e9ba800e3f309e864fdf375b6ad7186409c040dd992c3f6c212cdd493fc00b70

Analysis

max time kernel
179s
max time network
184s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
12/06/2024, 14:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a103949c322dd1e5bee8301c364299f9_JaffaCakes118.apk
Size 4.1MB
Sample240612-rzbcbascrl
SHA256 e9ba800e3f309e864fdf375b6ad7186409c040dd992c3f6c212cdd493fc00b70
MD5 a103949c322dd1e5bee8301c364299f9
SHA1 25bedcc4d2d21b3cd3ba8f14b655a9839f9e0ef4
SHA512 0f5979f0493601c030077a81f03c02582671e08de22f29bce670ace60bab5340e27b558a315d182b7f0eccafd7e71b73348a93bccde8e743c93e4748b483708f
SSDEEP 98304:aS+1MEYzqNh8SRio2l34xdRTiJTew7z/jkqoFG54ryojHfRDsevls9:atgzq/8SRioModpiTewzeg4y6s9
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.joy7.safari

Acquires the wake lock 3 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joy7.safari:pushservice
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joy7.safari:pushservice
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joy7.safari:pushservice

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
7	alog.umeng.com

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.joy7.safari:service3

Queries information about active data network 1 TTPs 7 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joy7.safari:service1
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joy7.safari:service1
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joy7.safari:pushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joy7.safari:service1
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joy7.safari:pushservice
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joy7.safari
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joy7.safari:pushservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.joy7.safari

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.joy7.safari

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 7 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.joy7.safari:pushservice
Framework service call	android.app.IActivityManager.registerReceiver	com.joy7.safari
Framework service call	android.app.IActivityManager.registerReceiver	com.joy7.safari:pushservice
Framework service call	android.app.IActivityManager.registerReceiver	com.joy7.safari:service3
Framework service call	android.app.IActivityManager.registerReceiver	com.joy7.safari:service3
Framework service call	android.app.IActivityManager.registerReceiver	com.joy7.safari:pushservice
Framework service call	android.app.IActivityManager.registerReceiver	com.joy7.safari:service3

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.joy7.safari

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.joy7.safari

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.joy7.safari

com.joy7.safari
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4322

com.joy7.safari:service1
1⤵
- Queries information about active data network
PID:4377

com.joy7.safari:pushservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4349

com.joy7.safari:service3
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4399

com.joy7.safari:service1
1⤵
- Queries information about active data network
PID:4481

com.joy7.safari:service3
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4620

com.joy7.safari:pushservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4649

com.joy7.safari:service1
1⤵
- Queries information about active data network
PID:4764

com.joy7.safari:service3
1⤵
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4787

com.joy7.safari:pushservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4880

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

23a12ec898247dad9089bcab6cb53a4e-journal

Path /data/data/com.joy7.safari/databases/23a12ec898247dad9089bcab6cb53a4e-journal
Size 512B
SHA256 98da8eadb4532f057dd35e57751c4d3b26317e3591ec8cc31e790dd29e562e05
MD5 cf2b752d0cac37c8a5654cd7b2f76933
SHA1 c099d5897e4f67f6a1d241118ef3b30bcb127962
SHA512 74834f7af6a5ad95020686986d58c4ec98db49ff267ee7fdcc97100252576ac9e33a1e6952a8c60d0ba5422e6562188fe59da4360a297f69d729fd7f7b6ee388
MD5 SHA1 SHA512

Submit Download

23a12ec898247dad9089bcab6cb53a4e-wal

Path /data/data/com.joy7.safari/databases/23a12ec898247dad9089bcab6cb53a4e-wal
Size 36KB
SHA256 acf2351d570edd0a8c52a92c670da23e9df4709f7b5f3c95c1b0c1e4240d7726
MD5 847a0b3aea52e7ed644b1678b2e6e827
SHA1 d4b165dc8d814af344b09ae7854abea0320b285d
SHA512 dc54256726be6d1e61c1b92b26eb842d00ec8a2f427928a63a4a9a81340118f748e3d1fb553e200499b579a506665543314e2e0b11a6fd5e617bcebab27ab56a
SSDEEP 12:KGgKzdTRmBEyPbP/z+ZXOwClDmBIyssKz2lTSF7VQkRKQgMvY10gfv2pIDMFhbNa:KGxzyGSP/zaxlsRz2lgZoQhyGSP/t/
MD5 SHA1 SHA512 SSDEEP

Submit Download

44c5f5418c0f9b69beb1d719cf300aa5

Path /data/data/com.joy7.safari/databases/44c5f5418c0f9b69beb1d719cf300aa5
Size 20KB
SHA256 a23810b4bd43fab48ff0e03f71a73462ad04b8ca7779ed8a5601cde528c13cff
MD5 b1c1eea2cb20040b9fbf7770f9167780
SHA1 78b67070ae1f91e43005bf56f878d3570d190891
SHA512 f31f9356c69147f140e41412e386f0457932848342e36c80f232ac1653bd8ceeb3b8bec132c25ceff4cdab73ad5c9449060699fe93b55ad43f254de4563ba98f
SSDEEP 12:TYYCFI87uIWWVv4MK/O9OFRmBEyPbAVOw:Tq9xGSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

44c5f5418c0f9b69beb1d719cf300aa5-journal

Path /data/data/com.joy7.safari/databases/44c5f5418c0f9b69beb1d719cf300aa5-journal
Size 512B
SHA256 ec396690a098db13d3a7b7d6d3bf95a75c23d917e25b0469d6586a1cbcf8d6ee
MD5 6e2507beabe6b9e2c9db8434ea7814b7
SHA1 c88042d3f1f1f54f2503d6a24bb079abe1f51152
SHA512 d54b7d506415dce9d6d00f01469f8c312d368e1b7fe0d0b124dc76735450e3e818549ce33298c668283db3b347b1d3ec968e8833580814d55fa193643f2f50d6
MD5 SHA1 SHA512

Submit Download

44c5f5418c0f9b69beb1d719cf300aa5-wal

Path /data/data/com.joy7.safari/databases/44c5f5418c0f9b69beb1d719cf300aa5-wal
Size 32KB
SHA256 d3f18d0b2011ff3f62dcde0cc14d19bc579c0e160d356e792c5caffff5a4d42b
MD5 b6e35e116db2e62683808f2957c93f88
SHA1 6b9ac910ff49b4ba9ecf5c0f227f39bc0d86c0af
SHA512 307f436106a4cd866480877a132b2b1534594edbabecee4d985815ace9df73047140c6088cec65f24e4db3c4afbb7e622d426e43542249e35e204f702983a1b5
SSDEEP 12:KYGHlzdTRmBEyPbP/vZeRv1qRcmiOwClXYYCFI87uIWWVv4MK/O9OFRmBEyPbP/3:KYGFzyGSP/vZep1qemwIq9xGSP/v
MD5 SHA1 SHA512 SSDEEP

Submit Download

P15pKIjsm64m

Path /data/data/com.joy7.safari/databases/P15pKIjsm64m
Size 24KB
SHA256 9cc41eaf3228c605583528005cadbf69eb145da3943e09e3732677423dcbe976
MD5 032abd6bc70ad7c9484f10a7daf57bc7
SHA1 12e3c03375192814883d5fd1671e2b0c64b0ae43
SHA512 aa28b2d8e87dd6364e15b1c99c52758f937585c126cda7db38cd2b4e5fb3c3e5775a92cd1d5ae68b03a6c59e7473766d670f03e3ee30e8ee53c2bba1b73f243f
SSDEEP 12:TNoWt+lTSF7V9NoXoxq+oTk6X8UOvorpoTVZo5RmBEyPbD3OwI:Tnt+l54gPsU7riMqGSzI
MD5 SHA1 SHA512 SSDEEP

Submit Download

P15pKIjsm64m-journal

Path /data/data/com.joy7.safari/databases/P15pKIjsm64m-journal
Size 512B
SHA256 d48fd3807d25764ce55b8c78f5c155e45f517a6180bf3379438f735bfba1ea25
MD5 b0768835c53dd18e923093c2df20ede0
SHA1 6070d836b18f5fe7bf3c1a05556c1bcb7a60ab18
SHA512 fd0da8bf065850b85587bfccc7202332d13272256643f38924697da0af7a691ba5390f2133f146437b7b869667fa95982683d0de5f2e3d99180ca22416a7b2cc
MD5 SHA1 SHA512

Submit Download

P15pKIjsm64m-wal

Path /data/data/com.joy7.safari/databases/P15pKIjsm64m-wal
Size 36KB
SHA256 7f9dc67c3ec7b0ff67e07c1efdd8c4882b3da0cafb2c462c704b9470afcf2454
MD5 7231932afd9e57c3103f0279c8652db4
SHA1 6e7d447148ce3ef9490c9e2a3e18b817528a91d3
SHA512 41a5e4e141b1d9b23f51888e13ef7553ef7cf06f6ee094327d0115ad5e801ff487b22d6649a6ac952a0810d0d0c16b4f66b274567aa432ba8222aca26811573c
SSDEEP 24:Kg3tQzyGSP/WoKzGbnt+l54gPsU7riMqGSP/WPU:CzNSP/RtaFkCDSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

T1oX0rhhuXWt-journal

Path /data/data/com.joy7.safari/databases/T1oX0rhhuXWt-journal
Size 512B
SHA256 1ebf70059ce072d30d677ecbc0e8bafc5690dab8b2d0b9260e23f7cb5918cdfa
MD5 39fb190fef1704b0f0c7eea9ecc0bd32
SHA1 fd65f8ea6fb27bfeccc7d1ea5f96f06caff124d0
SHA512 4bb858179915015f4fa8e5a83cd62888f79f1b34611d3a336adc32b2b88dffb51dd68232970565a0714f2b7b94a7ce1ddd5f4e1dce576c452f01f3afbfaa4318
MD5 SHA1 SHA512

Submit Download

T1oX0rhhuXWt-wal

Path /data/data/com.joy7.safari/databases/T1oX0rhhuXWt-wal
Size 36KB
SHA256 741c18c5e22e4414b4fd621f2dd9dcdac0ebb39521604530ab6c6dfea6592be1
MD5 15306487774aee53e55c6db652560ecb
SHA1 657ae093908e6258d3d6388c4e5e6cf8d254c360
SHA512 349858c1b5b8e4424bbfd5ca1adf1f79ab44f9837348063ab0a1e558aaa3e297a2d9d9907c6878f015328da29f542d99632b7027f59485840720e8721fc1b13b
SSDEEP 24:KiOelzyGSP/08oIoRknjt+l54gPsU7riMqGSP/0ZU6XP:ZZlzNSP/08oknBaFkCDSP/0e6f
MD5 SHA1 SHA512 SSDEEP

Submit Download

XKwVoK0huy3R-journal

Path /data/data/com.joy7.safari/databases/XKwVoK0huy3R-journal
Size 512B
SHA256 941d0e9d6b7df052252a8ff9738d8d75ac977081631d1f591d0404be9b053e2a
MD5 c8263bf3562f67cf92a9573c1cc91d86
SHA1 8b7297d9a54eb2edd7678ee47a4bd01caa022572
SHA512 30e41980e65419b17763c681ebeacce5813196b082fd64d24d0942371d452db668ce159e26ad93a46e87ec52359e7188cd922625d5a34954952a72b7547d926d
MD5 SHA1 SHA512

Submit Download

XKwVoK0huy3R-wal

Path /data/data/com.joy7.safari/databases/XKwVoK0huy3R-wal
Size 36KB
SHA256 773d285e66a79ccd8b4e501d8dcd94a956294f64cc4170ac376d619b3ffe7059
MD5 1bb831b08abad65a590c5850749fd069
SHA1 64d6d542acfae718e910b6108287bd63c064c062
SHA512 e801c614aba20dd36146239f89d00766b98adfd8e8b9c33ccc9a98c46b49575316103962dc6eca162331230a1363728e71e66edabf1bc560a672f7ceaba41086
SSDEEP 24:KAlzyGSP/HzZ86t+l54gPsU7riMqGSP/:ZzNSP/F8+aFkCDSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

c02d09cc56811ae1697587a40df8899b-journal

Path /data/data/com.joy7.safari/databases/c02d09cc56811ae1697587a40df8899b-journal
Size 512B
SHA256 631679c319274e76a0643e09c0ef390fb77c0224c9f81ad6c3c14878cc383dcd
MD5 bc09c91f6dc6eff3a65d619725392e5f
SHA1 a76d723e22a4c901b9f19e92ccace9dde65e9ef6
SHA512 53d44301d3f30de64ea104f51286844349e482354abc05afb15177828cd0070cad74ba2e70ea119420dd633f39d3eea2e9722406c0001b35b4d7e1d09e54e1f0
MD5 SHA1 SHA512

Submit Download

c02d09cc56811ae1697587a40df8899b-wal

Path /data/data/com.joy7.safari/databases/c02d09cc56811ae1697587a40df8899b-wal
Size 32KB
SHA256 dc64bb8afc680ee09c43487775fc7c6b0e63327b361012306d63b4fad40d696e
MD5 398a4b62b2518fe1288b84766473dd77
SHA1 8baf95bd07b11b29f5630ec5e1ddeb0087aa03d7
SHA512 d7ef82a7d2e1a4c425d9a8da8403a03b93342ef11080a88733c83a0085db55b222605aaaf860aca6abdab1b77895dfb44fb2a7721281595ff0540ea08cf6e509
SSDEEP 12:KHJzxAxXzdTRmBEyPbP/Be8dFg68COwClmzHQqDfyNTSFbyEbOW8Mv6RmBEyPbPC:KpK9zyGSP/AATZbluObrRGSP/wBd9
MD5 SHA1 SHA512 SSDEEP

Submit Download

download-journal

Path /data/data/com.joy7.safari/databases/download-journal
Size 512B
SHA256 053d2d9c5b79c45c7575ec391479aab2433b3a252747fad51d722a5fad3a6322
MD5 e5ba617570327bb044f4a7d4fb296641
SHA1 f675daf969f00e4a88eb36ef2fcdfcafc5eae80c
SHA512 483ab74b84a8e0e282fbd8a56086871a7876a36dc1584a30a06c0ed7c1e3a83c8cb6490381783435e0e4f48e2eacce4921fe87b0efe35ecc011371f6a4e97c40
MD5 SHA1 SHA512

Submit Download

download-wal

Path /data/data/com.joy7.safari/databases/download-wal
Size 28KB
SHA256 697187402dd4d1438d3578104d6e41133d7981428179142a4131b4ab53bf2e7b
MD5 e5edcafe4b267f8394a2c391070ae5ac
SHA1 5a0266594f520835778fecebd186b1f77fdef110
SHA512 18567902e691c1e7e4ba47a61209874677931a6b62d05d358c53d47a2c9cb414b539953c2a6fec94053b4aee896261b5609f35ae6a7adacde04854aea837258f
SSDEEP 12:KYL/VczdTRmBEyPbP/UA21TOwClXVFgEmSnfwCFOC6Ow46O+RmBEyPbP/UF/EgD:KYLtczyGSP/U3NkFqSnlFAiGSP/U1D
MD5 SHA1 SHA512 SSDEEP

Submit Download

galhttprequest_database

Path /data/data/com.joy7.safari/databases/galhttprequest_database
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

galhttprequest_database-wal

Path /data/data/com.joy7.safari/databases/galhttprequest_database-wal
Size 80KB
SHA256 39f6342aeb873e151eec53742aaa210f04096c69d00bf6e9e33d8a01d7a25fc2
MD5 e9a980fae1c3779e6cbbaacbbb950a5e
SHA1 01a74779b7083e1531af211aa8ea71d99a6ba245
SHA512 a165dd3959e8f208649b04e233dfb15271d03debb02498a76703b79115bcdd3d2f878c4eb85262a6933a2dd2c1659e49ea7f21ca184204a88ac54139cbb56c92
SSDEEP 96:wGPc0+pYtoEtPeDK10+pYto/tPN2ewCqLpKx18z:dcytoEd0K1yto/dkBCUi18z
MD5 SHA1 SHA512 SSDEEP

Submit Download

history-journal

Path /data/data/com.joy7.safari/databases/history-journal
Size 512B
SHA256 bcc20ef5f26c2b4c233d8493bcf170b90fddd410a9d9295801e07ac0d3b7c0d6
MD5 4a6716ad65968297da3aa61610203427
SHA1 9c879aa5f0aea23de6d4d5aeb04cd5cf29418fd9
SHA512 905ac4057f302e63bd726003648dc71415b49b412d42c11dc84c755f3abd604f0138487fa2086ccc480aaa5ee8e79b5f448668956376a8d3e4affc1f835cb756
MD5 SHA1 SHA512

Submit Download

history-wal

Path /data/data/com.joy7.safari/databases/history-wal
Size 28KB
SHA256 7cd85c54f25b246076f436202053b4886accec669be873d6630293cdd2111632
MD5 53542273975db9a9e5d2ea146a1b1176
SHA1 38206695f19b802cb8abb663f27be5db5bb75bcc
SHA512 555869bae9b2ca60b54883c3f0f8a4a9f97f941312c19f8e1e20dafc7786fb7fb19fbdba3f50161babea05ed26ed2d61b1cf8b993e4f37fcfbef8325a5cac800
SSDEEP 24:KKYEAzyGSP/IBup34E28wddFTGSP/Iy7:v/AzNSP/IBuyE3wdHKSP/Iy
MD5 SHA1 SHA512 SSDEEP

Submit Download

jqIqJYOT3JpT

Path /data/data/com.joy7.safari/databases/jqIqJYOT3JpT
Size 24KB
SHA256 f4a3fc85419d0e98a0312af88fdeadf75bd9969460820043559d6ee45e7ace55
MD5 9c37108c041a67252d4fb5059436eb9f
SHA1 f65bdd652f9b2a098993d2aca0be2578e8eed20a
SHA512 d7b92b0b4900439a28552339cf7e80e2937887c7de796e10df0bec393d136bdcdeae47991133a5c144547ac2ffe484b9c99e60280246858f6ae9b8529c5d8548
SSDEEP 12:TooWt+lTSF7V9NoXoxq+oTk6X8UOvorpoTVZo5RmBEyPbD3OwI:T6t+l54gPsU7riMqGSzI
MD5 SHA1 SHA512 SSDEEP

Submit Download

jqIqJYOT3JpT

Path /data/data/com.joy7.safari/databases/jqIqJYOT3JpT
Size 24KB
SHA256 70d0b1e4b96a621aee5debef2c297b2fbce355d0d2d0025bcc74dac61717c0b0
MD5 3da71b14151d897f9850d177a6d42598
SHA1 4ff5ba87bc9a5352d097d435f3a6cdcb0c9aec8b
SHA512 d75358b44fb8e048fd9bd9953f5f8a87065a1b2d05df02e7f44c2617a675fd64a9511e7df771298a0a962401a254eea715905d52df846498d9d56f71f39ec2b6
SSDEEP 3:pqcwc/WdWROL2uNYKtDASG2Diask1Ukq8q8/9oo8ASok:pqwOdWW2uvty2DiaP5JMok
MD5 SHA1 SHA512 SSDEEP

Submit Download

jqIqJYOT3JpT-journal

Path /data/data/com.joy7.safari/databases/jqIqJYOT3JpT-journal
Size 512B
SHA256 abd957375be71314a1fe34905a95245b709eed482b7b392e9000986931d7f118
MD5 0bc949eed98b7c3f70536e8364cae206
SHA1 ac91f088e8bbac9a8b080f706f2260a15e95039a
SHA512 b108bcf51e4f359e6287e4836732f59001051e5efc065d1d0a4a1e754df01667eca504c121f3079a1565201d99e5a9b9f813d5dd3d5557988284369de70083fb
MD5 SHA1 SHA512

Submit Download

jqIqJYOT3JpT-wal

Path /data/data/com.joy7.safari/databases/jqIqJYOT3JpT-wal
Size 36KB
SHA256 08bc9ce4a15c2100d275f76ed7e1428dd584cefcb48c2abb7d8c5932c9aad95e
MD5 64da48806acf56c5198a7c8989a501d8
SHA1 ff0dbe5c23dc9febfaf19d28e8c44a05ffadc6b4
SHA512 2a511433501927cfa80bca9099320828c4e83702d91fe5104720cadec3e3637fa0928195e2be5410f368b9d53cab982843cd1b5ba3a6fc0d0adc1268159ea8e6
SSDEEP 24:KmlWk1zyGSP/GlnqVpil6t+l54gPsU7riMqGSP/M:IazNSP/G18il+aFkCDSP/M
MD5 SHA1 SHA512 SSDEEP

Submit Download

jqIqJYOT3JpT-wal

Path /data/data/com.joy7.safari/databases/jqIqJYOT3JpT-wal
Size 12KB
SHA256 e62dca3bcf45a94e7efd29fca3ba52a7a07d3b52e60ba8f3eeaa59640d7e3e86
MD5 75cfae24dbfcf911ae22b28585cd0f4f
SHA1 1469377b3da7f48625406e72caf5296998534484
SHA512 ebbc1663e99848b37099754bd0240493a659930b4bafb929cb8c55d9451efb6a33081c71691a1686838132440bade90e1ccf9a7e65ef0ff6330f8e58d1fc4489
SSDEEP 6:Kg9PM9WEOdWW2uvty2DiaP9Y99/cUk6JllLMok:KIUWrtyTaq/cSrlLMok
MD5 SHA1 SHA512 SSDEEP

Submit Download

safari_app.db-journal

Path /data/data/com.joy7.safari/databases/safari_app.db-journal
Size 512B
SHA256 d53ab9483be7a4d9950ca38b56a5c309c26d72b8e60f04ee76f568ee1d9394a8
MD5 ae679a7389a61f7df0c3d6e770b2ac6b
SHA1 4684c5a60b5c4695e07d79c6058ede3eef7f5c6d
SHA512 a3d5afa9a4a327282c8d53e0ee73d16228bda191b4045520fe856e45de67b565a10f6e64ae1df906976f40643aa3068cd2b999727cbfeef1c670088ceb8bbe29
MD5 SHA1 SHA512

Submit Download

safari_app.db-wal

Path /data/data/com.joy7.safari/databases/safari_app.db-wal
Size 32KB
SHA256 5edc2937b41ba24b1e1396da362a78a3cbc3f30abd2d03e4860c519141baac70
MD5 26e36de95fbf07a4d92ff5fcd924547d
SHA1 739517ea6d1f46b56c73eb324929475b38161c45
SHA512 37df50d22ff4822b4959b1e876ca13c5d784a32fbbd780beaec8b082807e4bd3382779b1721db453e345d2caedea0f9b6c627546aed17e6b9c74b35f9c2cb49b
SSDEEP 24:Kqgl4XzyGSP/gXw0DrT2ZEdjlfGSP/giko:OWzNSP/4DHMSP/f
MD5 SHA1 SHA512 SSDEEP

Submit Download

wIU6pTyUBYWX

Path /data/data/com.joy7.safari/databases/wIU6pTyUBYWX
Size 24KB
SHA256 687a930724a6054924254f945ae475e34ae87ebdc2054881c34317cd91d46ca9
MD5 3f46387c5a9161a06c35918e4715e9e4
SHA1 f03b4527b29495a3f50be85d6afba301e9e3f1c1
SHA512 614fa11f57f1ddc2750185eb908a580f1ae1ea53d4f4ff6881610942a36554b918138af7103859821d90cef12ea68bcab1ca0e4548cc5a78ee7a3c658b37f3ef
SSDEEP 12:TjboWt+lTSF7V9NoXoxq+oTk6X8UOvorpoTVZo5RmBEyPbD3OwI:Tj9t+l54gPsU7riMqGSzI
MD5 SHA1 SHA512 SSDEEP

Submit Download

wIU6pTyUBYWX-journal

Path /data/data/com.joy7.safari/databases/wIU6pTyUBYWX-journal
Size 512B
SHA256 69e982ae78cdb87608d3301b30c267f33ae0fd865fc66f6a920062cf4fdc68f1
MD5 6bf27070950cb64d2a32ec8739fb3275
SHA1 8191130a68cd25d1ac60dae4fc1755bca0531a55
SHA512 c852e1afd4bbf816e10e4a9e31f5cf8211e0b2ef5fd1e1cd3b0b0c507568de649bd29f888e75295e5ed986f1095eb3a708da94a26a3d8e578ed9b5d6c90bf9ab
MD5 SHA1 SHA512

Submit Download

wIU6pTyUBYWX-wal

Path /data/data/com.joy7.safari/databases/wIU6pTyUBYWX-wal
Size 36KB
SHA256 e6e920767285831de05c46a12997df109f01bfb989aa9c49feff430702ba5986
MD5 fd3cb878285da16074748a9a6e440aca
SHA1 dcc30769d1580465ebb9b712599cba38efb56ed3
SHA512 6c156a3032c85c2cf05c3773860cd337c72c47b0a51c73f04c531246c73c9b8662f40eab6aa4e83155fde853cc69e93a295a155e8d8c249f7c95d6874c4b8298
SSDEEP 24:KbrpzyGSP/15V25Tj9t+l54gPsU7riMqGSP//:irpzNSP/1IjfaFkCDSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

wsUL1uCdKvjD-shm

Path /data/data/com.joy7.safari/databases/wsUL1uCdKvjD-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

wsUL1uCdKvjD-wal

Path /data/data/com.joy7.safari/databases/wsUL1uCdKvjD-wal
Size 36KB
SHA256 dadc4b663001ddec2c8dec47d18888cb4727c25a630ed8b21669f2f245eaf525
MD5 aeab74ca6f49814865de958a55266e1f
SHA1 3abf7e9914a0fefd2d49bedaa80e04b75c6578a4
SHA512 a7bd8e3acf47c22a6c9630f84ed4bc4df092644029d63c909173145d86cff7ac98654a6f79d656e9ba879dcbd97e45b17a525087eb3963b46bc669fae48541db
SSDEEP 24:KJw7XzyGSP/g9zw9jt+l54gPsU7riMqGSP/aH:8wrzNSP/gJ2BaFkCDSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

xUtils.db

Path /data/data/com.joy7.safari/databases/xUtils.db
Size 4KB
SHA256 42a44a112dab992bc005c484dd47a93178bde306d1811bc4442226d523f542c0
MD5 36e2b2e433aa9f74c9714e63cce66988
SHA1 04f351c53c55086e69dce3e6f43161863110d90f
SHA512 5f2e347e1aec16bd3ea8ca423f201e085077d81533fc03dd7a3a7f5e79042de7e0da6c91cc434f447f0860fdba33da03f85d786a26bc17cf214126eb3e15c588
MD5 SHA1 SHA512

Submit Download

xUtils.db-journal

Path /data/data/com.joy7.safari/databases/xUtils.db-journal
Size 32KB
SHA256 8980ef75ef97f87a2b47c82d336a865a0a84f98830d2c6ef438c3be091759d8e
MD5 46f217036618e530d062cc47f815e0ae
SHA1 e82a8d8fdec9018643e867e4f6343b0e9e050f62
SHA512 7d78ba7e80be496ea7bf679f0dbfd818e1fd78c21f8129a176eadedc35f85174c95f2bf33cd6be141985b8e3313aa763807fe23f6c433dba09b88351f8b14656
SSDEEP 12:TssKz2lTSF7VQkRKQgMvY10gfv2pIDMFhbNRmBEyPb853Owyle:TsRz2lgZoQhyGS8dGe
MD5 SHA1 SHA512 SSDEEP

Submit Download

xUtils.db-shm

Path /data/data/com.joy7.safari/databases/xUtils.db-shm
Size 28KB
SHA256 a380998d3fede69f55c73bec1b18d0fe7c0d88824b9e0e7a0a37a0d20590c39e
MD5 93fa961f7616efc980dc9361e1edecfb
SHA1 8d1021aa52bb8445d3ced53415f66689173fbfc5
SHA512 66c0c62f743ab1e92ee423deea5f1a68acad383827e4c7ff2617da1546670d7d202f1311684505195f7013ffe84e27f418f587e90bf1c015af8d87ccc7481179
SSDEEP 3:7FEG2l/t7lPlFll:7+/l/t7l
MD5 SHA1 SHA512 SSDEEP

Submit Download

xUtils.db-wal

Path /data/data/com.joy7.safari/databases/xUtils.db-wal
Size 24KB
SHA256 3511c95f09883c65de19c3be645faa921aa3baa92d21b5c284133da349158e2d
MD5 59413190ea19211285b5c0fed44c19c8
SHA1 ee67b7590047c3c17309f6e6eed48556aabe4c92
SHA512 6a65fc51ea3e163ed1da558c2f4e911857ab4d3b15bc27135a4639e8fed9022fd6d89b4dd39a39b3bcc69060d7565f68ef23bcde4e622a2dd823e9fd217d314e
SSDEEP 12:TjVoWt+lTSF7V9NoXoxq+oTk6X8UOvorpoTVZo5RmBEyPbD3OwI:Tjt+l54gPsU7riMqGSzI
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1718203117402.env

Path /data/data/com.joy7.safari/files/.um/um_cache_1718203117402.env
Size 589B
SHA256 43b8c036ebfddfb626e7e691fc7783a46ad6c29b9bd63d59ae4435e2866b8c55
MD5 e20d986f3ed9b68c055d940dedbc1420
SHA1 4fd035dfea9109b5d6f73edaf9edea99cac45d63
SHA512 0fd0bd473ee1459f45687da3afddaa46b531b5b739a111437887ea768037784ee240c39d9d0c02a8489a1adbddcefa1dfb2346e4a9299d64b571c9c2f72e0e52
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/data/com.joy7.safari/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 ba0da0fa99611673f3f89acd6a95fee0bf253d344ddf32854e96ef3f8d5b80f8
MD5 07c8bd6a72a124d5ea8c30c40c73bc26
SHA1 972800339e68ebb09bb2ccc6207a620c551eee98
SHA512 bd4589a7efc98d29b3a84f7f779c3f9e755fbccba8c9a47cf3e1b4e16d0ac81eaa6103a9a3a73e51d9680a78badd2d00b4d9905f4fd9e19d089d07124dd87e75
MD5 SHA1 SHA512

Submit Download

i42d45df023jnkdd93la483f9xGFKXI

Path /storage/emulated/0/Android/data/.dataycache/i42d45df023jnkdd93la483f9xGFKXI
Size 88KB
SHA256 639e423d3f3bf75b44bc408fa75e77416bbd7bc3624dac9d559c79573fde93e8
MD5 d6dccaf73b3db2f3952aa215f986552a
SHA1 2a51dc03a0c7fdcb7a4722af2c41d0648852a91f
SHA512 40ee9089aaa7e6ef1d63e391f7e56cb5e9830455870fbfc98334f6cf6ea97424a8aa9f9df16e918c2f8e81b21ab12d33055d6da403bf6c37e182455882c3515b
SSDEEP 48:7ME70xopA/t379y/MSP/ug40xopA/t379y/MSV:750+pYto/tPx40+pYto/tV
MD5 SHA1 SHA512 SSDEEP

Submit Download

s92TjjdfoP2n3o9dfji2l9s1olkjf0p

Path /storage/emulated/0/Android/data/.dataycache/s92TjjdfoP2n3o9dfji2l9s1olkjf0p
Size 28KB
SHA256 e98b3baafcfcf4f40864294492b78acf434d5bb30f54b73e1198247f78b3ef9b
MD5 5ae9b19cd6c96cc0bf23c61542d35f5d
SHA1 34de61774e680680cdc11dc1b2ae21f58f5d4978
SHA512 255a06cd234893878770176c4589d5d80783685ab7e75aa3eaa712191872cf81575d76df1d09b224680a1152534111c7bfac8aa3462105885dd50fadf119d7c3
SSDEEP 3:2CnBm+js2n13Kt/:2kk
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads