a1bbb
SHA256	100ed0c123d40a09b45d5cc66e5a2770563ef000bb39fd07769f215014b81ba5
SHA512	d9e307630eab90e421403d3d44f9a413d44bdf540a413442fa5acf39397973e9a79d07e797cab971536889036bc6768e7bbb8c7c4ff35b07721c0a21cb7c31eb

/storage/emulated/0/Android/data/me.pou.app/cache/soaps/113

MD5	979b7f42240affb3aa181a653ae921df
SHA1	e201825e3e4a56cb9e46b4954479daed9e2c20dc
SHA256	83a59a85a458fb7045e07c5acfb3ecc0fb96b579f4ef00fd8c6be0d4a88c3261
SHA512	8c95d7a15ddb63ac4e0defc7b0ce560b993bc5448c84c54ba8aa4952f79bbae37ce77e555c4bd4038c5e48f545b5a64e4392df1f78e1c9bd2d3250f3107c1553

/storage/emulated/0/Android/data/me.pou.app/cache/bubbles/13

MD5	9e0d0efd737199b18cacbd29c0beb39f
SHA1	be8eae222ce39de061efc50bfd65aa9a6706b8e7
SHA256	179dfbd477d6813a3a944b0000fdae7e170367f713d5cc85d06aa618a7cd0cb1
SHA512	e72b912d2281e06c55e83f385c8ea23f3beae6e3d367d86c5b99263d136d02e59c0cf6a6615bf456ce915894643f0740acc395a3a82159cae38ab69cb27c964f

/storage/emulated/0/Android/data/me.pou.app/cache/bubbles/13.ch

MD5	a87e641c44e7848f055682ff16df9d7f
SHA1	24c90ffb19998257e30b84a71b68c2314593d845
SHA256	9abd3eb93e49ed5a45d9287b347001a3cff1f2488beda533e36753023c4ab025
SHA512	f85db83dc7a659400a6d5f3a120822a77ae9dfc01bb387687de3935debd2d4c70f2fa84104e62ff33b0c3b18be6545a40919275db5784a039770a9323eb02c8b

/storage/emulated/0/Android/data/me.pou.app/cache/balls/118

MD5	e891bbbe2e0093b17b3391270c7b272c
SHA1	692cff6d0326b05b59b5ed023c0c5e931987f7a1
SHA256	c0fdd93f1db3fd0315211e3262cb314043d82f53f3107289c6fc5fe748dafc37
SHA512	935ca4bdf1330150e5b509f405b6b6310b37ae439cf09573fb68b0de7df64efbc295d68b334a884a8cc2fed8373cab78a43f423f0f98e553d232f43e74f2497f

/storage/emulated/0/Android/data/me.pou.app/cache/balls/118.ch

MD5	b701359e1db45cd0263beea5e24a28d9
SHA1	59aa9b46d374ff50298f85218562cb1a9797112d
SHA256	e6698f0d8a0359c67e89bb955f33d3025179d9e8514cd93d781627a778356c9a
SHA512	7d7b18cc6d1ed87a475b4f96356f221ee806e3f735b9fdbc58a019c19c6db50ddf5fa293a14251b4b402c0f3f000b9ad0fde675fcd6c6af9768eb7790661ff58

/storage/emulated/0/Android/data/me.pou.app/cache/showers/103

MD5	22080c06a25ed6bf8d39c01e198d90fa
SHA1	93c4e52666eb99eb89462a57e3bb4803efaca74c
SHA256	1d6d2f31edcee009fcd2137226e85596e9a312a247da3220d49906f9e3a07cf3
SHA512	6400b3effacfa6d25503cc9323daade31488f25e91c0e55c969ab00facc102e1f19c8ff34b6e26b849fc2b53b40235132d54bd2afdb8b934bd518dbe3afef21f

/storage/emulated/0/Android/data/me.pou.app/cache/showers/103.ch

MD5	4fd2ff57acacb2563501f4665fcb8c6d
SHA1	97fc673273ca2030d89b1159cf40a0c142556174
SHA256	693c4d098f708013360172571045688ac3207a2a0df1b5d1402cd6d57becaba4
SHA512	5de6b1490b0eb749feed3de9a271d920d5cb7b0c4b6c5e6b6ba30427d81c56782e34e668e5aa5375b59f4e0cf47749df9bbde0bb2914cdd298962e72cb772770

/storage/emulated/0/Android/data/me.pou.app/cache/soaps/113.ch

MD5	c80eb4f0fb7e4054cbb07a2748f39b2d
SHA1	e5db784df4db921c31ffbb00e32d56c249c8dde1
SHA256	36f8a599c8829f8c584c88e278204f340570f9a8504c800139b8b86c3044072d
SHA512	35b47dbade2e25c2380d20b73f9281f65dd27eac5425a48eb740465142f41fd246f6102cebabc271cad94381a59bd9cc3cbaeef289ab9537e26de5bc09154b36

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l1/18

MD5	8299bb2aa517ebd40394f8946867a1c5
SHA1	b52f51d173fbdb290f7efe8efea2542d33741ad4
SHA256	8ac200b139c1fc32959c17b5aa244761e200b3c4b674611e76369d50141b66ae
SHA512	2856f34a084c16417fc68fc8479b7708db3ba46c48d041aea74ac464830c5d8ff548bfc74e7cbee671b7bc0dd0007e1ba555178661607f50cc1f6920f3e463e3

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l1/18.ch

MD5	fd116ab3f00bb01179c3154e14f34b54
SHA1	1e8d2a7396c570460a0dacb1534ebd8cbab82f2d
SHA256	5e05a4205af2f1221f124295056ef4a7a72465d45b0857f184b570830c577493
SHA512	0cb2dcc10f62f02c8e4a05044a07743eeb6e5d567ea86ce8883db712dd9bce9caf02239fb29aa063935ca4409dea60b5547c51c5c8a83b6f3ddd0829ebf4d415

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l2/18

MD5	c7610462c0e531bcd9e641e0bfd3c0da
SHA1	e6164cc10208c502fcb45828cfab9618add6df6b
SHA256	403b05469018ca3190f2214145dc94db05c01481339a6e0a7730f1f185da1397
SHA512	a401bc3d8e0d1bf91ed7d1f362272045827a65eb4cc82001d5240aac8417dff48f18f884c6cca4ec750a2871b34519853c7b22400ca91df2f0c415d30a2048b8

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l2/18.ch

MD5	440768ff340b8606589982587e61b547
SHA1	8b5f5c2a595f4d2c4ff8d26ce9b0fe805f6b3f49
SHA256	743b47e7e0ab45755fb71c00469f4e89fddacb0000712ddd1c2a9a6c43cd1e22
SHA512	f2df0f8ec845684d29c26deb3fd5d5e59533449ca94b45dcd905057e2f929f5ffee837c50bbbaa7370edab25acec77528039ed7ace16e7351c4efe3e76549186

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l3/18

MD5	a81a759e8278b66084bb8efc924c8500
SHA1	381b07a64d9af91cda06e7ff2555bb95f56fcfa0
SHA256	1db831b3c7bb7d7870edef3f89fe244ed12abb90b0198226cfec9f5228049af6
SHA512	dfcfcb2fd3b9619f54f3aaad86a346441a0bf617754c15dbf1805a7e436ab686bd98733b34a5911418454f6a43c0c364d256e7aa52a1f1852b9415c1cd3f2a66

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/100/l3/18.ch

MD5	aac43c9aa00b3ac496393b4501118782
SHA1	55df153b727827319ff608f819741936a1b56427
SHA256	4144653deb64b77ddac61dbefad8171c3ab2c7c45e6f39b66ea9b6f7e724e840
SHA512	803f4d04ac2c81840d629419c41f638e6e6de4517145807865f5e2389a38942f274dacf9a15da058a270f59821b0b3231a42c6d81a9d1b90a6a97821dfd6ab47

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/1818118

MD5	b0b93f31ec72a73a1bddb58e63b4f8aa
SHA1	bb4cc11397c27c267286d3239ab88ff688272754
SHA256	860bf6af5bf73e86ec12e9737e887bec89218728a3f0233e3869a0fc92a9f7f9
SHA512	6047c607f4105381d105d669a9ad87ef6b47abb9ac7bde3c805a446f3b396bc720c25c53f06cc05770d085fed685b36fd1f217ee04f3a40c33cb84b5e642cc39

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_on

MD5	a23f0cf71085e436089420dbd1837710
SHA1	47c994ddbac76b6260fdfb1699cebc7b173b475b
SHA256	5a53edb110ee4046781d1dda3b7987979a53e0d1b3c85a6f6c2a29a5e2445619
SHA512	d6f2503cd743a669cccb396188f51b26ef04ecdccecc37197d554767ebffc842f84f076d004a238ebb506128735f03b2f218b17427120c5d68625ada9672c755

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_base

MD5	21f0736d2129c073f4cb6b7bf33e4225
SHA1	99ea25351d59b7cfc79b39740cc0659b557c05ca
SHA256	6db97a6aab317d0657e8784a3cc4732e0905cc0847e33ba1cb685b1214806366
SHA512	35c9fd518912a4f16ae79285e27b95230699d0aa82db5dfa21ed3c7c74d511a9bcbf20f7241f2a271fb9edea4d6e8ae3826ed0c2879f2abcc29411a52c659ab2

/storage/emulated/0/Android/data/me.pou.app/cache/pillows/1818118.ch

MD5	8e699f94fad2b3f19365ac8d61d95901
SHA1	147749e5ba94693a77bc7e98326fd07c0b4366f2
SHA256	44866f5467bd09d00b021daad3c31bfce29270578a5fc0f764b8a76cbe802d8f
SHA512	67c0bed503ababf4060a8fe69d5ee7abc2dbaa2f016b32ceca071e9eb2de53776503284e6ffebe5430ee266943b600cf4caee054934f96fad661ecf021a1f4bb

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_base.ch

MD5	964946123d80f2bfc6dcf1c14d238e10
SHA1	02aa5b45f6f60d65c369c6c9ad6b0e3063f397b9
SHA256	e7a8cbbfccfcbdf74f96ededf60faa62fff848319fb0797488a36a7dcbdf0c87
SHA512	2bb3f5de90a3c7e80f1009c1777011cd775dccbe0c5bf0840dbcc167f0c7a73e3ef1fde372b66f282bc7149d7e33950cfb85a20626df264c7d5c39e8edd45cf6

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_on.ch

MD5	5e834ae8cf0902b98e8c9275b0605dc8
SHA1	0146c05d3581bf9266669be8e3d0e5cbd93fa87e
SHA256	82db148e6cbb9111179bffe2efee8d52fcb481dbbe0b19e063d8037c6c2b7538
SHA512	815011e98452c9d191aba9a7a06a3f7a951654eb5630ce30f39aacbce81d547151698fc3d3b243ae70d7c49cf2ac8c351d7d52a201a2a08c82625368556b4a6f

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_off

MD5	6295fcea028a113d92d11a40b5a29aa8
SHA1	d9ec62536fc99906dbafa7a2c926468f13525b88
SHA256	5c97a54a87dabc6d7eeede07022401786ef4ad7495fa08f5beee384fe57f9208
SHA512	3baa9093ce59d8949768a68dcf453342e280ab77d16ba357b8dfd6dc1a979f935a13655ff9279965f44fa64b4cc31d56ffd7aec63aeae75bfea848d24522e49d

/storage/emulated/0/Android/data/me.pou.app/cache/lamps/112_off.ch

MD5	dc7d5984a2a38782056f91da3480cda6
SHA1	19ccab3ea5fb50bff540fbca2e513c8db7fde0eb
SHA256	506b7cfb340cf38c9a108085e6d703122ba0334b829fa61c02f28e6dba8e2c57
SHA512	3fed07f94a7d75d68f702fed12e9ac6780f07f723bb89e8edc0bfd9271824f5dec0257ae07507cac9b648ddd73490875904e2b4a0bcca52e408efe49ab80fd56

/data/data/me.pou.app/databases/com.google.android.datatransport.events-journal

MD5	b2b7ef812cd57108a840363a9f2b99b3
SHA1	5b75ca6e3b9b03c5296fd2435271b78fc6a17302
SHA256	211a46c6f72eaf96d8048aeb8c8252548a014d40faccb303ae7f964660461ada
SHA512	3bd00c6b5867c12ddd59ab6ba6bee05656c7f8e343b65d91453b0b022a6b861b347467010af5db6e8a415538b74953632ee3618526a70d23b19040662b2e4a86

/storage/emulated/0/Android/data/me.pou.app/cache/fyb.vamp.vid.cache/journal.tmp (deleted)

MD5	8c8bcb7d36cb5a71729c00c4e7f2d330
SHA1	a352667c61dc45f43cae74a7102fa692fba98d3e
SHA256	fddce724f39edc9ae1df4f8920e512cfd0fe3a9017b32031f1ca0e9ec06a1150
SHA512	4589f9c835a12ddaa04617822b93aba809aa85b392dc8596d47368a31648c542a0eb96643ca3a8d21d31aa1a790580a3258afdc3d202d31c5a324a4b591ccb62

/data/data/me.pou.app/no_backup/settings_vungle

MD5	a5b0db36893acaef4ca1030211b30e01
SHA1	fa91a14ca0ade7f66cf6a613558bd35b4314589c
SHA256	ec2cbc1e7277890f8512551f3242584bf00291f28353ab9732f50a343ca58d4e
SHA512	118504cc9ef11af936527ed2322b5244cd42ffe2f1ad72fcc78237240fc757291c14630e6f442d83559a674d85804707eaa80d97dd8d39edc6c6feca073f139f

/data/data/me.pou.app/no_backup/settings_vungle

MD5	11e1065a73eb6bdd5e91fb3a80a82717
SHA1	eab9145168e8566de9434f2a6b75f71fc196bc1a
SHA256	b425fb8b8ff8d8e1457d8257ae7c0b938944d755591f0f60ffc41f5f996f8dc5
SHA512	cca3c0367ab0d3dfe5bc7597af95280db46a9883794b6305b65b8abab0cfa168167f2c45c94848715d08be39e55f1f4791f3e1e09235d8cfc8552d065e4f513b

/data/data/me.pou.app/no_backup/settings_vungle

MD5	b28ad0a6f8b547b9eabf03a18402d86c
SHA1	dae1025d7de4b307a7905340b974ffb8dc0cf1c4
SHA256	a2c63fade6c151f66fd5ddacfa560a834df768c941bdd5a022510d2e94dc2d7f
SHA512	24554f30f127c9e9c668229ab12a0d28e21231676bd536820460fa9b0861fc64b16fa8ef0bae414bbbe7756804729cf10a36c826f68111e5dda32f555e374bdc

/data/data/me.pou.app/no_backup/settings_vungle

MD5	db6015628e8890aac1faecf001e44cfd
SHA1	a968b15336468a7c2d9f23ebf8a8f868d4cf4feb
SHA256	43234cb75a1548d4367d05a1415eb4076252facf5f1b5a2a4fc3bca9121defab
SHA512	4cc42f4ac65486c75b97b8d4776ed3c80d722f831eae69013d1fc6e362f05a29e45541c91468411f5bea710007b9c222438d1bca6b16696ebe259ce1acd2b755

/data/data/me.pou.app/files/ia-global.config

MD5	993d6a2cf6e285d1559bbf0eaee3e650
SHA1	1e953db2e21d53e39707354ef6dd06e2196cd8f1
SHA256	9261e4ba8439c4088fefbb400ce8081b6aa6a777ff2b5b88485a4b461b32f3f0
SHA512	3cb73ad0450e523709de740172e4043d4ff3c1c96b9b65fb0814fa3ae3ad8e273ce8f5473fb055cfbdb907b9524653c5f3912238b951cbd563e931445181ede2

/data/data/me.pou.app/no_backup/settings_vungle

MD5	55c2a213a38f3ba08c081d5854b08a42
SHA1	55b0d8b04f2b342c6443f5b42c72310a68239ca4
SHA256	6a1d61ea2ce93c3a6f8533bc4ca342d3f57fc040f7c748f05431c1da21f7d6d9
SHA512	2062414da88354a6988c1fd5217bf3ec179b80c12b57c86243e49f85dc7015d38ace8cd9ece388dbb150617f1fff50fa91dd5d0fccd49aa258e8e66c80b9e3ac

/data/data/me.pou.app/files/inneractive.config

MD5	923a9c0f8347e249c11ee278b50fca39
SHA1	c0b391b4f2d139f6465c8f695a7bfe84a80ca077
SHA256	6ba1ffdea315f0c898c62d50ac0eb8e9cd65b23708aac18d440f8f98ed415f02
SHA512	ab214f9a0df187f821a85663f7e400f87a4331a4730907b9cbda939137fad770c7b0b959f6519c0dddf2591b596c549e0f7b842e7ab4a89e1b2296ce128c7d3f

/data/data/me.pou.app/files/centering_v1.js

MD5	1a6fc162ef74bbb81000ce9f3deb09f5
SHA1	87fae4a5adf526ad381e74314bb6c9a33acd19b1
SHA256	12415e46d50468c0dba50c1248fb2e3ddeacb0c3b579e4cbd8653c92cc7ab008
SHA512	9338186d34073b0979b33bc75f07677742a353685bbd8ed7d053229cbf94ebd0ca9c3b8714419aeed805dffceedf9f23a8cd17a9b0cc6ebdacf06b17676da29b

/data/data/me.pou.app/files/dt-mraid-video-controller.js

MD5	a5f21f07a7924ea7a982f749c99651d9
SHA1	f38c1ebc4faa66e6b54825d6c3aa0143b9b9b286
SHA256	c9ec744882d29487c3149856a365d5f8aac057347cb1153a25b48bc8435e1fb9
SHA512	c3e429c5c0440748a1efa46276cc5d1f32fa05b91db1d46d742aec98e6470b872c469b612a7d6c2a293f69308d7456c9118f5e960521df27d081952f240dad10

/data/data/me.pou.app/files/ia-remote.config

MD5	f0d823a23367af98db820d536b557251
SHA1	917bfe7146216531a362b4816e9c5c1ee7466eb7
SHA256	a8708b790ebe41dbeea17616f4bb02a74131a42d5a7e66f253dbf0e59d95ef7d
SHA512	70e05e7a4aa27aff56dc0384dbd3dc6831e22c73a37a2f9068535f80860fa37480ed85cb7ad5e849073cae9ec8e73e4f87a18f735b61c48f8494c0073165fe2d

/data/data/me.pou.app/files/centering_v1.css

MD5	86bc728fbe3c2cda67077af62fccb1cc
SHA1	75ba28bf1573c17236706e3cfdcff49dc56047e5
SHA256	a4e4515a4b5e7e7f9c22f3fd21bbf3a95db9442d219190c81b703afd3c6d95a9
SHA512	7d7f37731b35c1caad17d0bb21f9f5805c567ad9cf5f1312f21949726bbbf175515d984dc3ced6fc5000e42191b15eadc862135244debcb05524a239e6b35816

/data/data/me.pou.app/no_backup/settings_vungle

MD5	0d54a68260c9116dd026806aaa7da1ed
SHA1	372c2a497a2b4a13a5202f698bf269f1e82f5d35
SHA256	aee0fa28132cc3a378670b589d26f41227e58d763edd4e8e62ae28b379e73df2
SHA512	cd395d93d6d1328200bff374fb6849fce16461d7331fa1c0d58aa49cec6b5b23ce9b5b4cfe1d23b5164abe30278a6ddd2ae7616c37cef80a1ca05b547b5b58e1

/data/data/me.pou.app/cache/1689111357674.jar

MD5	189d24556179c74f72678b58e01308c1
SHA1	d4ed4dc1b0fb6741c6c9434348b159dbea92e0b4
SHA256	236eb17c5c14261b62630ebdc5830f4a97d3cf0dbc7bd1de98dfd17d55474353
SHA512	27dc7bd75c982173c58d3a02e793616dd6364bbc3d593d1453c5c1cb5dc0ef560b5931a7736ae12c69486fb170ee723bf124747d1b2727a4026281dccbdae9e2

/data/user/0/me.pou.app/cache/1689111357674.jar

MD5	2800ad09ca14a7a986a6e8becbbbb158
SHA1	cff8d824d09296149af1f7f7ad12ebb701f4b8c5
SHA256	5b3ace2783fb2b21f30cd4e20a8645e6bd6d59347c44cbfd11141b0d9afcb33e
SHA512	c315532db47e93c406308f997b1f81876dc4394838b64f93b3afce0748f1cd1c5b5e490856e5c7be0fc7aef063c0f4dcef73de0cc1a712eebc4f80a443cea7d3

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/journal.tmp

MD5	37e8e716e0e2f4a0b05cd9571d95b84d
SHA1	f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA256	7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512	e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

/data/data/me.pou.app/cache/oat/x86_64/1689111357674.vdex

MD5	4c2c18deb875c7a83bfad198e7d53c34
SHA1	95d993a39d8d75d1600b464d89419b2b165e4a2c
SHA256	b777c719e574d4dcf24ea1edf0986ecbea6d2ad7170790f6b8864c6a062bf208
SHA512	a2e5528e89294892ef1152b9f172eaa722950a6a2b510ba500bf6b753b5a930d71cb94d2398c596ca90fa8e1b7ee2adbc1a7ca2c40a428ccfdcff471e4ff1f6a

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/journal

MD5	360cc3b07e75232056b453cee985a5de
SHA1	3532711dc210e356e087eb2dd27ad9af3c0b7ac0
SHA256	6588769241f96dcaba9caf769a5ea4769ab79adcc1fa7478243c542ab71c7d5e
SHA512	3df33f54359c66b0725d7c694040cc6b97dabb1506705226c59ef769d5ac5b2906f1f039b1f86532f19054a8e9cdef7d2db4da9ecdfab2f16a34d8204a214371

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/6edf839634bfd370057dcd99c1fb266c.0.tmp

MD5	c531820c158be8e9f89c50307d568105
SHA1	a2e0ff285014f46bd7745b3995dd3d06cb965e3c
SHA256	79d81d7a2398024084e0352d53f5c351334d0dc9c2719ffb402e0c5001897dd5
SHA512	194f25e9a6bf8f9731a9be7e18dab5bb2397133b83f3c70dcd07b16210174112230d24f386a16e27ca8e730a6ccf59ad992f40d0d91cb87050605691b1ecbfd8

/data/data/me.pou.app/no_backup/vungle_cache/clever_cache/6edf839634bfd370057dcd99c1fb266c.1.tmp

MD5	f7f0351a7a453f145c9284976d158210
SHA1	7f97af55d64c589a3cb59b17b1a5029a77bbd5cc
SHA256	2dfc219b57de033ef3a030aae49e1fbe547369902972e207cccaedc7b2804947
SHA512	028f48e0c4a43bd4138060a4fada7108bec45c2a7ce6a95c08a4677d57585bde12d78b5427719607d7a18b87ed895c4db20f1ab709bb96d92ef61a96a5d73f42

Malware Analysis Report

2024-07-28 12:05

Table of Contents