06cb4152d31568bf64880fd3c8d3febf1ecc0ce7c1170ee470d55da94908c471

Analysis

max time kernel
54s
max time network
160s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
17/06/2024, 18:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b982fc062476e088b7a27bdd3ac52364_JaffaCakes118.apk
Size 1.7MB
Sample240617-xmlv6sthqp
SHA256 06cb4152d31568bf64880fd3c8d3febf1ecc0ce7c1170ee470d55da94908c471
MD5 b982fc062476e088b7a27bdd3ac52364
SHA1 f1ed60f7d44787581fdac5c25bc0e89bbff41be5
SHA512 9c6e1c5233073da0a1ee5c036facc370955f7447670241e858eeb2c5e123a397f058b1237ebeb954796e2802cc3ef21906db5f18db3aa91c91a1e1cb6a8bd697
SSDEEP 24576:CJa4AEK+CDjztou+9Bil9e0j5Co9aUF5sXsXYeghEJUiIX4mwRXMWp4pW1dz8PUh:CtyDU9BilzAPi5PghEJ2ImwRXt5bwPs
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.ynf.rulvvt/files/dai/jWBsAMo.jar	4322	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ynf.rulvvt/files/dai/jWBsAMo.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.ynf.rulvvt/files/dai/oat/x86/jWBsAMo.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.ynf.rulvvt/files/dai/jWBsAMo.jar	4261	com.ynf.rulvvt
/data/user/0/com.ynf.rulvvt/files/Plugin2.apk	4528	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ynf.rulvvt/files/Plugin2.apk --output-vdex-fd=113 --oat-fd=115 --oat-location=/data/user/0/com.ynf.rulvvt/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.ynf.rulvvt/files/Plugin2.apk	4261	com.ynf.rulvvt
/data/user/0/com.ynf.rulvvt/app_dex/utopay.jar	4574	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ynf.rulvvt/app_dex/utopay.jar --output-vdex-fd=122 --oat-fd=123 --oat-location=/data/user/0/com.ynf.rulvvt/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.ynf.rulvvt/app_dex/utopay.jar	4261	com.ynf.rulvvt

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.ynf.rulvvt

Reads the content of the SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/	com.ynf.rulvvt

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.ynf.rulvvt

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ynf.rulvvt

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.ynf.rulvvt

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.ynf.rulvvt

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.ynf.rulvvt

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ynf.rulvvt

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ynf.rulvvt

com.ynf.rulvvt
1⤵
- Loads dropped Dex/Jar
- Reads the content of SMS inbox messages.
- Reads the content of the SMS messages.
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4261
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ynf.rulvvt/files/dai/jWBsAMo.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/com.ynf.rulvvt/files/dai/oat/x86/jWBsAMo.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4322
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ynf.rulvvt/files/Plugin2.apk --output-vdex-fd=113 --oat-fd=115 --oat-location=/data/user/0/com.ynf.rulvvt/files/oat/x86/Plugin2.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4528
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ynf.rulvvt/app_dex/utopay.jar --output-vdex-fd=122 --oat-fd=123 --oat-location=/data/user/0/com.ynf.rulvvt/app_dex/oat/x86/utopay.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4574

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

utopay.jar

Path /data/data/com.ynf.rulvvt/app_dex/utopay.jar
Size 30KB
SHA256 b825cde84e3dddfc147c71265d2259c422d51a7e56d1dcdba1321e3119b1df07
MD5 eb6089c1acfa9f12535e533aebee845e
SHA1 165e39ee07dcd9ed00fc2dc1ff466bc1d6b813c9
SHA512 5b1bc26bcbcf05fc331865fb4dd572b673a52650d68ab4d9b028ea15219e0d93c1ec17996953436801913388d78e25c67ea33aa93544d65e96a799eb06cc70f5
SSDEEP 768:89WLk9xMPR7PIG0CLUhgdX3IsZEdTkEDF7XG6LA8QCnpAJgm:8QL+M5mCYKR3Ew6LvQ+pAJgm
MD5 SHA1 SHA512 SSDEEP

Submit Download

740410100062013

Path /data/data/com.ynf.rulvvt/databases/740410100062013
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

740410100062013-journal

Path /data/data/com.ynf.rulvvt/databases/740410100062013-journal
Size 512B
SHA256 db21ed16a24aa81e09c4b46a70c9af7428c495d5729672045083e118c065bcaf
MD5 126301cc8230923821247d3152db2c80
SHA1 9c2b738f12a8ec0065c980886957ff2151475587
SHA512 dc081338d6d55122e9fcac61104da3ac1c68509cba5902a602c92ab46668293652e504a5e2c4fd5fa6a0b3cc23c4de780083007c7b4637dc9e0dc9eb9d59668e
MD5 SHA1 SHA512

Submit Download

740410100062013-shm

Path /data/data/com.ynf.rulvvt/databases/740410100062013-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

740410100062013-wal

Path /data/data/com.ynf.rulvvt/databases/740410100062013-wal
Size 140KB
SHA256 ba09416cdd6f37a016005e0fb0f589f64714f3b06cb5fc65361760ff7879a6ad
MD5 664de15356ec5c8315e96b2bd2a33395
SHA1 3aca9931537344801f29c2ee1fe3c173ca41b48d
SHA512 8728443c76e4c1af2c9973ed77eabe4b27b1b86c912d550cbea3a963bbfe3959a6c2b409d36d2da6e1b6ca7875dac160c17f8c1123b352b883f00995b25b0d01
SSDEEP 192:nSba9qa8t91hmOeW18OttyPc+vzCUut8MP8Rt:caYvt91h1rBUuaiY
MD5 SHA1 SHA512 SSDEEP

Submit Download

wochi_v4.db-journal

Path /data/data/com.ynf.rulvvt/databases/wochi_v4.db-journal
Size 512B
SHA256 aab50be19f073f50bcd4e220f8aae880e246cb24b67499f72f8129b6ffdb386b
MD5 258a8d47ccf6e75b4c4da14d6b7eec6d
SHA1 f71a35b246b7b31ceadd8dd44e4841e2b35c0c59
SHA512 ae974a7d5b30447949bb3c88886c0d199ce4ee50a0f9db6897032b8d345ebc76b39947c026bd1cb93a2c15c21cf8b4ab93e3d3cee1b07d12d3a75bcf818ae199
MD5 SHA1 SHA512

Submit Download

wochi_v4.db-shm

Path /data/data/com.ynf.rulvvt/databases/wochi_v4.db-shm
Size 28KB
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

wochi_v4.db-wal

Path /data/data/com.ynf.rulvvt/databases/wochi_v4.db-wal
Size 20KB
SHA256 132ece09ca889727cfeafa6b169881b5ec5a3040b9e4783a0889b8a846d547fb
MD5 63d1f7d05b4e08674872b982b6763ddf
SHA1 b51669be7f244b5bceab14f31ca41df6038fbacd
SHA512 7a1c717c22ee773316bff4a88a57aafe6c8a62990934f29d1187f071deeee377dd5093b1603dd8f07899d67205c0d119652c9425ea6321bf8e078384264e573c
SSDEEP 12:KoL1R8zdTRmBEyPbP/wersI17DuOwCld6LcTzqDRmBEyPbV:KoL1R8zyGSP/frf1AE6ATzDGSV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Plugin2.apk

Path /data/data/com.ynf.rulvvt/files/Plugin2.apk
Size 99KB
SHA256 de7bf40574754a5144fa5cf3bc5e97f7adc7f5abebb18c41e8f0631917db4c0c
MD5 3d216f8fddb9705a6720a285475837f1
SHA1 f053d23b284bfe2faf6e76d353ff052471e2de2c
SHA512 38be39da8f96abc87109cfd57b2d63ddfa72971f023024a5b4ce1f97cd905a96a94e19eea19ae9b745f28d02c6689a4473627ce57ec85dce2018a77e699620cb
SSDEEP 3072:O/hr91fY/9tdWXLqQRClwYJ4sAAq4/IZn8NxQNRmDJS:2B9NMDGLqofsAAbNI8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

jWBsAMo.jar

Path /data/data/com.ynf.rulvvt/files/dai/jWBsAMo.jar
Size 774KB
SHA256 dba084e77db37a013162f555f7001286ef3d142ac0fdf85d77c44429542828bf
MD5 970bbfd3c1511b595f49901bbb52005e
SHA1 7b0738e87500a339ebd55d0ee989816097292ad0
SHA512 be4f0a6768f4595bfca9e0dd6740fca6aae914eced10bdfc99e5f417279cc8dfcf10dff93deac4834331fa131d7d2a316445080cfbb440b9d4008a02bd5e4a32
SSDEEP 24576:U0mP0IXVJgdStxYuwEs2oDG7BONkMhIKFjTs3QYaA:UnP0IFJMyxgn2o48BhIejIQrA
MD5 SHA1 SHA512 SSDEEP

Submit Download

log.dat

Path /data/data/com.ynf.rulvvt/files/log.dat
Size 221B
SHA256 77fc3599be409f7e73e643de843c0ebcfa20662964c498fc59e245c7f5e003a2
MD5 ff9229f8e7c92d44d48e25206d43b021
SHA1 be3d75050c16c5b7484652ba292fdd6510f205d3
SHA512 be7b3aa8d670a2873c6b7bfd4ca93121fd2450723cbbc36d9d06d152fafa3ce90451f0a60ab56bc96bccb81cf5aae0167b404073db14dc17b9513ac73d455c58
MD5 SHA1 SHA512

Submit Download

yl_plugin.apk

Path /data/data/com.ynf.rulvvt/files/yl_plugin.apk
Size 58KB
SHA256 05eb3e1ca331b8c6a1f60f92abb2bddbac54a7b2c229ac07bf26c756297fe72a
MD5 5a4c666b43ee7f2b6995aaf3527e4a4d
SHA1 b205bcb022797f3b16635db139c7524c0c388adc
SHA512 c84fceddbf9928110fc3b85e0989b9cedd06383007ff99dea5a25096d8f892ab52d30ed9b52b72211449041f1274ead85bb42929ec269b58b6b0e616a8545e17
SSDEEP 1536:D0L/5wazYVM3W7ymXFSRJcL7KIBOWNMunou3faONts:D0z5vcKG7BXsRJcL7gW+ul3a
MD5 SHA1 SHA512 SSDEEP

Submit Download

utopay.jar

Path /data/user/0/com.ynf.rulvvt/app_dex/utopay.jar
Size 67KB
SHA256 83c996c0d067b5f516897480f427dfffdcfb49ab7654dac9b805376bbd49e1db
MD5 3b8bb9a8679ac8c24e8d179fc5bae999
SHA1 e6ea7a1095524087f481ba04321c4cb6fd2426f3
SHA512 abf1cbed7a8cf4a29d7a32a83f15aa0a6c9e2be8484c2dd8d9bf16a76e337b17b9c05efa0773598806b3d3da4fe3a9217b583abb9aaf5e3dc054dc77b10cae63
SSDEEP 1536:ycmJZ5F4TYHs8RFDNnB7u5EPNcwYNLg70:sJZzC+BnB7u5EVcvyY
MD5 SHA1 SHA512 SSDEEP

Download

utopay.jar

Path /data/user/0/com.ynf.rulvvt/app_dex/utopay.jar
Size 67KB
SHA256 6286a800597b845785eb664710253ebd20771737dddd5b80067e0e9d37c804b2
MD5 5220524411d0bacd600da60814d1ee9f
SHA1 fef7210ff44e757328bc0ff7aae7bb2191cbf634
SHA512 b2d8af5019c176d682634747d83320e609fb6122ef850f4069a0c78c2415d242087099cf60ecb03039a9ab71902a4e3b22e9cf144de89e506991fb93280f6a5f
SSDEEP 1536:ycmJZ5xSSTYJQHUO19/7U+rnB7u5EPNcwYNLg70:sJZLSEfH31hnB7u5EVcvyY
MD5 SHA1 SHA512 SSDEEP

Download

Plugin2.apk

Path /data/user/0/com.ynf.rulvvt/files/Plugin2.apk
Size 201KB
SHA256 1d83642ede6b16a071676e895f547d056543b5b4622bbc9b9b4ab45e47bf9ba0
MD5 ef019d14367b7346b1ae2419e9d445c8
SHA1 23d81fcf81f3a9f2a991ba4d0d135fe2a28aa188
SHA512 ea582f21c6054c37c679c798e93116c9c18c9544c0feb78fb949bed7b2cd3122c8d7bb8ecef329829c2531764abeb6200f0af49ede97c3b0b7448bdb65a34a60
SSDEEP 3072:1kVF+ursMg5xMFLchcmdbaNiikyqW+q7JDcN6W:1kVVrsMg5x6AhndcfxaV
MD5 SHA1 SHA512 SSDEEP

Download

Plugin2.apk

Path /data/user/0/com.ynf.rulvvt/files/Plugin2.apk
Size 201KB
SHA256 2c61a25f1ad5783bf82eea9faa2536cac4788ed3147bc1864d9ef17ea01be6a7
MD5 2a425e0fae74f20a2c475da937a619a2
SHA1 4d701c7e6d828aa96ba8a493720e7282c49ec741
SHA512 44c8d2a837b606de99055badbd4b5e708424ca9809b1583d13aefadc4d4af974658dc3a3f179fc3047eef7167151c638ff66dd6c8d38121b6ecdfb464d2a5a60
SSDEEP 3072:1kVF+urNfpK7fagHwanMuBwQS/EdaHgqW+q7JDcN6W:1kVVrNfQ7fHwiBgm3xaV
MD5 SHA1 SHA512 SSDEEP

Download

jWBsAMo.jar

Path /data/user/0/com.ynf.rulvvt/files/dai/jWBsAMo.jar
Size 1.8MB
SHA256 6374928e1d6d1e953de613fc39ed8b0633b9709663a621a3bfab15a52739782e
MD5 826183baf47eb9637c154d45ac7bcf23
SHA1 036e53f6930e1da2adf7b58dde9344773cf130ed
SHA512 93a45d51a6e0ce2e5a25b3c76a5107923f840b4aaba64a9b624882e1f51ba6c1e5e96bf180cf7508df588ec744f3ba6a89ce8386379405fead1a91393eef2c25
SSDEEP 24576:/j6R+e4zIhz1nUUJKABAUXxB1jzZHsfLWqrA2X4+RwlnOHC:WV4zIF1nnVxB1jzZ8TrA2rRwlngC
MD5 SHA1 SHA512 SSDEEP

Download

jWBsAMo.jar

Path /data/user/0/com.ynf.rulvvt/files/dai/jWBsAMo.jar
Size 1.8MB
SHA256 feb16ea6a9c7af998d389b1702d961deda982a7b1866efb541113a45669a009d
MD5 8e424d81225e58e3505c4b24a4336517
SHA1 a6f41220d710c4b233631ac190bd15fd535e82fa
SHA512 106cb3f8376ddd83fb88e66e06b96f843dd6ae15c8c6eaba642229161395d424c15a36003de243451fd0f64a022152bb70107fc05f72564d8e1cd2b6b434ee2e
SSDEEP 24576:/j6R+e4zIhz1nUUJKABAcngLlQLRdfyWm0zrA2X4+RwlnOHC:WV4zIF1nndgLlQL9VzrA2rRwlngC
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads