Malware Analysis Report

2024-07-28 14:40

Sample ID 240613-jlxdmazcqh
Target a47d0578f905dcc56360019ee6e3efa1_JaffaCakes118
SHA256 fd3064e387678fd86f045fb33b5d27ada379fc1e16a5f3432fa3379ba5e229eb
Tags
discovery evasion execution impact persistence
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

fd3064e387678fd86f045fb33b5d27ada379fc1e16a5f3432fa3379ba5e229eb

Threat Level: Likely malicious

The file a47d0578f905dcc56360019ee6e3efa1_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion execution impact persistence

Checks if the Android device is rooted.

Queries information about running processes on the device

Requests dangerous framework permissions

Queries information about the current Wi-Fi connection

Queries information about active data network

Queries the unique device ID (IMEI, MEID, IMSI)

Reads information about phone network operator.

Registers a broadcast receiver at runtime (usually for listening for system events)

Schedules tasks to execute at a specified time

Uses Crypto APIs (Might try to encrypt user data)

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-13 07:45

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-13 07:45

Reported

2024-06-13 07:49

Platform

android-x86-arm-20240611.1-en

Max time kernel

178s

Max time network

131s

Command Line

ua.FoodSoul.DonetskSushiTaun

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ua.FoodSoul.DonetskSushiTaun

ua.FoodSoul.DonetskSushiTaun:Metrica

Network

Country Destination Domain Proto
GB 172.217.169.74:443 tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 104.21.66.157:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 104.21.8.212:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.187.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.204.78:443 android.apis.google.com tcp
GB 172.217.169.74:443 tcp
GB 172.217.169.74:443 tcp

Files

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 99cdcddc57eb56e94d43d1075ff49b3b
SHA1 32ea9630cc36482d7c3c16822e45fc31fe58a052
SHA256 2bf37cf7ddfe4e4aee662ae958ea2e3a3c382fca417d0962cee179086429a23c
SHA512 1d4fc0e5db1de2da032a89664be27cfaea7b81e350b28aea37a2318b12a7b2603b3ebd32c9f443321771cfd3bc04574b417ce8c3aee2304a8480d2d076892ae4

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 021913095c3b0d440c16edd436e844a4
SHA1 af51aeaba583e29e804c5a2de3cc49e01d812ad4
SHA256 820361baeaff4fb38f853423271069c6827890775ce0c8158859ac8aaa206a7e
SHA512 003c4bc452512ec16753b9d7c15b1400565e6eba68706057454595780bcf71ecd302cf36c4b8639716407c82b18f9745b244794e63324ad8e3ad6bf729b9a877

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-wal

MD5 7f766965d3e9a0f277316d1589881d37
SHA1 3194c7ecf7f91cf17f5008ddf85a84c641839128
SHA256 86be020a866b9415a163adddb3aa31323c4eadb62b7833e10f1b277eb14936aa
SHA512 2f6ef359f160033521163398e8315fd5054de0f75616b6a144fc0f5bd01d1099a3e937d2494020b1ccf83f78bc82c6a074ef0cb50228433067d991961c34c931

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-wal

MD5 3cd485095dd931a6db9ca4f62c5d672a
SHA1 46b155b319a7d3e184bba0f0de5fa19c0840d760
SHA256 d60917d779e9d4049709159f6a3f9eb62696e124c5f3cb85315c92b4fd7d5aa6
SHA512 3f9e9e65f09ffc0507200600b9e2f369e882de3180ae1f0ca33f8b66088fd46e718bcf4b7b3ebf2ae79cd8a5fd60ed3066321551d549b545c1b2dce13e3a67ce

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 f98b5269d083af12f2096f4bbc84ed38
SHA1 0a3b68cd33e2f5f5bdc418797319e77d6f4c5c5e
SHA256 edcc16c122e6b8005f5c01ee60b2d177b881cf1d443042ac73ba8e327d9e5cc4
SHA512 db2c9f4343401b01bc28f546feb79edc6f023d852251f74fd655153105d364943520dc268d738ea57b8478b6782713cb5f5a2fdd5497b986eee9976ed025d8a6

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_data.db

MD5 0307b06209c5fa13d65f716ba88f2114
SHA1 703d09688e6409c880d3b048ef495d59a06a43a6
SHA256 eb1965937a52f6b5eef7bf6771ef4b8c0feed42f454e984cf82b8c1a7fb54a32
SHA512 91fe939da3d0b5e221488902b64cbfde40d928c722e46698351f54077c06292011f2a0845edae943fad87d9748de873b9e06624d2be0cec8219c545216eb5063

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-shm

MD5 75ee2af3fc623eb519fb4a8fe18fc93e
SHA1 6f5375a5e9a5855b114cd4fde30042da9b6ad2d9
SHA256 0a0625b04448a157c54f9395c5792a3fffd85af3ab2f9caae73677f3764303f3
SHA512 897db3196e6be66c3e828a9e7d64d44a9581c1d1bc146b6758cdd261152e16e45e8234ee8a15eb996645d76bd8edcbb5ee3f8766f10ce195b5fec9abf100bc8b

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-wal

MD5 cf0a75ede429e56ea5c49c599d7f4144
SHA1 3ac29b15284a1ed1055d3ba2463ff7e7e1069a16
SHA256 3742b60613a265bbaac5162e519eff6b9c3273c0c4d1b4e48a373a885d98f303
SHA512 8bcd16b68d0308e39481de7577c9fe750d0d29617c579a912cbc6c65a2be0e6260708acacbd6131e3baa6854cc5fb22b02b7246b734c127fe292650b0811cd85

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 68c273d3b34099200a134fe1ba5f31ab
SHA1 359443d63845e2686947d88dbf28dac285ac9090
SHA256 72f1ce27576f8130397bbedec64951eb310965b6d8ba35af165333d3f8706911
SHA512 24016cf92c8dc82488b4da217ec4096f92d1ec84dd4fd34314aa89d7306c9f6680b1a860315cfaa15d33e70faf6fb4c8a3161e17c43d06e6570c2cd3a2c1e271

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 e097835b47fef7ba7ff56548b73c1c5a
SHA1 45104988c7a9c785f5ab50a11aabd8422dc79836
SHA256 8b896e367431839ddb3e18c3695377f5ee859d3dee791c804fcc1ae74b6341d9
SHA512 77b198e4ccefb07b4d3d19196f7c2fd3772d20c239863caee0a3e2ffd160c928728ddc865cfcbf65592416b271d513a94de5e6ea2819d80594dccd5c361c2cf4

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun

MD5 c739ffd026683aba14125e7552c706a2
SHA1 c3a340ff56d4b2b5dcc675c30ab7eabf17baf780
SHA256 94b2001f0a4575dfe3383a40cea7c713b33a995fdfc015837b308325c009ce17
SHA512 3cc2dece4f46bcbbc94caf97223678a87cf81289126e26980c9efab0d170457bf5f8a2636b260e4c334da75e4a0949ae5552591ac75a768565b55eeb999c7703

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-shm

MD5 f333d71d7ad3209c9dd6da77287b18c5
SHA1 6dbf847a7e994ff49a0b19a1237d0a21a72aa549
SHA256 f522e8156b1688dd5d9eca128d2e554da76d1048f3ded460471b57629c8687fb
SHA512 8a1083f666d9c185001a1a77220e607ba18f0b638ddc4236b1ea77a5bafee0b140104a725b90855686f9091462dc8177b3a0f43d4707dba1ac30a01f5f01b73d

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-wal

MD5 2cb98c4c9a7911b2bad0020c32693817
SHA1 839bfe7ab641ecf94d3e72eb737c35c213504dc3
SHA256 f60e273e2db58aedbf21cf717f1ec163de9eb1e82e1775815ac20c57071eba7c
SHA512 72803289df652e6d9d55d0ebf321155e9d0f123f2542f3c1ad104709cbc9d80374065ede91af54c255fbaa0ef86ceb1f3250d2f9f811b6969432364cd7a2ad3f

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 5caaee15e5b8b9f472388c3b72965e71
SHA1 36737b645d99dc621662c0270f228b64a3f3f5ec
SHA256 b6020f37677303b74bcaf615997d17ad24b6c2f8305655a5d2efc95a227a1e59
SHA512 ebb483c25bc5ed7fdc030e8db77115c46c66737e802c627bf5916fad92607dbe7f1d2062a3906e4592206b4ce0cfa4e4a5a97298ecbddccbc9ab8b67446aa97d

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 aea1aa012919a8587e4b5d8fe933a59c
SHA1 a62def51d26b5e513f10213a7db1e359289945e2
SHA256 c8a9e587e7ebfeb715563ef451f94d9b2943d58fce2969ad549e8fea1a4f248f
SHA512 96ddfc0fac503e3999eafb00c040d4eeee3feb477cd3a7a265452ec836dbaeefd16ae3f78a45ad7c47989693a3d24d15784efeb00037536a2af36867c63ab2fd

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/credentials.dat

MD5 09ece7fcb33f061a46bbd0fad9927809
SHA1 5687f2de7ef7128c247fed0bbd912d3166a48e32
SHA256 bc0713e5aff70879e71e2d3049ecf5fa249acdbe68b659d71b1e1faccd385f0c
SHA512 0d356d15323dc28df82be700306661830a47cb6ee1bc109d62c0149387bd710aa86146f414f490d2d6b77fbd7d101b0ab018a1ca204e7399db371d8a6aa1adfd

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-wal

MD5 f3239b7efab17414ff46dbba49fdd260
SHA1 3f953ea255757362d99dc7e9d22b81a5cecaa945
SHA256 62f4190c03b9133883c4d0c878b6272cda0561957777922f640d4e52770f0f34
SHA512 056889da7dc25044e922da5d6a9ecd43687123d00a53f2cf6b4957ed692801af2234ed58feddf1fa1936fa679666d2bd2ef5203d2560289d5b1ce7aab04aded8

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-13 07:45

Reported

2024-06-13 07:49

Platform

android-x64-20240611.1-en

Max time kernel

179s

Max time network

150s

Command Line

ua.FoodSoul.DonetskSushiTaun

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ua.FoodSoul.DonetskSushiTaun

ua.FoodSoul.DonetskSushiTaun:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.201.104:443 ssl.google-analytics.com tcp
GB 172.217.16.234:443 tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 172.67.177.167:443 api.birbira.xyz tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 172.67.140.65:443 api.oradaph.pw tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
GB 216.58.204.78:443 tcp
GB 142.250.178.14:443 tcp
GB 142.250.187.226:443 tcp

Files

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 292bf8ada52a85bfba4274546537866f
SHA1 0d45d26b80c71d12b43fc3508543c69aadb9f815
SHA256 6ddc17f5ee4f74471cbe0aca486f7ef7d25e4e864f285b4f8786c9f43a11b309
SHA512 bf89e6c45d8323d3a8bc177e7616d0b0b6d8308c74d762d6ab3cba0f448500b30bb4b717e70ed294820e1c2764698f87692609acb7488daaf019386e7a12d40e

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 3f4359fbab1cfe9267a45cafb547ca7a
SHA1 54146cfa8ab7a34b75531b828131adc9d0980422
SHA256 67174dcac6a167e159bb2bce2fea3de6cffc4437261dde582eaba6e16810857e
SHA512 9314ec76a39640a3b90217efa225b28578f5291afc397c97a43df400adc9bc6b0b0f603deea2f3cc23e47dd231b831ab2e516f8dcdee5b9d43f722f58cd912a9

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 69d20d6140cac90cddd6cc5ed81c1f1e
SHA1 684f8fd6a0ad55030b6a536a09acc48abb98b123
SHA256 b0f2ebc667f9647bb60c73eeb11a62657a380992d91d0fd966e05e30d5e9d0a2
SHA512 e156ea260f191dffb3b5015156be0777086342002acb280318fdbb085951addf66763077d19e61254112f51b2c1162b5fe5f6f930551963ea8f7cd2c55c3787e

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 9c6e0210042e15d1572ff48a059cd094
SHA1 44a5b22ebf7b8940a616020761cc3870e7d2687f
SHA256 077ff5d37c629c5af871cb0880998818d2b55faf9f428bbead2ff2614fd51440
SHA512 0f455c907b4af7bde5a3af3ccd56f331cef5e88a23aab146ba6d3651a7140dbca38f410744f3811e323e962cfbc3a65fd3f35444ae994994bd621f269999a4f9

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 3c038b825704a55cbe2800bb44c6940a
SHA1 1865e9158f3ee004045587afb0fde3891ebba218
SHA256 3978cb473d25d19fcfab6ed73e6a5a730c7cc4dd88b98035baee46507c0bab3e
SHA512 47a0aab2ae6238d387ba502f23413d2276211a629039a8ea7d11e4da4bd4f4d411d9477e1b0d661ff8a4c1222ddc5cfcc19ce83dedc8172db0f9d5cb892317ee

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 484df068dc370197c0e37af4f433f772
SHA1 5d071329bf5182e60b2d268adca542901d492001
SHA256 3ebaaa9fc7a9245b413f62f91d9e689d468456dd4b6ce2408bcd2003cbdbfbd0
SHA512 587e7b68f2c167d39dd50744f2892a461a67cb073e8cf9f6eb2ab752e07841440dbe212af32958248d15af5d4001e7fa12f86cad62578ef31999355a86c3b0b5

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 dd78238905eba1eb417e4af742879be5
SHA1 ba880ea9f10678a7a2b831ee8774f3c161b38c5d
SHA256 6659a0747ab19dafd8961a17b45f994a91b68158f0df36b5ad040c1cc7c26225
SHA512 7a352b7ab05c2f806ef2f441bdb48820563cc1ae007ed9a88ea851e06d5aeb50c2766e89d0cd5c420d2a68eac5d8ae071bb5b6b923c88aa4e518f0a1fd79ca24

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 ea9c2dc01d788f2ed7ad6a455e32335a
SHA1 3da6ee06226734e9a402c3ef2b542af3b509b6af
SHA256 ddcb0e1970efc2dcb42a4dd328ef8c10f3512b39a47277d5b075fd3b92dfc3a7
SHA512 5b834f25f6f8afea98eec78cf8e148671ceca48aee8019e09308389c1f336e47e55666fedf66e09c97e827c375ade0fad635b98686ebd2f72240108670d25e76

/data/data/ua.FoodSoul.DonetskSushiTaun/files/ZPkFS.log

MD5 2bdb93780451bef2ae98c9899f9c0158
SHA1 bf890e231e932c2c45d58d908fec3ca5f9c4c10d
SHA256 b0b729bb5d4527acb991af638e1ade99b016a630d80737c6dd8e99f1c0529296
SHA512 cbfdc39fab2ad44b6387457dae426b8f2192022791d9f0740eede02a954136fd60fa2cd9f820999013c3802855dc8cdcef1f162aae2e0c93060b29d653a4943b

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_data.db

MD5 276a4a2aec81a115cc55d4855c1fc183
SHA1 42b9dc1992e1bdb16759be4bf503530f749ff2f6
SHA256 ffbbe1d0218716d48b312d5e1d10d82c4be5024aca54dd7867c2545a58592bb9
SHA512 11533f0ee8f0695066d74dcc6754c6b31358b66a30a9f4db24d6dcecbc6504124980def863ad3f08b2a3136433a90d858e4eb2cb31ff9298b822b9753b91a892

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 6b95659deb498a28e0e8dd55e6d5a9d0
SHA1 63aad338729ac392d958f5a9f0b5b1d24af5e313
SHA256 d59ec70645393ff97245b933dc1ea685d7829e061bb9be29c4d07b61de043b52
SHA512 dcd84b0ca1508f0a303bdfedbdb11b0c9e2df580711eed513625021169de8ed83dd582a772d369cd3c7264f565a6aba34a404fcd3e019312c77e41712c1156cd

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 24b006b2da8b92b0a7303718d9aa3808
SHA1 7777dcab7cc62335fc62714c9a76f27226972965
SHA256 9bd8b007358b56ded29f2beb169b61a79a3a5aa499f90b8f101372404d80de0d
SHA512 8b099452ad8f992f3d34f14158929de5b9cedc05e7d93d0bd4bdc4410405f6c1dfa9a71e01e34ce8126861c27b1076a591946db3bb542620fb91743e201a654f

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 205c1db6725cfba6f0a142df19d16330
SHA1 8dd32660a6719b86d0d2514c83c287b8207a5224
SHA256 49901f9386759035e354a9e8d79efc93b49bc1235f23b3dc7a498baa89ec8797
SHA512 075a34f80f9cb0d289a2781afcda0690158a1989397da3d3f27045df89cd3ab4c1d45f4cf27631a0419753cca8f0d799474fb78ea2623925ec112895aebd196d

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 a600655ab9104833169cc7856b1f2d97
SHA1 8424b494e7bc354dcfd324fcfa25ec7eabf59108
SHA256 a684843dd397246cd96da33abe932d84076b64202302259b1fdc74315bed1571
SHA512 4f2c3ea43fbdd08f9dac3c3f55404c6085e434039633e01f6e1121248cb3bc9efc9c6d091dcf2f2dd6ff02f9c6f23b65320416b7de6f0626e71ee799442b4d9d

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 36528572e5fbad53942aa4c14eb01a16
SHA1 97744be70279144167a50b4bb32647f1eea0171a
SHA256 8ff1a30a6be1241b432c93b82241c80195ed982ac6c40ac62840c2948851ab24
SHA512 141fbfbd3af181965cf069052409841b2e30c6e352b6e6b7896d85ec270f8288321923b5d1a41b324b28e70204d2130c4d13b769f511df585ed3a8b163733f92

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 b722f9bccb05873c9d4d06e03fd43c57
SHA1 6a5ed79dc3d37965502d5e23da4f47759979b92d
SHA256 d0d0421f8f119fc5e10a3e244b6e01e77a13c778a671edbc5a02852fcb7dd84a
SHA512 47f8b412d975b6ebc119d9ebc97e3c2fcbc911102242d1e98e96881c26782478091458a174b1e60f5fcdb9066cc29378133b385081cb40c383f841762554dc3d

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 df2043673f4e9476c90fd329867dc02a
SHA1 d15808003f9d38748b12b7e7d23ee0d450c28c90
SHA256 f3250afaf0759984b438d0ee276a5debe3626a6d5bacc961e2bc42142350544e
SHA512 4c22ae4601f672a75c103b8b05f136d59e433e2129f04c9aa9dd4cfa52921180e68786e389ce28bbfcc5c73692ad1a08f15eeec9f7ed929e63167fc2a5b6b8cd

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_data.db-journal

MD5 6cf8e76de7254c2a5abb713f42721d4b
SHA1 fc97a0e525eac8381a3fb57f74cb6c052ab936ba
SHA256 2b1c6c651c0c7a95160a17f173eda5d7539d2b43d093d767617fe572c0de1c4a
SHA512 74daeeb4e0a76f1d0f78c3e6876bb6e6ddc2b2b0d3fd5e3ea2c85de71c371aa2d33473ce3d79137bfef53c1a9b8519f6e0cc512555027a7cf4af8dd42558eba3

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 c7f48dfa3e447d367cccbf016576be97
SHA1 606e6e754cf38c2863eb838253a0ced7f7ef8ba2
SHA256 b4aa6f64deefeac46135cbc817c9cdbc64cea9381ddb90f7fc8083f467a941f7
SHA512 124af76df195fa8a8f758884eb4c237edda7630af9e2a06eb0434ac18dc5d9d99ceafbb17b6b8a40b899f2112776d1507cdc57a1c77e57b41133db6ec3fc2ca9

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun

MD5 6043b26a1db4e5fc500a5751426b5206
SHA1 68ed29eb4ae251d27f43807183a4e8ba18d70048
SHA256 f0ccb2120812616a2b6d3c05000faf34429a6e95e294c5d5aed97088a0d49ef7
SHA512 a33bdb0c19262eda7ba90e014673a6f06ddedfbd80b17fb9d16ff3ebb7bccdfcdab62f3cc6ec97cce5eac0dea6f5aac3088cfd047eeb38efb2d3b56ae4323f02

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 c820425813cc3ae63e1ab624aa69754d
SHA1 1e54efd43d9fdb0359241faa41ca38e0cd7a5d02
SHA256 b5937d97fd710d4376e4d8fb5763e576968e50ea654f77f21dbc62a31e645bd0
SHA512 be0913583a11a312c3ee633a742ea298fb42a517bcc49665ad028edcc4c26561a9fbc4dbbccf8ddc4f5ee1f11165b9bbcc1da51c28148e60d7ec897845e755f3

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 e659fc6624a9289d5feb7d341678b2d7
SHA1 7a8a14744992a1074f08de5bd58ee0dc413b24e4
SHA256 f555b3afc4295eecf57f5d4d78ba1f6d771a2c4ecb02f9d0b1f72205b6c0bf26
SHA512 86962059babaca02666ef1097a3719ffc67fb850e6b25924d82f60cbabf3848fbfd038d9ed0e09de04aa71e942e5754b3e4d6dc6b95b251a2733c4da700932f6

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 243f9abd75089154c11c1902d020248e
SHA1 06377f8ce888bb01382f0d897b76d4e9e0bf55f4
SHA256 986a46769dea97ca15fa46484bb1279e0f8a6249ef4d410217bdbd16916b9070
SHA512 e50b8db186fb56106caee06fb37c2f06ffc13ab72c540b5ca2a234511a8272369b460e81d2d8de27230d0b21eb9176adbc260f95d92a5c24af6354cf07dde5a6

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 3e406a59cf3e647a13eae58efe98287c
SHA1 13c0a55ec70aa4c30d22b2b3f47c321d477c9ac1
SHA256 20318d90d91d4127b0e44d8e096dd13368bb9cfa274979ca7b478a53da792b07
SHA512 18103454ae7ff31ebb5ce729742ded63b5daf192e0111a4b7036f53844c9ffc7c3f27b3f61c3895bbbdeee64cfda4959004caaed8dfb85a62000830fb8b831fc

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 a87f17271d8928e181bc06c46aac51a4
SHA1 eb2a27739495cac30b17db31fdb5d70c119be15e
SHA256 09596395601beb449f97b066a97647834a438cd20e0006ebdbee1c10ba8b2278
SHA512 5f3e6caef287c087f3e66419d6f4b3f0cbaf3c261e8de2fb84a572e20ef27da12f1fafdd9119885bc40e582ba1a49f939c1da5d3b365df4cd930215f40963ef6

/data/data/ua.FoodSoul.DonetskSushiTaun/no_backup/credentials.dat

MD5 c66b2a2059263c2049e7f2c674de78b9
SHA1 66acacd6598d42fe687d9ad69fd6cf2c9bd7beeb
SHA256 0611c77b9e748f85520cb3c86c108d673794419e7d7bb3c6a6e2270f1e706e5f
SHA512 cb49c148573ba3304c5a2f99ba329dd2e2b2253d1c1ed779dec82cedf4ae2c1638d1c379f8eaf6640aeb35a1c160cc983d8f58d975fe688375cf92bde864ad98

Analysis: behavioral3

Detonation Overview

Submitted

2024-06-13 07:45

Reported

2024-06-13 07:49

Platform

android-x64-arm64-20240611.1-en

Max time kernel

178s

Max time network

132s

Command Line

ua.FoodSoul.DonetskSushiTaun

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the unique device ID (IMEI, MEID, IMSI)

discovery

Reads information about phone network operator.

discovery

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Processes

ua.FoodSoul.DonetskSushiTaun

ua.FoodSoul.DonetskSushiTaun:Metrica

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 api.birbira.xyz udp
US 104.21.17.160:443 api.birbira.xyz tcp
US 1.1.1.1:53 startup.mobile.yandex.net udp
RU 213.180.204.244:443 startup.mobile.yandex.net tcp
US 1.1.1.1:53 api.tridrongo.info udp
US 172.67.161.129:443 api.tridrongo.info tcp
US 1.1.1.1:53 api.oradaph.pw udp
US 104.21.8.212:443 api.oradaph.pw tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 report.appmetrica.yandex.net udp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
RU 213.180.193.226:443 report.appmetrica.yandex.net tcp
US 1.1.1.1:53 arb.grattomania.space udp
GB 216.58.201.100:443 tcp
GB 216.58.201.100:443 tcp

Files

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 c1b4214216c283d2cd3e5b522f118ca2
SHA1 d6e54f0bbc245f4d885b100b001771c6c56add2d
SHA256 d47ae406f3cd1168144f22ec29e790cd919b5ae5391f9d768d1f73e853c3b479
SHA512 a422221ecbe586cbab65d518aa5850a4f7b62b889d069c9930dca5457d626a4633590076756319e6075f852398efc251313656da9e827543a516ce1a3ff6298f

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 37d3eb61f1b01ed5b7e8ecc08f483083
SHA1 f0ce08b433223196c755ddede98484158d0fbd10
SHA256 3913a175a1eef54cb0bd67f0d2061f74634f6cb36b6c8264082d42482a5c1cbf
SHA512 989f2e66b220b4063e06dd71c85618ddd8e7b49293ce7a7e6604dc344ed4ab610b0e2951b2a5b4433f9cf2842d785560b2cc7a045e290a44335d1c801104707d

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 d46d55f8d9dbb354ba418f60b87a9e9b
SHA1 5809e858436a889964f3e265a62c07bd40ca20c1
SHA256 36c0e52a3003e2cc6a209ad2223dfd761c438ff13471b7334345065f8887449c
SHA512 584d6715b4206f000ab9440df1a9269c423ec88d2dbf18516b331865a3611eb31e455e1dc90a0ddaa73e34b0d4af72ab86725222f120e3f048640187420b211c

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 d3254f3ebd3cd39f6770c6cf4724c682
SHA1 bf27c402a15c7501e209252624bf6e21ea81ebcb
SHA256 90fd7cce86e0003c0753575026ca8afff855b8ab5bff4d8a4d7bdaf5c7934062
SHA512 ccbc9b2b33ad5f8e4f94e39096822a58bf48367e6cd1571d107b5f9a7e8d51c01dfbc650603841fa6c6e10d472c581579dbc0e6849ed4cbbf29ea7cc786f5511

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 fe7387d31ea7cd784accaeb5bef04826
SHA1 c3ca6cb2e4eedcf8088e02463c54975039a87cf1
SHA256 7a73143eef0335532588628186925d56e0018c91c22c2e1ddbf433903526fc1e
SHA512 947fb97efb586f80b16c66be972ee66e61550c4e982d28bad316f76957d7b13da99373cdba63ebb36e627ee9c266e2d0f6ec3f4718a11a776a61367ae6e437f6

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 e5639b469346d3d19c79ae3bdc2f4a9a
SHA1 b4d9041b94176f65417e63e77f0f324b81e8dded
SHA256 cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf
SHA512 273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db-journal

MD5 7927ca6abd512ca309ce35c969249123
SHA1 5c7815c5848eaebaaf67678f742b7a3db7d51e9a
SHA256 5529dc902da10e2e077a7516f169ae59c2094378a7382081a1ed63f8dc3f4299
SHA512 74e82f793a41dc63e09fdecad95810544b25c7c2efc472c5f767f557b7ed3ba772e76f44f6dc64feba4f66d337b940938eb82c362c2779d575503014fd6307c3

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_client_data.db

MD5 5d83bbf7bc0f3166da882fffca981a2c
SHA1 e0da4e3f23b14ccb96582babf819f3b31bfb52c9
SHA256 9cdf7e9abb852b6829b6104044dd43157e8182da20abd9ffd75fdb3a762220bf
SHA512 4e53deac78d9ac813aacca18931d17083c87fee5cca3becc1d0449b265e329f3e37fe23c218ba4b622ee4b47df506ee43b9023a2bf8f13676d8325e1a0fd75c5

/data/user/0/ua.FoodSoul.DonetskSushiTaun/files/ZPkFS.log

MD5 d01115ab3b3ab6cd76adfbc07994cd9a
SHA1 2e7e72949ae2c3c9fc3faef4ff50f29153ce10de
SHA256 477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68
SHA512 bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_data.db

MD5 7ac2459ca160a9cb8b397313a08380ef
SHA1 c84fe4aa908d139f0e777321b4bf22ac4a31240d
SHA256 fa72bf5f244e44d9dc52df1d59657c7e393ce122a0b75369b21715fbd89a7969
SHA512 3b551fa503bbe3ade3a7fb612257ba830bc842e5dbc66647d1c59047ff796dcf43f2097db47a49c38abaa64fa65d99c98f36203ea7b43ff0f14a49d068b7034b

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 e9d1ccd5f2a3018e7d0a9ae550bb5f4e
SHA1 061b8b4a9c1ebbed949ad8ae1afd89a0daaf7adc
SHA256 1acbde424453466efe246ec7a785761c1c6c436df61fca1652d596d4e75246be
SHA512 26f1e089394ee8ade593f71ec1ec654db412c141c87e729462e664e1e9c64353d96e48f38018167a7cd4dfa81f948c1203ea50253219dfc01d8125a8722ca2fb

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180

MD5 f821927de2924461693bb1ef2bceca22
SHA1 231b1003a10025e7d085f579a8d45aeb4829fa4f
SHA256 5cf4cac7abf0f0148b47a2f19af6f4d0e1148e416e2bd55324340e107cdf037a
SHA512 d3f2c8322b18b7ae553cf4e85b856bc5e58ad6a2e2ba584ef3793937bccbd847c11e463e93153c7137badd06a3f80f249389e1d98a9952b30071438b0c8661d4

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 b40707ae075ef119412696bf17a2cb82
SHA1 ae5e2c29f9e22633fb0d38fc985ff2484a8cd4ec
SHA256 bb1208e240c94acd0a02c72c2fc957e40b68bc40181a2e9d9278c7eb41bd4aec
SHA512 90040434478b299184a6f9f200f606b596460f0d5e7078f1dbe4bf5d226eca8fe142ac275f13208c999c059bb72de67fc7f5db4adc5ec3a083bca6742e8a2a91

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 860f0d172a9b199daddf35121a93e81f
SHA1 1853bd76eec3d79601fab277a69a8ed88ac9cef6
SHA256 72f43c9aaea93cd67f278718f8fa3d8bc55afcfe94db110cad105de8d8ffbb36
SHA512 5337878f0cab54586d2b3c2a14bb6a26d5110671795ef26dda0bbdbf48c9f1818451de359fb60a3023cdc41ca9440e1e86414511adc9da5b5ae1729c6957775f

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 5f3a0355af837f8e837afe157514b99f
SHA1 530b6b14836bdd99f9cf2dff03c215ffd044f79f
SHA256 fa767845bb17d5e6dc3f30eda17cd5203916912a30dbccdae557b5ab3562d07d
SHA512 e24f910a29b17c1e0673417b7bf783c01cefe8e0613f664b3ac51e9260c906ef19c382f1d6eaf974db5ef917754d0d0586237482d1fa96556e0361a3e29bf288

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 7e544c88bc23b4ac654534df6bd7fb23
SHA1 b470a2e765868e4b8a8bd235200865da34b84876
SHA256 277c352cc3d613f75563d6172a8fc0d6afe634af6d1a4cf6100184ed02435b6d
SHA512 b4ad7c6445a54b77041a62fdafba00db92f7f4f2bff326b61c118ddf96e1073b675dc0d8862e46a07119e238f93fccdd93cd583b84e06e7b0acb20ebbddbc997

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun_20799a27-fa80-4b36-b2db-0f8141f24180-journal

MD5 c9ffe73b622dfcd34244c6191c99d586
SHA1 adeeff1f4f46f7674cba5bd17fa3d7d6a7327d0c
SHA256 6bb1b123a3a5ab1ed2ee71498ef06efddd9d96e2b2d89b1c579694f0a1ceead3
SHA512 22627f44b6ecdb69bfa75ccc22693fd6fb995dea8f735bebdd7041de96b767384399d016db4b6ecc651464a063e6d996473352a84ac2c22435b88adb1d37d3fe

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/metrica_data.db-journal

MD5 3d0789b093a85299705a8bfbb3cc2b59
SHA1 feac86453c22ac5fdf975e3b5b85ebc2f116ed65
SHA256 63ebcecad478a9c20e105e01f1bf301db55cc0b470a8402038f6fe9d3323a07b
SHA512 ffc6c32eef483fe4a385e322abdc009a6c257f9c0862a471320845fd1e57ddd83f57fce93d25ac1a732185a9dea3d2034d4bbc804efd5cd224f124f791045e5d

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 c91b011ca17f310b430b3206129ca119
SHA1 b056d70f931ff0e24808ce5d4f06b846cc81c30d
SHA256 125645cf20feef3768fe4070700720891a442cd675fd425270bf795d919f7261
SHA512 187a6334a690640eb0236e61956a4ea96c432ffc9d70d3b6a6ef5b789fb9631e61cb19e2c30589a500d2d3d26b39eafe764dcc9a803f0b765fe05de906ea4f7c

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun

MD5 6a67fa7f7c54c47669190283a988dd52
SHA1 9ed56962d5a54f93697d6f424129454fa93273ff
SHA256 1db6e19f4000fb86904e91bcb9d1fbb81f9bae9706f6b07d7f6e63eaa9a976e9
SHA512 26ec2ebba5a1269ff36c9a4f984c62b45a1043384aa181af9e4ca8c86d942a01af45b876ddbe3b8baee61be66cbc4410ae4518f9c2fad3a9f04f5dad19d5ea56

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 48caa2954627c7fcbeebb9b3f107e76d
SHA1 9bd173f180d89787732abb60360a4a89c907d83a
SHA256 dc93f2e67c68249509862068b2444a687e98cb83762b312e3466618329795db7
SHA512 c29e9215abaaec78f95ea21f2548466cab297348a13d6b073c61aa90b56d51f006d58311e50b9e108696121b043fd7357067b7079e0f9b843e9cb0173e7765b0

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 da4fdb90f59b9c98924a5d9d40e9eb31
SHA1 4ad365e200069812a6167877eaf70c8cd5873c97
SHA256 cb795259164cdb1e28e4a4406d868805940b54520172c25363536a9c7ff2c676
SHA512 360575da49dcddb586caad813bd9bffc86c78b6a51d685d4dc5f9651ce0d2df9b065e7e222a5764a50f6a80648661358e8ee8e9446b802ad34d1c630f736239c

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 ee4bf1ebb2e77efa1221742641e468ce
SHA1 d8ec0fbc65d59348817cbed7925227331c26682d
SHA256 87f2a277397d130314514b33ab040a71a8f2a60d5fc68331585cd9e691c58f4e
SHA512 5eea13c73510f3254d1042863990e8f112e2a6d06de7aa7a36cbfaf5edf132411ff705f96de5d8c0e44f827c701f913a681f2f3b123074d0d7650a2fdb663afd

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 df37a3b5d2608c885a6d67c1d4bffe96
SHA1 5fc4579964f6ac72869925fed84811870c3c22e8
SHA256 4d5fe46e79662ffe094c2ef1e1c3589015b83d1787a286b0ab6ce5d301f6b454
SHA512 01a8766e98967dd5693866c8b0416bc02e32054f4161603b4f596744f989ddcdfa8fd1c0075dae05d1cff2cb3fb7d42c5978ba314ce35b6dac8cc5c9122c3b13

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/db_metrica_ua.FoodSoul.DonetskSushiTaun-journal

MD5 46826a30a4dbb42da4cb246d87f89461
SHA1 bd326c780da89a729de0197bb5f2ab6ead448ad3
SHA256 5d4122e53ee04673cd64ed9c86874f776effef07723ef9c208e7079539f46348
SHA512 e7b4bcd76bd7246e80fab912944c1426980f093bb7dee8f1c39b95743981c50f695669b34b8c286df567a5369acefd57fbc17f63049fbc5c81acddf661f31259

/data/user/0/ua.FoodSoul.DonetskSushiTaun/no_backup/credentials.dat

MD5 71d653038defbb5c9da22c46044483a8
SHA1 908084c0cd9c04919e3adcebbe287dec467973a9
SHA256 b491da63d6d37ace20ce0aad314307bcd3a5fe094aab92b592860799493993b2
SHA512 7ae1a7ed9565c4feb7be6582834c8252ae6c202feed0dbeb0ca158d26a5f7f0c6b749b058a3bf8dd52effd4c12f0aa540be4683f8bcc54cd8cf490b06cb1a5b1