2c58222f4d954a68eb905bef62db5e6b102a517b0fac70582970135e7aa0a11b

Analysis

max time kernel
167s
max time network
188s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
15/06/2024, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ace37ae809cbed4b028d7270103b97ad_JaffaCakes118.apk
Size 16.2MB
Sample240615-e5ssbssgnj
SHA256 2c58222f4d954a68eb905bef62db5e6b102a517b0fac70582970135e7aa0a11b
MD5 ace37ae809cbed4b028d7270103b97ad
SHA1 943c3cfa40c063d81d5a096511851d1a92c7beb3
SHA512 bec21619c4bc4f1ed8623196e4e7cf3bece69723e90f5e0fa24e2ebc32919c44d023f3877a65ecdd6bf5dd83e27f27ea58a970b34025f56bba01d70493536258
SSDEEP 393216:paxfE3rmbtrIbJvYzAOvqSOunfl39h+uBLnzj6tdSmT0Gld:pkfImhruqzlvnflzhB/Udvd
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xiushuang.owone
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xiushuang.owone:pushservice

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.xiushuang.owone:pushservice

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xiushuang.owone
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xiushuang.owone:pushservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.xiushuang.owone

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.xiushuang.owone

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.xiushuang.owone
Framework service call	android.app.IActivityManager.registerReceiver	com.xiushuang.owone:pushservice

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xiushuang.owone

com.xiushuang.owone
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4201

com.xiushuang.owone:pushservice
1⤵
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4277

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/data/com.xiushuang.owone/cache/appcache/journal.tmp
Size 31B
SHA256 cf366641e56bda78476691985943bdf654736ad587f71d185b86cb5a1acec3f1
MD5 b11b4f52a1ddad95ff578d6572718044
SHA1 79d3d1addfabcfbc13f3359e950039c340ccde50
SHA512 3b1c12394f2d267f56b47e25b4257898008ee55121aee06dff09e4372105dd1da2123ba692c863a2bc3cd8542413dab7d7cfc88948a7b80279c8d4a3224638df
MD5 SHA1 SHA512

Submit Download

7ab0f73dab5ff9e7341f4000f6e54281808b2272603d62372bf582ec946fd9c6.0.tmp

Path /data/data/com.xiushuang.owone/cache/image_manager_disk_cache/7ab0f73dab5ff9e7341f4000f6e54281808b2272603d62372bf582ec946fd9c6.0.tmp
Size 154KB
SHA256 fea34cf151e983f2d4caf7f6d7f9645cffc24d9b061436d397947b8dc81ec43b
MD5 e53c8f443d68846f741a5d59f7a53f0c
SHA1 e84af71247506ae6d165313f515d3423284786f2
SHA512 373c71df4cb8b7ed8f4adf97d57c1b1f50f385a6cdf540afa98fe6a6937876524febba0eeee320561d24d47532865b37b323effdc922c2dc67d1b78d0f9e85b2
SSDEEP 3072:TmXbjru6YU0gqkpdULSNsVAm+U9IeAPYMpyfX78dea6G/gXYuzUsiV:6LjrzzsKdASNvNU9lAQMpEX0FCriV
MD5 SHA1 SHA512 SSDEEP

Submit Download

f267e37d90a8c588464ef1ed30c58a9b5732039c719431999c6f6b3720fab042.0.tmp

Path /data/data/com.xiushuang.owone/cache/image_manager_disk_cache/f267e37d90a8c588464ef1ed30c58a9b5732039c719431999c6f6b3720fab042.0.tmp
Size 41KB
SHA256 51972a3181c31183f3e47608707dbb82297d81197b0a476cfc74a85bb0033a3b
MD5 b2a8c8754c52768ca6be29e83c80c9ac
SHA1 1eeb64d0fbc77c4a3124283407120fd538b05c4a
SHA512 86101d2e05848704f0bacbcaed9845c88cb9ebd14e9096a79dfe9fa4689b76dea1262e4dfb81149e5301d81f43f4370ab3e8fb9596dd77c77c44dc649a1d13a7
SSDEEP 768:xQL2kgolvg8DTj1y67ku8/70iksPCnpJa0M0v7/Y3W7cevDRLMDtPofwdW:+6ggQjD7kuoks4pJaqT/yi/bRLM5PGwA
MD5 SHA1 SHA512 SSDEEP

Submit Download

journal

Path /data/data/com.xiushuang.owone/cache/image_manager_disk_cache/journal
Size 398B
SHA256 706d9d08f1a928618d43b60e03925c05846cc616724e5748777539b67c76f58b
MD5 db0f781437154aa5fe4cac802c01a22a
SHA1 37dd7dddb4848aa1a72da6cb8bb42e3221cd81d6
SHA512 1744fa5854732ce3027d24ffe360f9ff12630de02ad9c707417972ca8052b9f8ce10163a6aa3b52141a5051b84de98190f2a92ac765eb662b85d1c84ce452c6f
MD5 SHA1 SHA512

Submit Download

journal.tmp

Path /data/data/com.xiushuang.owone/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

LOL-db

Path /data/data/com.xiushuang.owone/databases/LOL-db
Size 28KB
SHA256 c89c33d4c13be0ccc0c1a774b9dcc4992b470a603ba63954f5376ed4ba9c46ae
MD5 9e5c342ad4cc9a30165ea079e7eb585d
SHA1 ff010d27e4c69cf9bff9c214cbe37b2a82abec6a
SHA512 454aada0fb58ea850de87163e17968d87d90e9fc8e9d707e7eb156a8d8f0e29d25bbc43b91821ecc1cc0cc2fdbcfb7ae99ae87dc8eca9f51c39c3f0d32926c3b
SSDEEP 24:T4daOX+CIlosqjXc3CX4liDeuOHEcp1vfExN/VGSiGQQ:T4+5xxXkcpRM0S
MD5 SHA1 SHA512 SSDEEP

Submit Download

LOL-db-journal

Path /data/data/com.xiushuang.owone/databases/LOL-db-journal
Size 512B
SHA256 2e92fff9fd722601a15aa7f6d14fffd9ee7ee3481934016656f26ff9370c9999
MD5 6cc31406df9d551d66118ddb9a608008
SHA1 3894de507e2b1dd809be6db6351e008ec674737e
SHA512 9abfb5b8e09eab0970aea537c79c5853481f86f90e9c7cd8fbadf21a83382a99849d8465c7e3964728b034ec95431ee3429867d3b6a4023a6db4dbd06cf0228f
MD5 SHA1 SHA512

Submit Download

LOL-db-wal

Path /data/data/com.xiushuang.owone/databases/LOL-db-wal
Size 40KB
SHA256 c52f748628340af0464fb2e16baafa72872d65f9bc76e6698397f25fca7bd8bf
MD5 3d08d71aa93ea90a87c2672e21cd625d
SHA1 3053fc08a96d28e41b3bb53ea0bb64a9fab6b3d8
SHA512 38536ba0e1ebf2f824aeef3264400b2ef88298eeb3ca9af973d210cba968812b4deb723907d649f66d795580e4e21bac8bb8f0042deb5d76f735dacf3e4884fe
SSDEEP 24:KSlfzyGSP/rth8V4daOX+CIlosqjXc3CX4liDeuOHEcp1vfExN/VGSP/0l7xu:thzNSP/BWV4+5xxXkcpRM0SP/Mk
MD5 SHA1 SHA512 SSDEEP

Submit Download

ThrowalbeLog.db-journal

Path /data/data/com.xiushuang.owone/databases/ThrowalbeLog.db-journal
Size 512B
SHA256 199b52c47837020f92a0b29f0abd1aaf6e2d3850c8e42c8f3e6255f9ecc4b9f1
MD5 7a6dc249aafe6bf42b176479e3a35886
SHA1 6263b5bb07a0a4168930f39e9cbc0c48169dc2a5
SHA512 d45e0814f5ebf0b4f664686fba13a99e298b394d82bdf74075db28d6ffb1add5dad34713d56062a94cfe99dcbed7ee25c379087a671f761c6479b3dfe9ff6bc4
MD5 SHA1 SHA512

Submit Download

ThrowalbeLog.db-wal

Path /data/data/com.xiushuang.owone/databases/ThrowalbeLog.db-wal
Size 164KB
SHA256 f2e777ad8c78497a2dfef9d585775837389812da4aad102de992b2330419948a
MD5 979f21af65344a61dd1ee03d79b2f7f9
SHA1 e32e33c91d261c55c6bf6b1dc4d0c984558c4722
SHA512 76b2a0f359a5884e09e6365c8a933be31fe5b2e51d7abc7e7cf05774769f940fbb4b65508c462c46d6ba90304e2b333cb480d334381ecde09e67db3fbb0dddb2
SSDEEP 768:Xbvx2LfC0bvx2LfCFabvx2LfCdlbvx2LfClKbvx2LfC8bvx2LfCsbvx2LfCnbvxd:xW
MD5 SHA1 SHA512 SSDEEP

Submit Download

lol_cache

Path /data/data/com.xiushuang.owone/databases/lol_cache
Size 12KB
SHA256 330f18f6eec4299787e422465f7d7c46c56c839a8d5a7e014fd0278037e93565
MD5 ac4cf7caff840bbf8fa5c344b2df7d30
SHA1 f38f99d4e0533d58abac84c4fe151e4e647649ff
SHA512 77493f325fe4f3d4d086be8cb517fdc2c587e854ae1c2c5c03a92de57f18afa2b3502575a8505a9ff13ad7abf65cc3aee71c75a8e86cf7aa9ed1febb2408686e
SSDEEP 6:l9FZO17lOERX4PBX4ogLugMBX4suuKTqiOw2:TzqDRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

lol_cache-journal

Path /data/data/com.xiushuang.owone/databases/lol_cache-journal
Size 512B
SHA256 dece9b7b6a15a0bf5bef7d912fca0d6f2e353acfc2cfd3bcfc2336a5ce342c3f
MD5 4ab30b339baf037e0e4b1ce4da38238d
SHA1 97860e787f0308d077b5e1522b152ad8b86fd166
SHA512 9ebaa43b44b38c7a3a4412cc71dc1936f1b8a2b57f471a6c602d60ec8d0af16c4b651e3ff3033fa5b5a4272bea04ae1f5a033bcda879a4ce2532a7daf5ff7896
MD5 SHA1 SHA512

Submit Download

lol_cache-wal

Path /data/data/com.xiushuang.owone/databases/lol_cache-wal
Size 20KB
SHA256 b08b6f12cee3012bc510df587d2c97de7a7504243889b19bfbb8be3ff66a1add
MD5 c110b2013da8af21f64d998419c9aa05
SHA1 29d926fa8009241ce2fd39866604c746cf3f2c2e
SHA512 99309f6247d7bf23a129e341fc049cd25a1478ba1e2f4f3d5a2aa171dc268a560ce41c174687ea966254ddab382faa4c34de4e0f27d29e98592621c6372d6ebf
SSDEEP 12:Kz4xqsqzdTRmBEyPbP/p3hnMfXzndSt+OwCldZn5zqDRmBEyPbV:KMczyGSP/1hMfDYtsEZ5zDGSV
MD5 SHA1 SHA512 SSDEEP

Submit Download

lol_sd

Path /data/data/com.xiushuang.owone/databases/lol_sd
Size 28KB
SHA256 09ca2f20395fd02ef39f0ef6d158543429556e7f75efbe22b89a579921e1b9d2
MD5 f1b2fec860f1c13a569b15ae7ef68fbb
SHA1 6990a7f5af3166a5a25c8bcf8d2ae47e5386cb10
SHA512 c24b5d5599f115f47c2608a555517d887ad4d404c740fe9afb3e004bb241a4e9588ea18ac4d813ca962d35b07966eba77b3d8e6d92e3c81e676751c82f2b1e85
SSDEEP 24:Tges/dp6XwMmqACj6XufuLhlJRzQT1bCGSiGQQ:TjslUXVvj6+foRCpS
MD5 SHA1 SHA512 SSDEEP

Submit Download

lol_sd-journal

Path /data/data/com.xiushuang.owone/databases/lol_sd-journal
Size 512B
SHA256 08125420d3a39786fb5cad42b9cdafc7738664c09ee7d7419ee1d95bfb400023
MD5 1a6d169861cb670a79e15177c77bea77
SHA1 2d52a680d3baf0b6a883c536f371dbd031084c8f
SHA512 d0fac36c72da89fc0d74159774db945f8b31cd5993f6129bedb24b0ffaf86b42991914223d41342fc67f8ceb2a1978ecdef77d5a81c14afc42e66aae319adca7
MD5 SHA1 SHA512

Submit Download

lol_sd-wal

Path /data/data/com.xiushuang.owone/databases/lol_sd-wal
Size 40KB
SHA256 819780157182a5c9354cae93a80b2d6fba24b4c567ddd40af82138a769894c08
MD5 8d325b65f754d834dc335d26067f8d7a
SHA1 dc6d5269e288ad077d598be9e7777d4a107e183f
SHA512 cab6f641f12cc575372e608fb2de4ace524dc6148c049ba4de88fa7e30e1fc3fc380128471c5efa21b33d7a585bda8d29a758ca19e1c9bb4977501dbb47ef161
SSDEEP 48:UzkQlzNSP//gHjslUXVvj6+foRCpSP//K3O9S:UzkC0Png1BePnK+9S
MD5 SHA1 SHA512 SSDEEP

Submit Download

pushsdk.db

Path /data/data/com.xiushuang.owone/databases/pushsdk.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

pushsdk.db-journal

Path /data/data/com.xiushuang.owone/databases/pushsdk.db-journal
Size 512B
SHA256 c583725e2f821b44ca584a92998474a882495040b855d5a594c6827a1f8143ef
MD5 59ba630286ba3d62dd004058e47ca18a
SHA1 fcc018ad3ec6982d42e66e7ba178d4dff1c3a021
SHA512 0639dfddfa7af81d3327729dad730614af6a7fc75c741dec4b0cff3b73ce77a2f22048a4f76a46df3249f3936e89d92651b5171b2244689129cd4e4122994218
MD5 SHA1 SHA512

Submit Download

sharesdk.db-journal

Path /data/data/com.xiushuang.owone/databases/sharesdk.db-journal
Size 512B
SHA256 6fe9eace9aa2e071ee3e661557fe8df62c10a50b2abfbb44290a929bac4badda
MD5 4b7d7e9c4a6dc79f18f757f0b9988c3b
SHA1 d36284e71d58058aef5cb8648a8c46f98e862178
SHA512 712443bba9076af5df629d907b4633d8cf8e49187c3f38e21258afce703db3cacb8bb5f9e57dd7236a361743bccad14a32db7761d56781a1b1b3e0b1cecd081e
MD5 SHA1 SHA512

Submit Download

sharesdk.db-wal

Path /data/data/com.xiushuang.owone/databases/sharesdk.db-wal
Size 32KB
SHA256 2dd2bf2eb9a6557a4e3e89ba3c472aa4191590a069d9b27ce46a90910059b5fb
MD5 6cd9715e0c3b6ad99b0fdbd9fcd90c6e
SHA1 0506e25ac51bc030fe4eb3603648c840886081f4
SHA512 a81b866e88b2d514424f60cae20309a367c88b6f89f425a9ac187b730bcbf624fd3dfcaeda31650c5559bdce682fea8df4807fb0375d3b7a9f6c0cfa5c8b613d
SSDEEP 12:KZhzdTRmBEyPbP/xhRUgGOwCldDbfcyNTSFbygcVzckcD3iCLRmBEyPbP/E:KHzyGSP/9UnGnp3OGNGSP/
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/data/com.xiushuang.owone/files/TDtcagent.db
Size 20KB
SHA256 c6f9b095c62b7b22499c33dc95f7990309c509d1db274c7e820645982645011d
MD5 7f1d793ec647c92ce87ff5f446848280
SHA1 abe6345cd518250e5f14516fb5e0b70d4832f536
SHA512 35c7f57c211c312711e6afa8ec23f0729c511c14a4b47f25be843ea4af260cffbe677f6127740f0a61925679d6b55adcc9ef0c82ea65e4391fe4f903f26312b4
SSDEEP 3:pqepsbWCQBswkWQeyApRtjDqD1ejW/:pq73QBnkWx1p7jDen
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/data/com.xiushuang.owone/files/TDtcagent.db
Size 28KB
SHA256 21d4dc55057017bcad1168f95abb5ff99583a95e23eeafa1eeef20875f19f589
MD5 1a5c6e5d0c3ed4ad13d0960b33827f09
SHA1 6705560fc0fbe01a4609e1338189a1bf5cfeaa9a
SHA512 97b940ebc0869889575ef7c174bffa7938bc37ca8a9a43eb56035c5730e5d588bb9826d374aaeef31737e8964758437ca1597d92d6d241803aa8a362ec78f404
SSDEEP 3:qq0C//Ps8eLROjWhqPw/km6dAcRDdQBswkWQeyAvLls5z6PO5n:tYXqPaPapQBnkWx1vmGkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/data/com.xiushuang.owone/files/TDtcagent.db
Size 28KB
SHA256 487f1c55d1cd5a9b95e26fd5bb5442d5ae98794a1b6dc0e158a32c979a615645
MD5 1ce2cf32e3d83bf82d34db575290b9ae
SHA1 72e746afecea217e29eb4c87025831a44f296f0b
SHA512 fcf39ee06e37bc2604ea458060d5b4ece670d9837e6d0fd01be233018ab1552b8c58173c8e397da13ab9ddf54fa86d7706a0ad815820d3ff3acff44ee4c8cff8
SSDEEP 6:wKD/FbpQBnkWx1pPGKMaT1fBEs5gpZapQBnkWx1vmGkn:wKDt+lkWxCGEJa+lkWxlNkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/data/com.xiushuang.owone/files/TDtcagent.db
Size 28KB
SHA256 7ba3854326b5d1bf910ce72bee3906683b3e54e7761eb49c551ab1625f0fc07c
MD5 2b5953247c19ecb1a647b10e4b8f0fdf
SHA1 920de48f1e466e9971d426649c51e7d7bb5742c0
SHA512 ef868559c4778269bdec2ced3e7871eb65e878299d1f67b6f23fbe9e7ee43dc2a687654329be69fd8c09f9a271880ac08e5cc3d758c8bc923b28dc63c0408e7a
SSDEEP 6:wKiunpQBnkWx1pNVBhPrprf/z2gpJbpQBnkWx1pPGKMaT1fBEs5gpZapQBnkWx16:wKi++lkWxx1zb+lkWxCGEJa+lkWxlNkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/data/com.xiushuang.owone/files/TDtcagent.db
Size 28KB
SHA256 6f86aac4a79f0aa77cb0798634b5575f0906098c7e089550753d3af457f3fa45
MD5 f1b782744a296d20326d043c9fdd7bab
SHA1 f16097544cb2f521ecaae7cf9cc8043d58a82fb2
SHA512 a7de988703367f3dcacf7c83aca5f2d4a756f96d8d29c7d05e70ee4509913005f4ed239fba3c7f6f15b6ae6fcfd1211b70606c99251d1e892313af1a650c97f2
SSDEEP 12:rqVgiN61KVcnrHcvlkWxHSQ+lkWxA+lkWxx1zb+lkWxCGEJa+lkWxlNkn:rrixycvlflclfTlfv0lfjqlfWn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db

Path /data/data/com.xiushuang.owone/files/TDtcagent.db
Size 32KB
SHA256 b455bb6d9ca4b802054f6f1e72d66184b37897ba60a1e5b5de456454ddd07828
MD5 0fcb31920c258bcb52a89d3acddf2d4a
SHA1 dd764d611e087ef4e43f0a5cd3f3be85e062eb17
SHA512 009f5d30aedf58e5c88835cee9a6b87a073660627beda8a09070eeb9139be05f78d11677ce31152f57a988ff132a469d9231140fea3f4c7cb078d39fa55509a3
SSDEEP 24:Ts3nxeb0TDHYB0ECWYqlBl8Uxz/gpEGSZGQQQ:TgxeYTDHY8qlBaUd/gpTS
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-journal

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-journal
Size 512B
SHA256 16cb2ee4b12b06f1b60facb9e72f79ae75b93deff7da215f508f36b81722a150
MD5 5b90b604143015c1aa144604d7c91be3
SHA1 d5b3972ee9bf4da98e2ef2799630687e9fff759d
SHA512 7d382655f0ae8d6264ca2db159acc42a0952a51c8b4584e9b771b76534ef8f13102a742082b74564a72a6d426efe8dc65b7c4471fbb432d16d7917e97366cd4e
MD5 SHA1 SHA512

Submit Download

TDtcagent.db-shm

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-wal

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-wal
Size 8KB
SHA256 7a1785ccdf57ad1432d214583e76601c6acd5deff368329aa6e00f5263aeec9a
MD5 ba955ed7eac5b093b2c81281ab9a2a9e
SHA1 e7e27f258c071e538c516e7bc3271fa379466207
SHA512 61e0fb1c5494e30cd15c7630847503aaed93f52135039720e00f2299f8a5a60ba288d83da70ec4c8ca69129cee19ae01d3e082399e99fbfdb000993ddbdc1ec8
SSDEEP 3:OlH/lnl5sQBn4m6Wjl3cpsbWCQBswkWQeyApcolDjDyQc5j3eqD1ejW/:KrAm6WZ3V3QBnkWx1pc4DPyQc5j3een
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-wal

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-wal
Size 8KB
SHA256 06f5e94be4c4e128ab5838468b61f01c9c1ae6bac596cd4a12e589959954cce6
MD5 db62ac91a3433d491f72bb8b6c3ab04f
SHA1 7202357e45c32fc1b80b20a244c80a0c72e0aa45
SHA512 3c9270def7127c0db110fee8b688422d099d8f3d3fb00ec6029923c77eb1065788a2bec354503fb4f205dd36f9be3a8db5ceca06ecb6e16ea9c7eae565b2cacd
SSDEEP 6:KRUol/JQoQYgeqdJstPaPapQBnkWx1vmGkn:KRU4xQo3gndJYP2a+lkWxlNkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-wal

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-wal
Size 8KB
SHA256 4643335fa0fc7f1227a62a2922b05f9ffc858db78b1ae857c009b0529cd25867
MD5 7fcde2f16249ce22f3c645af79b9cff4
SHA1 61395b59ac77b78e2dfe5f97e484820f7fffa789
SHA512 fded6ef33ae0d4f03758cb09333107046d7fe8092fa2e847029a6d7e9e0ce12901692e4b8a0f36b894fa23d562c7172539927c6c3ebeef3c4cc2019f3efa88ca
SSDEEP 6:Kf/Mk4lTKD4SFbpQBnkWx1pPGKMaT1fBEs5gpZapQBnkWx1vmGkn:KskoTKD40+lkWxCGEJa+lkWxlNkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-wal

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-wal
Size 8KB
SHA256 6f76cf39ce2d1427f5d35fab03f6d1effd2e0861cebb0d737a1e098b4bfd585f
MD5 f3698e142d3104a5aa3a9084a1072712
SHA1 2f17aafbf26881df157d088325f1e2f45ca54a59
SHA512 fe167b4282f3e0ec4514697fe53eb90e31ae4dd19d4c122ecb4c97316ea1e5abe3efac9a2934e4b81dcded214105f2a55c96663e2f497f9615c44024def6bf64
SSDEEP 12:KYSUlroKw+lkWxx1zb+lkWxCGEJa+lkWxlNkn:KYS8vlfv0lfjqlfWn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-wal

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-wal
Size 8KB
SHA256 e861825c00e96d800a78193f21dbfd91cbff02cf180b6a8261323c58ac2ff907
MD5 79a4aecc3f8ca620858421dc834a5192
SHA1 caacd1a88c11885ee883a909a6198cbd9388e8f1
SHA512 0e8c68d0089c96424a79e537c6d299429145b0948c31170e7dc6297aafcc5c5cd3b9531ac5dffbffbac8577518aa417ce2166f693e6b0573afb0b028f94fd6df
SSDEEP 12:KwEkvELGgiN61KikxTQ+lkWxA+lkWxx1zb+lkWxCGEJa+lkWxlNkn:Kb/Ji2kxllfTlfv0lfjqlfWn
MD5 SHA1 SHA512 SSDEEP

Submit Download

TDtcagent.db-wal

Path /data/data/com.xiushuang.owone/files/TDtcagent.db-wal
Size 72KB
SHA256 9b168439e1056af2175f885e0a00875a82641fddcac2ef71d8b72b144d7a32ba
MD5 ed80cc6916d3e7a68ccf4ca844ced207
SHA1 c82833e4852d92b5a195edbc8d80bde8fcc310d5
SHA512 fda3a665bca084337123e478a736690d9dc643d18a957cf77b95c2f859dd954faeb4985cc49d894ec2777562cd600fec8ef73f0961d775f5a868348d2eda7449
SSDEEP 96:H0Pg7rPzUd/gpWPD3ql8Ud/gpWPu8ql8Ud/gpWPCtg8ql8Ud/gpWPz:QCABeaD3q/Beau8q/BeaT8q/Bea
MD5 SHA1 SHA512 SSDEEP

Submit Download

000.html

Path /storage/emulated/0/Android/data/com.xiushuang.owone/xiushuang#xiushuangim/log/20240615/000.html
Size 82B
SHA256 ced893e3c7ed67773cb0db75e943dd7b84235d353cd65a0e934087ed27c83fc1
MD5 28d30a80c3f82ea36a1eb40171d1b2e4
SHA1 ca828e4df53c2a5e9a6d2f670309313c54be96b0
SHA512 fb683786db9f55b22afda43f0d42432654e3525f9fe7ca4dcf0037435c7beed6d949b3b1ab563660608ce860e8e9405888889f9c384b73b83799a5dd93f58a4d
MD5 SHA1 SHA512

Submit Download

000.html

Path /storage/emulated/0/Android/data/com.xiushuang.owone/xiushuang#xiushuangim/log/20240615/000.html
Size 113B
SHA256 bf39a8460a33c38fb5cb56d0fd0e9ff062380f90718c16d166eb7b80f6d39897
MD5 6eea0a1219df26f96703cefb657e728c
SHA1 44bc2bb7434ce771886c5433e8a5db12472ef85d
SHA512 2d2ecca333a32204b8b532a976dd909509661647aea5327aa246a2c9d1c560e84b87814d7b0fee298c91eec4d51fbb6892435ffc1a8d52c53ab35fa115a04acd
MD5 SHA1 SHA512

Submit Download

000.html

Path /storage/emulated/0/Android/data/com.xiushuang.owone/xiushuang#xiushuangim/log/20240615/000.html
Size 80KB
SHA256 d1f9720bb7a820194b6262aa2578641a11112168e841aded7ddf86fece36f1a1
MD5 52019ebc9c14a0c0d022ff7fe055b7e7
SHA1 aa019473f7b8fefe78f31e1e441ca2531c5da888
SHA512 475338a58d0670f86a2de5fc47721869f082d7aa562b79b133a712de0e90f0f5720b3e78f34bf794d6f9db767194b694a28c8ab0c7b415f4c2218c8fa6a21e06
SSDEEP 96:t0Pb0+pYto/tPYzO0+pYto/tPXE+CqLpKxo9:ebyto/dYiyto/dXE+CUio9
MD5 SHA1 SHA512 SSDEEP

Submit Download

000.html

Path /storage/emulated/0/Android/data/com.xiushuang.owone/xiushuang#xiushuangim/log/20240615/000.html
Size 85B
SHA256 1a60f4e6441c20be26154a95348e5e0706e5e63989f6d1fef581b4085202bddb
MD5 335ee08b69596a5539967dfd47101af7
SHA1 79986eece9f2e8b572078676375a0fc2c9bdf67b
SHA512 a7c98b172abaaaf47bad9804f1696d976e632a71e322b052474b9da8433eb175cd8b077852d5512df2929f27a718b6d02b1fdc457e4c2d8dd66aa61d41cf949b
MD5 SHA1 SHA512

Submit Download

.ba

Path /storage/emulated/0/ShareSDK/.ba
Size 385B
SHA256 7f219828797f7cb7b2ecb0f1c83cb46d7886edfd8ee0ddd680df795887593eb6
MD5 0bfd1c78e0d4ed6417043ed4c0f81d56
SHA1 b6f7f47c93cd0ea8a1172a89adbb495d3232c578
SHA512 adf1465e2179839794b7315fa976777038a4052fa33f21fa3b5d84f95db29c609b3ef9a3b32a46e0614dc5fff6dfb6aa311dd0b352ddf3dc00234aaa627329f0
MD5 SHA1 SHA512

Submit Download

.ba

Path /storage/emulated/0/ShareSDK/.ba
Size 484B
SHA256 fa4242e33c883d3d73b387ab55d4cb0c58332b6245b02faec72069abcb1756ab
MD5 6474fe6d5be30d7b6c95780a63100f7a
SHA1 55f2cd23001c60288177e7be3cd0da2c031c17f2
SHA512 98b236787bb59d312f101f05b7e5c0ad815b73f70f4abe76ca12a484284bf39912e31b448764a1654222c5dd69963aba06f62d6832499adf820e6396ee5c1fec
MD5 SHA1 SHA512

Submit Download

.dk

Path /storage/emulated/0/ShareSDK/.dk
Size 107B
SHA256 b7b7e032170e3190a84359e5c37adede1d58b6bf4c455ef0c01f73335709bb65
MD5 c9383021bd97affc44be4db7018c4d7b
SHA1 7e680409d1c86e35149bebc22f2cf8c484f0d23e
SHA512 7303f068da97319891e2d25c1c737035f1cfdc365d75d954102b612000e54d7e2b5dfafe10bdf909563e2b46ec3ff9e546423bff6f0aa9496880eab1c1c36a81
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads