2d0366116f73fc88a51ef32269db506f99153f45166559707cd54c444e8bb625

Analysis

max time kernel
107s
max time network
182s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
15/06/2024, 06:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fba_game.apk
Size 9.6MB
Sample240615-g8d5fs1dkd
SHA256 16413b37d79113aa936d2d79905c9fb0144ce29b0a07f22a6fc677980c9481e6
MD5 dfe79d2183a10be3078414a1010a92cd
SHA1 744d49eca56a06c9f03a316bf46adc1c4fd9a8f9
SHA512 a52d4d1ec6f2d847c44874714144089ed64f9625b225cf4f2e79919272f10bc9a02f56929cdc871d37f3245dadb65da81943b91d66e84fda719e6d9da317b0d8
SSDEEP 196608:Tytb2R0ki7fUkGH5aOYuExwLhsdjOEhPHDPd/7ZduT7RtzbOzfZhzJ5:TV4GZaOYFxwCdlB5/73sFtCjZhzJ5
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.oem.fbagame
/system/app/Superuser.apk	com.oem.fbagame

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.oem.fbagame

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
35	alog.umeng.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.oem.fbagame

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.oem.fbagame

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.oem.fbagame

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.oem.fbagame

com.oem.fbagame
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4312

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

cc.db

Path /data/data/com.oem.fbagame/databases/cc/cc.db
Size 36KB
SHA256 6945d75275af161fa082eab8b348f4cdccbab03854963f5e861fde210447e058
MD5 b986a138e325f9ed31653e246087baa6
SHA1 1cda06c101efbf7c89305f44b552e38282225064
SHA512 5894180006885af44962dcd92c6f33a640d6080060a51a38ee4e348ee2dafe9abdcf2a931cfad4c395ebe20e08b96f810ca54b5b1f584fa232cdabc76be0740d
SSDEEP 12:TL/1FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOw9:TLtu7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.oem.fbagame/databases/cc/cc.db
Size 36KB
SHA256 66c83ae35e997c33eaffe9c0557d98ee31931c18b99585a64eb6cc8f63d303e3
MD5 1b77217d803a7c04af9466680b92d104
SHA1 0cb959f4773c6730e8aed5746706c0f3ecb35c1f
SHA512 39ea189895ca93855bb71b4a5447815e9373ffd39b50611ac172ae321ee7716fd4af5f86c1fd0d17e12b771f4016a86184620a7c5d07f57b88f017c4ce8312ec
SSDEEP 12:TLg0FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLdu7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.oem.fbagame/databases/cc/cc.db-journal
Size 512B
SHA256 78b7ba3e6ff4895d64950a248c7c0456968c7fe5f0232f21163ab16f2f81fc60
MD5 5d9bf922757efedec9136e38462668f8
SHA1 5fc33e6a55f9cd25954e157a791126a7d818f61c
SHA512 48f06eb181bf79647cfcb5c3aad76106f25b50779f39339817ff0afae651653ea6e050d9ee2d65e34d8effceb2cad5f24cd5b99b27668cfa724e87778b1000f5
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.oem.fbagame/databases/cc/cc.db-journal
Size 8KB
SHA256 5db3a766ffebddd366d69dfdfcadaf9f7b2e9225f7f173d4606f5d529306d4e8
MD5 7af13a2dd6ef06944751d2a4562c2309
SHA1 217d136d9f83ad73ae2c6df0d2a8ae8347523b3a
SHA512 3773b8412d7c2c115c13f6d9e86ad4555afd75fd0242fa9212d5c5663837357cea50ba6ba7d1214e643a63f99bb613aa4fd049e9c55874ca5093bd7cedbb8dff
SSDEEP 6:7+/l9z65SFn1M/ng9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKog:7+tR65SgnqLiuWd7RmBEyPbO
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.oem.fbagame/databases/cc/cc.db-journal
Size 8KB
SHA256 528c4e981fa5ed2659da875ee98c46ad351d4c4e68037a201ea81143f0417a6b
MD5 db5f6807688ae9ff79d0972fb4f0a903
SHA1 336644a3afc9458b599340cc946150365f1bbd03
SHA512 ecb710d7b795e8e1809a0244c8a66cbf6c191a3e3616c2af2732e8211b408b2e8e5e858d69dff380b1eb5520a3d5e85283fb8ec569456923054c3ee12792f66f
SSDEEP 6:7+/l97Pg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKVC/Y:7+tZqLJdKBRmBEyPb/Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.oem.fbagame/databases/cc/cc.db-journal
Size 8KB
SHA256 6412b39363d8085e800470685216a858213417204ba52952166ecae87c2d2a16
MD5 7783842223e7013a16f95b14e2e044d1
SHA1 aa12733a367becd8ae85792ecc507a8a29542114
SHA512 c43014500c4a62a669e0006ea0f0d15ea2bd32c1535b7b864109131cbc45407b319c4a20fc7d7db24feac49f3ed70730d988dc779a5be2fdabe329128d53a692
SSDEEP 12:7+t+DqL/1FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPN:7+t+DqLtu7sL7yot3BVrHotGGSPh
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.oem.fbagame/databases/cc/cc.db-journal
Size 8KB
SHA256 691256b88e8565de63d1f3e66fe4393c7fc89b5fab32bddabda34d2ddcfa4c5f
MD5 138a9e85f5b7696cf44feb093c861a3a
SHA1 f2d4cf0d0d0a354cd23a390b18608f3abeb1dc2f
SHA512 690003aa93a1e1363295ccb08339ef2dbca1f40a122dee10b645583e92751d05ef70231ec8659afc51882e4bd85af65afd5ed82b8f42ad57f1d315f1f1e554de
SSDEEP 12:7+tBjqL+/+FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyh:7+tBjqL9u7sL7yot3BVrHotGGSN
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.oem.fbagame/databases/cc/cc.db-journal
Size 12KB
SHA256 9561050517f02f0e455057c01c351f4c66a3126734b1b386bd9abb1ef268f5a1
MD5 16f4a32373dd891226f2a34d5db16ae1
SHA1 9ccf653d0dbdb8c9f84bdc4b5b03bb206f753d4d
SHA512 e8f9ea95457a2366024bea28670680d8ec763650319989813bce1386a61f32b907af8b655013993615e535b45e003fef4245742647dd4b8ae94f29635ed69829
SSDEEP 12:7+tvmqVqLWEB5FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5Rmu:7+tvbqLD5u7sL7yot3BVrHotGGSX6
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.oem.fbagame/databases/ua.db
Size 32KB
SHA256 6a1cc034035d8764d769651e4de4a4ff285e26868456159a3048758d43e7c296
MD5 3c683e407c7b8d6346f8f7b9567b8ea3
SHA1 4e8c064b3ed4ecca04235900f6587e94753abb8e
SHA512 bd867e33b52962d0084d5902e24eb4ccc2647fc3d098e4a7df6133e0e30e208e552b2e5dd0f860d4754f3b0b7671aa6f550136c39c65f0a48a9585cfdeeb0820
SSDEEP 12:TLZx0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbV/OwQo+I/33cPP:TLO4PPvP/BlmqygGSZQoxGP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.oem.fbagame/databases/ua.db
Size 32KB
SHA256 eda21e9bb4ad31e62a195d99b6e8e7f361411de6ae8f3049537055c8e688f837
MD5 17bb57268badc491266a2729e57b37c9
SHA1 ebcb029dd3fc1f70e210d93ab3086bbd5d39e3c5
SHA512 a4a6b7ef13c6d81777bd583c1a96fdfc735b7aae8fa67d9502807d1e150784abad3fec756af3f59a0f9086447b89ceed5fdaa726e67682915285beb6d23f2182
SSDEEP 12:TLWXBc0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TLi94PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.oem.fbagame/databases/ua.db
Size 16KB
SHA256 d43cd3818141ead98cb188b03ed956d9042db990c8486d01b2a215d585e96a37
MD5 d0b1bc2304e62031d89bea1d4d08a9e9
SHA1 7aeb60e37aa416a3412bc43134b1051093bc5c46
SHA512 c8646be9904fad055ad1e05734db0acd930c27d75bf6ff3204ec8d3c37e58e25ff51c8b45b4f1c5ca70b22aa3cb2db4dfcec18d1827f3e805c776e6cba9a9287
SSDEEP 12:TLz/0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/rI69H4aebd5w:TLu4PPvP/BlmqygGSP/39Yac5w
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.oem.fbagame/databases/ua.db
Size 32KB
SHA256 a8aea7f47ec628c756da5432723075627046d7071a0eb7fb3f6b96dc3373add8
MD5 fa8fde9df028ac3b406bfb8f28b87a68
SHA1 7506d85ad31d0919428ff11023cbef14b3589253
SHA512 7c001c17d4271511a0e682da64bddda1a5d6a1f6763191c596896ba594989ce94aadab6bca3d6615bd87b86679c46da8684e9378ea212935207ab36f2208b4f9
SSDEEP 48:Tvvf8SP/gOLVh3frBUOEjnZWAGPRHQUJZygWThV/:Tv1P4OLDfrBGnUAG5HSD
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.oem.fbagame/databases/ua.db
Size 16KB
SHA256 20eea739df2f3722eeecd003f643c4c18cce4dae66dbdf2fb3fc0971b688c095
MD5 338bab9c50041f7d7e4c70da9f780070
SHA1 e45e1d53831be15b315a35679335bc8a036fe9b4
SHA512 d4a76161e512a4c0e47858b1454a939c5dfc41a1c09f4a02080af8a9a857afd81399818f628aa00206922d05c9498bfa1bb7c40b894c2a99df1cf0cd5f690127
SSDEEP 24:TLO4PPvP/BlmqygGSP/Fq9Yac5b0zIo1edA7:T/vf8SP/Fq9BqIzxe2
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.oem.fbagame/databases/ua.db-journal
Size 512B
SHA256 63f2663d16c6b58ea2c7c650122bcb81cad498b948e32a9bca03b7fe13c76d20
MD5 7efe943d55e962ef435f9b321869bb6a
SHA1 77d56864d39ad2a1a4f0b4aa30424d650ebfeb75
SHA512 da2cc3a4eea02d88a91e56f72f18d044689c1a70332eeb0eb7d4a3c26585a752964022eb91f6f100cf477196824202db176437673e01ab907c9920e8c3533415
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.oem.fbagame/databases/ua.db-journal
Size 8KB
SHA256 348a0966fc98eeea62487e4b8c7d1f787c12124ffb321fdb379d3397c20c3337
MD5 262468986f6d8ea693968ebd79bb37b0
SHA1 132e38aaf63c9e751ef5da5d773c1d3460df86ae
SHA512 560161e013649a4bed4a2573783f5d745dc843c46db3ba506e572c370dd2605634b31d3da5756df86c63108151102e81a695e189c9591b169bf7e0fcc192c777
SSDEEP 6:7+/l9nn1s9g9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKye:7+tU9qLiuWd7RmBEyPbDe
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.oem.fbagame/databases/ua.db-journal
Size 8KB
SHA256 6d391b96c0124077163e61eb0c3f6e027b9b307119e535c8ffa8b57d03c9bda8
MD5 7857d884fff64e6e2a069ab812c9616a
SHA1 08358dbde8983f3768c1c6bd7db0dd28a3204119
SHA512 553545176704dc7071ea254c8abfaa2f9c8bec79ac0e60c09b4d8c1a1be7fb607d8b84a5a5f9ddfc9b6fa55a2fe895bb870053da4e1af1a13ef0d20d3a939a74
SSDEEP 6:7+/l9ldPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKEmU/U:7+tz5qLJdKBRmBEyPbm0U
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.oem.fbagame/databases/ua.db-journal
Size 16KB
SHA256 27c8fccee74dac241ae3ce6a0429b4b5b0bcf704113b3da02573cd4fda31ded3
MD5 6ce2798a4d4d3466e14ca5c4df0870de
SHA1 339c6f9dec40fd4092e91ad000aa2424470a0660
SHA512 660fb5b5d7c8cc63587e4b52f9045348ff5c564a4b9245700126cea8316919100c0f92338a06e8ab3a39bf2a08d60323c8d320dc4037b194d5e02bb99b9eef8f
SSDEEP 12:7+t7lXqqLsbM0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbFn:7+tZXqqLe4PPvP/BlmqygGSF
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.oem.fbagame/databases/ua.db-journal
Size 12KB
SHA256 3163b99daa3103195979ad57cf33d04e1588ba8db226f7a594537a31b9e88043
MD5 401654e2a03a2bdde45114f637105dea
SHA1 3ed1f86da129bc9750ddf7e563532bc254659202
SHA512 89823025cf09e9b1b63b04e46cd752982e756ce52bac99816c36b3339229e7612a1e525b0e91f875b3f3ce62892baf5383b755b1dcde4097dba980b85bbbde17
SSDEEP 12:7+tMGaqLZx0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbk:7+tVaqLO4PPvP/BlmqygGSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.oem.fbagame/databases/ua.db-journal
Size 12KB
SHA256 90274908190919781d6f84034b71c7599a0a25db2cd158e1ec26d2b8129fd69f
MD5 cb05482148b2eae86bdbc6c555b626c2
SHA1 66200fb54bffc029bfc1c68003117c7ac39ca67f
SHA512 82069d8a5405f59af7556171077d84e6f503005ffe43dbd96fba4bcd7586c2dd115e1068bd5e5c5963a61e8bd3af2c4dadbe71417c5dee859de1ac0ca4bfad29
SSDEEP 24:7+tMp9Yac5JqLe4PPvP/BlmqygGS2qLu4PPvP/BlmqygGSAI:7MM9BqJqvvf8S2qfvf8SAI
MD5 SHA1 SHA512 SSDEEP

Submit Download

1004

Path /data/user/0/com.oem.fbagame/app_crashrecord/1004
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

1004

Path /data/user/0/com.oem.fbagame/app_crashrecord/1004
Size 224B
SHA256 31168d2b7f1bdd637ed9e7efac8ea5d510de25d2952bf91a79ac0aead5a5081b
MD5 aa8704d3da6f7bd622e34c652b612e06
SHA1 245e560cad3cd48893869dd89f43448935269b85
SHA512 6f6dbee8ad1a52248867297665ef524fc57f5bd8187fd0201592f2ce88f4a1f3f15ef4c7f3e26f26c01ffcc98c04ab611f41b66ad8f6294dea5910bbd4c7a748
MD5 SHA1 SHA512

Submit Download

-5998622401067643521

Path /data/user/0/com.oem.fbagame/cache/VAdNetSdk/reqQueue/-5998622401067643521
Size 6KB
SHA256 5a6cd7d1f3c5c0342810e647c4766127bb7a6373d28165f3a2080271fcf41734
MD5 7be25cbec577a1cf1d28efa4da499a49
SHA1 f9e119fa746aa02303796822f1b1696153fb1e8b
SHA512 a33cc61cfe0efe06f62e4c5b5c4c95a4db8d015e05183f427eb451aa5395fd577e7af57b854399e56ffbdc411c63d4c552aa96d5e3af776f946dd78b23d3132b
SSDEEP 192:rcSJhph4TtTboPZQVgOrwKZD39jFkUsH81WW0cO:DN4TBcxCf9CUt1WFcO
MD5 SHA1 SHA512 SSDEEP

Submit Download

journal.tmp

Path /data/user/0/com.oem.fbagame/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

1718432941040

Path /data/user/0/com.oem.fbagame/cache/tt_crash_log_dir/1718432941040
Size 2KB
SHA256 3749660cdef0694a2128b613546a3532fe9795a498bf32696656229e04ac5045
MD5 81b84f68f398f7282329b4b2503c9883
SHA1 a7ad7c4fbda74f648e4de644b3fa04e8fab5266f
SHA512 b13756f2a096cdb40c03898c02b576124181f7704f3f2297e84616254c48e5002c62c1379a52783c30dee58fe234a83debce72fb6a8a00b1bdda59980a80d2f0
MD5 SHA1 SHA512

Submit Download

bugly_db_

Path /data/user/0/com.oem.fbagame/databases/bugly_db_
Size 16KB
SHA256 a2d241670ae1ab17026faefcbe369f2d5ab054c96598a60701e0c621c8fcc3af
MD5 50d05a900cad9234de079f89bbd25361
SHA1 97eb8cc3d8f006a92d661dbbbe43117e598e8837
SHA512 a6e32a388239be341cc0b3697d8f0a12a735714825039c2785eb1228e62bab91abfa5bbf3faa348cd8bc4fc0282c8195e7ed2a713efed3027a554286d3d677c7
SSDEEP 48:Tp85WuAriStwwuMN5meposSP/hvmeXlLbWR7Z6Ci9Kb3zCi9Kbi:G53AzwPF5XxSR7Z639Kb3z39Kbi
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.oem.fbagame/databases/bugly_db_-journal
Size 8KB
SHA256 1ff74c54e269d0c3db217f3f34129e86d1c1f862c97038027d3e88e5df6787e7
MD5 bb3173503a758136e82485bae2bddcb9
SHA1 a6f2d4c6ba617cd4fb6f56b7857df4724713a613
SHA512 4560742e48b2008f421d0c1a4b9b7ae661659eaa0d833f9de9baefc2121538c0235d9701180381a389fd70c8a6bac1770ad4e114118e41a8b6c32d1dfc063338
SSDEEP 48:7M+WR7Z6Ci9Kb3zCi9KbVq+u85WuAriStwwuMN5meposSD:7uR7Z639Kb3z39KbV/53AzwD
MD5 SHA1 SHA512 SSDEEP

Submit Download

bugly_db_-journal

Path /data/user/0/com.oem.fbagame/databases/bugly_db_-journal
Size 8KB
SHA256 eb453a03cd16f7ddcb497c0f3348716d1f1232c86448e39ce084a4f0e251b09e
MD5 14b281cc99abed49b879d497d59edeeb
SHA1 4b72ad1b219b3ba7d74227604c736b2c4aff0e4c
SHA512 94b177e9ea3e314a1b70420cbc12179afc5cbd0d65121c7459bbbc7a4056f961292f02690ae44778863d036c595f9f7a221c646cceaa5734128c0aa1253684a2
SSDEEP 48:7MbzCi9Kb+qJ85WuAriStwwuMN5meposSO:7kz39Kb+P53AzwO
MD5 SHA1 SHA512 SSDEEP

Submit Download

downloader.db

Path /data/user/0/com.oem.fbagame/databases/downloader.db
Size 20KB
SHA256 000ff263ff1343333e4303023f5df267ecd8c9dd4b87d188fc57765a9c54a7da
MD5 164003cd2f2ca602e085b2c7758e692a
SHA1 35d839c7073e6f32e79679e45a820420f69d882b
SHA512 5c439d2abb2363b052f66a7681cb9f9d8a097a60065c29681095bab7287554cbb191a8924853b65fb924734a9a31dfc13181faedc890a3d4bebe0e4a6c12e157
SSDEEP 12:TLK0uagyJTucu0P+mQtGxcJh8a3gRqV0KtIUa96PMYoHdet/03OqJgRoEJRanmRC:TLKVeTzU3Ua3qe0ce1Yo5eq7dGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

downloader.db-journal

Path /data/user/0/com.oem.fbagame/databases/downloader.db-journal
Size 8KB
SHA256 16c128c23d942a14661f3b9672688d09eb7800b74589e583705f27c064011544
MD5 6c37b2ffdddd184780ec0772fb9f731f
SHA1 48c6f363cb9393122b0079e67cd65706f5f5a3cc
SHA512 2d47b4e109c16e376452b61e32d8a76b5cc33fda6526415bc28ba81a1371f78aaed0473a8ec9401edbc95fe55048d9e3768a22bf9b5ceb305e96dbb55921fcbb
SSDEEP 6:7+/l9lglFn1wWg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuK+HT:7+tAUWqLiuWd7RmBEyPbPHT
MD5 SHA1 SHA512 SSDEEP

Submit Download

downloader.db-journal

Path /data/user/0/com.oem.fbagame/databases/downloader.db-journal
Size 8KB
SHA256 623c8afeb9b18234833bcafba09f6d8e7816be6aeae944bcd7ac9e6fe00effba
MD5 467311316453abb43be1f145cab037c5
SHA1 0925b5d472aa1f493d076d42cddc4fb0f571b9fb
SHA512 955240e065ae0a36dd833ec1b159c207e69131df77b23e0b33ea05512b6977a57889e5b69e01e8f18dfe43c873c285fc8b622a5b9005af68eb550955154563ac
SSDEEP 6:7+/l9A3/GPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK4BUllC/o3n:7+tPqLJdKBRmBEyPbP8lSo3
MD5 SHA1 SHA512 SSDEEP

Submit Download

downloader.db-journal

Path /data/user/0/com.oem.fbagame/databases/downloader.db-journal
Size 512B
SHA256 57bc35d920c7bae7a7dc674ab5a25a09204323e3e246a9666a1c13ce4754489f
MD5 421517f547731738771c8f9163051963
SHA1 adad62a9b03cb53c5cfaed2214ce5bc32217b121
SHA512 1ed76dc60c771e3ee626b3403f24fefc00007fa69fe12e711d616a0f3f41ff7217c68603093fe2384511d1b15d0067fe666f82b3765a19629ab7f484ec650ced
MD5 SHA1 SHA512

Submit Download

.imprint

Path /data/user/0/com.oem.fbagame/files/.imprint
Size 927B
SHA256 d7516e115b740af7b840d4c1e60c793675ee0a477cede926bd625e2fe4ecb406
MD5 2a8f2d18cd724a503225f2639b460ea8
SHA1 7e13bb9286fda015cb2c34565e65eb7943d62261
SHA512 516d22b543c8f764564a658f9f99e3d4fdda3b02e2ab51816be7e589741ead41bf4b809263702bf304abbfca49971fd75f1bb952d4d703fbcee82a80d193cad2
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/user/0/com.oem.fbagame/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 0d2944859e43d84be164c72d278674bcbaf1e46252db1cb8c9ec0531f569732f
MD5 3076e79d9ce47fff66472970dc9168d1
SHA1 b2b6f17de7e970faf2c2ff308930c840637130cd
SHA512 8632828414d2752d02937c0c1a08080d9fc6c61eaf0f5b46486cf706d9b44733102b5afd471e3e416bff599aac333a9ecb7e10f088e1e6b765aba8b6b22b88ce
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/user/0/com.oem.fbagame/files/exid.dat
Size 55B
SHA256 930b5d845575d5852075475a49e273b321bdda8ea63fa85cd1a42336194a7afa
MD5 382a2131ad01f9e8e3f45c827e789252
SHA1 e6769cf9ddc05a8d4214b9dc43df42d885be2ebb
SHA512 b1d315283ae1f5baaaab665d6f295128566a526554f87b9a0b3f5056a3f4ea76dbdcc2a12e5ea13a802de1f45140abdc424e8850791561805c50f967e772a521
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.oem.fbagame/files/umeng_it.cache
Size 350B
SHA256 3fa04124360bc38d05bd6ea38842d7d5661c78afc192a6580f26857315862da7
MD5 df3bf8d975ad523429755e27c5ab6896
SHA1 580f65ef854c670b03dbda7e3aed02ca0e2d9dbd
SHA512 3beea9aab5db912c3d27ad55bdff4a8223539c89e8156dcc3b3201d47b50177effc51cbe5d1cbe14db4d2e6c0e3c71f1cad1db742fe3ee7be762f17e72e7e1e8
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.oem.fbagame/files/umeng_it.cache
Size 178B
SHA256 40719ec1d3a3d3eb8ac5b25385d23ee9b97d9de8df3bd5b1402c11d97ef378f3
MD5 6ddde87e1bd74d97926ec1bce7d88836
SHA1 f3ccea767680d2070032dd50418f08aafe606185
SHA512 30e847e4d2a86aa4496ac8532c75087bc14558559b6690d00e05e157b838aefd155bcca11545060195127746a077caa893ecd3d9773c14b150c4f878ca5593a4
MD5 SHA1 SHA512

Submit Download

0fb35a4e606a913b153f63e5bc10adb6.tmp (deleted)

Path /storage/emulated/0/Android/data/com.oem.fbagame/cache/tt_tmpl_pkg/template/0fb35a4e606a913b153f63e5bc10adb6.tmp (deleted)
Size 151KB
SHA256 b37b20aef8aedef7f952401b48d8d2da271ab65c8acbc1c6a296b244875ed088
MD5 3610043095edfae0fde800376f4f63b0
SHA1 c58f32ab313bc9c8b0a2a9d2ee7f445972973c8c
SHA512 d9440d22eb1886705a8936d16585a9c0f439a04303a432818b61ec608aec9fb21785f2098fff0607c23a2f6ae1727c4103b350d82591d0c5bf470ac5d17555b7
SSDEEP 3072:K6kELfi5MIXkeUzNMHhpXodjVobQIvD8IQEC///E////8/yC///E////8/1pi/wz:K6kELfi5MIXkrzNghpOjVE3vD8ZLc/wz
MD5 SHA1 SHA512 SSDEEP

Submit Download

d185ca97786512f94a2b28524359ee94.tmp (deleted)

Path /storage/emulated/0/Android/data/com.oem.fbagame/cache/tt_tmpl_pkg/template/d185ca97786512f94a2b28524359ee94.tmp (deleted)
Size 1.2MB
SHA256 ae27767b5485f608d86abec27b717fa1bb875cb02db529abdce3396ff2f7b5a6
MD5 c92f5fc7425dacf38483b7af63d74529
SHA1 886cd5ce9903e549c6085174d781864879a9b0d8
SHA512 4a6d5af49cb4d7dca2d854a8f6fc61f4f4231f0dcac9f225fa08643d259fd90e5a4c3fa1a3138b98e9713a3fcc391109582463c86bc581ba932ff6564fbc243f
SSDEEP 12288:jcx8fPjPFOO/S6noH0kiB2Kr1XyooTaojUfW1tjYuTjSjKqP:jcOfDLo/22Kr12az
MD5 SHA1 SHA512 SSDEEP

Submit Download

db1e618de157bf757232e0acec6c150e.tmp (deleted)

Path /storage/emulated/0/Android/data/com.oem.fbagame/cache/tt_tmpl_pkg/template/db1e618de157bf757232e0acec6c150e.tmp (deleted)
Size 143KB
SHA256 9614a250c3921ab426426cf2df2a3f5d5741449de032a053e40ff056bba9d8d3
MD5 3cb18addbd563508da9d8b24af3e9bad
SHA1 9b6ce986414cf209e720bf0f7515688df1101062
SHA512 afad51a9747680a5160defd977ddd4c75c7a05f851688c56b6acad284cf06077ea99eefbec9770f5c111d8d544af9ab43572ace5ac7310c350f77b22c7cf5379
SSDEEP 1536:FgGxaVdmwa11si0U7Ed41MfW6NUU9PXYGsnT3JBlKf6OLyzrBza0Wca/h:wdEv055yMfc/Yh
MD5 SHA1 SHA512 SSDEEP

Submit Download

temp_pkg_info.json.tmp (deleted)

Path /storage/emulated/0/Android/data/com.oem.fbagame/cache/tt_tmpl_pkg/template/temp_pkg_info.json.tmp (deleted)
Size 617B
SHA256 e3fd9e79b85655634d5dd9977e9025ef132f82cc15f9cfdd132c1c77f4c45ce2
MD5 71ebf5ce2505a490845e3977511b0816
SHA1 6b89ece43d8cd9a62bc5cebc07e5a0dca01017d2
SHA512 dfed89c4fb4f743b030987a82439541e06b86389c3666f16d76ea1bccc3e91fb8863a985dd0bcf52ccecc02be9fc7f36c68c5122d7560f480d8b23d9ecf4894b
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads