1bba1da3f9df37c9c47fba04ec9c63ec389c2c3984d7e300c7e535b3970a0729

Analysis

max time kernel
176s
max time network
145s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
15/06/2024, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
afb98f0c27e234d4eb68355dc33099b7_JaffaCakes118.apk
Size 4.9MB
Sample240615-ws8fpazdqa
SHA256 1bba1da3f9df37c9c47fba04ec9c63ec389c2c3984d7e300c7e535b3970a0729
MD5 afb98f0c27e234d4eb68355dc33099b7
SHA1 2b6aca4b56e2c0f265568dfa00b630c0de180109
SHA512 664b2fdb4666c1b95e1f85930b7a07b82ef502d44af4d03c2dcbfc08b97c1917f83edb4c8f7ba490aff945f9e7c77e3595a23e34d48329a8d4c37f9e9601b31f
SSDEEP 98304:pZUjAlOjAw+aBC7ZmCJ+j+79O+oH13Hmx6SvGESVuf:QsOvr0YCMOO+oHBGx6SWV6
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.s.launcher

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.s.launcher
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.s.launcher:push

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
22	alog.umeng.com

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.s.launcher

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.s.launcher
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.s.launcher:push

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.s.launcher
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.s.launcher:push

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.s.launcher

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.s.launcher
Framework service call	android.app.IActivityManager.registerReceiver	com.s.launcher:push

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.s.launcher

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.s.launcher

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.s.launcher

com.s.launcher
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5060

com.s.launcher:push
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5436

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

widgetpreviews.db

Path /data/data/com.s.launcher/cache/widgetpreviews.db
Size 20KB
SHA256 9d7cc282ea55b174c9b259f30bbb88d25225de46a3281b9124432b56e4693e82
MD5 60e457c6cac57f34a803ca2c582e1d19
SHA1 a09d506063d30ee72b3a9cced782487388a35d5b
SHA512 b4db5ae9fe42625b8bd073983eb758fbedd8a8ff79ddff52152fb1b252c362d8308739f28eef0748ba90f961ee44a9b1a4d01bb07eef4c5d430cb9849b8942d3
SSDEEP 12:TLUY4JRHUtUelRFOSDO+OxkKmgP8RmBEyPbAVOw:TLUjJtUtUCRFZD7OxqgPHGSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

widgetpreviews.db-journal

Path /data/data/com.s.launcher/cache/widgetpreviews.db-journal
Size 512B
SHA256 b2bc9899e1f2e356e0cdbaa98351bacba83f89838f95a2c260922ec3598e5813
MD5 83bd6635c4f2e5b066e43f4b8db0876e
SHA1 da676761c649656674e24d83af5fa4733965cfb0
SHA512 f450a9f62655a630bb75e48170fd4367bb0e70e4580732c2961bfb25ccb1189e89f25007c537283c98bb41bd0475e4139148b37a9ec6ce3f987c4725c298f0fe
MD5 SHA1 SHA512

Submit Download

widgetpreviews.db-journal

Path /data/data/com.s.launcher/cache/widgetpreviews.db-journal
Size 8KB
SHA256 f28213d6e55c3c3470424b1038087cdc634e30b3e21d0d3e7a5fd978d4646765
MD5 5dd8cfb59a78091b4b356d96c33cec0c
SHA1 ea72dc3f0f4486275a9adad8d81cfcbc7d7329f9
SHA512 12ddfbb4e0d65fc57556789193e656e62b1a75ee06ddbcd7e2e6796cd802978ebf98575f5e7d4eb1b0db6f167c93f9b3fb678922dec42fef281711eae69d608f
SSDEEP 6:7+/l9QIl/gn1ftng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK2J:7+tLUqLiuWdwRmBEyPbx
MD5 SHA1 SHA512 SSDEEP

Submit Download

widgetpreviews.db-journal

Path /data/data/com.s.launcher/cache/widgetpreviews.db-journal
Size 8KB
SHA256 0821b5fa5b02ce59881b907e5b876534e376d30f1a62f426bd65267f5d5a56be
MD5 26cd03c62f0a41c11934bdc181ad1405
SHA1 a2a58b2c265a63b01b358036e990f17b2fda62e8
SHA512 927bc082b50cf0d595128b20a23e9cdf70183d70c8056e8a00c5c32eaa1570cec6d3b78378c466136eef74a254e4b3f33e0cbf4b1b84121e141930bdc9554eed
SSDEEP 6:7+/l929HPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKqE/D:7+t89vqLJdTRmBEyPbbkD
MD5 SHA1 SHA512 SSDEEP

Submit Download

bat_statistics.db

Path /data/data/com.s.launcher/databases/bat_statistics.db
Size 28KB
SHA256 f4b24633b142572cae35e26c622b80b0af5c573cd3bb02b1353aa2f9ce36989b
MD5 acc3b379cdc6ece73974c4cea36487b9
SHA1 88dca7d4d11151dcfa372efbb9786f9a68580830
SHA512 ef37780a549f7a42ed759511e2dfc955ab356ea53b914e1a72734299ce7d435cd6b4468370669ef6c954689579544272e4be36e96c63d9c64388498aac249bbd
SSDEEP 12:TLZsy7VgzJlrEgXQC5JlrK0RmBEyPbGtOwI:TLVqlrRdlrKvGSiI
MD5 SHA1 SHA512 SSDEEP

Submit Download

bat_statistics.db-journal

Path /data/data/com.s.launcher/databases/bat_statistics.db-journal
Size 512B
SHA256 a3ba2cd55fee982b31b9b4ebd60c424b4833bf058ee04b20b9b5c3edf732c4f4
MD5 173729de3edc135a9c574fdfb3395c09
SHA1 e1f380ba4b9c2f81c8c47612f0f9c39f0972bd07
SHA512 d86b6e9a83ac48cb35820956c8e8bf091603ab5623dbbd960df63c79c24d8ee8ca43675a7fa18c48dc75e91ba3e3beea99580f4036a20c7803d90e5cd93c1f72
MD5 SHA1 SHA512

Submit Download

bat_statistics.db-journal

Path /data/data/com.s.launcher/databases/bat_statistics.db-journal
Size 8KB
SHA256 01dc8044c4904541531cb862db9a925bad93098cc8763b67d8c0fd2fe01b71c5
MD5 b71cba0e9ecb76e7ddcec2202996c4a9
SHA1 bb8201e4c292a931d259b6c1e64ab8707c89f913
SHA512 2f36542a9ca49df00931bcbce18721c8a06686551b33d1b5583c7fc4aeffdfa7b2fdbe73fd80854648ad5760bf5598a1badabb38ef88b7d5f616fefdb499b7e2
SSDEEP 6:7+/l9VPHn1+W2vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8fA:7+t0WWqLiuWdwRmBEyPbbfA
MD5 SHA1 SHA512 SSDEEP

Submit Download

bat_statistics.db-journal

Path /data/data/com.s.launcher/databases/bat_statistics.db-journal
Size 8KB
SHA256 d72495f9c7a54d79caa7e03910df72282fb46e227fc0c5b2137bcef6998aebd6
MD5 820fc6d2c4a6afd1c335d94f72ffe95b
SHA1 eee7365ed284762f7a248920f4ef69b33172ce7d
SHA512 1832ede849557f47e7700df3fa57ae5b56104dbb9d5e9835773cd33286aa652740981f74c2847439f03f79b7e6783028f7d5f6a79f7494b0dce7512968c57862
SSDEEP 6:7+/l9dlPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKMnz//0:7+tpqLJdTRmBEyPbrnj0
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.s.launcher/databases/cc/cc.db
Size 36KB
SHA256 38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f
MD5 0908e924aa236931dc7166fef6e00862
SHA1 7782648d6d8f6e835bd47058d4852932c096a467
SHA512 3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee
SSDEEP 12:TL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPb8FOwGQ:TLd7sL7yot3BVrHotGGSgGQQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db

Path /data/data/com.s.launcher/databases/cc/cc.db
Size 36KB
SHA256 abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40
MD5 67c12933d1e0e63d9801a6aa43092ce7
SHA1 b6936908554e4a1986b8eb08289e2d3545e8ff74
SHA512 db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd
SSDEEP 12:TLgRP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbP/WQQ:TLt7sL7yot3BVrHotGGSP/WQQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.s.launcher/databases/cc/cc.db-journal
Size 512B
SHA256 ac3e1c6e0a6d5480ad06048621d1ac57f54217e5fe1e42124ae100e0bee6c2f4
MD5 7b10fda7fbb31ae868ffbbf5c98b5511
SHA1 c3e72015e62edff4ac52d506cee6f64cf6e95fef
SHA512 5bac3b19e1b33d71380d2570d0a18b38ad8525395c7d25eca34291dc8f6e112d231ec40d5108b66ed240571b5c55e01465c283b685d28908f58f364224620fc8
MD5 SHA1 SHA512

Submit Download

cc.db-journal

Path /data/data/com.s.launcher/databases/cc/cc.db-journal
Size 8KB
SHA256 f839f49004cbec2d9e3330ef35d5d81d309e66ae3c5666a4715b08414339f9ea
MD5 2359272a594a0a2c98a1875f982cf975
SHA1 bab02e48dbc8049da68e31f6f972cc0b73a2a2bb
SHA512 d941f15a81a14168ae6c18c1cee34c24d8dd2bfbff571bfbaa86e1f3fb059d134aa20870cdf47652b53f58470eca2203876bf8e6ac5793947a074eac6d62c341
SSDEEP 6:7+/l90d8lFn1sd+Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK3:7+tw8lIdpqLiuWdwRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.s.launcher/databases/cc/cc.db-journal
Size 8KB
SHA256 f37d58a05104005633130d10284d4dc1872cf310632ae05759dc470310e91406
MD5 a0eac31b10a051dac31170b9ab54f677
SHA1 6b92b13fc86cab09a88b5fb56cfe23f2dbe56a63
SHA512 c0bd4f05367cda1d847e14c000cb7516e75285aa76e687db15c398f4c5164540cee897932dd95edb7b8c9cbfec4a74b1e3f307341aa94212d91a714c8cac6ee3
SSDEEP 6:7+/l9ho4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKNM/p4:7+t/qLJdTRmBEyPbesp4
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.s.launcher/databases/cc/cc.db-journal
Size 8KB
SHA256 2e4818bad282b0b2d3c678bdc18c78b1c5bbfd8e926f65f85125fc0ead42a5a3
MD5 902908df3b0d822050bbf4ca7f5f97c3
SHA1 73692635e06fb80eb370dd3a544f2f7899dd5c8f
SHA512 e59ee1bc55e07b8ad3af0e107bbe379c5a0d55676aeba77049bb865a45e675362b9d7a703b11c58dce640a048f3989d3a57a1c112f530ed72614609f1df2d5a6
SSDEEP 12:7+tLOqL/sP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5RmBEyPbn:7+tLOqLd7sL7yot3BVrHotGGSn
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.s.launcher/databases/cc/cc.db-journal
Size 8KB
SHA256 ee19898b83cadd15f0700d01e069d9065e931d63aab2e09a08fdeba69f50ae01
MD5 f7481179c51c3d43a5870164c9d95501
SHA1 319e5dc9fe176c0edadbfbfeb904c9c8ec8241a0
SHA512 c3a85d4e966991ed7487b149f9f10fdb9e7b9f3196b6069060b2ab939562923677a09fbafe85c796a059ebbc522138a8172733d9fbd5181ecdd248300a224c79
SSDEEP 12:7+t9kH06WqL+/E6P2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5Rr:7+t9+6qLpr7sL7yot3BVrHotGGSC
MD5 SHA1 SHA512 SSDEEP

Submit Download

cc.db-journal

Path /data/data/com.s.launcher/databases/cc/cc.db-journal
Size 12KB
SHA256 6ad797050f9146e6680dc169fdb528e63c22414ddf2abb04a5a41dfa7bc69b10
MD5 f958f7a7ad56d2dedd52ed4c64cce8a8
SHA1 0ff08405ba413d6799d783c5d2d7d6f06e56981c
SHA512 ae899facd4eeca8ff39778f9ec5cf815b9c94413c6018f980322a6429132bb3ece5c529d6e7d256e47e7dc36a7186f3210a59eaf71206ea3898e90867a180dec
SSDEEP 12:7+t4QmMHqLWEOVP2yMHdqVcV7p5WUYUW5LfpBKKyBGtbDrNTSFbycKrHBGtb5Rm8:7+t4QvqLEe7sL7yot3BVrHotGGS4
MD5 SHA1 SHA512 SSDEEP

Submit Download

gameApps.db

Path /data/data/com.s.launcher/databases/gameApps.db
Size 188KB
SHA256 d3853dacf69c6954b0655bb3d8d59fb6828fc66f93d2ddce487496fafcf5e47b
MD5 c74b7d0fb29b34ac6faa02f62cbf6e5e
SHA1 7c8adbcb6eb1ec60b47394e940e646a8c02115c7
SHA512 d6b9822698c5bb2cd305c98c76461ed91b595cfcefec2aeb0d73f77366ae65e99075ca1359a70fa3a1327fb72ea6bb7040285e591c5c361ab94af1c3b0d13da3
SSDEEP 3072:WkukaucdjJvyuaY2LFpEuTeqLGJP+fEkmJLjDaqFUjrABnc83StZT8Wc+st7VEnn:i3j5yu/gcuTeqLiD2jrAG83StZIp+stk
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db

Path /data/data/com.s.launcher/databases/launcher.db
Size 20KB
SHA256 87196fac4fa150d3261f8392a8ab35924a7e9213ff4dd8b3799e9cf12d7834b3
MD5 c9f193578ee49fac9410c79bb0f24c1a
SHA1 33c3b95edd08f393e5eda0a30e5e113534bfbc07
SHA512 ad05620a21fea3fcdc44ec1ecf8f5d72a184d99946f7459773eab870ed7c033194140e3de811808950f293280aa3c89c4d60d5b346828d8daa25e1eda6c6d795
SSDEEP 96:7oqM/92gxsgthYA86GYvUNyfSA5UL2UUehPwKAjXeJbO+5v9:O/92YDYkGYcmSuqnU8TXMe
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.s.launcher/databases/launcher.db-journal
Size 8KB
SHA256 1a9a45f73db82e1cd87785d3bf0268552d00d9958384076842afa137014810f6
MD5 f59cd8fbcfe6b309ad3d107b0d06ba78
SHA1 98af76ccc104f00c20b819964a3aecd9422ed2c2
SHA512 4f10240ff3c92a1676dc59d5a4e4f17830526aa83625aeb9e6c88fdd7939247d4e3ca215ea121b92922469b9e80ab7a29fcb97229f327de1c6fa65e47a961e2f
SSDEEP 24:7+t73qLzo2wX6MIcjJrvi+QzumeJdqVX9OnGSk:7Mrq/onqMIert9JdqVNOGSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.s.launcher/databases/launcher.db-journal
Size 8KB
SHA256 1c5b01829786e4be81a617870c0aadb350029df123e41faf63163437a5fc1d19
MD5 1c2c98389fe142474146dd692d261900
SHA1 6065b0c473ddb72d812801549f21ec00d426463c
SHA512 bc73355df982af0410d38fdff7e755a38bcdcff882c42052ca2a695464776fd4fddb093e419c96d1cb1a5d359ad5906b80c1e7ff05a809a31a0dcc291875cf8d
SSDEEP 24:7+th99R6vqLyA5o2wX6MIcjJrvi+QzumeJdqVX9OnGSM:7Mh9yvqeA5onqMIert9JdqVNOGSM
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.s.launcher/databases/launcher.db-journal
Size 8KB
SHA256 a5187983d953792be1dd59e5bdffd2f4a56370c05f749ac9f417dfe5243b25d5
MD5 9daeee7b43411f8adece1e9dc6d350c2
SHA1 5566bd8bf8b615ce9c220d6924a472b88e38f2d0
SHA512 cb16de817d593ff810d498d0434f3071cc8317b2181539dc6b2125a157ac5c49ae9dd78b4d2cf00cfb468d0a6514e061f13e46b1ef4c6b497cc9786c3026b447
SSDEEP 96:71GxsgthYA86GYvUNyfSA5UL2VUe8PwKAjXeJbO+5zYoqM/92gq:7qDYkGYcmSuqSUpTXMur/92j
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.s.launcher/databases/launcher.db-journal
Size 512B
SHA256 9ee486b62a770d76173d564e215528d5f12a7eae5e45201dbe5894bfe25cf82e
MD5 c7f022b98702a6d42b63b3da3ed64733
SHA1 98e13be5f4e7c7b5a64be0bdca66945316b883b6
SHA512 036befa7b526f71ae4ddfff995be6a1af074ea73af007280020d8c4901a2b10d42c1414a240696d641e4de788f221742c7e8956c590d7f54f22e49e2205d392f
MD5 SHA1 SHA512

Submit Download

launcher.db-journal

Path /data/data/com.s.launcher/databases/launcher.db-journal
Size 8KB
SHA256 02b4c63b367eb7d44b252a4d62d7d814e56d807efbeb27ede601eae627931970
MD5 75c2cd355614177229e122f2f269280b
SHA1 417c19c8ecd25138196ab5638374299fef822b8e
SHA512 be80407973179a58f3917d06194f8c9d9e9096738db571920cf9a3daa0af6b5aa073857258873fc428e1e2aa90a497317c91d75c932962f979e663fbbc817044
SSDEEP 12:TM3ii1JPADdHH6zlxzepiAXDdroU6GiWqLiuWdwRmBEyPbO:q/J2CsEedZFqLiuWRGSO
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/data/com.s.launcher/databases/launcher.db-journal
Size 8KB
SHA256 745d8fe8b345e0698a75fbf2953594498ffa245537daa06d1be6d0940b4e138e
MD5 f56bda3817418cc8f43ddf1c655b424e
SHA1 9e133464f5d7172b1c74da947a87c36f24d0327c
SHA512 7b646347fb3334d74ae6fd382063d7dbbde1fe49c3dd133b8c671b015d11ca94889457dd0ad92a83246b6135d5af02322322b32a2f1c5f3c6ca9dddfc4c86b66
SSDEEP 6:7+/l9iPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKqvM/J1:7+tcqLJdTRmBEyPb7s7
MD5 SHA1 SHA512 SSDEEP

Submit Download

sort_favorite.db

Path /data/data/com.s.launcher/databases/sort_favorite.db
Size 24KB
SHA256 ddf536bb3570db102a3a3f95a12190eb4f354820dda35902ed33f8f370e5be18
MD5 1d683895f89388e1c5e76ef79bef82ee
SHA1 92cf523267558ca6e9cf73741defccea10db94ed
SHA512 fed8c1eb26c4cc6864d8f6027db2f7cd125a4488cc5011bcca4f6abbd21fc66d67a4fda7311878226d88a4bfdc82e5989806f625bf2db018161c78ab17679ef4
SSDEEP 12:TLZRZvrm4r+TSFbyeGUpWF4XEJeWTKRmBEyPbD3OwG:TLlm2+87W7EW1GSzG
MD5 SHA1 SHA512 SSDEEP

Submit Download

sort_favorite.db-journal

Path /data/data/com.s.launcher/databases/sort_favorite.db-journal
Size 512B
SHA256 f2d4e0a8d7c6b4505aac209d14e0762a8478e2a3fdd0429959d58a97308a4ad0
MD5 3139469ed3a9b6bcb8992597890ce80c
SHA1 3101cd13fdff3209b48e69c176a1028550ecbef7
SHA512 fa3b11fc20c2d758e4146256522447ce9d4e0e6957c92b38f40bfe9c05ca77acb8302e21d80557a4763ddcf5b0c8f2210e104d95978cb195f0b2f82dbfa6144c
MD5 SHA1 SHA512

Submit Download

sort_favorite.db-journal

Path /data/data/com.s.launcher/databases/sort_favorite.db-journal
Size 8KB
SHA256 c72c1fb71d6f7869051527e0f1c0d6804fca01a653baf7201b8e1ab1bf3a2062
MD5 fc6b82f0d01f61022cd2fdb816dc9da4
SHA1 86e61c89db4402fb1a7ee81d83a2ce36f5e88fc3
SHA512 33f0d99fce0f4231e6b9e787b1cb48063c54b5eea8eebf49a40978696b4f9b3cdd916e8fb08cbf0f64f91172a24fc5609dcc11e9baa55797b5c9e418c036ed42
SSDEEP 6:7+/l9R+n1EAg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKc:7+tAqLiuWdwRmBEyPbz
MD5 SHA1 SHA512 SSDEEP

Submit Download

sort_favorite.db-journal

Path /data/data/com.s.launcher/databases/sort_favorite.db-journal
Size 8KB
SHA256 d14336e695a623acbca365aa44adc0fced83bcf226f6754804ae4b8ba8afc082
MD5 79f3e0dabde794ca4da4a8b9b432219b
SHA1 388313af86af59d62c0805ef24b517d8682056bb
SHA512 1fcb93f0e772ebbb1edb89f22ddd2f5667e74867f67fa71845f1775e762b2e8a3091fc9da605bf1965d365c6bd5bd6850971b304c0fc2d52dd8f96786cd1ef07
SSDEEP 6:7+/l9OGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKvC/Gn:7+to6qLJdTRmBEyPbFG
MD5 SHA1 SHA512 SSDEEP

Submit Download

um_cache_1718475314824.env

Path /data/data/com.s.launcher/files/.um/um_cache_1718475314824.env
Size 1KB
SHA256 43620a262865b904c9b22c4e722d780febf9872705b4fba308aa90c48f54ed78
MD5 8ea2855a0318e4a868c002296452a6fe
SHA1 0689c3874a03af0afe1383e2197d88cd45ba350f
SHA512 40cf199453a166f54e9d2a5e1ee36be7344c5c69a7c70c0e3d080f7ea793ba016eaf67c367b8eca41af26b747376af8dada4ab0a422ca0fc450be7657a9f13bf
MD5 SHA1 SHA512

Submit Download

exchangeIdentity.json

Path /data/data/com.s.launcher/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 dcf393b8694d5b6e1b7c0cfa9a7c611b64cddfb3400900f490c8901b95dedabe
MD5 9e8d77ca9d6424f3a90cba98647ea269
SHA1 65c9c96a59f1469092f4cb932c36722b9cc2eaf4
SHA512 0a03fb99bb1481fb07fe282df05a86cef7efc049d5102140e68235cde6b179d079c1ae67cbfafcc099220dbef8928c7f29ef099c211aca6096f7f7e16d1bdf27
MD5 SHA1 SHA512

Submit Download

exid.dat

Path /data/data/com.s.launcher/files/exid.dat
Size 60B
SHA256 09f89d4e6c2e4a81ca66caa5226bd149c3012ea9c7a54dc26b22e98aac8f6afc
MD5 a159fbaa66d26e46ed9dde6f20f72d28
SHA1 b1712ca68e55e55612a761d9ad48c81955811fec
SHA512 946a757a66e6f44b738d35ff45e79eb96a25e939a41cc681f2b81b78fb63e7ada98989c5559b741d03f48d22567d3b4cd712ec3ea405da4c7294252f075389cc
MD5 SHA1 SHA512

Submit Download

gaClientId

Path /data/data/com.s.launcher/files/gaClientId
Size 16B
SHA256 aa2bb43d1cfcfcd3a0cc5e8c0d79fc6bf0887ce12c3457853cbae503aa8bd5ed
MD5 2bfea108b78e5ab3127481e1bec1ecd3
SHA1 1307d540520a9fd811c1747d9512bdeb509f4bf6
SHA512 59de60e3480032039a7020ec1386e4ad30decb6577f985e6955d75d03f5cf1b1f005bd503b2cb5b3266f7f75a83a05f918bc5b3f30524599f3266112b97e2482
MD5 SHA1 SHA512

Submit Download

launcher.preferences

Path /data/data/com.s.launcher/files/launcher.preferences
Size 15B
SHA256 9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3
MD5 8045cecd3d5a4c893e3a75d47b17121e
SHA1 61f08d6c53ae857cfd4be1bf607a6c80e5e78b23
SHA512 70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099
MD5 SHA1 SHA512

Submit Download

launches.log

Path /data/data/com.s.launcher/files/launches.log
Size 8B
SHA256 577fcad6fcd8592bf8b3b70c5ed4981eb1b2f7b7ac7ae355b930aa302ff85a55
MD5 292142ceef0dbae748c05d35766fa628
SHA1 d5c0f3f8605f1d7b25b716a4e4c582a8b7e1fca1
SHA512 211e1ebd81dac3e721954b8adb1c84157beedb2c180bf9b395b6849675526d1cb5718058b9905bc5806972a68c1c654e5f4641a2db8c78d8d0d4101a94f7b65d
MD5 SHA1 SHA512

Submit Download

umeng_it.cache

Path /data/data/com.s.launcher/files/umeng_it.cache
Size 429B
SHA256 04e71b8d87446f4d20217014a32b9bf197df04efbde67aa335fa9d9162e784e6
MD5 65caf299368980dbade8b383385a1a90
SHA1 593626201e9b686ab4e5a397acc71375aa53940d
SHA512 ed9f851d9f7d2e4b795024272829a15146687e43a14b864fcf49b8c16095228fc8aa73b78f4518db8e3d84b34ad796ddf0c408e4052aba0843cde15169460602
MD5 SHA1 SHA512

Submit Download

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 ac717524412533019a89b49d58458ad33bfc56e14774968914018830e4df2de3
MD5 236160962f08eda68110a9e9f2f91180
SHA1 7cf495c242dada038269d85af4d892c798f0058a
SHA512 e2527d9e48b73ec79f58ac5b3423b7439da845c905f5c5d25979c0b281363e951bae0cc94677e9b16cafc18443184685ad2fce3e6b86a4e27994cbec7f490717
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 c09b7ae7095240405f6708413a5c4c19bf46a45a631c5d258f26c7319d3396e4
MD5 861f697d5f772f8de8d4e42afbb0f4f5
SHA1 65e635de71dbed066062187f87626d52ac08f3a2
SHA512 092c0334622136861f55b23666212e86bf797ea1da706ac53238c4342e06b2151545f653a3ce358f1620c94b7f766a05dcc7a7b4df7420995adc50826858b8d2
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 408B
SHA256 9c1adb7cad55a73e25e3b8215293c3e2013b785d03b55d2d8151761500f37a86
MD5 3f6f65dbd8b872fc7688c55e4261579d
SHA1 a26ff28cbae422b501a09eba04da9277a685f4b7
SHA512 2291995d8b2e0f1b47a7a57b5bba9b036c0f855d870635904c587d26bb04e8786a6707b3d3d7f17ef4d860ae0b74dedb3195cc640e59770c891ac4db94148988
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads