44715eb9faac84720b20385ec684a798b4e7f00c942eb7db0f09e485d85db9a0

Analysis

max time kernel
179s
max time network
185s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
14/06/2024, 00:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a76b81ccc1617a50289669ec07a9925e_JaffaCakes118.apk
Size 8.6MB
Sample240614-bamfaascrj
SHA256 44715eb9faac84720b20385ec684a798b4e7f00c942eb7db0f09e485d85db9a0
MD5 a76b81ccc1617a50289669ec07a9925e
SHA1 5cacf7b46e23a740d3d7e1e9dc309e5f9b288a60
SHA512 15da011bd72451df323fd45194e2451899ec11c8391171c7cf614ed3f5e51daaef5973c4b2e55e3dc4377f05d87038e320c4f8c71032850ce66627f93c536615
SSDEEP 196608:QhTLyweH+sk8OB7ZsnRR7XZmzYp6NswS7GdlKfh6dfVHzYgujE799y:0LywBsKaPXMzYATEGdlikjTRX7G
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 6 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/xbin/su	cn.xichan.mycoupon.ui:pushcore
/system/bin/su	cn.xichan.mycoupon.ui
/system/xbin/su	cn.xichan.mycoupon.ui
/system/bin/su	cn.xichan.mycoupon.ui:pushcore
/system/xbin/su	cn.xichan.mycoupon.ui:pushcore
/system/bin/su	cn.xichan.mycoupon.ui:pushcore

Checks known Qemu files. 1 TTPs 3 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

ioc	Process
/sys/qemu_trace	cn.xichan.mycoupon.ui:pushcore
/sys/qemu_trace	cn.xichan.mycoupon.ui
/sys/qemu_trace	cn.xichan.mycoupon.ui:pushcore

Checks known Qemu pipes. 1 TTPs 3 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/qemu_pipe	cn.xichan.mycoupon.ui
/dev/qemu_pipe	cn.xichan.mycoupon.ui:pushcore
/dev/qemu_pipe	cn.xichan.mycoupon.ui:pushcore

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip	4492	cn.xichan.mycoupon.ui
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip	4537	cn.xichan.mycoupon.ui:pushcore
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip	4537	cn.xichan.mycoupon.ui:pushcore
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip	4492	cn.xichan.mycoupon.ui
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip	5148	cn.xichan.mycoupon.ui:pushcore
/data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip	5148	cn.xichan.mycoupon.ui:pushcore

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cn.xichan.mycoupon.ui
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cn.xichan.mycoupon.ui:pushcore
Framework service call	android.app.IActivityManager.getRunningAppProcesses	cn.xichan.mycoupon.ui:pushcore

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
36	alog.umeng.com

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.xichan.mycoupon.ui
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.xichan.mycoupon.ui:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.xichan.mycoupon.ui:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	cn.xichan.mycoupon.ui:pushcore
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	cn.xichan.mycoupon.ui
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	cn.xichan.mycoupon.ui:pushcore

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	cn.xichan.mycoupon.ui

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cn.xichan.mycoupon.ui
Framework API call	javax.crypto.Cipher.doFinal	cn.xichan.mycoupon.ui:pushcore

Checks CPU information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	cn.xichan.mycoupon.ui
File opened for read	/proc/cpuinfo	cn.xichan.mycoupon.ui:pushcore
File opened for read	/proc/cpuinfo	cn.xichan.mycoupon.ui:pushcore

Checks memory information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	cn.xichan.mycoupon.ui:pushcore
File opened for read	/proc/meminfo	cn.xichan.mycoupon.ui
File opened for read	/proc/meminfo	cn.xichan.mycoupon.ui:pushcore

cn.xichan.mycoupon.ui
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4492

cn.xichan.mycoupon.ui:pushcore
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4537

cn.xichan.mycoupon.ui:pushcore
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:5148

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

ua.db

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
Size 32KB
SHA256 c85825599c747d5b54b6cbf97c86c51302503a5c58e673b1269faff992fb867b
MD5 e122ebda20e2dbeb7173a9e2bb6e8216
SHA1 adf51fd1df68f341d1abc856419d55539658c6cc
SHA512 dcd9a2f84534704bddff01353e290e966b5190f751d7844821fe67aa2571ef729b82809f7f1ee780dca3d0760a0966f91f4d6f423aea7dc4fe9bbbb71ebfdc7b
SSDEEP 24:YlvQykygIUZhXX6+/zOOwGJNW/2rvZtqfbCo34PPvP/BlmqygGSZQonEVP:Y9LSIUTXbzOkJE/2zHWKvf8SG6
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
Size 32KB
SHA256 d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5
MD5 4cac7d31fb94d5c9581893537f64c5ed
SHA1 96bef3288546196ac3058b5eeddbe9da1d999fe5
SHA512 0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747
SSDEEP 12:TLWXmZuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TLXj4PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
Size 16KB
SHA256 a72686dcc094d02501f260595f93da2d18790adb071d50677c49d642ca0e91db
MD5 ac1d8c8b388556394f0427f3f7bcbb7f
SHA1 1c39a63271d412058c30d03fae4673ccbdaa2d7e
SHA512 5824a60797643298f84f0461dffd00e9d6d9260259b9a2378008f38397520b639d161f3b22a8f65754be591ff69bfd93cd744e25999938df43912b1dc796f2ff
SSDEEP 12:TLz1uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/Y2hbFQ:TLj4PPvP/BlmqygGSP/3Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
Size 16KB
SHA256 2687176d1172056823353d5c2758e0d9ddfbabc465423091482b92a78414e330
MD5 077dd0e07e2bf300afc49c0168e57430
SHA1 1206025b0e93421317a2ec1e3ae7b4b0a39a523a
SHA512 df4ccefea80dbff003692383d34e25d9cbb7df710a03bbb4d7a1c14185fe4d2a188a11699dd5f06a172a1e6c1c2dc1c0e3b6bf60c1a62b36c38cba68dd7a1cb3
SSDEEP 12:TLg6uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/oF7hbuGJDvQaqQ:TLz4PPvP/BlmqygGSP/MJrQXQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db
Size 16KB
SHA256 0c990e9ffedfb64fc8d3da1a08c7bec0bfcad80cb9f08a38429a38704b2e47db
MD5 92e6dbbe34c365fb3dd614561fd2257a
SHA1 7b011cc68f9177be76960f46c513263159b04617
SHA512 f0e1d103dff1e141e716646107aab136c1635a3cff0895f0be61ddddee9deb48517cb545b428f7ad5c275177bfb3985a7fd1a7635e6f9f65040ed964e919ac67
SSDEEP 12:TL9HuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/2ThbuGJDvQaO/nrWsoVQi:TLD4PPvP/BlmqygGSP/6JrQTPr5bFQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
Size 512B
SHA256 ced61c109d9c0d3c9e5235639b99f70296c47b81b421ac01462a595a97beeb42
MD5 a36186109ab2f3a047bb068113d7a6e1
SHA1 9a700ee0a879ec2a03b8f926af93775ce49d3bd7
SHA512 84595592e54e08a9622b678350d2f0ccc49a630f510ed73cc2a037d59246d8b400e89490d22bbd6a5f4abb67580ca972dd40bb386702a00093b2f8b806cdfbd2
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
Size 8KB
SHA256 ef8cfd5abf4dc6d25450f44df30ea7135667c532390866b80f82474904cb999c
MD5 a5a87366b860f07b1216e9b3e8e91149
SHA1 01787055d0dbd7fec99f8f403c86254437a72fa4
SHA512 38156e91b23e8e440a99acae697ce0d529f60d7f7277ed8204c02f653a9790ba096d26220cfe4da7a9b31d2a52b98bff49b860d7686894ce9e144d07d8fc0bd6
SSDEEP 24:YlvQykygIUZhXX6+/zOOwGJNW/2rvZtqfbCozfqLiuWpGSz:Y9LSIUTXbzOkJE/2zHW1qZWsSz
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
Size 8KB
SHA256 894232482eeca1522114eddf0b70d11b97d43670e7a0ada91ad31ab4cdfd7527
MD5 a9479bcb8ca12583c0d0cead2f82c371
SHA1 c657ec7a55627bfacf736d0001a945110211ef4a
SHA512 553e072fca6c5efbbf1a51bfc80081e7089b986c778c4444b3f94ed4db53700e847d338b91792818bde80d458245251587b4147ec733bae6d37f430bfd70288c
SSDEEP 24:YlvQykygIUZhXX6+/zOOwGJNW/2rvZtqfbCoKGStq:Y9LSIUTXbzOkJE/2zHWzS4
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
Size 16KB
SHA256 f614fe3fc0fc055c04b2a10e9bc875d14e92f1bdcf3cb903f743a0d3537f6a71
MD5 4953475d95ef49d264fcb315f259591c
SHA1 7f63e0e0f7dbc48eb4e29f637a9844a9858a5206
SHA512 449b1c7ae0d5fdfad909fa553bb0d9c24f824b028b3835d5e52cae57fd6cd4812a2276599b9d1b3bcfd53bf514b44065999949045a36a601bb14dfd6c16558c1
SSDEEP 12:TuSF+FLURjuDujCkhr6QJinF5/QsCAHZJqLsmuOIo4PPTN5PPJhBlTSF7VfqwtIH:qLYjuiCP82/v/JqLz4PPvP/BlmqygGSb
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
Size 12KB
SHA256 b34df4e47bcad22361b53ce064ab62d5a632083793130aed06b19a46689541f1
MD5 7cdab081e90f12a37eea20e55dd99943
SHA1 67a9fcaba0ca17462df1ea2861158440d858f3dc
SHA512 eb0afa632793a9814a0d047217c4698200dadaa0426839f7956bfa023ca2b322cd2642b8e29430d20d37b978e36e2b518d228f73a757fa241184f6f4e472e9aa
SSDEEP 12:7+tq8EpqLZDuOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbz0:7+thEpqLD4PPvP/BlmqygGSz0
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/.ua/ua.db-journal
Size 8KB
SHA256 80e196be82931b13a10e2751ef24642828a832675f02e2187468f58822d9ccc4
MD5 0e81696fffaeee1cfbf5a407e67f4c3d
SHA1 e3479828ba2ca2f49a2d776ecdcaabd5c68d108e
SHA512 46d29b763edd3e8e823ab8eea16753429b697bfbcd09b07450141bc4f578cce7bd29418ce8bffd9df9d785bb7b239f97cd2f56060ec758c17cc120445f51065c
SSDEEP 12:7+tCF7hbuGJDvQaq/8RqLg6uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbp:7+tGJrQXUqLz4PPvP/BlmqygGSp
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
Size 36KB
SHA256 5dc3b683279d001947cc0bd5f9011af768dbd716c9e1e35927c469631db6e670
MD5 266bd06808c5719d36142af877422761
SHA1 e4686b4812b4c4ce379b27969ab1ee8456897e5e
SHA512 82d448954e471d814bea1745b9f87cfb299995851adaddf937ec5a88361ca27949ab178dac6652c03f708c9c069bb25570b7115cb7e519317cfc421c05471bbf
SSDEEP 48:7MUJRzsvTkSfZpHqQK4X+9u0C1qjQnYsS:7WrkSfxu9u0C11Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db
Size 36KB
SHA256 50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c
MD5 86752a4be6564d8370f2f0e403995003
SHA1 29f7d50675f6e59f3b808eb6dcc8619384412115
SHA512 79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec
SSDEEP 12:TLg5P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLF7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
Size 32KB
SHA256 1d2cf79d16fc538f9fbfb9903cebf8ad1c8e4e382612e94c5fdf15c326349975
MD5 97b22cf4142ee3fdd89b03faf90c7cbe
SHA1 df062819f0eb8ca8d4672b84e496dfccc1f84403
SHA512 4e77cf061919d8bc5c1fc066d4c139eac85cc673e84a754c3b986a81ddd3ab8d3aa82649820da0a6f6d5fc31e4d607f6aeba9f30e3811a1b77d4c052a64e63ba
SSDEEP 96:SQPryWNekSOIkSctzqekS+7AVkSvekS8tlwFrkSfxu9u0Cn:SErzXHzKbErFx8WuDn
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
Size 8KB
SHA256 a11cca79d180a10ed86f0184728b16cf7c16589c8ec4bd1d6f5e2f76ee833a7e
MD5 cd1757a3bf7a38c27ec30af53765459e
SHA1 dd988b48583db534648bd1ede633010d78b8bd80
SHA512 9b2c6249cd6f2ff31820e21d77c34465b3c8e49847952c2dae1623911522f574126df853f8de9601f4979a32d72a959f407deda7180b1d6ddc63f9601f7452e2
SSDEEP 12:TuSF+FLURjuDujCkhr6QJinFaDEZCWPm8TOsklyfqLiuWdYRmBEyPbs:qLYjuiCP8/RWPn7klWqLiuWpGSs
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
Size 8KB
SHA256 20dc0633ecb5d01ed83bf133614b51f8f148431ab1c34d89343b403ed72e0e7a
MD5 2ebfc89ccb08f7d9f86e0900743cad55
SHA1 a3883d935f87d3a893a545aa9f453a3c05e756c6
SHA512 447433bdbb0a4cfcfc9815350c750aa5cb70612fd7efe34e73bf8a12b6eb5638bab05ebf05346e38ed93e571f9a7e087eab5027a8fec28806205b7f25c778a85
SSDEEP 24:YlvQykygIUZhXX6+/zOOwGJNW/2rvZtqfbCoKGSWp:Y9LSIUTXbzOkJE/2zHWzSs
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
Size 8KB
SHA256 d6b60fb9278fa6747e1977a6947f6f82b62aeab7810a7abab817169c0bfed168
MD5 33ccb47b55bcc111094dbcf3314ca4ed
SHA1 6e8a04466e14b56e1a6489d96881c72bbb43eb95
SHA512 5072e6e52eb076dc4ee48ab97588a2eb4a2d188a9ef982e2bd1f016540f77b6004b533a2c03cceb04dd8b5794e17e15e6795cb616cc9559c53ebd9f2a9746a16
SSDEEP 12:7+th6VRqL/0P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyo:7+th0qLV7sL7yot3BVrHotGGSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
Size 8KB
SHA256 e9ca6c06bf637dcb862285269d44a8cf20ac40a28c9004c5a20725d987f1d773
MD5 16759ee7b98450b5d857f692f0da3608
SHA1 ac764d73a916650dd20b4b1f59bfe57ccc501ed5
SHA512 0a4812e6763714f1113e069d0a6899a07cb4168a9caa3e04567f56c42e6916eaa886c00e86930fa7420b39192cbaa84aba28c0d4c5933bf5812339d330b47a21
SSDEEP 12:7+tkyqL+/3P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPE:7+tkyqLl7sL7yot3BVrHotGGS4
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/cn.xichan.mycoupon.ui/databases/cc/cc.db-journal
Size 12KB
SHA256 e229fc3e9c547151645d3ac7c2d2db93a3cb93e3963e6851a32684bafcde0b65
MD5 a2e1094da2ba03c05861fdf183b99c54
SHA1 834b3cadd3281f97c06a9f55a8b780a6bd56081a
SHA512 6cf2ab4922fa9143326b084cc361d073ec4c628dfd9d7e136f3421aa6093bd05eb3fda826d0d55cdd5b0b3c7eb54830767295103f5dd0baae7e133267026423e
SSDEEP 24:7+tEWClOdlnqLsO7sL7yot3BVrHotGGSJ:7MErOnnq47hBWfSJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

libsgmain_312768000000.zip

Path /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmain_312768000000.zip
Size 66KB
SHA256 8eaca414e6f55a0e85e83ecde780e91e17c7b9b60aaf217d6f4317dd69ce6187
MD5 32f2c8b3462ccd5ef664020833c825d9
SHA1 ed5e47c61cedb3acb97d057efd8ed0d8687086ac
SHA512 328224e4fd88934cdb718d6e3d6ae1f93a5430bf0f73a7379e89516962664e0e282c4cd48dde4039d5ffa8c9841f4f32f417a8a084cebf6c82ff82427da266e9
SSDEEP 1536:eUJQ3WjqTyB82jyfkbmgU1xaRPhU/9/8pmDYFivUnZWwbVCx8eAqrj+s4d/:ep1ya1fkbmgU1xaRPhU/9/8pmDYFivU/
MD5 SHA1 SHA512 SSDEEP

Download

libsgmainso-5.1.96.so.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgmainso-5.1.96.so.tmp
Size 603KB
SHA256 44af525592677092787761f096892c85de2154e2c29dcb88896aaaad5a06ef78
MD5 ba94d738e0db71467ff4348ecc9f64bd
SHA1 76f840994872dfe787ecc84cd654e8353252b642
SHA512 60e024246e7f05e4ec6a29f7c6722287f6e6acf54ef586ca080d302d9d469e849ed7cff0ec2238cf73dfbf373842eff73a5d6cf33d2b7db38dcc84e03f0a6418
SSDEEP 12288:BMHUS+CjCuu0gfxhgLxYpvJzZ5yuW9Ey6H:IbjZfgZhgLxyJd5yuW9Ey6H
MD5 SHA1 SHA512 SSDEEP

Submit Download

libsgsecuritybody_312768000000.zip

Path /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybody_312768000000.zip
Size 10KB
SHA256 9e416ffbeda9461f3efca490dfaaee955f68fbc1f3e455f2394bf4c4310b83d6
MD5 f59597732a9069b73e16c027faf78d05
SHA1 e3558f4e5041a6c6d4372001bed847f2ef77958c
SHA512 7a8dae723cf5fff494cb2fc16a75bf347732ee3da99f1cbda99d8c6d26a47e4a7526c5340fa33bf9ee98463a84c1fe276a3683ca8e7bfbc50206e589a82aa6d2
SSDEEP 192:2dPM9tq36enuqRCFunnelzTIN7HoCCUO1jrCPYu:2RmOoHF5zT6zguYu
MD5 SHA1 SHA512 SSDEEP

Download

libsgsecuritybodyso-5.1.25.so.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/libsgsecuritybodyso-5.1.25.so.tmp
Size 225KB
SHA256 ea3f8afb176f218cf1aef734e4331594a1d2f54b66d7db463bdbca146de6dfdc
MD5 16fd530321efbde36fdee740732e1484
SHA1 e5b009565a0b01c57678ddfc3e17e945ca5910ed
SHA512 371b311c4eced7701e28415ecf30cdad298d99bbd4a3a4a3171636909a3fdfdb5632803f4559f32bb33b1693e665310e7e89bdce0aefcf91b8da19f32f65f6cf
SSDEEP 6144:bMPtpla4K2meAOHCLMRTUOpBDwOcsQPAO0k3:iK2meTU6Dln6AO0s
MD5 SHA1 SHA512 SSDEEP

Submit Download

libsgmain_312768000000.zip.cur.prof

Path /data/user/0/cn.xichan.mycoupon.ui/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof
Size 283B
SHA256 afa0a8bc47f100b11cf58659d0085c5a3136e17a2a51fe5181e0333f128384dc
MD5 2ae33c4b306ba7c3feee736598571a7e
SHA1 c4aa367ea9b6dd4072a074015c6cfddfa954482c
SHA512 1455ea9185e7f7872e772a28c445ff9114e1093ac4d795763a7b33f429dd49e14456ff9babb8ca66b6ed6c78d22b3acbeba5a669be81ba628d70c6b7543cc533
MD5 SHA1 SHA512

Submit Download

ut.db

Path /data/user/0/cn.xichan.mycoupon.ui/databases/ut.db
Size 20KB
SHA256 ad9862b2cfa8b250817df299b073d617bba35aa05292f7f0c6cadcefd47cfaf9
MD5 75694e403dbc728c85b85d55d972d357
SHA1 346ce6fb424f486cc32f7f46649649470cd57225
SHA512 591d814f3bdba7180588ec333b554f946a977374df798bf69a352b4f1f0b43a412b5998622a059cfb3ad94eefb56d6ae62c6fe7dfefcb9ec5d47b98971bac6ad
SSDEEP 12:TLeEwjcyNTSFby6nMCUl9ASJLSRmBEyPbAVOwG:TLerNQnSnAS9hGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db

Path /data/user/0/cn.xichan.mycoupon.ui/databases/ut.db
Size 20KB
SHA256 be1cce9123681881f38ee6924ebd8c02a6a404e3efe3e77eebef15d36d4b3b59
MD5 2c5db1ad035062283d306f9e9ef69bac
SHA1 e11bb95faa1197baa9605e93b4e6f712daf7ed2e
SHA512 e9a4cfdf40541603518e9645e3b3a036f9f8d6cfab3e7f7ad08689c5a1c426e5e62def8faed371dcb1af32064bdd7c9f70fd412aff02a45bb802147791f0a48f
SSDEEP 96:nQPKd9rkShBrkSVtzqWrkSUtlwJrkSlADrkSssdrkSN1P0:nEKEb0zydtQNf
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db

Path /data/user/0/cn.xichan.mycoupon.ui/databases/ut.db
Size 28KB
SHA256 4383105ed8141de58a913d4bfc209f6e1a29692832b53cf603199660cf68f1f2
MD5 c6ae11625ad80b9777ec63541c6c21d6
SHA1 1b62cbae54fb74d0bdfa9a1e82e5ba9176117212
SHA512 e6451edfeb6e2ef32e66b994c574bb81b31924ac2584da5f23d4384da3db06dc4ae3ecbaaf304c695f68343332b6780cd287a0341fd3b1ae7973b95b76dc08d5
SSDEEP 96:lQEzkS0ARd9rkShBrkSVtzqWrkSUtlwJrkSlADrkSssdrkSN1PykScTkSwCDkSqR:l+kEb0zydtQNcyeI0zswOt9
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db-journal

Path /data/user/0/cn.xichan.mycoupon.ui/databases/ut.db-journal
Size 8KB
SHA256 b8a93b3189355b91ff4185372fd70ffa18741f40517768e321c7cb3fb412af02
MD5 693108f2772a718f7ae4f17d905841c6
SHA1 e29907d9563c46aa371892194ae9b14b4dae34eb
SHA512 878f46ec64fc8bf592eec941aee3f9d61888dc8cd5f2ab72a68d1d35cecee23d2b333c064c6237831f81f3f2ce962efc78df964da69921c9c50df8658e63a926
SSDEEP 24:YlvQykygIUZhXX6+/zOOwGJNW/2rvZtqfbCoKGSt2n:Y9LSIUTXbzOkJE/2zHWzSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

ut.db-journal

Path /data/user/0/cn.xichan.mycoupon.ui/databases/ut.db-journal
Size 16KB
SHA256 e7669619678e1151ee83d482066a40821bb31318145be15311378a56491cd6f7
MD5 0d373b330f6db2491c45ab9c5c5f8211
SHA1 e909add6ae752550d59cd22cc94856f8adae69c7
SHA512 4a08d762504a361f9b87ea3eb28485472093595bb92606fb8be701a748b5ac87b7294fd404fb564772da065f24209681663e8bbee7a7249be8ccc75c58a4955f
SSDEEP 96:7Bd9rkShBrkSVtzqWrkSUtlwJrkSlADrkSssdrkSN1PaAQi:7BEb0zydtQNHA3
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1718326732575.env

Path /data/user/0/cn.xichan.mycoupon.ui/files/.um/um_cache_1718326732575.env
Size 1KB
SHA256 b1301a7edc4f2320285a96d1400b4ff7a980c641a6655bac59d2606ce6d6feb7
MD5 187c9384989472c1904e05cd26a53214
SHA1 d7a3ceccaba284a0bf9b15d6bcac05497d6dd7ce
SHA512 829dd7e41109d48eff8676bbfe3370d75594229829bdaedf3114bd676f3c8c4807b85ee495229fd7309628bc0b524b6ffca45c4e2edf9ab3e57e7f3ef742af08
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/user/0/cn.xichan.mycoupon.ui/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 763ce325b8949709e3604b67441e5996acfc1174e375680704a9f2f78970e5b2
MD5 1d412d159d48de763e083238d502f178
SHA1 9b805abfa31e0318d195b67b54ff21a3f5b46096
SHA512 f2b5f2fea56fcac8c0165a0615602c341c2949e81637030269d7c37dbfc89203c63ed8ab1f316a178def95fb7b95e0e5a50affba2db119edd75f930da0cfeb28
MD5 SHA1 SHA512

Submit Download

0a231bd8575dcf72.txt

Path /data/user/0/cn.xichan.mycoupon.ui/files/0a231bd8575dcf72.txt
Size 40B
SHA256 fbb859cc4ac2585ed2aea2a99bfb2ae7dc50d20c66acf47657911190f3107f20
MD5 6bbc8e4e8d253a7c192d55273ca0184b
SHA1 765f3d9b5bf9fd144bb5fa6780044be619c94c43
SHA512 8231a6d615eb279918d988116afc58b8c901b49508631484716e1a105383643b3b32b01fd8108c445d54b76a9cea5a2ab5de0fba915970c79b03c1bcd64566e9
MD5 SHA1 SHA512

Submit Download

21c22f492aba3de8.lock

Path /data/user/0/cn.xichan.mycoupon.ui/files/21c22f492aba3de8.lock
Size 16B
SHA256 337cc15f3f6ed6f43ad969c97c82d6943d011f9d9995502e97d2f566b6b7d328
MD5 483252b380e6c43cba9c7d05406a9f6a
SHA1 facd1e56bc64d6c0ddd97703bdb4512d2d5cb66e
SHA512 0d0477465d5c999f9ae7d64247f2a7c19058f71f1279c41fe771989a54d104cd5f283fadd916f468f94d9d5660402071281607ba02ef2b9c19777279562f898a
MD5 SHA1 SHA512

Submit Download

Q0VSVC5SU0EK.txt118c

Path /data/user/0/cn.xichan.mycoupon.ui/files/Q0VSVC5SU0EK.txt118c
Size 1KB
SHA256 c808ddb03150534cbe366e6adfc80335de6cbbccd92814732eaf714005ef30a6
MD5 7bb004671cc07b6af966c77e8e59c03c
SHA1 82618af034b75c73f526bd05debfd66db42d81f5
SHA512 97a52c22f69d2ba308e0136e068a26e9c034140f729f777aa85423c43d5269824d82c7271381e6416900e0cfb853bdabe09f232873db351953932cc3e7a15e83
MD5 SHA1 SHA512

Submit Download

SGMANAGER_DATA2.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
Size 323B
SHA256 aadb1e448abd1ab7f4f234d80412a614883303eda5f6f899403ac7cbc21f0379
MD5 b10ededa0d9681d1da1c1c703fe2e2df
SHA1 f150b092cf5e7880617962a9ea8e03c7c4d05294
SHA512 60af32a71db327824b1250301c61b6b0c08807f696caf2fd8763f8fc563922c86070e18c2ca191d85942ecafd56f9696ef1e5ee0de04a68d18d241fd7b99ff6d
MD5 SHA1 SHA512

Submit Download

SGMANAGER_DATA2.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
Size 439B
SHA256 791da2e7c9caf29a34798aeb8a79f3ef260590516bf87b6cf308db53d8f6229b
MD5 885950c64c5fa9c64851530f1a0e2fd5
SHA1 7db1ad4d32f552a74d5149f9a73bc8e7b60171c2
SHA512 b3117dd7506b2fe4a26777189dde3e24a903ea12960682cc9f00dbed6904033034d84d6919f9ba24960f19ae62cea8a548bb3ce459745070a292cc36cd3b7f87
MD5 SHA1 SHA512

Submit Download

SGMANAGER_DATA2.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
Size 486B
SHA256 4f885d3fa846fc638e1e0272d0aadb936a55a6e2fd127f1c60449aeca2027d67
MD5 ff9c40a8e33f9441717f85c249de9d32
SHA1 d7f69a413a6ee2d8b9b607bad0f060c502899959
SHA512 b8a415d7414fd7df70bcdfc76f11faa2af14cb82ba14436ede334b47672d3c3bdbc3b8f483cd96403f3c611998c30c0182b8b51b419565816e303d1dfc863f0e
MD5 SHA1 SHA512

Submit Download

SGMANAGER_DATA2.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
Size 517B
SHA256 a0fd299000606a251fc0fc2074b19b7291fdc1d7d88f13490a5b362eed3df5d7
MD5 a1af160d42fdab9b54254bc5710cb70f
SHA1 dede1887e978e61b69fff114cc6bc66f32100b33
SHA512 e244b86f77988ec9cbcf0ffac2e93d96694b3ccd9544a6a419abce6d82341fd4cb9c5ab409bcf68e495598da57b6a70b2da501587d7a4eeea99f1e9f01b44fc4
MD5 SHA1 SHA512

Submit Download

SGMANAGER_DATA2.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
Size 583B
SHA256 cb4d22d5db273d96b673618d367d2689c415616e0ff7998a3575270d22e818ed
MD5 46792a72267124cf9c4ad16b5b4fb893
SHA1 dd6e1582555a95da3e1e1124e447661a74eaae5e
SHA512 732ac3338171dd546260f12ffa9398268c287f103b330c7248702bfab70899ed98ac26f1528a18d202fbd6902d8e217593a6593f290590e8b7fce2543a50aea6
MD5 SHA1 SHA512

Submit Download

SGMANAGER_DATA2.tmp

Path /data/user/0/cn.xichan.mycoupon.ui/files/SGMANAGER_DATA2.tmp
Size 824B
SHA256 107437f6069f72bcfa49177efa2e14d4c531b2708b8b826534066c36d20a4a9e
MD5 4932a0ea94eed84d42d7c5fc08f4bbfd
SHA1 ff3db965d9f2d4ab589197078d396f43d8569f82
SHA512 83ecf8d630d28edf59a526e70f72607fe3a11e46085c11d2ecef23ef6c02b1186fff256279bba9f7de77232a91178a0018ced3d309836776b02de7866643da88
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/user/0/cn.xichan.mycoupon.ui/files/exid.dat
Size 32KB
SHA256 df39c5d44f35cb62485d153fc80a51cf41b563c5491b90e5213612a08a39434e
MD5 91f5bbba0b52e79cd871f0c67e06c2fa
SHA1 e0fc4bf0eb8bde4a4145a0ace60c49ef8f68b75f
SHA512 5bc46b5dea05b562f1b3bd9479e8267ca43c4e10bebee2a2311d8eb829be3304aeb5790714d2dd2d130fde213ba688702ed317eaeca1e929086316d8b8f39e40
SSDEEP 96:iQEyrkSRsJokScTkSwCDkSqIzqnUkSRtlwskSprkS41PIrkSfxu9u0Cn:ip6iFyeI0zswOt/8WuDn
MD5 SHA1 SHA512 SSDEEP

Submit Download

jpush_stat_cache.json

Path /data/user/0/cn.xichan.mycoupon.ui/files/jpush_stat_cache.json
Size 128B
SHA256 1a2b5c9afa20f39df9a2a058c6f79639e53252933e1ffe00737980f6a88d7b24
MD5 0abf8c68ebb3ddc39d2230a4004f856c
SHA1 b9f2316626b9c1669f7778e50ad3f877d5779757
SHA512 ba8e7dbbd6cf7e3a79aa2d485fd6a3386dca3e4d6a729076c82b7c4011b5e96947953b7da7f8acba45b97325cd0808e33b4ed911ab8213847678488ce5cf4c0e
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/cn.xichan.mycoupon.ui/files/umeng_it.cache
Size 20KB
SHA256 b3b5c28842e4e426afd5e65e8850ac5d367b73d72e6064af17f1a73c669fe5ba
MD5 c5cbf80eebfb46f7dc58b1dd57ff4a2d
SHA1 fcaa3ccafa6231a3118609d145473d807b584ce0
SHA512 694d185374cb32408cd083c1c427bb436ae9d3e063022271c866b56daea191fd7ca780becb7c55693ad7b74caad177d20c9feb1e3a75b30831b359b1952763c5
SSDEEP 96:7TkScTkSwCDkSqIzqnUkSRtlwskSprkS41PGbyQb:7YyeI0zswOtKyW
MD5 SHA1 SHA512 SSDEEP

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 d4779b4fe5caff8a3ff73027cd1e872e0d128581bbdb871b2d6d049580d33690
MD5 3013657f807ea7361b4da5f73b2ba9d6
SHA1 21d62c577d5a3f4a46f521b9104324d00195f66e
SHA512 07177e8537a7f64c639c9259e0bb434ad809ac6c365e8b2357b3c14ab015a5bd3b953146106000ed08544b55b0c75d47ab8e035dfde6e98eacebf5ced21564eb
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 167B
SHA256 c2beddd2f2c6b3ef569105b062aa4fb16b8834e1c3ec62c8be793831671212d1
MD5 39bcced4e95e6f59d575b8de463ca8a7
SHA1 856b6fe50898085495af59a5b93ddc38eace8e52
SHA512 55ad2c998776c26bf8fa3a8d54b6ace21d9a4a7fe9ddd4edffb1fce3536b7eb7e1815eed1e00652997cd7be8a63c5ce9472e95f773e1e6883fa0b5d87b8afbd5
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 213B
SHA256 f8d9bee6ea699d7bd64d884902e5b6eef1197a1298b02142637a9ad7e2ff1a22
MD5 fa109eaad46022ac57be8b1f9d282242
SHA1 78e5a8e3548a2e0325f280ce0dad7e4ff7aca160
SHA512 6aa596e7b2dd7c8b793a72a2412eada3bf999bd8b4cead01eb8206d43786fa2978978db3b1b1b0ab564c4de411dce5ea02a0add400186d01b797b1009302de7a
MD5 SHA1 SHA512

Submit Download

dd7893586a493dc3

Path /storage/emulated/0/.com.taobao.dp/dd7893586a493dc3
Size 512B
SHA256 0bcc35ee4ab208bdcf97972c056367206e3cc7956dbaf8a54773538df0a3fa88
MD5 48a84a220c6d139fc215bbcaa3d512fb
SHA1 8e39dfc2ff51e271ebf635c066f27d873ff78459
SHA512 7eb7319ac54098402424e27f612b5403d9753f513c045bac03ef60fc76df532a438cabcf372d64fab7f40751a56621dd3108e642751d13532f5c5cd1d1be0756
MD5 SHA1 SHA512

Submit Download

.push_deviceid

Path /storage/emulated/0/data/.push_deviceid
Size 12KB
SHA256 e218175e9f8a2d3ceee33536af07ad979383f421a637d73b28de1ff81fa54a36
MD5 5f6d8d600ecfc2118e39dca2f1714369
SHA1 c10f969bb76ea1e7adbdbcbe136009866c14080b
SHA512 43b7d3186d34ddc362acedf0950bc5386497aed27a9146a15156caf93cdfa70a0ced4dfb633f1fcfc592065cebc7bcf80b29a9e05ced42bfed037a8971dbe66d
SSDEEP 12:7+t9vPtWqLeEwjcyNTSFby6nMCUl9ASJLSRmBEyPb4:7+t9H8qLerNQnSnAS9hGS4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads