8f22844897d6536b85a6939755079b8ffd641800e715019614767d8157d5cbcb

Analysis

max time kernel
174s
max time network
187s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
12/06/2024, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a16679e6bf03d7eb2155d36cd401a73c_JaffaCakes118.apk
Size 9.5MB
Sample240612-vcrybswckj
SHA256 8f22844897d6536b85a6939755079b8ffd641800e715019614767d8157d5cbcb
MD5 a16679e6bf03d7eb2155d36cd401a73c
SHA1 4265331fbdbeed6aa528747214e0c8e73f8f1c50
SHA512 41f14e6099ce97ec95425a35c056162028fa5176333f4bcfc284c3c1a4d55090a374613830a4eaa21faa88a5f6dc5a2ecf63c1ac9f88be8c57bc66a3eebfa37c
SSDEEP 196608:NZaZQiqGq0QX+1kId7HG4UURN27eU54VaWwUI3HtM/6hYcXACOFy3:NZExqGq0QXk9Fm4UUREaU3JUI3HtMSae
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.maihan.tredian
/system/bin/su	com.maihan.tredian

Checks Qemu related system properties. 1 TTPs 2 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: init.svc.qemud	com.maihan.tredian
Accessed system property	key: ro.kernel.android.qemud	com.maihan.tredian

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 4 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.maihan.tredian:channel
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.maihan.tredian:news
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.maihan.tredian
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.maihan.tredian:pushcore

Reads the content of the call log. 1 TTPs 1 IoCs

collection

Call Log

T1636.002

description	ioc	Process
URI accessed for read	content://call_log/calls	com.maihan.tredian

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.maihan.tredian

Queries information about active data network 1 TTPs 4 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.maihan.tredian:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.maihan.tredian:channel
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.maihan.tredian:news
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.maihan.tredian

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.maihan.tredian

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.maihan.tredian

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 4 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.maihan.tredian
Framework API call	javax.crypto.Cipher.doFinal	com.maihan.tredian:pushcore
Framework API call	javax.crypto.Cipher.doFinal	com.maihan.tredian:channel
Framework API call	javax.crypto.Cipher.doFinal	com.maihan.tredian:news

Checks CPU information 2 TTPs 4 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.maihan.tredian
File opened for read	/proc/cpuinfo	com.maihan.tredian:pushcore
File opened for read	/proc/cpuinfo	com.maihan.tredian:channel
File opened for read	/proc/cpuinfo	com.maihan.tredian:news

Checks memory information 2 TTPs 4 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.maihan.tredian
File opened for read	/proc/meminfo	com.maihan.tredian:pushcore
File opened for read	/proc/meminfo	com.maihan.tredian:channel
File opened for read	/proc/meminfo	com.maihan.tredian:news

com.maihan.tredian
1⤵
- Checks if the Android device is rooted.
- Checks Qemu related system properties.
- Queries information about running processes on the device
- Reads the content of the call log.
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4656

com.maihan.tredian:pushcore
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4805

com.maihan.tredian:channel
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4939

com.maihan.tredian:news
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5259

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Protected User Data

T1636

Call Log

T1636.002

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

MessageStore.db

Path /data/user/0/com.maihan.tredian/databases/MessageStore.db
Size 36KB
SHA256 90985947854a98d7111a62c37ab3d90d94ee59b8050b52a677438dcb5d803760
MD5 3c9bb0037865f1062cedd146ca3720da
SHA1 db7af0222e5d243370a2980254ec24c63db44e70
SHA512 16a5301cbabd4f7d28c8e33582ef55d0b16c655b887a323fd52425965ebe032392cd44cd2aa7f9d8ddc0acb3a9d9c8a8ee3d093272b9ac167fbca22b603aefa8
SSDEEP 12:TLCu/W7X2EkamDfVcsg1jWuQUmKiayaA9HlApc2o/0XyNTSFbyc34wyACumRmBEl:TLCu/UPzmD6ZWaJyZ4M0yAN9GSgGs3d
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MessageStore.db-journal
Size 12KB
SHA256 d8cd1eac1690e94cd7fde34289d75094b2923ef90aeba3dd3931fde8a43bae80
MD5 52bf28c3b9777f037a2c2cbaf36cb56f
SHA1 cbe2911b5fdc7284defdb3dd11c519d3510febd6
SHA512 3347a0700736f16324364052315f940e6cd846436d2209a1ef893eebcc8cd8b31da4d6131253b9b1cc5c05ceeababf01c3dc93be84030654524fe289bcd37250
SSDEEP 96:XEh1+ww9B3wRhY5Nyq1zqgmyWNFhsZQ1xI:XEr+ww9hwR25v1G9tKN
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MessageStore.db-journal
Size 512B
SHA256 5722172c3de25c37a83e4ad4a7c3dfd13ce594810e2376038c213538b8311ff0
MD5 4b3b4a09f1463b1d89c173c1e02cba8d
SHA1 cec30d46c2111293e838fe3a4b36aaeca70687f1
SHA512 5c9543eb8976affa2929b2be086ced3067514d348a07fddcfe3b1a1d7a5963c6a98723584530a2f4632a8d52cb3a71698b1a4c7ad7b827034daacaf4f6a19ca0
MD5 SHA1 SHA512

Submit Download

MessageStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MessageStore.db-journal
Size 8KB
SHA256 a25f67ab3b526734f5c5d1c2135115779b0bbcbe9fb49a4e7000aa4c6e8bddd7
MD5 9b3f438e750e67ba9ec36056efb4c6a3
SHA1 53c9efbb226e682b799dac17ccd75775de2ec921
SHA512 511022ea9116ff4456edb8b84abe5e3ea3384ef0be408ef600b6bb6ca137811ffd977a7662d92bf481d6ef2e7f588df3b329aa4786e9785c636a85b65beb32b6
SSDEEP 6:TM3iWT1jopL6LDYhyVq6N3X7pYGvxfjXbQVc51zg9bNFlEuWdN/kPlOERX4PBX4k:TM3ii1Jmp6N7nyOHqLiuWdYRmBEyPbr/
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MessageStore.db-journal
Size 8KB
SHA256 ba5095ae703131a82f115049f87e63f530010e9681d3af046ab5a35a625f327a
MD5 0efd7efcb8f81a2d9663b627084a3e85
SHA1 b969aa2ee3ee28da88e40e5c2dc1a55f86a0d7c7
SHA512 e2f7001c1e7e8da87a08055cfd64196fe7610506184bd2d3a400c29dc50be1bbccef6e19baf7d696610b5651bbd38984a3f68e808bd2b749dc2344fbf55d8832
SSDEEP 24:7+tgNa3pqLRf/UPzmD6ZWaJyZ4M0yAN9GSh:7Me8pq93RvZ4M0yIoSh
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MessageStore.db-journal
Size 8KB
SHA256 782441e4c66d76c0cbd03ca9e14d4710851e497a4448aec41bc8db1e618913cc
MD5 a1061023207bec1a94d55dfbae97cc3a
SHA1 9844d8c5ab2b869b6d1f60e0c0ea30dcf2e54706
SHA512 32766fb5b7b17befb0be077550e7be8b2c6599c97bf8b09502334256fe73b8417e98ec9b17f0b1473c264ef7f0b4e298cd3ee6000e49bc06491f0a1c11ad3028
SSDEEP 24:7+tIQNa3otqLzt/UPzmD6ZWaJyZ4M0yAN9GS4:7MIu8otqf1RvZ4M0yIoS4
MD5 SHA1 SHA512 SSDEEP

Submit Download

MessageStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MessageStore.db-journal
Size 8KB
SHA256 70c11eac1dfb4b1e3fc872d411567ee44b072f16697b1e5b9e8a33811e22a32e
MD5 8ff3c792ba8af7def606b3bc433009d9
SHA1 469bb578436d44c5f5807f2c71221416d559e0a4
SHA512 0cc8c1829087de8a2b5badbdb75e4fdce7edd23ed0238a1442ef96c7a50a2d823289cef09fd606d61e28e0fa4b863365ad2ef058e0f3c67c32e77927df945b49
SSDEEP 12:TM3ii1TXM78yyp6NXWoxqLJdeWRmBEyPbCR:q/AYANGgqLJKGSCR
MD5 SHA1 SHA512 SSDEEP

Submit Download

MsgLogStore.db

Path /data/user/0/com.maihan.tredian/databases/MsgLogStore.db
Size 56KB
SHA256 e05b9921e91a945de71be9b409212c88b46dd7f9393b19053516bffd0c649b00
MD5 1b88a60dbc1952b8a35efae400bb9029
SHA1 550edfd6c1707c5e246ada2e079cee11157ffe22
SHA512 fe5a5a98a177283a91339d219269d1552cb05fa6a91528722171b0c94366ca98846207545c5e0eb6ec7e15d7af16e2413ea2d480672989841f175732f7c9cf95
SSDEEP 24:TLoji+931Gd6O+Rn0H46Dgn8tN8X48XeqS8XRu8XM8XMWlsl4qSlXmlIl18f8Dqy:TwF3sQO+t070OCJfhF8GIUWZwbS
MD5 SHA1 SHA512 SSDEEP

Submit Download

MsgLogStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MsgLogStore.db-journal
Size 512B
SHA256 8f0d92a7b184affac6054127fdcdea5274e6c17424e6d53c41ef7382043fda01
MD5 9dc1bd832dbe43c7399d26704af0783b
SHA1 ea210752e44716b4f8effb21fc51223d03c6329c
SHA512 b281c859aa662d32e95aa9689f34d8233e02244c0fb8eecb27136a62989ecd2d5c7a78163941e1babc60ddf0cc674baecfbb5a8a75c35323acccb1476c3454bc
MD5 SHA1 SHA512

Submit Download

MsgLogStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MsgLogStore.db-journal
Size 8KB
SHA256 19fd4d70f3affa03a6988ace1db17361c3e5b70b51fb2527b68a3f94e20b43c9
MD5 ef97c73780727fe8f37a22e9c6e8f5ee
SHA1 0fad65a725bcd7646b9bf2c6679f6e5a2d67a06f
SHA512 4eb68fe035faae8f19311bf65b6aa8cf6224267ef4e2b93e5265a9a9c03666e44a7c482df80169a007e85c3a1821a289656543b90add486df9fa4a3fb5ad5a54
SSDEEP 96:vkAbrSE4NLC3MbKRwJGnmqFqggFfe5IlVmzIAjL6fTJEep0Js0r08l01BZ070D0R:c1E4N2RwEgFfRlVkIA/6rJEeBPS
MD5 SHA1 SHA512 SSDEEP

Submit Download

MsgLogStore.db-journal

Path /data/user/0/com.maihan.tredian/databases/MsgLogStore.db-journal
Size 36KB
SHA256 f2434b69ad5ddbdeb3796b9e34fa428cf6fc31bf987dee42c12816e3632a128b
MD5 7c0b5c6d1120bf3635cb815eb5e29f28
SHA1 cbb58092e164d3d098e750a608f3833f85a06476
SHA512 151d69445e8311fc78f40b5781e2e1f1d631e879e87a08d1076ac69d7ad5bbb8ee017fa4d5be934f9eaf1cd3a0aea87c40be405c2a601a845820d73705ec7a36
SSDEEP 12:TLXSSOPvEFT0fVzjJ0zLVkyts/fuQ/k1zdvBxBb6RARwFTbOwNndRmBEyPb8FOwI:TLXzYVvJ0fiyts/fuLBzbx6JNGGSgI
MD5 SHA1 SHA512 SSDEEP

Submit Download

accs.db

Path /data/user/0/com.maihan.tredian/databases/accs.db
Size 20KB
SHA256 ec7599ce1cee6fc79c896d08b7164faff4b2d70f22ae31be43f6d8ce9b42a6ad
MD5 9c2698981b34b864fca2bbf915e2e980
SHA1 c64c43f61702c269a36aeabc561183cca5c4fad0
SHA512 19f7719c9d8b3ace358ba1d297db25c428846a9cc33b2e12f5ff5bf4c1a920cb17c7f31cc13b201662d259689fd79ff426c21a42016339652e557c79dd6eca2e
SSDEEP 12:7+t/oyNTSFbyBh43R90Ef7c7VDERmBEyPbAVOwG:7+t/Fqj0W7yVD/GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

accs.db-journal

Path /data/user/0/com.maihan.tredian/databases/accs.db-journal
Size 8KB
SHA256 010e58b2fdae4e72490ba1ac05c92eb73527ae74cc03cbdddd07693887060014
MD5 6d83d4b994e895cefb06f57f620a6140
SHA1 b4e472e65a539bfb09af75651a092fb45e129707
SHA512 7d3d5db42beb409d0b9aac9a61b5808c0a467ce49a04130e19db5d1be868af2df032304e22e2ca6fe40b75f60193c1136d370aa83eedb0bf6918b7ec3e622db0
SSDEEP 6:7+/l9XPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKU/c:7+tJqLJdeWRmBEyPbfc
MD5 SHA1 SHA512 SSDEEP

Submit Download

accs.db-journal

Path /data/user/0/com.maihan.tredian/databases/accs.db-journal
Size 8KB
SHA256 e8dee46fbcdc4c085da5cf7977929b303bbf19c11011ae88026a56d954c200e8
MD5 1bb6efa4cde22fe49258faf19bcfec83
SHA1 3eccda4ee8edf1c6cca58a8f248fd29ad3d6d159
SHA512 48a45c88f83ae8a93e2600c5bf8212a6c436c86ce2112322fa8c104c47799f5a015f03f9c708c407758594fea2dd13c7a1b8a0a4797f1fbad5398636e2bab8e4
SSDEEP 6:7+/l9I/Gn1ARg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKYW:7+tm3qLiuWdYRmBEyPbfW
MD5 SHA1 SHA512 SSDEEP

Submit Download

accs.db-journal

Path /data/user/0/com.maihan.tredian/databases/accs.db-journal
Size 8KB
SHA256 454f2849bc8c48564510c71be1e65fc4cf506b6339b7c9b3698ba5ab12b2f8af
MD5 99b3ce59e1a8a7cf1bdcdc217ef0dec3
SHA1 1a2691ac9609a7e8bd3d5c5043fabc6babdb63fa
SHA512 32d767ee4d6fb9c3825b5923d2523642975c757d426a494b83bd5da6664070e1dc6eafbf33e63571aaa8e6564b918ff78a612caeec91f84db796ac37c8edc401
SSDEEP 48:X2eODp4NMe/tsUTKHY7vRUTf0rN/iR2uP3rdSM:XOi6gTKH4Z/KMIrkM
MD5 SHA1 SHA512 SSDEEP

Submit Download

dataReportLog

Path /data/user/0/com.maihan.tredian/files/dataReportLog
Size 63B
SHA256 8fbaaa77cf995baed1ac8ae406a4f296021b9994d2b6bc824ac3a5f87d271293
MD5 948f1b23ddf624ffab361ef18b1d492c
SHA1 b7ca2e07e78801214af9876b76eae169ebf9f740
SHA512 0c6f2ada265c6591afc31ba3320fe7086c88894c86e1d5555d9fc0d9ea4fef4cc37560afc21ad6b51637fe8a557482b6ac4e67e71591ffd706e29475d4924268
MD5 SHA1 SHA512

Submit Download

dataReportLog

Path /data/user/0/com.maihan.tredian/files/dataReportLog
Size 81B
SHA256 a34a4c96d332f8fbd8fa73afe904f4a5c24eb02c4011c5b433e55fd4072a27e2
MD5 9b57fead666dfa4d2a4df16ff74587c7
SHA1 b8f7b804a492ac50212253c8187676b50c2a015e
SHA512 033b5e35badaa4b024d3ee9a43402f418c57c9ccaec1083950ea6ea330dbfa271d776927166cb5842d399a25c8d3409c41cd816f00718ea20a7f5b5f8d0f619e
MD5 SHA1 SHA512

Submit Download

dataReportLog

Path /data/user/0/com.maihan.tredian/files/dataReportLog
Size 73B
SHA256 9310f9ab1fdd91d31e3d45c7c7804dcf40dcbb0198e090a074eedb8073dbd5cd
MD5 1599d91ebcd521f8618c7b4fcbc4fd7b
SHA1 3c5ffac4d0c55ca9837c4feb8dbdcc35fbe9e1e9
SHA512 073a356b967dc08134d8c77648f9d1770a74a8669cddae46590a994ff953568d1257f12b1a393feda66200e5295879de46f16b516918a1246c42886a6b3b0449
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache.json

Path /data/user/0/com.maihan.tredian/files/jpush_stat_cache.json
Size 186B
SHA256 18c7b23fc7e91b6c0b89aad42b99391c1be7024da403055e64ddb9e5871f32d7
MD5 183e3edb4c437f820c643b7fb7b4927d
SHA1 3e19878910961754ab95b69fb5a4754eb7f7a01d
SHA512 49f2339969e529cea5abae6c07ac11890e913f74af20a815e542f022488a80a6305b2831662f05c93637ff43409fa2a8d55f8abc6cb7fc0d3c1a4c29374ee49e
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache.json

Path /data/user/0/com.maihan.tredian/files/jpush_stat_cache.json
Size 240B
SHA256 a1351f14074dc5645250c72cbdefcc53bac2ac5b7c2829b2d9fb7654816e3ec2
MD5 4095a8d5c20e6c0b4ff01e356949dff8
SHA1 87a03b021391e537eca21f6e6bda72f799605d0d
SHA512 72d4c525abcdcc81852b9c50a5998236aeeb59e8de5391d4ce278733baddc764b91debab8c01fa735003186aae7534db12a3d6d8e8998cc6dfeceda6b9a7170c
MD5 SHA1 SHA512

Submit Download

jpush_stat_cache_history.json

Path /data/user/0/com.maihan.tredian/files/jpush_stat_cache_history.json
Size 174B
SHA256 f381cde6e0fd171e6e964b5d87c670985b4a38fa99bd9cc8d23423fdf1519ca4
MD5 3e0f513d55e2375d4d723fcfc4f99ace
SHA1 02669a8c5fed73107bee683f1926e776bc282020
SHA512 b511ac05f7f7a8d3bc9c8d03a2a773cb70446b95ea875b513a2735ddfe01dc2e3f98d7f6568ac2098c628963d75fb5cec51a8fba3a45328f7bda202a334dac6d
MD5 SHA1 SHA512

Submit Download

dW1weF9pbnRlcm5hbF8xNzE4MjExMDg0NjQx

Path /data/user/0/com.maihan.tredian/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4MjExMDg0NjQx
Size 1KB
SHA256 18dd2fee7d1b572c4862b2fd954dd5a96384246ac8fd087a96bd6d5aff669cdf
MD5 2aff57a68fffbb21160a09fd32e9eb4f
SHA1 bc472d7f4ca8418d08a569ba74f54635d1cb0b7d
SHA512 11463f4731a0f0cbffd052e277e082e38802ea7be47472152d1b23ce087ad292625aa5d29a4d74bd6817e8238147a6ccb2437268a4b198ca8243ff18287e04e9
MD5 SHA1 SHA512

Submit Download

dW1weF9pbnRlcm5hbF8xNzE4MjExMDg0ODky

Path /data/user/0/com.maihan.tredian/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE4MjExMDg0ODky
Size 1KB
SHA256 c949a108bd10d8c8050af6b6d3ae2fc3ccf32fff191d7bc0e351022c5b827fdb
MD5 39de79aa2af20acd4220e6ed23ee1476
SHA1 44d6e798a7f7559e05fa88152367a98fbe5f671d
SHA512 26805d101ec62d52627e98d7db756eb0f09365a82c46318dfccac0bfdf8b81e5f2c290f384cda246b61b284c2c42bee8c45423c4385cdb5f8a568a3dbc295be2
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.maihan.tredian/files/umeng_it.cache
Size 433B
SHA256 1dd8de4d77310327e5bc7321e9657b7f3bbf87b24ea9b6c3c20cb2dc85301851
MD5 22f179d21ec3c077828dda5b57909d2e
SHA1 eae5a225bc6f92c6653bdc641fdbbd485c1e7355
SHA512 6d85dea51ffa0618c8152d112aca17dffb12a3383001d25d247df652ad37f419b282b65d8e1166d514dd327d9d9d471dd039231d164308e5ea179f11fdcfa04b
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 ee903e08eeece327cd0acc0135e079df8b9ff83b0cc38a7e9c4b41d1db099c3a
MD5 ac5e738ecd9fb745d50cf775c55cea1b
SHA1 4b9189a10517c89d642c4b3f9c7a4bdc618926ac
SHA512 73cc0af4858041a369f679ca99d388269f1f53b7e890e039089b9bd3501ca800f88e8be7c4913e8c172130d6bdf62a700c6553d12ca731acfa8fd438f2ecd39a
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 213B
SHA256 93398bc72906933438eba478f9eafbf67e76c966c83533932dba034e2cb9af0c
MD5 271f7a85568deebde764282980ea24f5
SHA1 1612da5916d998acaaa9f9727f4c080814e5ee1f
SHA512 9f9bb184563fce511b421a72cb93428eda0f7b7e51a0a09221ef7cacf2a12752047ce9099c96a921774e32bf5f9fed1886f3e877855c4ae77e80142f09026c9c
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 05177552fea272bc7ec0abdf8e262d5b4d8beb79489a7008437efe63aa78b281
MD5 15e7bac054f4701d614df1e99b66c326
SHA1 f31dbdb30758e615d38caf8a38852bed8d3952a1
SHA512 6ac78260ed480487730e91b6662f15a074b2af12a93987a1de1fdd00ee30671af2e33605819dae0cfa86d44ec86575b27f366e78cfb4cf5ba99bbd0c28a39fc8
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 167B
SHA256 807275cbf28af926c246bbc69526b456a12814e0bd0836b00e003b0cbc135542
MD5 ec3a4285804c39aad4da636916bcde42
SHA1 f5a9d52fa0bd44f0bace4129b3280d55f2cdd6db
SHA512 7a09665100cf59a7f955a237f82d99198726903f01b54ac524117eabef749bd3fd76bd36e7ad1d440bf5e58428aaea88de13410aad97000ec9dd505fa9d6b723
MD5 SHA1 SHA512

Submit Download

.push_deviceid

Path /storage/emulated/0/data/.push_deviceid
Size 32B
SHA256 f28eadd115abd995e25447700e7c08060424b4d3d38e03ddd60a3e948fccafed
MD5 36b2af593fa20270c049904747f9c4a6
SHA1 ce59aac4cc9c268679a3676181881a4b2466aa02
SHA512 bb31825e1a970a2984068ffbd201372cbce0f007406d0a8c37fd3390c9f80ce09b00543eb0c3c0d5621f60c9e931a27ac64e3c505e1deaf3bb63b20e744cddd9
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads