779bf902c097803471d7181df4fc89e901011ff93d264bb219c9ae8be12f1135

Resubmissions

16/07/2024, 11:28

240716-nlhbxszgkj 8

16/07/2024, 11:22

16/07/2024, 11:17

16/07/2024, 11:02

16/07/2024, 11:01

16/07/2024, 10:53

Analysis

max time kernel
194s
max time network
1227s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
16/07/2024, 11:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

uber-4-534-10000.apk
Size

158.3MB
MD5

38d64104194614fabbe4cdae4965f7df
SHA1

07eb655bbc67083b66f1001efee2e28e78ff7bc4
SHA256

779bf902c097803471d7181df4fc89e901011ff93d264bb219c9ae8be12f1135
SHA512

206c9b533d1723b74d10ccb05ad35d00046883ab5c8c733d0746383caf766ba7219e1e088730aa16fd82abb9b7414d1cdf6da0ea8397d3cf42f3941da97de054
SSDEEP

3145728:QfOKs+j3QkFFHC398KM1QugL7hoCjQ/UitWIsvKm:HKsO43+V1EnCsym

Score

8^/10

discovery evasion execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.ubercab
/system/xbin/su	com.ubercab

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.ubercab

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.ubercab

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ubercab

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.ubercab

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ubercab

com.ubercab
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks memory information
PID:4759

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ubercab/app_uistate/mapping_rules

Filesize
49KB

MD5
975714aa7cf485ce2646b9e20408d28a

SHA1
7624f6e5fb50144e10e76a27772663424186ffc7

SHA256
ab1b876256661b7eba734928b3ac57bc080f0df240a2c4b5eb36fea76d99959c

SHA512
a3c3630e9e5554207fd56eba48754dcfe43fc1669e826df038e42e7445423430b709fa3ed42568972e5e0e850e9eecee5eb52983b0b418a94bf80121a4e3a8b4

Download Submit
/data/data/com.ubercab/cache/journal.tmp

Filesize
36B

MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/data/com.ubercab/cache/simplestore/139c7906-5d88-11ee-8c99-0242ac120002/presidio-analytics-counter.new

Filesize
8B

MD5
60f5ce0e590413be15b40eb3ec8c6ed8

SHA1
c70e1d1c4c49023cbc025ba559eb07e21ed3258c

SHA256
a00d17f0226a96302f1f7481b416d70bf42f728922ad6298cbfddfd0c0e959da

SHA512
6490aa70e24ec0f1d412fdb11a103940b717cf087d7e0e7435c22bbcf1033ec2e88ecd2e4c9b3e12b3ea80c060f678c86af916c3939da9b6c32f88ff610023d3

Download Submit
/data/data/com.ubercab/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
d7285546384c3fa00068f53b35668bc7

SHA1
dec026e1e8832f1765eb8f563538b5ba5953ad4f

SHA256
68dd570f3c4cbbdf846cefa321b69312ede055bcf3642f5095e760242e3aefb8

SHA512
a0dc5b9f4b79ca4348ac54e7f420a5cc7ab579962168a159219842abdf34eb9ef21aefb5c1719e3ad2aa195978c7b804b0680c97e448421be044e412d217cf7f

Download Submit
/data/data/com.ubercab/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
454d2b0eb5afa828404e2d65f42e5c59

SHA1
dde26f34f51d48d69c50852ae413d9f15b22127e

SHA256
ef483f9bb19ccc2010c2b248770e3a1b1f7e994583f0e91be701967d06e22c1a

SHA512
b4d5b7415788fd9697fde34bc6dde876c5de9ee80b211967abb7a04b6069459f05eef974ff918b8f2514fefb42180d1fc0085de9f897dbe58662595c1e50577c

Download Submit
/data/data/com.ubercab/databases/com.google.android.datatransport.events-journal

Filesize
24KB

MD5
e56ef37eef06b2b0aad18dd305c373d6

SHA1
2833154635ac1ac2910c843ea3cb32ff70fe0e66

SHA256
ddea0a14ea04de5bf5db2390d635ac0b9c2be140deaf4688bb6b06df16858d36

SHA512
367b51b226f8c17999eaa446e5280ed508f746c83bd74e602b6415cbc9df5a9f22bdc27647a0a9b8db4cfb964461e7f30f35413ebf5048bb2d48aee1ab1a1eb6

Download Submit
/data/data/com.ubercab/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
dbb8a6b3be413747a5a286120e55aa9f

SHA1
191ec3474eef7ca01b3230d7d19752cf7e60ff86

SHA256
67e9211923d8a99c62502db29466538fbee1c2d110638ccddc221ff51f0e06c2

SHA512
25c24954b2c879791ddf05d46c38c64cdeb44c1307bc39dade1d6b2655141872ee0c7aea550583ed1e702cb1fc25ca3e4f04ab57a48dc7cf26611cacb7be2950

Download Submit
/data/data/com.ubercab/databases/com.google.android.datatransport.events-journal

Filesize
24KB

MD5
6b4d2d8cae45e324b0d012b6c0a050af

SHA1
ebd060e37c9d118e529010fd0f834053c8866d7d

SHA256
708da4ea53033d5c0f57e7b78ad93cf085bbab509be88d1133d2b1b7180a75ff

SHA512
1ec2d2901d3d728669cb034da7250f970cfc158514bcb77e0a68c48bd11b93eae3139fed01aca12402be9d354f15c6e08ad258dd149cf02e7969735ab2fe330e

Download Submit
/data/data/com.ubercab/databases/com.google.android.datatransport.events-journal

Filesize
20KB

MD5
6b97ed69f30744f37ba2dda2760179eb

SHA1
b3aedfd50f9e3d1622694f9efaa76d1fbc074c85

SHA256
10d6f95b5ec5556ef28cfabd72fe4c762d2d213ab6e15b3ba5fe76784b9513ce

SHA512
b9355dfee6329fe99ab12761072d35c2b9b8e0bda8220a865aa17f7a85e8d45180b04ea50826564193dc2cef835ddf13d5292ea734f151d06ab5d061b7e14cf6

Download Submit
/data/data/com.ubercab/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
dde55408c71049f71ac7103a7b3828ac

SHA1
98bd520db033464e2f4e5c3568d7378d760d2249

SHA256
4396f70155029477cc0a746a37bf2a1b2d74a252c6c8976fdd37614a421eebcc

SHA512
b197cbc28495c5aad1f303413d5943a4a908b57d1af80adbb5388d58e160d5715d90c381571065a85f109d36e0be9995476e322db546c26a364aa93eae6f1cab

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d74b3db7f9601d47589b222f55fe6300

SHA1
d5593656c3c11a212a621926a89ec904ec01d05a

SHA256
5e30d97af28ad3adfc099e449178b59eb651f6723019dd8169cd673e9b41f1fe

SHA512
aaebda585b89b6698160ef31342992ab45f10d61c1b19b78b4a0d3f2af9c00d815ea75ca15e15f97b4d5f4d518c265adbc057721ca508ac905eacfdff9e40879

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db

Filesize
16KB

MD5
278ed12a886b010a947c82981ef3d8f5

SHA1
df87030304f3ade9fbab12acad4190a1d401cc33

SHA256
4939405d35f6165b3842f3dfcd9dedd21a5d3465f370ddc539c5459ae77f1b11

SHA512
0684f2eddc97c89a4bde0892385b7648d3967a494a83fb19d2df06b5ccc27480fec5a36c0fc1827db45e06afee21c4b464c65b57696661f01c08dfc1c7c4d343

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d1581a58f5bc62fbe47b27bb29c00a3c

SHA1
65e416e6a1a8c71867abb312e73a44e1e09a4d97

SHA256
12f53f0382cfea3710b8cd6783d0c542da54c625c29887c0f9fac4efbe4574b3

SHA512
e34f8a72fe985c43bea1087146f9d9355a29047c602ffd35e6dad5168337bff6b63f58d0bb5688f52c23caab9a92f3df7fc807da657315234a209d4f9a17b8bd

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db

Filesize
16KB

MD5
be3c0ec1c4b1b322253f22857bfb3d30

SHA1
209d8f9f067ecef3f4b8088cd0d9df8fdca95f34

SHA256
db176d08759c4f0f2af5ccb88b541fc565ccce14faff995de3c196c64f9b652b

SHA512
cb80d49b3ba8c1d064800f3c922daf96b11af6d3a49a1b424ca4b7202638d9fde3a077adc5cac7d262b2a63b9a7299cd917cb7c555c7461e247c24019e6c8d06

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adfc35aadcef2a75a70e406748d0094b

SHA1
a753c7c32b1119373fb119980867b6d7c1ace09e

SHA256
773a4f5800ac45deb05310121ffbc57ff8096ef911ba77cf2587c6f4e125c01f

SHA512
46854921630a858541520b2b0f922cd2af1649430085834fe19c24f6f3a1274f41f5f1d656414557ee408bfc536bdcacdfad79eed9c732c8987f5a70baa49c5c

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
0a940f9f9cfff80eab720d7ad179520d

SHA1
145d6371cca4d28cf990e3d611ee8b8ed1be78ed

SHA256
4016bc4955c3e6c5ac32a1c9d3dd566a9921f8d8be8a48cf1cf02c1aba169dab

SHA512
fb153a90967fa1daa7e94d89025e1d4d431cb84e57ae5a67d80139b05833a26606b3a4634eec34332982c1963cdfb262913deae074546916ed4215d752ade659

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
90181f3ce905b2da46c0cab8b1eac47b

SHA1
fc9e5a512a5029f2d028e5cc9f115c99a1b77bdd

SHA256
77090f41b93e04d4aa4b7aff9daf13a21dc52677def49d26fa78679473375b4a

SHA512
6860d4fe4672746a67b304322a41049280a6f56fffc4fe323fe36ae4be27b9dc75d99c6517966604bfe8f6ecfb36c293cd336d242157e5850baedf3662737668

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
d75a5703d45ee770cfb36e33f74dbd51

SHA1
895a8b0ca70855a7c9c156bb411fa910b1fd6d09

SHA256
46f9bedc510a7937ec6874c909373eeef1757cd123ca673d45074320b47f5d8d

SHA512
67e9d9fcabe4f6c0387e21f3c994ba073011a8f98e3818fa39288f61caa1a8d26c3104bbac50bc5f5839259b15f28510146c15dbe4aee3cc32b7daed1094c3ae

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c32bd62946f3ad206604668cad41b562

SHA1
0eb5c30df099813deaf3702e03ea758cbf06071a

SHA256
d2a21f33c8e91e371bd7b74c7e640782506608a3cb012d3c7aa99dc6109268a6

SHA512
51b092e389230bb4b726e16e83263ccaac23f4235bc16eedff9296074d47d14975b0fa59b6c22c6728654307af244b99d4670edfc99a1a288f03b0cf719f28ee

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5aee46a13eecff54c3895b6af7a2f74a

SHA1
536400e20da8942be42cd82f367fc84183d8aaf3

SHA256
8cfd24e7b4fbac96c79f9390b85d3865304ca12557bf54adf1cefef70cc48c08

SHA512
667d9dc349bf0a5491531354a8b4b5553264feefdd7115f7d74108dd1f906fe9dc01e21c2f13ff49be1133e3bedacf0ff9e39f2e01aeee53ef6c8b7d3c1f3532

Download Submit
/data/data/com.ubercab/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b8c6ea905fc83014035904e39a6bf79a

SHA1
53852d3877a48d2c84b52d7e7350fbd8f4789c44

SHA256
fc12de6d861f28b897806705b36e960402380bd3ad0519584ccafae9ea09e0fc

SHA512
c3a4aab978dedb9bf81761d8233c4e7ce04335b4634a63f909115f210961904dd76a883d0ecea199957beb6e87c33870f830ccd00db13943560cbaa929de93a4

Download Submit
/data/data/com.ubercab/databases/ur_message.db

Filesize
56KB

MD5
2baa560fda12a80651bc8f721a386574

SHA1
738a849e8a7f7cd7f486db3cfe4c3545c98054a5

SHA256
aa1ede875ad4a340ed32cfbc46d0965654ed4aedba4dbe4ef1bb59fb3b2d8045

SHA512
73aee7ce7ec05aa2a2d948acfc70c92a4febe39fe4e32114b36192977cb0d9a0edba3a809bb543b38bdf0a446d1dadbc7a6e9c4fe7f2959443a49464249201bc

Download Submit
/data/data/com.ubercab/databases/ur_message.db-journal

Filesize
512B

MD5
4e9683f44761de6e0126177f664ecd8c

SHA1
e74cbe601cf9ae424a2440d1df36ca2015a8b23b

SHA256
2c52c01cc8f176fe8957e3039868d211c42ba71d51ed524618c02d40c7cea50b

SHA512
3549ec76a31c58ef634c365441f75a04f0807f692a671e9be0da6e6bc6aeeeb97402b0cbd304f1d119e2d4a7bfc87e2d8f57c9edad051221b178fb3e472c148f

Download Submit
/data/data/com.ubercab/databases/ur_message.db-journal

Filesize
8KB

MD5
a898c292f42cfc7c778675fc3796d1d2

SHA1
a93ffc3a671f8aa12c6cfacfa296127b9a581540

SHA256
12d9994ce645d0eb405d4dd0c79c8ba88389f611c8295234cfcd2d152aab9c5f

SHA512
76014d3f2ca7431873cd637c2efb9122773efb3f2c80b9b4dbc9836393d13278a3f9ef2c19419f8bb2feb7299f0f3da565a633333cfcdbdb7aa669659c184c91

Download Submit
/data/data/com.ubercab/databases/ur_message.db-journal

Filesize
8KB

MD5
f797ce1ce9e8a8a8d023e930e85a64ea

SHA1
4eead0acb73b0748e66e2f36950eb9009f87f751

SHA256
edfcce4c6c829ff9b63440806c156d4195eb3b8e17c3bf75284303cf27bc8d4a

SHA512
b69c7e0439206c8930884498837a91d8b3e86ab00b0fdd7cbb47d71b3bd22f2accf5092525fc549de6fea32fd471e599f70a1ce973a904a15394e95a55d4fdb2

Download Submit
/data/data/com.ubercab/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.json

Filesize
707B

MD5
e71fb0de6a852a196f932b6857f7427b

SHA1
9abd4734e42fe55681a3b0aab814e876ce183bd7

SHA256
b6e54aec2360a51697c7064ac0f95f77ed51735d1a6b2af4bca1cb359868b316

SHA512
40da77601665ace93fb32c9cc4d5fc0aaaf84199466aaef31de4d02279247770c15122bd9f87bc08b43e50b610767ccb03bfc5cfe6671247aab6d2bab69773e5

Download Submit
/data/data/com.ubercab/files/.com.google.firebase.crashlytics.files.v1/open-sessions/669659EF00A300011297DBBDD24826B1/event0000000000

Filesize
8KB

MD5
eb72786bbb96808fb0558cd1e13b7f6e

SHA1
3a70d165ed49ab5bc6647331f715638072037191

SHA256
37c87a45071b6917e07490b14704811d31144c064761b8f54bec42ed6ea48d73

SHA512
6cfc7e7f1369fd7769094e96a20823fe68b2ba650883837afc50628b0992c6be75e7da1e3060c98750c4bdf2cddad37d89e6245f91fc8e4140062141fb6420a3

Download Submit
/data/data/com.ubercab/files/.com.google.firebase.crashlytics.files.v1/open-sessions/669659EF00A300011297DBBDD24826B1/event0000000001

Filesize
26KB

MD5
ecf52976548b6c283144908350cc9b8e

SHA1
62b50a46ceefe1389096cc97a492e99d1937b47e

SHA256
7b967a50dff8deef837d4b2c27eb3c19b2de9489425dc21dc43d09dc783872ca

SHA512
b54beadb6aa2522116d7f2c6b0b949110b33e0493c9c8540fb04704d14502c8d09b0abfcb450cbdf2071c624d0b28d8f09275e80c366b396de86826ec9440891

Download Submit
/data/data/com.ubercab/files/.com.google.firebase.crashlytics.files.v1/open-sessions/669659EF00A300011297DBBDD24826B1/report

Filesize
748B

MD5
15907501289e9de0c0117326e0ba4a15

SHA1
66e4a07b74ab161a530d3f40ac80cbe57bb936f0

SHA256
7fac1f4e41960ea39920da9869a522e264dbdfa015a4cca99471cc575735e743

SHA512
c121b022d60863ed25586e6042424d7f9fb2ccec8f2bb77ad03b237557abb523a1e92c861205bc5843de8e9c28978c7b1fc5a6f4b809a82c0248d6564c86850f

Download Submit
/data/data/com.ubercab/files/.com.google.firebase.crashlytics.files.v1/open-sessions/669659EF00A300011297DBBDD24826B1/userlog

Filesize
18KB

MD5
cbd049fc2ef91ec0f3db5eb47320d348

SHA1
2e1a292c2bc720ce849c35527d76f9fe1b998c16

SHA256
1da2d71e4d38b4ecb28d0698b4af5eb182fd21cd35e50ece41e41c94957dadea

SHA512
2f05a644a3b03422f1e87a6268bd8eb1b1280baa44cf2ed5798a73ec2618e5759bc0595b1fa2b38e494a77648cc80a50a4c36465238478b7bb8bea3b1d170094

Download Submit
/data/data/com.ubercab/files/.com.google.firebase.crashlytics.files.v1/open-sessions/669659EF00A300011297DBBDD24826B1/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.ubercab/files/PersistedInstallation3178364524613650709tmp

Filesize
90B

MD5
568c510224abe7925f4da7c6a3c9d333

SHA1
0d2776910bac80fd46d992eda6c5930cca8b5541

SHA256
87fede2208c1c72bd4457a7892d425561f8e20fc1d5e06f08cf841f5676f9026

SHA512
26ef066814f90b83329351588b5751fa0ec4fec10848127edc7968ed3bcf4af87442ae25f7114ce5093fb6c3a797125d88d8caa9f137983e051297f41c278463

Download Submit
/data/data/com.ubercab/files/PersistedInstallation5406909832002103956tmp

Filesize
556B

MD5
2f0e71c7f17b08c1e86b51f10455deab

SHA1
fd2332fd40bfa6a312d0bf65dcf8ebc120543416

SHA256
01a561567f9553ac0e5d6ff8f696502704a4cd3479a7882cd042286e0c84d379

SHA512
ca642e18ed6403e966ba54ac99467dc5c095e26ff1b94315a717c8bbe5f1b2e557ae293b3a3fc39ca3b699abda4e8ccd681b51253d1de8bc3caaabdfd74e152a

Download Submit
/data/data/com.ubercab/files/advanced_crash_recovery/191995.recovery

Filesize
70B

MD5
e9ca68881d26a8c4669d97f5148d3985

SHA1
53fd381271ae5083d1983f0b3d5d342a01353cb3

SHA256
73a0947e5f8cf6798aa12d87b14b4a320cdaac1f31dad02df4f54d2c0f475f59

SHA512
6b99443dd21b5bcbc60feb85604ed13de436051a3e2a722ba5426580892793ff6f3a93962f7b94e9183a3c9eab93555a3ef9ab15c4f8030ef0511971685ea5fc

Download Submit
/data/data/com.ubercab/files/base-key-value-store/filebasekeyvaluestore-collection_INT_HASH_MAP_FILE_NAME

Filesize
58B

MD5
910666dbc4a16d6a8199998f6c9f68af

SHA1
096f7bf9283ddb69f8d256ab5fadbfd9fce487f8

SHA256
4309dd9e221e31bba8f114bee95c06a863e2c284c50f1e87175e6dc97be0758b

SHA512
350fe65d914962bf973bdb5a3c26198bcca0dd4d5c624f66dc12de59b390678eb4e23e1dbe7bacf92a839d43caf05abecef1cb8173103436c4a824d78256df8c

Download Submit
/data/data/com.ubercab/files/base-key-value-store/keyvaluestore-location-cache_CACHED_UBER_LOCATION

Filesize
368B

MD5
c2e004ad0e860cc11dd914def2d346bb

SHA1
266c06e9e3785edd2e690a24b3c19e7ee33ab6c9

SHA256
4ffa64dc7675c12f3a8842b71b79910d6d7e334d29fb25595a7e31a1f824187b

SHA512
13ef361c76dc573c720d7bcf7cf712df646b510637f8cda132bba1182c38a1f91299ce8138d32e618fdd91502aef87736c963985121d6ac26fec87fd1193ffd9

Download Submit
/data/data/com.ubercab/files/base-key-value-store/keyvaluestore-location-cache_CACHED_UBER_LOCATION

Filesize
368B

MD5
5df840e18a892e149ff9aefa4e8747c4

SHA1
f0ec2f72bb22d8aac1fe0fb072835bf36472101f

SHA256
056051064d0251e3ba6e277184def6d68312bf3a6895fb4a5c62b067a4a66db7

SHA512
0c880f309b6f5ea54b6976eae22a8457d6917a032581761ca44de16bdd8fc9be4e469a0b51cf29bd6b1743c430280b45c51e8919da9c416adfa20941d7cce5bc

Download Submit
/data/data/com.ubercab/files/base-key-value-store/keyvaluestore-location-cache_CACHED_UBER_LOCATION

Filesize
368B

MD5
878ba941c25aec487f663fdc0270b2d7

SHA1
f304aed7652ab44233e198759252dd2c79e942eb

SHA256
ffe88fae13448f05114e506bc4964c53aaa2b252fdef851b7deb1c1a9ce3e4c5

SHA512
ef9a8f8f0cb4411a4142d45d4c8e905cbeb22a360d17b8f39507ca2ee16d03cba9ef6fbbd810640fff08c96ef08e4974891d58612c53da4ad9e644c09c4d678c

Download Submit
/data/data/com.ubercab/files/base-key-value-store/keyvaluestore-location-cache_CACHED_UBER_LOCATION

Filesize
368B

MD5
138ecd14e24b93818d8cbd129f2db156

SHA1
5a63349774e116caaa1d8fc22076aad50cbd10fa

SHA256
385e2245e7f4a8b192156d183dd173dbf43e92aed284b555dcc876c182276c95

SHA512
cc9df5c6573800f3a6269e70639e01d5a82a3b2264d83ca2b87408bd1ebab4a06efd0fe27587d41dcc96524bd74907b8732b8805c5cdbc561f5a001511c26c74

Download Submit
/data/data/com.ubercab/files/base-key-value-store/keyvaluestore-location-cache_CACHED_UBER_LOCATION

Filesize
368B

MD5
79fd83f3e3ff41b731462b207b52d0b5

SHA1
3d0328c8818fdc45e327f57e5401440ed311a515

SHA256
778fae5726df033b17dcb429a4d14a65f26bdc67e98b801aaa47dd851f05d6ad

SHA512
40ba042b15b2e0a59ecca290e6c2b4942bd6c09c1d67b5f5ea2df694ed9ec62939d8a5fac88fc0c8675d08801a1c12e334e82f1d64c8521015986ffc0bcf83c0

Download Submit
/data/data/com.ubercab/files/base-key-value-store/keyvaluestore-location-cache_CACHED_UBER_LOCATION

Filesize
368B

MD5
1cbbccdf9e325806f2bffef5d3b9ecc4

SHA1
64fef50000eed23fa88116b626838dac4bde69e3

SHA256
86df37ff2705d9165fdb635f773361a3b21677adf2bb49455cd7a8f3cc7075c3

SHA512
13b9b98ce1490a8f23ce945b5580e1c3e687026845fa4496972ecb937b3b93f5f38f8de81f2ced364b812a1744b8a6051c5267ea4e88f321400d48e3dd636c64

Download Submit
/data/data/com.ubercab/files/base-key-value-store/pending_rating_PENDING_RATING_DETAIL_ITEMS

Filesize
3B

MD5
8bdcff43fa7ac5b7b0d8b59850ca52c9

SHA1
941293fae35b484f748e97eeac603b54a8144b89

SHA256
07fb62cc2a88dbecf12e305a238c861e36516666469014d78f8222969cb7eddc

SHA512
c7c2fd76d879edd072eb55ad80e36e044fc361dc8df3b6692a8265a4ebb237ee69345e9fb54a8cac13fe7bc7404b7252d9fde60c4398b4e8a1a81a812f520fe5

Download Submit
/data/data/com.ubercab/files/base-key-value-store/session_LAST_SESSION

Filesize
131B

MD5
bb4692bc282bdc6fd9df7575aa6148bb

SHA1
d2520398a00577c3c3aa14282cbfb5598e773fb2

SHA256
55292edb8562411d42d2b666a61ac831776262ca72490f0c1ff2d33b506474e3

SHA512
35dbbd113f28c909f649c44e0d78260b3a61800abe7d9691d8536068434f2bca751337d31bc3ef90e652270bb71def45053cedce75ba3d30748bfecdb0b1d291

Download Submit
/data/data/com.ubercab/files/base-key-value-store/session_LAST_SESSION

Filesize
132B

MD5
4a23761198cebe4dbe9f1c7c3d9c7d17

SHA1
3b475b5cd93243a96bdc5f72de07de0526ea06b3

SHA256
681faeb780f694b31968a7c9960156156346d708615daef9ab9a545f7735c642

SHA512
6fa7f56a94675b808a9bc75abc6ae849e0bf4549f03acd1aa805106d733e30beed96862ff69d5c1c36e1962fa01bc334ed68927356b49077be78513f85e0547c

Download Submit
/data/data/com.ubercab/files/frc_1:89939265457:android:91b6395f4e3a6658_firebase_defaults.json

Filesize
746B

MD5
0a94ad25e40ef2c9956cf11b1a26123d

SHA1
090f59e130aa4eb72f2789559c5b16c291ba99a0

SHA256
390ce2672ad12a2918dfeb493cfcb9fa3c8e32e5043de03aa98f8c0cc611df7f

SHA512
0af488a53802f602507e48eaebee23ec60ef59a4b8c0d110a154e158fa104200bf20ca4498f5ff3f84e0a96fe966b92c751878eb253d174ae96cade188a5974d

Download Submit
/data/data/com.ubercab/files/frc_1:89939265457:android:91b6395f4e3a6658_firebase_fetch.json

Filesize
1KB

MD5
6e6010111691683219b33cd0ed248f8d

SHA1
26de916295ac58d01b899735888ec68a17c16d9a

SHA256
17dcca407a6062c2437e0b87764a765fb29f786dbaf0bb049d4a099632e54d8e

SHA512
f2928c41bc030682d16c0e78d6e481d2ab819b6d01686e92af74d26334af324fffa14ce7f78425d18c55eb06c9e508a3c7d83a5c5642b4e4bdd64da2057237b6

Download Submit
/data/data/com.ubercab/files/frc_1:89939265457:android:91b6395f4e3a6658_fireperf_fetch.json

Filesize
1KB

MD5
dda857123c5899ca6bae794cfcde1a64

SHA1
a13480407fc050108ef5905925fd63ea3f7b615b

SHA256
0deb3f40c1a8fe81a44ecf8ee1dfc8512300eefd37ef88a40ebe8187695fa6bd

SHA512
f528094872e3c137f14b39832a64e5148a1db6f95966528a9d4476a2e9a998392466991e9eaf1e68e331d59c63c168983152fa3bdf6b53975275b0bda4d3d804

Download Submit
/data/data/com.ubercab/files/installation_id

Filesize
36B

MD5
3147249ff95a39aff9e2d869f68730d5

SHA1
aac2347192df894b765a7ea72eccd2cdf8af589a

SHA256
f7e92dabb8071e8da1194fd5807131e5717eb6bb4a768335bc52d926490c5912

SHA512
33b662782398d38d1f46501ef8ed642c142f55220b8355173f1825bd397ade3544269d83d42a7beb530ff5eb875332faab0c688bb009b1afb7fde7178a04e73f

Download Submit
/data/data/com.ubercab/files/simplestore/7394cd99-af2d-4bd5-81a7-6fed56733bea/marketingAttributionV2/first_app_open.new

Filesize
1B

MD5
55a54008ad1ba589aa210d2629c1df41

SHA1
bf8b4530d8d246dd74ac53a13471bba17941dff7

SHA256
4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

SHA512
7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

Download Submit
/data/data/com.ubercab/files/simplestore/UI_STATE_STORE/mapping_rule_hash_id.new

Filesize
64B

MD5
280907030293d07467cbba8bc1fe4a39

SHA1
f6d78bd2347e6ad1493e34ca0b696c1464b547e5

SHA256
46f4da218faf0eaa967dc244285bece7306ca2740982f343b6940be5f6c62e90

SHA512
247a47a61d12645eaf467b59428fe4a50dfe0b22d3b98592ffe99af38c9f562b574f3884955f80f00b96aae15279eb8aef7e69e4c74d1dc07501dedef34db563

Download Submit
/data/data/com.ubercab/files/simplestore/UI_STATE_STORE/mapping_rule_version.new

Filesize
6B

MD5
d95c125969163fdbba5942d80cfd6cff

SHA1
b96dbb2fc66f686ddb5b2a192b502af0f1839311

SHA256
ac99bb3403125678766b2123bd53da60afefc18af21d43af165fa49ead8310ef

SHA512
70946438f1533a61332a1154802c75c072afd5db187b2284c951a1fc1a54c51461e9035f9be5c3446f5623b1be214d6b2bd14546baaaddb49fa8d24edfe163db

Download Submit
/data/data/com.ubercab/files/simplestore/launch-id/CURRENTCOLD.new

Filesize
72B

MD5
5de265ac906d73628b32f73c270925bb

SHA1
1cbf415777a737a33d0ca9dc3ba5dd920bf49972

SHA256
e978b5cab5e8c0de72f42af835fcb4e2d77cdf8ffd627879fa3cdd9afa050f7d

SHA512
818893fd36c946496ad7caf8460381127d9fadc31ea605354cbe2a28ea90b5c8fcd0e8643f4e23492a6aec14f12a450149d234c61abedb114df0036f3073f1a5

Download Submit
/data/data/com.ubercab/files/simplestore/launch-id/CURRENTHOT.new

Filesize
72B

MD5
c0ccd77f6cd1c7b0e4212db6ba6efb59

SHA1
ae38e244b012088c1845626a2a1f2a0067fd3e1a

SHA256
aa809b1523f70016fd7ade5eaf9a45f72cb96032f88b86f91d618b93fd11238a

SHA512
473ec9ac977aad1f66ccce558c740179a44abd315736b7ccf59b8f4144dbbdd5b51f09f7258343523c53156f38a68ea5d50dc56e80123b497aa829d3b9cf9e63

Download Submit
/data/data/com.ubercab/files/simplestore/logoutpreserved/d60b7af7-fef0-4d0b-8795-824d0a8aea06/cred.new

Filesize
1KB

MD5
1e54d4eb912fa455d9101e92ea211ae9

SHA1
405176bf1cda080212ee4000e7ce9ec67a0eb53a

SHA256
c08484e66a3393b76f0a7181d953ff44e6d1033f6f90915c0dee7a919958715c

SHA512
6c632e0f064bd48c1a1304b9df80910ae7ffe4d9adec37d5abe012a441d48545c1025441d2436e96c989954c08ddfa8b585550c9bb4d7abe17fbf8ff13827b9c

Download Submit
/data/data/com.ubercab/files/simplestore/presidio/core/parameters/parameters_cache.new

Filesize
436KB

MD5
a01c754283192c6038e9b6c893fd98c4

SHA1
5cd4bd20a54c5f25df3410e023922d4f58c9f29d

SHA256
afbaabf70dd8171fbe3273e7e7138628e3302262ee2444d291544093df8281ab

SHA512
ae089a021f59aa7748cbe8d9793d996e1efa84d9564d90ea472cb1b33146ab9ee5ff89d6f6d0781738390011e74160789c8195782f51311c4ed9678d44667e82

Download Submit
/data/data/com.ubercab/files/simplestore/presidio/core/parameters/parameters_cache.new

Filesize
449KB

MD5
db061129b736a589e50332959c4e37ea

SHA1
f94795b91a4cb04b9c0b008fdd359d37bee15e83

SHA256
b9cce1f139b6c3bd26b38f9a4a10b64bd42fc1ca9cba4a1648302369ac228598

SHA512
b0d749e9af2327bafb1b595bdd3d328e742363e5520719ac4dd9656d32726d2056d35ef628e8f967456130ea3d620bea71c650f0cb4981216e8f113977f88cfd

Download Submit
/data/data/com.ubercab/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/com.ubercab/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
f28c2ccf12ef13894877854810964574

SHA1
96793c13e2a6a9310e1aeda14a46423d555f497b

SHA256
dc09cf6bf0f80b64514a81f026678f14a4e48dd210b46f579179bb9772ef1c28

SHA512
fde5b724ba26bde955bf5c8c9473209c8dcdd4a4a7f31416afbcc712414c533015b56b37d31ddba17b1e921dda4a98d18820379f6e56095eabfe74c59881928a

Download Submit
/data/data/com.ubercab/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.ubercab/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
634e09d37d43ef735b5d4c6d84ba4208

SHA1
bb2fe82e9410c5808d3e13d6735f731e39ff410c

SHA256
8510072f0c8521fadc88957bb95eed8f2afe2b0df6d8cc67596585830c8c2062

SHA512
bf94c4f8bb0839d92db45b56470d5aca167c7338ef148e922f2362fa2e9580caecd5dc330d05feaf349f51edd586412f760283584dede35e6392648c32197567

Download Submit
/data/data/com.ubercab/no_backup/androidx.work.workdb-wal

Filesize
112KB

MD5
301fcad9588f7fa948ac68833e457133

SHA1
6a979ed5bd82ca25313acf6d3d51a3283109114b

SHA256
22bf640681649e2dbe31dab4bbc9f6ee9de31a85210d1c476df9612e0b32ce31

SHA512
6cd35870ca06996d00d938a70bc0f91a24152ebc62f80e14ca130a51ae2b0e21764508164bd4c670db9a4e9dfa5a03d8533bfef72b30a74b47023b81df3942a9

Download Submit
/data/data/com.ubercab/no_backup/androidx.work.workdb-wal

Filesize
241KB

MD5
4abdc8e7eca200d1cd01fd1ca9ef53a9

SHA1
4efa6362495fed16e6765b15aa812d5dd772ec13

SHA256
500594362d78de9a1ed59dd0038ae6dd98f1f2247a8685d8f6795a9eb2e5a8d2

SHA512
41b995903a76bf22f94106879a60b1080eef576eb0b6a091b4ac3e85606292e62dab5a9169b4c1e271084be1a03deaa8f86fe3a3bcf3360369867a7415c53adc

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads