3e250e0e12f15d4d4721761a5b4f9cd52fcd63ab6f6a7bfdecbbaa766a75ffa7

Analysis

max time kernel
9s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
12/08/2024, 07:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8dcf25badcc9295988706d30f30fba86_JaffaCakes118.apk
Size

24.2MB
MD5

8dcf25badcc9295988706d30f30fba86
SHA1

7bb144a5dd92f285ab56274db5ffe11ff59c0e3a
SHA256

3e250e0e12f15d4d4721761a5b4f9cd52fcd63ab6f6a7bfdecbbaa766a75ffa7
SHA512

4135fe96a74d108574f88115cda66c4a6804355543ba550c20eee756029345b12f3d87bfb352e6d7a216d8d58624104a09e7fbd9716acaf93cf68ef63ce9f275
SSDEEP

786432:0kjXBEoGcB9qb8CNB8nzcqwVC5cL/3B2Wa:bjRtGT8QC5Yf0

Score

8^/10

banker discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/xbin/su	qsbk.app
/system/app/Superuser.apk	qsbk.app

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/qsbk.app/files/ixintui_plugin.jar	4273	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/qsbk.app/files/ixintui_plugin.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/qsbk.app/files/oat/x86/ixintui_plugin.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/qsbk.app/files/ixintui_plugin.jar	4245	qsbk.app
/data/user/0/qsbk.app/files/stat_plugin.jar	4295	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/qsbk.app/files/stat_plugin.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/qsbk.app/files/oat/x86/stat_plugin.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/qsbk.app/files/stat_plugin.jar	4245	qsbk.app
/data/user/0/qsbk.app/files/sllak/opt/4245/finalcore.jar	4337	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/qsbk.app/files/sllak/opt/4245/finalcore.jar --output-vdex-fd=54 --oat-fd=57 --oat-location=/data/user/0/qsbk.app/files/sllak/opt/4245/oat/x86/finalcore.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/qsbk.app/files/sllak/opt/4245/finalcore.jar	4245	qsbk.app

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	qsbk.app

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	qsbk.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	qsbk.app

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	qsbk.app

Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	qsbk.app

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	qsbk.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	qsbk.app

qsbk.app
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4245
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/qsbk.app/files/ixintui_plugin.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/qsbk.app/files/oat/x86/ixintui_plugin.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4273
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/qsbk.app/files/stat_plugin.jar --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/user/0/qsbk.app/files/oat/x86/stat_plugin.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4295
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/qsbk.app/files/sllak/opt/4245/finalcore.jar --output-vdex-fd=54 --oat-fd=57 --oat-location=/data/user/0/qsbk.app/files/sllak/opt/4245/oat/x86/finalcore.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4337

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/qsbk.app/databases/bugly_db_

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/qsbk.app/databases/bugly_db_-journal

Filesize
512B

MD5
382e8f03f240a0a5b133e67ac2932db8

SHA1
0f74b1141db34ae40c8fe50b134bf0257d43f12d

SHA256
3fb228c3049faed4a2b1dea7f7e0df3af15fa89a1ff4a13da32609446c5dac22

SHA512
00e4aff511a5b1912aeebc03ca8fdaafe169d6c7fb22ce6a18bf4d715b0595a0caf27a828f866549a7cdd57bc8c8148849c023f597a3c816f39ce237b4095d3c

Download Submit
/data/data/qsbk.app/databases/bugly_db_-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/qsbk.app/databases/bugly_db_-wal

Filesize
108KB

MD5
f0882d3959b143927b3ec9f8859cfb62

SHA1
65eea2366dab658e9d192c1cec7c18b30d437435

SHA256
fc0d10704ac20d3333bad60f12aa7e5002d6a0c8ae094e1440b5196d7a5b6ca5

SHA512
5336f35ee3bf8c3bb898b70f97265b0c160a402940a5fea2f185376e600457079ca806ae28a105a9b7ce4d6e82861952896579e1ac5dafab744738c7dd4937e2

Download Submit
/data/data/qsbk.app/databases/qiushibaike

Filesize
28KB

MD5
4025223d6b682cb6bab35eb683f98100

SHA1
fc7a6c4c806a08d144eeed97d7a6e4b960fd0e6c

SHA256
b058e7bacb0957b3540c36462312dd6921e15211fff37926f21310573bbf86e2

SHA512
f7c0d6c8d154e4b6831691b32275618f8f4078cf6a9dc52eb149771a28a54f32ced5987bd6213bf592a2a630d86b77e9c6a0012032a4ab9fc537a1d7691f916c

Download Submit
/data/data/qsbk.app/databases/qiushibaike-journal

Filesize
512B

MD5
f21b1bc7b2ff710d0501df91d5431232

SHA1
b4512e4cd9e1b59824b46ba0de613d3ee08d671b

SHA256
8172d21480fe371aacba796eaa9fc36f832af59260566e966236fc758165004a

SHA512
107e770e296ac7ffe0b9bece908e908d3ae4981c307988baa6ad2a35594de6f6ab207776ac84abe16e5039300ce98828bc3a8938d5fbe141a15eeba90f743e48

Download Submit
/data/data/qsbk.app/databases/qiushibaike-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/qsbk.app/databases/qiushibaike-wal

Filesize
40KB

MD5
7c10a7375d4716b71964c1d132068eaf

SHA1
98045687b73bdda81ef1d2db2122a74a8643ac75

SHA256
f5a27620abbc9f2e7e8bcf3f362dd7c6018fbf801be830cdbdae0637b39be60c

SHA512
e3abf8f864811f28083722d065721149fd95eced20cf50d9b326de317f8a913412f9b327618fa33e25b8df450b0ffb10dbaf5abc2a184118e5a7dc960305c6f6

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/66B9B696009E-0001-1095-5A24679FBCECBeginSession.cls_temp

Filesize
78B

MD5
705434a6885baa81212621fee87a8145

SHA1
426df08828d68237d788de4a45c574450e0bd66f

SHA256
dc5f6f576228abd14cbbb4160aff487841e4642d24d48d9bae478da9dfb1c2ba

SHA512
a676018ecf189b397217922fa4285d59d26cfcaff1eeac9df543600f5df70d2f73fcc1adf79cc8cf7801715f0becb778c7c6136acd8ca34f9967d9540c23b81e

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/66B9B696009E-0001-1095-5A24679FBCECSessionApp.cls_temp

Filesize
105B

MD5
093bfef837ec6d6561f2f2433da3aab5

SHA1
445c0986e3ff15c7cc6ef446b492038a7022989c

SHA256
ab396601d20f1b003b98e4636d68f21deb48c9f1efb02dba2727bd61cba0ec86

SHA512
5194b6895f9e668b12a3ef6437ed0b96f37df2fc63d3cff089130f2e7b6076e7091793b8cf4b10eff8898e8780cec673deb83c1903b3c5f4881f0d307b22ced1

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/66B9B696009E-0001-1095-5A24679FBCECSessionDevice.cls_temp

Filesize
101B

MD5
b51ba6fbe8be2c7ec9d3c621fde2492a

SHA1
9df6da6a4829d732c704d38f6c929729bd5bc475

SHA256
df5c9620b713ddca2034fa972582be0e6f8e88f05b64301013c5d4f923e7dee2

SHA512
83483fa787290a0364f1a37cd3c10c081a8ed597dd4fa85d9f05c3ce811992109a706a78d32edc5bd047e3fef968141225c1aeb4e5b7b0cef67e1cf7691eb052

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/66B9B696009E-0001-1095-5A24679FBCECSessionOS.cls_temp

Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap

Filesize
344B

MD5
f3cd0db252c552f00e8e0dd91594f596

SHA1
10adea10992065a41fa29afff0ed325f318ce980

SHA256
9f94b4f36bbc4f499d7fafb739bcaf95bfb2f467ed53a016172dfe9c1e5eb191

SHA512
025efaf9b7caab6b7348e9636ec63e93bc228546f37a167f563df5d634d0a9a84c67fdcf082fb44416b09da1cd59ab447839d6f8e5cc967778fb07ad9e098412

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap

Filesize
2KB

MD5
5694e3ed75f2a20a45cad94fad3ff7a8

SHA1
2c51b5615fe7f500666a45dbd0db9c2ba4540270

SHA256
efcb7d3d04fea15d8e8d2d1f1b2f22c3143584169deb483a1c5576cac09a8cd2

SHA512
a5ca45d206c311d03d5f98c901a905b452511281afbb324e2667ef83d32e5d8edb36076cf3c2b59c4bc2fb53eb044b82bc5cde030c0b1e759154a83ee32fa932

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/qsbk.app/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics_to_send/sa_9b516c8c-35ad-49f5-93cc-0d045280b2a1_1723446934327.tap

Filesize
291B

MD5
6996fab2dbf7d547da3672f97efb929c

SHA1
b5a2d094519fa9e2417ee1750fc25847537fd6f4

SHA256
2f3e678c4c2e4cc42ba38598e6ee15cf6e44ee30787e9ea2f4ae2405f1ac8938

SHA512
58a6bd2b0b6e8c65f94ddc477a6287f5af056352bb94d69442e7214033daf7393ed0ac55981f3bcc6e88942503f762cafe9d253f0eee25a68405fe048b18f7d4

Download Submit
/data/data/qsbk.app/files/__local_ap_info_cache.json

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
/data/data/qsbk.app/files/__local_stat_cache.json

Filesize
485B

MD5
d3e7c543ef6ed35a0b2de5dc29acd7cd

SHA1
5bb290648b9026d90b9ca06a7a8b2687ee3031dd

SHA256
1978e8d98aba31b9f3eed02ba73322edd47d242012443cd0448b19a9ed7e3888

SHA512
718e884ecddd2d9f04ff762f48903ee959a474481e2da2b5b08fb45d6b2182e8922c923233eed0b9c667a4819461dc589d7b9e48dc678473c473b6a73fbb1812

Download Submit
/data/data/qsbk.app/files/__send_data_1723446937774

Filesize
521B

MD5
022e6bca628e085964bec752fce75ddc

SHA1
3f100fb2ce83e936d120c09e2417af3798de4274

SHA256
8d0d259fbd0a30624ee13c759ef3da19d975abc2f40bd2620f86952ac878b0b5

SHA512
640e236723b83570ca74c2696981cdf751ca95b120d76000ef4c4a1f7f6d49ed8e667f045f8fde085478ac6f74a42c265823d1abd3b08132c5b4a1c48f4c2e4c

Download Submit
/data/data/qsbk.app/files/__stat_cache.json

Filesize
27B

MD5
90484a3b0ea10ee7818deaf9d866253a

SHA1
a19f6dbd50a77058d8b98d2209971a85644985e3

SHA256
9ff2a0cac52c92c81631c034409ff4709ffa310c2144e344c62476b16f27cfad

SHA512
8dfc79fa8436665e9623fbc5f74054cb580913dcf5aecd6c4abd2916892390e4059a81393ddbde2f3f58903d23591f1f9f9378431928f7c5aa855dfda78b4994

Download Submit
/data/data/qsbk.app/files/ixintui_plugin.jar

Filesize
78KB

MD5
ab1d82838a9d1ed1d43ee6c71ee3a5d7

SHA1
1bad277c941a54b87c5825629c81aa4326ab34c5

SHA256
13f3f9d00942eba2e50c3c62375d485e853808b83118854f0582e9e82ad14579

SHA512
02ca00ac8d408997adacc6d210a0dcc98a91e45e6c8ac5ffc662c707460316fc3b661fd450eaa93d3521a801694072d0427d2ff51b16560995c66cb4a4d27bb2

Download Submit
/data/data/qsbk.app/files/libcuid.so

Filesize
129B

MD5
bf65a36d70f70d489a29a8217466a85b

SHA1
24e6863b4d3e4d5f61ee885fab9e70c974892bff

SHA256
94a64aefa8c09dc09552645aff9f62206dedb38b04b06ddcfd8cc4cab8a6c5ee

SHA512
0c88adef6c54577a58d7720115292fe0184e50bfba790e7b6d8fa916c3921c321d65e907f0a49e48570378e44a196786616c60045eb1f33e4c0b3ac261517b6d

Download Submit
/data/data/qsbk.app/files/shuzilm.db

Filesize
144KB

MD5
38d7ac11e7524537e6c277ccb3a4efa4

SHA1
0286e1d248ea083aa138153f9359a02f5729f0a3

SHA256
446a3133f78e8f661adb65e52fe78c4c94706943609b5f476367ef09da718e8c

SHA512
93743600a749c27aae9bb8144006185bcf94c6d881f35764f5bd49c0912bf8887016a6bd7d6f6938a4880e09ec89f3c993020fcff562538ddf5310e3b7dfe866

Download Submit
/data/data/qsbk.app/files/sllak/opt/4245/finalcore.jar

Filesize
78KB

MD5
8a3d897c2f85ff4e636ce267464852e2

SHA1
84ada2763d2eee24e2dab8ff10d0cf0d16809173

SHA256
2ba693a6e9b73b5c0be0fecc17588412a546e2ee0ab52df4c183cf399d33dd93

SHA512
284d2f1b3b9d7ead2fe818af09d4c77e527921102c004a1be8d832ac5e951c2a95d47d2a03d574ce8d7dd9c2b59bfd97cbb4601ccad62d601f0e2fa874335a81

Download Submit
/data/data/qsbk.app/files/stat_plugin.jar

Filesize
32KB

MD5
f237a776f98bfc63a5998455c20da52b

SHA1
24ea4aaafc004d732e1fa5398a0f012d75f36407

SHA256
fc68cba0e35b34042c46f56517da629dde64bd7262edb8f7c318b0c89a179c07

SHA512
15714213fe4a7c7b900633c1d1344a0b0e6f3807eddefde147dc9ddb3d3c8a1315e4ecb06aa1083b412a785248e1e31ec634924cbc22d83118d8f83457167533

Download Submit
/data/user/0/qsbk.app/files/ixintui_plugin.jar

Filesize
172KB

MD5
b2f98047167c8beac4cf776ef4d48d57

SHA1
b00c9478c33eea9ded1fd046594d0a64c2dfb0d7

SHA256
90f9b6d0a8ae907bd9c2994b7ac799419b877217ba45a075de2511f171390aff

SHA512
a47f3748994066e48d1a70542aa2c55e0626c5e87673d1d5dbcdf2ec036d09b2be8340870a585b88ae5bae0dd58f325c2d59a0016931b6d017215d058ce8500a

Download Submit
/data/user/0/qsbk.app/files/ixintui_plugin.jar

Filesize
172KB

MD5
48f4ead40fe12435190b8cfe021d00ff

SHA1
6e6227355af88a6a0ea31ddd2a22eb1517b04b7b

SHA256
312a6eab1987216ac52ad6ac20c28b3d6c93dde697c95ccb816403e3debac409

SHA512
2ac594956413742c03d92fab4c7c95b78f883988223b38d92a8ff34f3690115208e217bd2bea6f93d058944db35001d5c763f58f13471a3635a5215608c33c81

Download Submit
/data/user/0/qsbk.app/files/sllak/opt/4245/finalcore.jar

Filesize
180KB

MD5
8165431d487dbec79541ec56fbc7ef39

SHA1
552bb60579a17e449462f048cdf95b587fc8a20c

SHA256
b1c619e89955d029055dc9249c973a5fc1ab7bc20020303c5a9c533634a32ec6

SHA512
c88a22d6667b589993ab1bac7ff7b2405ea6b69ef236cb3a407e89507da55ce7031627c49b6af1be15c6382bebbb46d9a78284c9bb64a675772f4976e3531a95

Download Submit
/data/user/0/qsbk.app/files/sllak/opt/4245/finalcore.jar

Filesize
180KB

MD5
2ef34ad0bb3d02f2f27098365ed75964

SHA1
753cee178c6d1a2639c2209604ac175a0de08013

SHA256
ac0ac28061ffe1c2e53c2ebf663e18ed249acb7fde88a6ba064d61934ed4e048

SHA512
f39d1ca1eb66867c5e58583cfdee000d8b9b138c3082789507a2d365dd4c9f893fabaa231c0b247dd7d2835eb9b4e1b0b4844418d916b7ca656fa2b9b1dc35f5

Download Submit
/data/user/0/qsbk.app/files/stat_plugin.jar

Filesize
63KB

MD5
5cf65791903ebe600f5ce6dbc6d3419d

SHA1
2ac5f95ed3de040a1e9423e3a3b0510adc7a9f2d

SHA256
868db4c3d0bb264b94d45c33cb625f4e11591ace6df6bb32e5965f0a44d3ae1a

SHA512
e54e7128a5901b96ca582b11e60a29343e6ee2ecd782fb8aaf71fc01be264461dfbac1ae6b9d212836a371af0584c3defb5a3cd9b6f7881eb41f19fd6e2aa082

Download Submit
/data/user/0/qsbk.app/files/stat_plugin.jar

Filesize
63KB

MD5
994bad51343119d20c9004d1596a6187

SHA1
55b1d19be076c362f552831643c3498e28000b30

SHA256
f1f8e5ff6bf7cfc10e18f6fc9e16e3077b91736d9d38f239f76e4718d2805e27

SHA512
d9a460cefd3655354470e9e1afc7e396ca64cfb69e9824d5d19a4b9fee94bb46d7a1a246e31a6fddcd2dc8995a1ec73cfc1cf57a387710ba2fc224adcdc8cb29

Download Submit
/storage/emulated/0/.sfp/.sfp

Filesize
83B

MD5
0903348a3ce62bbf8157252a0ac88132

SHA1
00976bd4ef98490db450dbcbe9bc3269981cec71

SHA256
ba23de09a0661b35814201b5c7602b9e62b082c5df86cfaf75367176dc5c72e5

SHA512
544672d7ed19cc9564bdb9bbdf7dfb298d5ba2dba845ecf78fd2831e24e13842f17d16fde29e8378e8d0b961fd409dce3ef34366287af6176cb8f692e8057f19

Download Submit
/storage/emulated/0/Android/data/system/drivers/a6f895ba18b3ff24/lut

Filesize
40B

MD5
3861c627502cd5473e7d53bd1dae682e

SHA1
13898de7f76db6c4969c3772b8764cc1d1117ab1

SHA256
fda55c6e95dc01a912655ca4113dbe55ee51fdcb225b010c785cec34be6ecb63

SHA512
71bb81cc81eaae276f91b04996b696ffdaf5685b800beed57bfd797e8a23cd878d161655630090db8308e33276fdd94155b70d3ac7fc448a94c84d9697c55dcf

Download Submit
/storage/emulated/0/Android/data/system/local/_driver.dat

Filesize
48B

MD5
13559f8fadb7f009f972d610968de098

SHA1
a315d62a766a3d8e7598562d06b097ffc27108eb

SHA256
4d54f177e61eed87557bb4e89a8e8732206b7d575b6ac9a6bcb064e3ca9239c6

SHA512
07887fdb4705dc90e7cb44b38be3f4a5af05f8056f00648f347bf30c24dded43f4a28d3dc5ae73eeba98449ebd5a058c4863eb2de1790dd07c22ecf36337cf3d

Download Submit
/storage/emulated/0/Android/data/system/local/_system.dat

Filesize
48B

MD5
fd8c393e124a375a7fd42cbfea6ae9ce

SHA1
90b1278e57b992d57f1a36542a93a1394470b0ea

SHA256
115ccc07a620308d3640d53a5a6f06a7b8ed17a5374416d4ab2349ed219a73c8

SHA512
433a7e84a62123d6db15bf0291b9ccef58c205d24f39427c55081d42e267bb42084f8238fb3d2537c470dec05eb6a436cb9d927c44dcfb7b10876f916d170957

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid

Filesize
89B

MD5
cb9e7637d4521d265766a7f205a189d0

SHA1
44a007b6a2361bdb783d756919bfd8aaca3299d8

SHA256
052ea2b093b18212912696a7afcedddc5b7027dd04e3cee41931ecaa797da8d1

SHA512
a7975553f733a0c16152153b989d0d9bdc1c35ac3fee126118f5c494926ab64f5245160d9cc141494d59cbb0083f91447c806c0f0c95431de747d4305f447a1e

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
20KB

MD5
048c73f536f234f0ad0d2fa8bdbda899

SHA1
dba2e666721e0b0988807b8bb3ce0452dad3448c

SHA256
f1a64586ce75e770e2f36a7ef6f7419e26ebb9e9e786df3c5adce50a196d2d07

SHA512
6ae398c682724f0008ce47cfc790a7ad3dd7cc801fb3a8a692d28da5533ea7ed830ea36933bd3e3219fc8cbade90f073c2c418611921bc7d6877d94b6745c4f0

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
20b4c5a4e7944c6575524b67929456e8

SHA1
8c00624e72d53734b11bbd36d92523e4d80ed5b1

SHA256
269e0fdb977c639320baa5a0f88db814d17c1058fe5aaffdfb723764e5029f69

SHA512
c4d54bdd070a8c6b8e8be330700b75c278cbebe6f2325337dbd958b2604b81f9d23e27a537352abf1c628e35a88818efa0c37b6b796b16619754db62f9481cfa

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
eb8e2c0f4fbeb78967faa19f6a2beeb9

SHA1
b500e778cf8d2ae0c276c994b823e1c0b17f9e39

SHA256
e276075e712b17797942b593077c1fe7e8ac07ff84213355c8b212abb81d4c2e

SHA512
f688ecc0d51480bc7d803fd638106d8f3f25773f5eb92c0b965ad100cffbf4ccc00d976f03afde97923daa6561328e9660226624193bcc84cc56db5dea4f44f0

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
36KB

MD5
1066012445890d4ee1bac9d9fa832328

SHA1
da7df66264ef38ad4c3e951edba81025b0acc12e

SHA256
435ae5ac7f9f62acc6bcd931fa2f7975d41a473b1732013a1353f0ace610ed14

SHA512
e575a8f04068ea4a32919267cd0f52626d045fe1370219f312dd67bad9f49566ba55cfa9b67e592a21300fbc9325bbb78eaf81940fbfc567755422260f0fb273

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
06a50068613403937aef26e47acb95c5

SHA1
47157d526aac8611ebe03a5fe9ebef15d2c4afd0

SHA256
2dad697fc97e06bb949823aed438922bc107941fad8e86e3a1f974190be56e44

SHA512
d4c1b1cac1c65edb0ec833d6ee6260e785afa57dc4d3bf2c516adc0cba8414f06360884f98bbd9f1c4e51fa2b78239a9ce13e979f35b795c97e2e0d68beb478e

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
be3008f586516d4e48211cabb5f56a46

SHA1
fccd9c2491cb4ae0bc356ed93e5c4afb35f82de0

SHA256
eb4ac4de0aea9eb30f65113783bb4e6993dc369a73b9ea2eee0f86bd73be4f65

SHA512
75b29e5ac59d68e829cf77e8846ca1051aaddb96ffcb00625c487c3c1c194a3d8d055fc10f4ee2e3d20ab34c20057fc1f0d9d99be0d835beae39f3512d51be97

Download Submit
/storage/emulated/0/qsbk.app/.cuid

Filesize
89B

MD5
f5bd6617f75314ae34d87ab969d864a3

SHA1
bb1dbb6ed03c615d9f040f1e547a15088767c099

SHA256
96814a42cc1948e706d9bdcece5a7cdf63ae4009f3acec32b4d342f91faf10f7

SHA512
7faebbd7692ddbaedb2bebd50568b79b49c89149e89374e8a6a900fd17bcb6219b99a9baae53678101f2b325f7027493dd009d67300fd46b84b9da867e664790

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads