6fee45ae59bf1ef58badc214d78c0d66c7f3dcfed64a1a085a6050387f6a82b9

Analysis

max time kernel
135s
max time network
182s
platform
android_x64
resource
android-33-x64-arm64-20240611.1-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
submitted
15/06/2024, 07:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ad627ae662e7405a60db3aaa4cc8a2b2_JaffaCakes118.apk
Size 14.6MB
Sample240615-jlylpasfpf
SHA256 6fee45ae59bf1ef58badc214d78c0d66c7f3dcfed64a1a085a6050387f6a82b9
MD5 ad627ae662e7405a60db3aaa4cc8a2b2
SHA1 f07bf2998fb5bf0376328415e86566df8d2886e0
SHA512 aed8e318cc727e2238fa4dd36b47be4c0c039f9f420320e3f643fe9fb493187c86d53abcb4a7ca36a07f37e9ec4cd138d6e81a7865c7697220e3db39a165ea51
SSDEEP 196608:t/P4vkeEGIzc1Hhc8eT+gKqEWp1m+Vmno0RrTUDe0vAAAAjGWa61spgFdiec8YDd:t/P4vke3gT+gdXp1m+y5z0OWa6soc
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 5 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.kana.reader
/data/local/su	com.kana.reader
/data/local/bin/su	com.kana.reader
/data/local/xbin/su	com.kana.reader
/sbin/su	com.kana.reader

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.kana.reader/[email protected]	4250	com.kana.reader
/data/user/0/com.kana.reader/[email protected]!classes2.dex	4250	com.kana.reader
/data/user/0/com.kana.reader/[email protected]!classes3.dex	4250	com.kana.reader

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 3 IoCs

flow	ioc
32	alog.umeng.com
37	s.appjiagu.com
63	b.appjiagu.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.kana.reader

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kana.reader

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.kana.reader

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.kana.reader

com.kana.reader
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4250

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

ua.db

Path /data/data/com.kana.reader/databases/.ua/ua.db
Size 32KB
SHA256 4bbb66635ea514bde140770455c68c32d2814431593abb8ee86f70a55b34bb68
MD5 16027dc276f7340ff7037a22eb27aaa2
SHA1 f8020926d11c95d3c589f46032cf5d06009425a3
SHA512 c7c1576905dbdd8cd745b8478544fb8c54a04fa71606c4f3eaded887f5354236ab29419a535f81e8268b571544704e2f39466599a88052b51f365e8acc61a1b1
SSDEEP 12:TLZx0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbV/OwQo+AB9pBOPP:TLO4PPvP/BlmqygGSZQorPpWP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.kana.reader/databases/.ua/ua.db
Size 16KB
SHA256 212a16397b37d941c543b87357f9539ff92f59cfa8ebc3f9ce2b5a0a42760e74
MD5 12310f0f691dc278c61aa3d732dbf78d
SHA1 77a614843f8af558910c7cbf62bf6d07df1fe7ed
SHA512 f5a25b8a2969593b4b288b82ea87656e58a16e0070ccc0f511e4bdbfd8ed69f481bfa2de6196dd3664bba7f6943dc8a3db4d88b52c8b376ad8b5c45c86c022aa
SSDEEP 12:TLWXBc0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/YhBFI:TLi94PPvP/BlmqygGSP/0bI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.kana.reader/databases/.ua/ua.db
Size 16KB
SHA256 217e352303b3d63eb2dc20ad83904d90cb7d703b3545fe13e161330e1640416c
MD5 6bd450b6037eeb4879dfbb06a34f09ed
SHA1 185e6421a4765c8ca0b8206eccd7a169b10c6218
SHA512 e59b049146a3cc2b198e86dbad95d36544fabd4c3b6f58cd2dae391a356a67972787a4b771231ff703f484c46cf1a57f3994985b2bc7cb7fd517ed182fe5efe1
SSDEEP 12:TLz/0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/oFQBeDK4EXlJWb7I:TLu4PPvP/BlmqygGSP/DcwJWfI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.kana.reader/databases/.ua/ua.db
Size 16KB
SHA256 60ee65a8b1fed28145d42c1ea2de8629460acdf590360d46877121b1ee8b12ce
MD5 8d44498409ac11df91bde4817f6fa9c3
SHA1 6d8c9929b6d4a29ce5d8d25cac6e6a47d2798ce1
SHA512 863ff5c43c3648f5719e043dc010f86fe0c443baafba6da00fd7157c048dc376ffa9b987bf5b24ceb1c6a1a02dc8f1a769e14b6251edc5496158438be457c852
SSDEEP 12:TLgE0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/eBeDK4EXlJWbeK4EXlOE:TLe4PPvP/BlmqygGSP/ecwJWxW3zI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db

Path /data/data/com.kana.reader/databases/.ua/ua.db
Size 32KB
SHA256 a2621b2f6ba8ac3bbcfa7f9ecc6b36d5243aeb0995eae6a9542fe9669757cae5
MD5 447a3a32be20b85dd0503042f93ff91c
SHA1 d22f41e5387760b6d22c23d602088a06786b7839
SHA512 77ac3c3ee6c7e78551fdd51eabe033a6d4ff5417e36e36175e5bf6e6da499fdd746348a34d5e5668ea54afe8f22b4ddc1510940919e7d7b5e8ed744302f87cdf
SSDEEP 12:TL9sc0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbP/WQ:TLO4PPvP/BlmqygGSP/WQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.kana.reader/databases/.ua/ua.db-journal
Size 512B
SHA256 9035ac7a94e262387533e543a47d1c20399e3a5257a18034fe8e0d2346ead963
MD5 cdab6ae0bbe58b9647ef9e9754d46c87
SHA1 58f682ae27a5979a52cb711fad224d0f4607aaed
SHA512 a48407e815f2ed3d096ad2d9362138cc4a67a5bad1792a45c223fd2da54f87d7c76b3559c793446f2438e72474b1c83b90e811b2ee8ed6c8fb46addaf8f7ffaf
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.kana.reader/databases/.ua/ua.db-journal
Size 8KB
SHA256 3b87874226879d80c3a9840c7a8c556e98a1f6ac56eb75a07eb68b38008feaae
MD5 92887d67b7f34641e63955ffc671dc32
SHA1 84958a6caeecc22b1a62c04ebe354e0526207b78
SHA512 809abe25acaf1f82f6dbf239fc10043d4daed97caa9fe93ffdd3bbb40e579ec2da2853403d3af8bfaee2b6d0d9c8df5b085dabd1c4cd9375317601d1ce8c6652
SSDEEP 6:7+/l9vhUHn1uvWg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuK0h:7+tNhhWqLiuWd7RmBEyPbj
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.kana.reader/databases/.ua/ua.db-journal
Size 8KB
SHA256 1160f0781959ddd00779873a5ba453c2d6abf8d7449a0a8775f9a54d81868238
MD5 564fe814ce21a202ed31dd62b2156c0b
SHA1 37e8dc647294da6d5fb893f5127dea77b405615d
SHA512 11105afada082e451ae2574af1f03f24337f9571803778d9742589b2d2c3b257766d5d2cda8777897388cefeb40bcdda447a94f836f17426136ec01a58e452e2
SSDEEP 6:7+/l99W/0FPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKmivkt/CD:7+tu/6qLJdKBRmBEyPbXivk1CD
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.kana.reader/databases/.ua/ua.db-journal
Size 16KB
SHA256 4dbd0a321268b13ff894bcf59b3128e16faaee93a3eb5e3a4d77b8d600de6eed
MD5 8b792f70bc0f9721048d2056ce3c046a
SHA1 d885f547140302c333888cc31bcd6c3b42ba9624
SHA512 8466677d69f48c9e4ad80d041d458119311e43800510e17afb60da47d4fda9f3e65e12d973d045abf6a8ae07bc29b7ecc20197e9922faf4da06e5950bcd4e9da
SSDEEP 12:7+t7apqLsbM0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPby:7+tupqLe4PPvP/BlmqygGSy
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.kana.reader/databases/.ua/ua.db-journal
Size 8KB
SHA256 55f6e658e65bf78155cb1fc3bd0e963851daceb06fe75acc7e69af6c37c9d887
MD5 6523f6e1d2b583ee35717e2c0a24df8c
SHA1 f13521c511be8995a9641e0297f948ed396cede5
SHA512 079b84242f7a48216954d6ea480aaa191dd9c6a4bd79873844a403869f5a8f6507487c0a636c5b41d3d8f983b41f46f5e7f0d97b09247ce5c613816f2f4ad685
SSDEEP 12:7+tNo3do+ABOqLZx0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPbC:7+t+NorcqLO4PPvP/BlmqygGSC
MD5 SHA1 SHA512 SSDEEP

Submit Download

ua.db-journal

Path /data/data/com.kana.reader/databases/.ua/ua.db-journal
Size 12KB
SHA256 4cfd385054164f276b534711795b1942c16ba3b2ac0d410a29ddc37eb6b31b48
MD5 c041778a37ce8c508f4b8f1e726fabbb
SHA1 615938fabfb21d657ff34d3b2d35b9d10a9c295a
SHA512 d9e941199bf9186490436f17a250032c39ac9c1a8ee25bf9b9610e77c881218e98354faf28080d378637270961a02ea9be8d2ec4fd59b015356535df91e77c78
SSDEEP 12:7+tOtgbiGnqLgE0uOIo4PPTN5PPJhBlTSF7VfqwtI7MJPRmBEyPb+Y:7+tOyqLe4PPvP/BlmqygGS+Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.kana.reader/databases/cc/cc.db
Size 36KB
SHA256 6945d75275af161fa082eab8b348f4cdccbab03854963f5e861fde210447e058
MD5 b986a138e325f9ed31653e246087baa6
SHA1 1cda06c101efbf7c89305f44b552e38282225064
SHA512 5894180006885af44962dcd92c6f33a640d6080060a51a38ee4e348ee2dafe9abdcf2a931cfad4c395ebe20e08b96f810ca54b5b1f584fa232cdabc76be0740d
SSDEEP 12:TL/1FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOw9:TLtu7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.kana.reader/databases/cc/cc.db
Size 36KB
SHA256 66c83ae35e997c33eaffe9c0557d98ee31931c18b99585a64eb6cc8f63d303e3
MD5 1b77217d803a7c04af9466680b92d104
SHA1 0cb959f4773c6730e8aed5746706c0f3ecb35c1f
SHA512 39ea189895ca93855bb71b4a5447815e9373ffd39b50611ac172ae321ee7716fd4af5f86c1fd0d17e12b771f4016a86184620a7c5d07f57b88f017c4ce8312ec
SSDEEP 12:TLg0FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLdu7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.kana.reader/databases/cc/cc.db-journal
Size 512B
SHA256 113fa860da5e00efc6086b236853e17b47e7545868038584e0cf276aeff56b05
MD5 d9162969bcfdd4c2fb370184da9e9a66
SHA1 27afb2708a98e57f4ad40344823e9a2bb0f4b6b7
SHA512 cabffd785b0ed1bc5799e2d575f63bac0a8a1abff5341406e2db51afd1794c9b2c1d618ece4db2bf5bd7bb929f699ec49eef317497cae8e038e217e34669e4a1
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.kana.reader/databases/cc/cc.db-journal
Size 8KB
SHA256 b3aac6e158c19b41ff685fe827857c746136efbd1365056b40e71a07d99c6a90
MD5 d58e175a1b4114930b7d204bcff3f53c
SHA1 e2396d87cdf58521040978852dbc5c93c9aa47ca
SHA512 50cc04b1cb85fdfd112a23af9574d7cfe984759d47303a047062849a3040516a753b44a101953c7554d7db1ea6484e3d8429c4de5386cac4805991e26b7ffce9
SSDEEP 6:7+/l9GIl4n1FRg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuK4:7+tcIlaRqLiuWd7RmBEyPbD
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.kana.reader/databases/cc/cc.db-journal
Size 8KB
SHA256 7209cc62660b4a86b905b54c645e41dff0dd4da82e6084f68d470f7e63f550af
MD5 f6d891f83f15d0c9180a32829bd4c6ac
SHA1 58136bd8c633acc460c921972d0d91e4c1501d0e
SHA512 3ac8b5a6d247bf76270bd39fe40f03bc9b93fc2266a10ba3ee020d393a9e1cfe4041de856435dfd05dd108165688c62213ee1de0d5051a6c849a9ee849f00308
SSDEEP 6:7+/l9iFPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKU8l//d:7+t0BqLJdKBRmBEyPbqXd
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.kana.reader/databases/cc/cc.db-journal
Size 8KB
SHA256 77592787d8c78fe5bdb5d986f26785ce49ad5f4c2ae39775dda1dd7945c9c0c7
MD5 a4089a8cbd4c306e8c72b39bab902a76
SHA1 314306edb30e2109bd2c6f55bc97d464cd213b78
SHA512 0b84943632a8f3dfedbd3f3e5a2e15cc3d4bacd81d394a1cbca9819900fcc980f87fc46249c0df58f8d495e228859245a2a551caf67907db3e78a8628927e0fe
SSDEEP 12:7+tJDlWplnqL/1FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5Rs:7+tJ5WplnqLtu7sL7yot3BVrHotGGS9
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.kana.reader/databases/cc/cc.db-journal
Size 8KB
SHA256 97a695742030f462e59427e115e0c6b8a106ca44bf957ca958e6a66e77bc708e
MD5 5247154a166446997106435cb4144dd5
SHA1 0f81128859747f4f908b04cb59e11e4e54f25443
SHA512 604ee8174696fc16f600b9d6d62dc48013106d4398775b8d3604408559510475159f843e09fce6c0a2775a2a9cf351e1368d10e8de2f9b6b8b8bfd099737efcf
SSDEEP 12:7+thQAlpqL+/+FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5Rml:7+tSAlpqL9u7sL7yot3BVrHotGGShn
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.kana.reader/databases/cc/cc.db-journal
Size 12KB
SHA256 ea5df73c8dcf796fd65cb12e8d7878b4520dc21760f062cd8c13eab4fc4077f8
MD5 a8cfd4f2d15e36d857628c3dd8ad0297
SHA1 fadc90a9e2b3b556d798f6b543bc59e4caa9e05f
SHA512 8f48301534e8a64536b1a663e2f5c6ece9f6df3205052f22796a90cbbb848e226cfe3f6f576f1db7802d52207903a3036dd33331676a9e90f79a538fa917b346
SSDEEP 12:7+tzxmEjqLWEB5FP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RI:7+tzx7qLD5u7sL7yot3BVrHotGGSB
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/user/0/com.kana.reader/.jiagu/libjiagu.so
Size 485KB
SHA256 2cbf986b5e1357e00347d75d6f631539c0f368208079df36bb44603ac4e6973f
MD5 1da618896802fdb4b6f17c92703424f4
SHA1 b48aa81ac014a5a7f6e95e618e4f951ee12d34c3
SHA512 620a06d8df24597467318582a12bce45e2e2cb66069ffbd6fa27ac5a164c58398ddb9c2348e6ef443272a22ca85fcfa03439d0f0f22109a93708d562e0737cb6
SSDEEP 12288:FSgfCZt8eG5jsO7sE5SUCv8ynfAYMn1YjV2k8Ks0:FSgfwM5jso5XU8u8t
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu_64.so

Path /data/user/0/com.kana.reader/.jiagu/libjiagu_64.so
Size 525KB
SHA256 5edc53feadd48cb1a33743b5ba890925a78906399737740fa210f99788410014
MD5 aad88545efd3d07d61bc6f0563f0f0f1
SHA1 1e37cb286428fedda4f5a7d767f8d8e0c963136a
SHA512 f85afc83998c0f9d364da64033d518611029c104657e3dd11b0cfe431d55dd56e19ee61671ad6a0002c960cef560469ec21f01674e8b4c63f781ef1d13bc1442
SSDEEP 12288:YkUAUffZjMlWBC9GJZiPulZfFSjD+579wcXMj3OD4:YkXUffFMJ90imlqy583OD
MD5 SHA1 SHA512 SSDEEP

Submit Download

[email protected]

Path /data/user/0/com.kana.reader/[email protected]
Size 6.2MB
SHA256 641f764f4c54e3f595efd0d087a94c1b03210b642ba02ea6b2fe2e36b3b02075
MD5 8bcba17ebe46010f0b58f4f6bddaa9f2
SHA1 819273459409e5dbafae223c22a9087821aa3a34
SHA512 2735e88ccfaf4e46207aeb065b701957cddb69be1cbe54b122f8d66e006de1d51b5b36e416b4751175d87b244df6062dcb83143176967d321bbd28d9ec5ea363
SSDEEP 49152:3x6PF0YTpO88QpPK62Z5SyU1DGu/0pc+vUfsaYGXNUysAbx2i3l43hisWkTXXzmC:hK0spO88Q5K624Susa2WZl43xXCC
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes2.dex

Path /data/user/0/com.kana.reader/[email protected]!classes2.dex
Size 6.2MB
SHA256 ba0e3e89d09141ef98fa4299a54e2655b97e266c2510ea41818b824ce2c10585
MD5 b3975b8bf63d9a724f9897f6c7acb8d0
SHA1 1531439e65acb1cf492453e54ab197f44c536c1f
SHA512 5de26c7312be89391d7b5ad58a14c1d0a3ae5124b338b69e33bdfc8ca9855ee62a0044cfdfacf961efac5198dedfebf6c848ec1b477dffa836c9c8ebf76bcd4e
SSDEEP 49152:fh+c6IwjhSLdMXamU62bW8VvIDDJqRac9SGMF4qXvk/IYgNXW01/nro1e47p:ff9wjo6Dp1zW01/n01z7p
MD5 SHA1 SHA512 SSDEEP

Download

[email protected]!classes3.dex

Path /data/user/0/com.kana.reader/[email protected]!classes3.dex
Size 350KB
SHA256 708728ffb436f5fbe22b3b07fcfa9e47e1f8fa2a10badd4a9b4235c436401158
MD5 69f958a7ca8beee4b7b83c70be96cb4d
SHA1 488d1e58f1444bea0d81c0cac74f665c6aabaada
SHA512 5193ab741a0aabb4235a7b9760c9b2c586f2bd4d4f36e8d2aba9af3437ad977b844f953dc034aa27dccef4e470a53e411c265a8edbf6a0ce86a13bc5bd3cfa29
SSDEEP 6144:xeSJTztjR2x9TXfmg9XIXAm3xeZvMPvhuaoZmy+y20ht4PIQah1ULo:VJV/Y28X3zf
MD5 SHA1 SHA512 SSDEEP

Download

KanaDB

Path /data/user/0/com.kana.reader/databases/KanaDB
Size 128KB
SHA256 09d888a4a69f84e026de7f42a99fb50068590583c5406d8b7824761381561e1b
MD5 a60a736299a4aa7e9fc50fa62d47eb45
SHA1 7322da325415fe15d8957c4e8872cdfccdd5f64c
SHA512 4daa96dc3e0550800fa8d5fa1153fd8132ee91f4f82ea8511be8dcfeecc3bf7530ef24fb3f65def613e510c17d8e59dc705ddc725690e24976f21a3b02efdaf0
SSDEEP 96:vj5xtIFuwGpgOoozVkE5NB6fUm9g/O7cdLwhSg/7D42fQdgw0Dwnd2NE2bNJCU80:5LjNB6fx7FYVcNX60
MD5 SHA1 SHA512 SSDEEP

Submit Download

KanaDB-journal

Path /data/user/0/com.kana.reader/databases/KanaDB-journal
Size 512B
SHA256 e6cd63995e6086e12d3e7ded2cffa44815ab47d5040cd093b71f0387d0c3b578
MD5 4360ca8563ca1644605d78c1be15b490
SHA1 9cc448e695372d3ca8803807349c91af5f29d240
SHA512 2c4090a6f24619be26f36660c3ad2571ab017fcfadacf7b266e4ae3c7f27178fa8de00f11f09c77d62b7f1fd16668628a3c1a2638d79f392e9b2734b7181960c
MD5 SHA1 SHA512

Submit Download

KanaDB-journal

Path /data/user/0/com.kana.reader/databases/KanaDB-journal
Size 8KB
SHA256 f254337d610c77f96010b50f2198e51f03b98b37d19425ebb07f5f4003eb96d0
MD5 86cc010b1cd4b08ac0a82463268a37f7
SHA1 eb6f23493a0f95231437c858ca4d296fae60feb4
SHA512 94de844a109750701eb06ec8c98626bf501d2772e279a349485442b365c7b06670c5a78940c23207e56cf8aa9f2c9b310cd7d8487e178f3b3e0e381fb2d1e3b0
SSDEEP 6:7+/l9Tal/gn16/vg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKXn:7+txal/rnqLiuWd7RmBEyPbEn
MD5 SHA1 SHA512 SSDEEP

Submit Download

KanaDB-journal

Path /data/user/0/com.kana.reader/databases/KanaDB-journal
Size 8KB
SHA256 478f3d8f030359c780e4a08ec7d83b72b12aaae99182f6e15201d97c61e0a8d3
MD5 2ac4421614bb3b9f576e1e96900d1e9a
SHA1 8f03f6ab529d1b4fd5fe32847132ad42a09735ad
SHA512 1f2633612173a2aa9bea8015a619679587d6e57aae3eb8db74fe62472c040265518f66f3824180a62d19c580d5628b07ea476857ea8ba932570444c8d93bcd5f
SSDEEP 6:7+/l9KPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKGB0//D:7+t0qLJdKBRmBEyPbZ+D
MD5 SHA1 SHA512 SSDEEP

Submit Download

KanaDB-journal

Path /data/user/0/com.kana.reader/databases/KanaDB-journal
Size 12KB
SHA256 85e01483ddfc375fb5ca16537f9476875c221b35eb838686994e07fe30d09db8
MD5 4d43a01155a709dfe503b10585fc8f3e
SHA1 defb9dbe8573d4699f1803ba57d8553da1f1998a
SHA512 464046cb0aa544cfed64feb4f55abca749845cc66e79d60c2f86f174a9f6903cf61dcf21057a28e87d17a8bda5b46063cfa29e0893eb4f9c4c0d2dffdddc4b4f
SSDEEP 3:7FEG2l8FY3lln3ll2/flleevXFlleW20pMRgSWbNFl/SVlDlxll6ltlUll+ll/yk:7+/lllw/fovg9bNFlqGFWoN
MD5 SHA1 SHA512 SSDEEP

Submit Download

KanaDB-journal

Path /data/user/0/com.kana.reader/databases/KanaDB-journal
Size 12KB
SHA256 8c92d72e9627221c9aa6acdd722bcc256ac3a4d7ed22ac05bfcb56799d7d817e
MD5 2ee7c75641b70faedadf2058cbee34e6
SHA1 a51dd7bc396de489a0ff1e293e0e0fb611c12008
SHA512 8d85fcbf5fef509ea2b9e1c15adbd00b00b58943307e77fdf7dd2269ee93e8d589968dc343af84f40dad62cf7ef83a986b73d70af312d7743d5e9439e3ce9ea1
SSDEEP 3:7FEG2l8NcM/X3llGFll2M/Ifll2M/CMRgSWbNFl/zlfl/Dlxll6ltlOg+ll/y/l3:7+/lE+EsImspg9bNFli+hW3
MD5 SHA1 SHA512 SSDEEP

Submit Download

KanaDB-journal

Path /data/user/0/com.kana.reader/databases/KanaDB-journal
Size 12KB
SHA256 572ee7ad825033a8388e278ca6111344f521e46adcbd908144fac4807d847fa1
MD5 009a9acf9b347022aa318adcc3f25fd4
SHA1 4cf795f4a567ad2f5b6b08d5f8cb851fd3c216e0
SHA512 21c2342f6274779c85ba54792f7701be742711a73cf11175ea3e5f1fcc86289cdfd32d2129773d9f77207dd6a313fc8aa20b1a41900f2a713560d4617e94b5a3
SSDEEP 12:7+tc3/jYs0bVcZB+4Dgeyco6cUlxNppItVaqLhARm:7+t+/jfWVEDg5clHfStVaqLGRm
MD5 SHA1 SHA512 SSDEEP

Submit Download

.jg.ac

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.ac
Size 40B
SHA256 4b8394329b892be71eb2ded90e5be39af5db7157484345009fdb10f58aefadd8
MD5 bacf66fdfa7ce933e86f131fbca3f6ec
SHA1 55e70263afe21fa19c969ce54acf6f0dfd13815d
SHA512 b1ddb4cf33c088908fe3be3178d1b5369dcfb186547232c2c9b1441666c54e8238523b39f47ed380171d6c5fcc08fe1718ea168eb8c974cadd7e2ef288287b67
MD5 SHA1 SHA512

Submit Download

.jg.ac

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.ac
Size 40B
SHA256 f5c9c7586e201d2e88a938385d7993cf2444c6344058079feeaaf230a0918b3c
MD5 500a5aa1eafdc5349309d65b901e968e
SHA1 84a2eb4b8796ebe4d42af84f846e5ea395517108
SHA512 30c9b16643e5a04e12a118291ef477f285ab01e0f712a096dd60e8a54334a91b0edc49575966da9fd3793be42c9fa5c6cabafb1bb9c76511ebd83e8cf519d221
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.di
Size 348B
SHA256 84b9efdf59d41d31c0372c4716434c1b91632e2a47e5768412ecf18266907f9a
MD5 ca526bb3fc0f5557d09ff29c2adb22f5
SHA1 722e2d81a8914533b9a496606b094f8069173908
SHA512 b359039f1e4b61195db3af386df5c3e66c61e8e0a9e577f875c9250ddc5fd58b02705a0e92e583d09ec68ada782624bfd6134c3483d9ceec80c9cd36cbeda471
MD5 SHA1 SHA512

Submit Download

.jg.di

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.di
Size 348B
SHA256 f56162f9611d3746919da92fb7b69b9d987583e20cdcdcb90e9908dbd22eb128
MD5 7cf1066c787ad31dab9b75b12accfcba
SHA1 cf0b04aa2cc68f1090f20ae65c770b910e1279a4
SHA512 2f403c2675f53ea5e27b9e38397c9126de5cb0e8183f48247bfad75b6f3284b87a567d85970927df49f9e22f90db7aed9b5eba4caa6fdcbede9fcffc1d8fa19a
MD5 SHA1 SHA512

Submit Download

.jg.ic

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.ic
Size 40B
SHA256 bdc274a3dc47726adf2028af3cf853e180b742e7aaf03ef5dbdd47311a0cb01d
MD5 0174cecfdf52f9bab562cbc4f74c9b19
SHA1 56af4aeb71f5402ad959295a36a59ef43a3d913c
SHA512 cdfedb130d6c6d881cf347b1497d4ab2ac28809d77853b38c87ed0acb582f64ce9d86c00265749dbf9535f7ef9e6e9ba3be0913517380eeba9c2be3cff97e42e
MD5 SHA1 SHA512

Submit Download

.jg.rd

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.rd
Size 32B
SHA256 d5b5bfedc46b8b6f83c941cc45cde23800b662fb4cf6e9a7ed809295186835b5
MD5 c11fd850c806c603a520e1cffd0936ff
SHA1 efefadaff80e52422a9737c1ddc3023243a474d0
SHA512 26a6e846f8a977a4809085a979ef92eafac52961798cecfcc0cefb9543c5004c0b3343188793431fcf4127d582569aac81b2f0f386ad5d5dc2b5bc0ba9597ce3
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.ri
Size 314B
SHA256 d50ebbe6537ed2a2171493dd02b4d56472997a739a51c12b9899485958bf7c86
MD5 69dc27d109b0b3dd5ab9fbf851d2a337
SHA1 5a97f79b4bb201c4ea87a269ce209c4abf04c5bd
SHA512 3be10e61b42e2e4a30a3827da1a28dc8d2a587301ef61788e8dfd0c72554f2812650687ecf760089c0797ec16c0f0d6cd24e3aca48e05e4628b34656adf79e03
MD5 SHA1 SHA512

Submit Download

.jg.store

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.store
Size 81B
SHA256 1cabb08b0fefa7028b7e44e0b814165c1de80c1c9bb7b7e16cfcf36f3773776b
MD5 392e91ec5103660b8930546aaec0b140
SHA1 69040ab90b8e1e958a4ed8144817e1dbf6865320
SHA512 f21cd6c55a5a43682c6f31888bf9ff7776db5fd31f70b6f2e534dd061c3093ea1bfab5da77072e168ae0a6c07c39e9cc1f72622ec9c0df4c247601c4c44f25a4
MD5 SHA1 SHA512

Submit Download

.jg.store

Path /data/user/0/com.kana.reader/files/.jglogs/.jg.store
Size 32B
SHA256 55612e17689f4bb05f27e18b4f6d06ffef92a6a8893a5cfdd3d5b99a6028b549
MD5 448e391c59eef34ee1defbe4dee4c41f
SHA1 df1f890987371d7d8e6963c68b787856e42bc146
SHA512 ce336ce895ba861dda7da27e8869dea065eb3c3403cac55cdf1935409e5ebc95b495370f87ed7416af20af533b15615472e333ae9f2fd2713040f526835399b7
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/user/0/com.kana.reader/files/.jiagu.lock
Size 27B
SHA256 7aa681cd948a77341da4e6246c1f9284f77d3d78c267ded5fc572589118f375c
MD5 18e058ef8a562d013fc4817e3115ca8c
SHA1 9579f865dbdf9d4791b6d06a149db803e746f395
SHA512 17c0de3a54b4d309dd4471f34bc1a4c0589bf6afc80d6df2f19ab86e3891053dd96c6b888b392ea8ece51c0be98c0f2818a9d2b1116cfe7abd6b17dbebea84f5
MD5 SHA1 SHA512

Submit Download

um_cache_1718437709527.env

Path /data/user/0/com.kana.reader/files/.um/um_cache_1718437709527.env
Size 1KB
SHA256 b8b948f391ac31f985b427f2157e0fcf076a8217a0d0ee7c6d2daf4d2eb5f622
MD5 17aacf21fa002122341c57c41c0ead0a
SHA1 0bab34cef740b82398b963148f1edc828c30f38c
SHA512 392fba23a78b87d6984e9ef53ee31fe41c38050f7adfa047c172c8ded4c9ca37bd283bd3b693a8f38976b22c2d3da2520fa0db4f709b3cdfd779bc9b410a02ca
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/user/0/com.kana.reader/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 e7d2f4bd878e4117f7cdcb6eda348031d4665a8f00b2c79fecc29bbd960963af
MD5 27e4a932744b91840d0142cb5d4361e4
SHA1 ef34e6dea8f2a0e1afd7f900c7500d66e5e0e542
SHA512 d5b5c32c1e7f36a3f1c2fcfde88ebb82574befca2a1e1ce3a969834e68947ec0b4d9dff28917e69462fe9cd7db775c0b538be9b308841d99e0c2eefecb9707ea
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/user/0/com.kana.reader/files/exid.dat
Size 58B
SHA256 6f97b105d7ef71144aa955104afcc3a2d1dfbe6cd6f9820cad7e3c1319cf962e
MD5 0e2b578606830e40ba47b5c1315f7e20
SHA1 4e88729a82d123105a20a030cf47dc5bd132bf18
SHA512 a8d564e4978d29b17794cda06af612baeadef28a206691da6295adc09e3510d95ad571d334d0aad97fc9682400921637fa0cdcebc73f074c9a25c4b4c50cc4ff
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/user/0/com.kana.reader/files/umeng_it.cache
Size 433B
SHA256 9c20ee27498d3429577b81bca277547d1866815ff1ef8b4180ff0584e60515fa
MD5 21dc937af8df29b94701928933fd218c
SHA1 3ccd167ba6ad2300bb51e4fec6423d5e97549608
SHA512 7c0bdeb6bd27d69b046659e12afb3556aa77f69b0f84f59db8e68bab491533f864170b3413f01f3ac0edadac09bb5401633510d0af0ab5e2ce2265b58c0a8e77
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 f7c11b4c5d0ded832a262d8d2dbdf515d60ea7f506754de6a5e0c98e01ce4ed5
MD5 27782b056b6ae208889e828a5ae0a0bf
SHA1 0d59710ad209da351d180734bf95de841078b85c
SHA512 b81bc1d00b04faeb7483580e093c115d8153a74242d0b38e42eb8f01474892d6c37fff592d4f86a2db95cdbc9631b00ed58df8d4a7718d5bb3e69a62ac023951
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 447d2269adfa679b5c37005910e890f689041425b1c65495a3fb0bd9d556cf6c
MD5 583ec93176eb7dc66b939bc442ec8471
SHA1 012ee04e2bf05df7e7f3af3fde5977131d68da9a
SHA512 47708c9e0629d61a7b32789cd3996a3e23fe6e40b4f3010575e6dc51a84d83b9ddbaccbcd36637053b67a4a557119efd1ad70f0b0b02c8114f9a8e1bc5a23db7
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 167B
SHA256 d50f400a538f91b224126b2551a23dec2b4e8bb3c6d6951fabc1e8edb997caa3
MD5 a6e0d0d6a412397a83426e6c3903a1c4
SHA1 f13d6bf56ae14e898d2b2d8a1ae3357e3462822b
SHA512 e2348fc75324ca05e798152bf99f8049e7edf405a1290e16964261dcad728844837ac8ff076123d8844c8e2a91126d5dadf7d3f93071605901319065ad639196
MD5 SHA1 SHA512

Submit Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 1e98795165a6a8e5920b6550fe723a4a06237f824be4c7be86e6c151eded789f
MD5 1f3b27391266738fa2ffdebc0a6006cf
SHA1 c469aa295e9d767ef1e274c29c84175a66ea7bbb
SHA512 e65ff81eeabd7eeb79138c1dfc2a31ec7a1d413dbfc1ed8facbbabe9c59da410a22d7838f4fee79db73d0fdaab14a9fa752b9f73f358b8af6af8bb8afe00b191
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads