84ea32f50929dd5a7bca056dad4888d3856fe64183c86cb95e1d2e2a42f21b86

Analysis

max time kernel
47s
max time network
1809s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
25/08/2024, 07:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Notes_1.57_APKPure.apk
Size

10.0MB
MD5

aaf7a8123cf23ba533455e7b10e12a91
SHA1

0ca888c9aee2ae63d9d276beca7ae4acd7da7712
SHA256

84ea32f50929dd5a7bca056dad4888d3856fe64183c86cb95e1d2e2a42f21b86
SHA512

17e1929b63506aa70a19d0be824ea8a4c53cb23cc89196d3d902d8ec4f200cf8f7da905296a14ff57e24485f15513de4851da51215f49483de0c53ec6393b0c9
SSDEEP

196608:qVCEpzuckJSm8G6vkL9dmz+Zn0zwH5jt5oirkEatjvSwM7Ihp9y:qgSzZkPEkL9dmz+B0zwH5jt39Ye9Ihzy

Score

8^/10

discovery evasion execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.gcteam.tonote
/system/xbin/su	com.gcteam.tonote

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4516	com.gcteam.tonote
/system_ext/framework/androidx.window.sidecar.jar	4516	com.gcteam.tonote

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.gcteam.tonote

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gcteam.tonote

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.gcteam.tonote

com.gcteam.tonote
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4516

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gcteam.tonote/databases/StreetWorkoutDb

Filesize
44KB

MD5
cc6053f1c3edc2581c609ef4ef2cd92f

SHA1
68e43844c556ac45264f88390f31d741b1f214df

SHA256
e1f036023b62b1bd3451f9febf044d0ccc208e2b0540a1d2e9e5b77d3b60cc55

SHA512
512b316be85c2ce0e7fa96da64907330395119450284cae99be9c85de1f210ae380bd33694f8cf974ebcb05312f0560a02af2999259a6254ce1bfda5e1dc5207

Download Submit
/data/data/com.gcteam.tonote/databases/StreetWorkoutDb-journal

Filesize
512B

MD5
2d8b7f7cc4a9d7cd60a3af5f4e8cc43c

SHA1
a5688d3f172553a99d1af310596be9af9d9d1085

SHA256
d391068cb45b0bc7a9757e9a0d495e9e4849936e9382c6f0efe2e35ca198b2fa

SHA512
000bf679e9cdc127655aed92b3a591c8945b91c4f0029b453d2c209611d5b3151e7bb1c73470a9c0e7933a712660384b7f9f7be12a6908d4d585a6671d636a0a

Download Submit
/data/data/com.gcteam.tonote/databases/StreetWorkoutDb-journal

Filesize
8KB

MD5
aa02ff018c285ea9bea7c49b097fabd3

SHA1
e5e1195411d149afc63075b4996f4d7a976446f9

SHA256
d0a34db74e9d92d3eb6174e9d20f52edad6988f8fc3fdbb475b2db7ec222e1b6

SHA512
3cfefddf8a4a80d2558beab6193a3d3fcbe775c75717c71731b277be71539ff534dcc1320436ca67c750d840a86a7a44b938b4f1c6cfc89262b94da0c57f6e5f

Download Submit
/data/data/com.gcteam.tonote/databases/StreetWorkoutDb-journal

Filesize
8KB

MD5
5b3972e665d5ddc92d15043547cbc7fd

SHA1
11ad6060ada63750fa3715583e851cedb4bb047f

SHA256
fca9d25e99dc1aa29d76d189e46a371b4a7919bf47d48f7942e566a3ea10215b

SHA512
422c7257253691452b80ccff2d68380b59d9422f8c21555dc5d3f9fa73fe148ef200a64f1a7f16820e8788fba4c89eba5bf0219f586a1dc9a056c2029bfaaa74

Download Submit
/data/data/com.gcteam.tonote/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
bd0bbfcde7cd8ad0b4cea8cebc3429af

SHA1
9954e346852eb132a449f442d5f8f496cd6594a6

SHA256
a1a627cbee469ff3d4eb9df7c35f7db9e23344e504537356dcc422bbf2ff7750

SHA512
90f450b79e2f6e54ce8b288289aa11a47e9feb2056db11d2bc4d59034aa2ed6fe3fdcb8da4cb424cb27dcb816cc41b768d05f6ade0adaa808758cc4b2908d124

Download Submit
/data/data/com.gcteam.tonote/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
1dca00b074ef750e6c2829f7cc94e9f4

SHA1
80675c52c0434ef6a79a0d8745ce92a092f6a746

SHA256
84f2c0911a1e450f2b15a4a509749403aa730328fd8730421528bb287dcc84ba

SHA512
e6cf75a406f75df77ddb777b98627267fd0c804b509d40f227ab6fecd50d31f58d0aff6605eae355fc35e897f644af3361f38dacab8c391f8952df1b68393e3d

Download Submit
/data/data/com.gcteam.tonote/databases/com.google.android.datatransport.events-journal

Filesize
24KB

MD5
8a55fa2d25665e127d8ad45a688dd652

SHA1
877aa9a408e84383e8131ae87922cfffafb2bba6

SHA256
cae58476a879d0a1091121c5c5abdd9f09df790a2660e933a412501ece3acf6e

SHA512
69cb169bc0297c7888cb9178df8ac9146aec5f6fa455180b6e02529951c43cc6dbeacc6ab11749ceb931d2901e943feb34bc7cba40cb9bcf8f3f5cf5d5626657

Download Submit
/data/data/com.gcteam.tonote/databases/com.google.android.datatransport.events-journal

Filesize
16KB

MD5
408edb6b47ff796116e637eb37e91076

SHA1
cbfd39cdc2308f57e1fd6922d6e5034c89366fdf

SHA256
e84449f68e8a9cd1ff468df494854ab08191e0431bbc978c284d0575c54cb943

SHA512
1efdf404c7c21cc4d8b535bf072e915d409456d82a1cdcfc5b2a55324229d0bae3ccebc8648f678780f0b5d09fa310a5a9af669c61c784a0bf2f99546353a489

Download Submit
/data/data/com.gcteam.tonote/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
04c3cfa88be992c0ddd90e30161a49ff

SHA1
3f7eaec4f49cdf64e728e3134a7609dafff86250

SHA256
7f113a92e0ae305ecb3bc116fa84805a9ecd776a0fdfb1158fbed61922b8acf0

SHA512
25105866856ff7f09152c0a8cc85f2a03da8ebde1e1189311c3365a05ee01ad1fc73e141d2340f53f2d7bd56377c120304b78129727a6d3c6a720fb26e13940c

Download Submit
/data/data/com.gcteam.tonote/databases/com.google.android.datatransport.events-journal

Filesize
20KB

MD5
ee0ff067da7e8f8161c7f92a3605b53c

SHA1
d29ce4030e527543c36c2b3a95069aa831df1323

SHA256
162856b2013e325068dcfe33af54ef4d9ff936b539df4909b985eab6c668cd5d

SHA512
5dcc961a99c6244b85ea0dffd1962f251171f365694f1cb0c5fba76a7f31c5389d38bc6ba08790d72820daca23514380023d8e44ce28b8213250145c98dfaa04

Download Submit
/data/data/com.gcteam.tonote/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
9a1e4b8278f53ed509bba1956e2d2873

SHA1
3f418489da049e8088919cb9f4f52a311af3b628

SHA256
2136f95b4f9a7a468058ebe190754aea4035bd6756ec8cd6a3f05418c5c6fbac

SHA512
45f3ceae09fd3289f6d08c8180de7b4645738f1341fb01c436f09dc80ab9f542d3d5023b75db8984229dada1d2395fa216ec4b65199a6458ab99c47c4ab4d148

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a3e2ddacc8ef83ad4cc971c1f2e7a2ce

SHA1
ed8a29abeb7a79bab90d8421a1af3945361351ee

SHA256
bac420c45d7a968f9d33f72318f69e20bb056f91099764151aca680fcc073bb6

SHA512
ea28e97e7d63939d64fd130bee2cadbbd3baa20ebd92982b420ef12a453e119e780168742455aedb061fb9f088b22adc620a03e78d79171045e226c2d493cbd1

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b3b63217040c0ddac1032c86ebe34c89

SHA1
13e7714d8d56b694106f646474a955b9463cf34c

SHA256
42bc9546c5240665781b0bda24fb572ccdf252805b254e7e761eeba83ad52050

SHA512
b47b62b8b4d154915a672e42abcf05afffd7dd3f0a76ace1972b2e2c8854af33028b3dc8dc4115e45f25093ff834664f0d6da355103352a199adf2b91c808fe2

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db

Filesize
16KB

MD5
18d3b915963292fd7ebc098456b56516

SHA1
1f21d078cdf8940b10069e9bc8600ce69972c708

SHA256
959bb032e3b4fe0957db94a8315153ff7e1c18ca70e4a845f66657dc2df513f1

SHA512
9e00a89306349e679a9df5490b80ff39d0e03fe79b656068767e5527e79f47b6c05bd1d5a4ffe7e9ae1817bc047bfbb61ae9f58ae1250363d0b0f726c65b13a2

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e223d74897763744a40365ba500ad3d8

SHA1
81f9493b094e9744234d22db2390a18e6084c1ce

SHA256
105735059a3995b73c1c954aecbc605d945a91a9a748289665ed8f64e11628c8

SHA512
9c5a4c97ef3eb6dad8b6906ad08827d6b9e308c53d60982209cf67c0a3e6506cb05e69cd9ae20c8928f7e5058256a47b24df558c1235116b62508e761f8d9797

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db

Filesize
16KB

MD5
21e2b37b0d7cc28e22db8cae6bac9f80

SHA1
83bf19550535014c1c6f7cfbe6de4372ba09463b

SHA256
620f4cb93801228c8d92ae53e754fb95ab1595b78befd02c9755d3c9735e2355

SHA512
bd3872724d8f3c25941f5d8169fa7ed9cc3166b9df97864903e392cc4f0feb91030d7dd9c000e6fb2d283b4c93bbc2a2aa2401b497c1ffd61094fb56ad952445

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
52d8066f8e5106ff8a4e09cb4e81498d

SHA1
b16e113906655c374a8ed77843dca48e1b8f01d8

SHA256
cc0516b5a98abb8d2441ae83fc5ddeffb544bf24e56d80e72c1b39f838473690

SHA512
c2a5c280a93e08c52e66b3c4b7e06cc84e8bcb99b1cdea8ce5420cd93fdb0d1997f7462a02d7ffd312d363f6c250d2d781b7a128452d095388b9884be62f566e

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a3fa3fbc290e337911fdfed01ed3f986

SHA1
88ac50fec516100bc37054f1ead3e7933aa9bdca

SHA256
66297fc103fccd9116f6b2f8c1c0626d4c803ef70fb2b9f961085de0990a10f1

SHA512
f286c1e20bcf3cee681bceff86e29af5c6e71b4f2cae60d2369f4d16545ac60024a6f25845c0d431a889407340ba0181eac31cedb8ec274405d05c771f28ffae

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
a1cff1d57ba1b5fe46a78cc8424e3fec

SHA1
114b700d94c6f48f5a94a2c65675ca1a214c2bb3

SHA256
549b610acad73814713efcf929d6f5ec30fbbe4823f523837fe1882206402b8d

SHA512
0b2a4a8a80588f93b72d4b750b01304ac26fae28f72c74130008c61828559a6a8ae2f70b916c96b384358b334d2dacdc83cb99e4babbae03f5043b9681a17c0b

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
9d5148c59b38e1fcc2a0794e481c3960

SHA1
2c064cfc15c43de19586d4a03ce60b65a4438278

SHA256
82c9fd5fcfac6b644abfd5015f592da090574ef1b56ea71aa5e7471695743f99

SHA512
aba6b8b06d5781cb6e199a624e54ae032159415c6d8140dd6246ddefd9f3b2752fbecbe0eea87378639847846ffe311501fa2f809e44c68682ff7d44f06d9760

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
68c310fa9aaca7ad146ee03cc1dc2338

SHA1
9a6ab9e7983df3aac6481d7143da9a11db2dfab6

SHA256
643cff8c9e759bd578526e81530c8cacc74534b761cf520f7756a443f58cb5fe

SHA512
6dbeed85fcc48361f218cf07fd371df2dac225cb38d0c3809b0c97b7a60ce3b065e8a1d0fb5f050015c827619c0355773f2e5cf6dca17c89409c3557e42fb178

Download Submit
/data/data/com.gcteam.tonote/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
01316f1b2c0c123e4dfbed42feffcd9b

SHA1
3ce577b347148df8d59ec42d6cdca5e9bc14e42f

SHA256
6afa0a1b24cb25cbfdeaaa3ac249df026e74bb9b7e0d0e151a6c1609e7530877

SHA512
825746b4062d5a49eb739861aefda01d7ce22a2c0bc82acfa111de477e9845afc3a77b53f0bea96928d2af44e3d9a6811ce2a30036fa434a5245ddf0a9348285

Download Submit
/data/data/com.gcteam.tonote/files/.com.google.firebase.crashlytics.files.v2:com.gcteam.tonote/com.crashlytics.settings.json

Filesize
713B

MD5
9b5bd71bcdb9f571fd06023c9a7ad870

SHA1
809f44f29a5454997d1bfb7d9dab43d62cead261

SHA256
4b7303e3b389791bcece39d641060e9a4d7d477ed78134632a26222888714341

SHA512
b39ba4626135c07c8c602e9279ee93835069c6ff4a5b9a567ae8f841d24ac24334bcd10940150f9572d0ea6513fa80708dc5ac0c4543894073973883d43eb9d2

Download Submit
/data/data/com.gcteam.tonote/files/.com.google.firebase.crashlytics.files.v2:com.gcteam.tonote/open-sessions/66CAD9C30227000111A40A370D4A6A01/report

Filesize
785B

MD5
397526cf2d3ce3ec7f08123ad05cfeba

SHA1
79ec11c1107ee252a49c417f4510bdec4f98b505

SHA256
47b638dd7154df8fa678731fd94d88679fe08b83a5065d5c0d40140d4794c648

SHA512
b80cf7d79479c3470ca9b8a562162a11e3d0655a41ad3cfb71076eb8693480e122e8a3bff23a147df04a59e564d5ea9e5fbbc5c676da3e4a8027649681f21f74

Download Submit
/data/data/com.gcteam.tonote/files/.com.google.firebase.crashlytics.files.v2:com.gcteam.tonote/open-sessions/66CAD9C30227000111A40A370D4A6A01/userlog

Filesize
191B

MD5
c9c97140e1cb209d9c233b3b8b05d501

SHA1
af9d6a7f267a455fb44b05988e13c4fad3ee6745

SHA256
4703cb623881729e45464d02989500bee615ad48f18e8df15bc671d93326844f

SHA512
5f987b7817e4ba086a59f689f673e5d0c178ad5407490b7f7cb0ef7559616b0728af79f4d832313a31d94d10033d7f7dd0129caa4730dbd919d0c0f1b6dc2401

Download Submit
/data/data/com.gcteam.tonote/files/.com.google.firebase.crashlytics.files.v2:com.gcteam.tonote/open-sessions/66CAD9C30227000111A40A370D4A6A01/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.gcteam.tonote/files/PersistedInstallation3186327300770108584tmp

Filesize
562B

MD5
d49265c498ba729154ec7038835b1821

SHA1
87beac674a5dfa77b449d3eeba5962404a69a9b0

SHA256
60f81b92a19d3b33e0e432c1744de0b813ec1f1947efd8437ae571693a65e57d

SHA512
515dcc61e2cdfab6956799d6f521d56c166b47922dc2da76c2416e77b963b970218f79304f492a2d3914bf1c525cb49c11852995af6236ea956788d22aaec52a

Download Submit
/data/data/com.gcteam.tonote/files/PersistedInstallation9122166184373353682tmp

Filesize
90B

MD5
6295f095cd19206ddc3204d8a8d82633

SHA1
a1febc7aa42b2be2bb5ca8f4644488836f9ed29e

SHA256
281a7ea7e5bfb97884a222ca1c0e330c7a1aa37b190db154708a6850d3c34572

SHA512
b3560486a7b7f280b3d9b55f3e65dc51f720708fa74c7e778dddfa18c82433de05946f45a045030078c933d715d994a8f924745b5c8f62a6886303b157f6e0ce

Download Submit
/data/data/com.gcteam.tonote/files/datastore/firebase_session_Y29tLmdjdGVhbS50b25vdGU=_data.preferences_pb.tmp

Filesize
50B

MD5
72cc7a681667cb46e9368f15d36f357d

SHA1
aa20f89f5f962c8c1d7043dbeb1de229bf120457

SHA256
b9e01e2e5968187bd215b5e42492b02e85bb939627434f01913a295039cda7ec

SHA512
2d0e96e5ceda8abc793db1e4e4c5d714033830c1ca83885eb112ab656deb4ef1cc31423598060b67b63b70e97b32a5fc797c0b6371e51af1d5be6e6945e5f5c9

Download Submit
/data/data/com.gcteam.tonote/files/datastore/firebase_session_Y29tLmdjdGVhbS50b25vdGU=_settings.preferences_pb.tmp

Filesize
33B

MD5
a65b9b3e4670dc3b48a9609f816ad531

SHA1
682a73f2c248815fba0cb50c45031a53d6f8dbcf

SHA256
a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6

SHA512
6c06e6791dd41c1c8d8e0246e9bf7fed81dbdb5e918e7dd78cc2af1f002f8a532ec28335b229a0ec5c1ee220861092cb1a7c7f4060663394e420d80ed391179e

Download Submit
/data/data/com.gcteam.tonote/files/datastore/firebase_session_Y29tLmdjdGVhbS50b25vdGU=_settings.preferences_pb.tmp

Filesize
75B

MD5
06bd63584cc699cbc92ade3aeab0ac42

SHA1
e21167e5419847271e7f67b3b286916b8124165d

SHA256
1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef

SHA512
675f177e388425023df5e19cda634ab1e7673681feabfa7bb860089105353166491d15b8c86b5408833230dc5b0ac43e2b5a61e1d36ea0b40d6ce7166bfc385e

Download Submit
/data/data/com.gcteam.tonote/files/datastore/firebase_session_Y29tLmdjdGVhbS50b25vdGU=_settings.preferences_pb.tmp

Filesize
121B

MD5
1fbccf7b936a9b713de5d42c6d8a075d

SHA1
7c8bbdf9151e7f53e2675329d471e552446e9ad3

SHA256
232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513

SHA512
b9177426b3facda6d86b5a83d05805a4dd2f5357d4979ca7282a13ce3f08ef7e7a0c5922675ada826bde264450b1b4ddcc54eea4de62249fd3eab1ec9acf32cf

Download Submit
/data/data/com.gcteam.tonote/files/datastore/firebase_session_Y29tLmdjdGVhbS50b25vdGU=_settings.preferences_pb.tmp

Filesize
163B

MD5
14770edbc1290230aebe82f8dcc730a0

SHA1
f86874de3ff45c2dd7c982f9ada6b5fc979f082f

SHA256
7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2

SHA512
c6be6c93262e0c42527722af20fdd3be2c9936eb601280c36492e0bb2151bb63f88bfb150690ae361c75d01a33647c2440bb49e290af38c5c5af5a707320e3de

Download Submit
/data/data/com.gcteam.tonote/files/datastore/firebase_session_Y29tLmdjdGVhbS50b25vdGU=_settings.preferences_pb.tmp

Filesize
212B

MD5
ef2507c8a537100a03c48b162eca842c

SHA1
20525d0703c2b4a679874f70235fcadfb86e6676

SHA256
ca76265753374c681de8ecaeb82b409e0e6ceb6ca7424ddc2ec55dd996ad43c1

SHA512
fec9d155c713e8292e7236f3e59ea1b6bac78753c91a7d07c6912cb07b63714c6e6d9bca0f758f7d3c8f6bc270b22ce531305ef54d7c6c2fc533a17262642626

Download Submit
/data/data/com.gcteam.tonote/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
28530fa455b391236f5fd6c24eb2f3cf

SHA1
ab485533e55ae1a270557e2b678608b5c48cacf5

SHA256
b394755d105f8d0b4fe0085cf258926bacb780635eb03e834df7cbffae745815

SHA512
83fed0c3daac62e6d7a3b29a5d4e0d9c5336e19bccd35a2e136a4d31e7a3fa223dc1e5dbb39595ac22c6ed3876ec961df2dd6c4c0365e17e56ade667e125673e

Download Submit
/data/data/com.gcteam.tonote/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/com.gcteam.tonote/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
1683b0c524d2af0cf6d8cfac0631a678

SHA1
b80c002648f3ca7e71658f929d809ab05c9487e4

SHA256
01b869db157526cb38952d0f929be24d5af683503a7150cdc503609ee4e93326

SHA512
2012527a5eeda07107a82b8866c18ca9a887fd228188e7f106bdc73dd58137c973f67e5c14afdaa85eb7b80cc94453e4a4e6c2f600013d39fb78243340a8b857

Download Submit
/data/data/com.gcteam.tonote/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.gcteam.tonote/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
1bf25d3f2491f556dd3b5e1e12704eeb

SHA1
4a56e0cfeaaaea897ed5f221936f05fb3034e9cd

SHA256
e9fbdf15087ad911743a161462a29953eaaaf43c7b18ff91e4249f73bac4ae61

SHA512
5b3c0b80046a6e5156cb8ffbf936fd892795acb7aeae384410a61786b3f9b2849f090b81e13fddbbbf7f861f54bb768051b5c60aadbf6e963571433d902bf5e5

Download Submit
/data/data/com.gcteam.tonote/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
a751238183c1fea289b70ae423f5dad6

SHA1
72e32bedd8a2d5fb89538599c99b0c382447edb2

SHA256
973a128ef141ccc59914db7bb432ba70a89383caedc4f87c0e0d7f5ec43dced3

SHA512
3dd647aa94a5ec3beef9e3609dfdb381543870833b74ff6bc72192aab3b7216968d3aa6e3a2ed68153bd13e3c8b164a069c52143a49dcfa9b149588d8a83e647

Download Submit
/data/data/com.gcteam.tonote/no_backup/androidx.work.workdb-wal

Filesize
189KB

MD5
2ff9564acf59f6dbd2f67eb1ee7252cf

SHA1
0909a9ce62924df52488eccfdc9a92f579501074

SHA256
86c2b9c55a37527391dded747fa148008e424f6410e27f69529c70c2ad9a87a5

SHA512
fd2feaa55d14afdaa5bcb5b880f3b9a0bdd85afd8d9e7f523e35059698f3e7cf422102470b00ab9d81c52100477b9b08c5a0ca47fb103ff6d96e23f4aff62cd2

Download Submit
/data/misc/profiles/cur/0/com.gcteam.tonote/primary.prof

Filesize
3KB

MD5
bc4a76e73d7fbc868a2b7395b003935f

SHA1
3bc29fd477aa54ea4210b0b8be587678d12112da

SHA256
f065488a0ef5c189eabfdbf4a75ef18ebcd03ad68fd6ed36d26252ef9f629248

SHA512
c445fe9dd264b61121d54dff6eded696903424d9be2724b8de10a5b6d340022279915178b2e80f02fcbbbeacb987d73a7f0d45359b2633d9645589b82c99e013

Download Submit
/data/misc/profiles/cur/0/com.gcteam.tonote/primary.prof

Filesize
18KB

MD5
c02a784e139f72fddad100369dd88ac3

SHA1
970f64e3c446e731b38f7b4e0ed29323eb26318c

SHA256
92818b445c18ce616f9cfe497410c1abda3cb3ed24c0c22f153215f859045376

SHA512
7d64e9c1672e84b139f5ab6e57dd9d52e9ec8ed1f18d18aed738335b782ed58c3abe8849aed1e0c080ccee0f4a6143c0df0ab3949c2d5c555204035ed5fcb359

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads