c6597211b68d47393bc2686426574ad6167e3a5ee78a51f9c86598eb48d614b1

Analysis

max time kernel
151s
max time network
152s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25/08/2024, 10:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c08227a5edb8585e200ca6bb6330c126_JaffaCakes118.apk
Size

4.7MB
MD5

c08227a5edb8585e200ca6bb6330c126
SHA1

a63d0376795e9159eaab2de4c8bab340ea672ed1
SHA256

c6597211b68d47393bc2686426574ad6167e3a5ee78a51f9c86598eb48d614b1
SHA512

768b2afe77ac65a0ee46f32f481dcbd3bba3d5796ec54e2d27f20c6c8ec8b06fb9a956dc5227eb64474cd7f63443db70f3117f1e51c659ac9fcef928be3d399e
SSDEEP

98304:Ftc1Bb04zDisHePvyHxG3zjutSezEFEO7CVj/uG5ukEfX4Ee7axG5pYOKSedE:FaY4/1kqHIyzEE5pWNLR4axG5pYPNa

Score

8^/10

banker discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.live.xxlive
/system/xbin/su	com.live.xxlive
/system/app/Superuser.apk	com.live.xxlive

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.live.xxlive/cache/gg.dex	4260	com.live.xxlive
/data/user/0/com.live.xxlive/cache/gg.dex	4319	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.live.xxlive/cache/gg.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.live.xxlive/cache/oat/x86/gg.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.live.xxlive/cache/gg.dex	4260	com.live.xxlive

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.live.xxlive

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.live.xxlive

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.live.xxlive

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.live.xxlive

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.live.xxlive

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.live.xxlive

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.live.xxlive

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.live.xxlive

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.live.xxlive

com.live.xxlive
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4260
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.live.xxlive/cache/gg.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.live.xxlive/cache/oat/x86/gg.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4319
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4418
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  2⤵
  PID:4437

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.live.xxlive/cache/gg.dex

Filesize
164KB

MD5
45fed4c5a279c6fa22258ef963916cc7

SHA1
bda125976f40b8fdf84580d3e0600b3071c6091e

SHA256
1354684c547ddb91f703160e0111818458b32381da21f1fa103b90b92539e34f

SHA512
798651fc48c856c564d92e48aa4c75e30c2cef08815648d11312b08d366618ac308d0d4e25426d2514cfa74b08e4b87ecc98f17ed24ab01ca7e1f8098c0b1d29

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/1a63c68bcaec41ac164115209013ddfaf5389b4d21763b4fdbd9059b88cff7f8.0.tmp

Filesize
1KB

MD5
44c3902f8d1a5726ea8533868719e71e

SHA1
fb875d8a486c184d3684d00047dd67282d0ab400

SHA256
a451bb00c03a27c7f46489d84cb733eb492c549b0cba065201f05d4bafef27ba

SHA512
20cb3587db296d8cce3bbe737f4d05e194fee0d8010ce7a93802093ea189de2e4d090c261aee67ba02e8e63da68227c5300aee0c4bae5aaf8a88647beba979ca

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/2413994b1212be5cd69945f46a3ae842a985d3560acc3827de5c395dea67afe2.0.tmp

Filesize
1KB

MD5
1ff046be5445940a6fe0cb71d1ace55b

SHA1
c70ca2ade978aa5efb38c2bb88edc96e658cab68

SHA256
58c62d05819a0fefc4772b718a8f5717676c56c896e6c494a8c7d80ec08ea43e

SHA512
4700e97f879b50ae07477b2d5b78fdec7c735780458a3322cf84f17f8d23af7ef75f3576855c3ce6167349944e8dcbf8de5a98e5a452af7fd15bdcd8732adefa

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/50c9224dc5cd8e5f496e9b1f44d1030e35a9e8670a106f09a6d8ab849d7ea5f9.0.tmp

Filesize
1KB

MD5
2a1b201c3b5d2d90a68459a60a9ce671

SHA1
a723842a9f6b2c7eb4ebd6865aca3695ae53eb03

SHA256
74a9d4a207fa3a97d2c160dbcf43c11ec6d5be457f240ea232b9ddab7f83b643

SHA512
24dea8c93349e9fc34eb81a0e77ed938a4f831d313ef0c1ab1d1e25684252996de90326288909d8f3dc1b9b35dfe1987962cc2325024d652cb3ae5a0ec1876a5

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/70050b75bcce6efc36dc6e03db67d8a559c1efa04af3ef1ff02b04052b9c70bd.0.tmp

Filesize
1KB

MD5
7d1a8429377f2276af3eb71dedc41b08

SHA1
06385223b02bcd0e7d7b136365217412fc084ec5

SHA256
b966888a3e63cc8318eeb1bbe8d24a3b66bc53dfc8f2b13fe5bdfb643cdec01c

SHA512
5bfb5a1c644f395e18b1fdc2abb90e6b49cb01aa0c1ee4e91a2c98336a8a5fd1c40332b64483cac549cbabad505732045de146077cefb5ca4491b7a0cfbdf9f2

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/9080f86f56a8887876ed4fad507cf2199a2b894c113852e87f2bfc35717e1a5f.0.tmp

Filesize
2KB

MD5
8cc53a91707edc8a2506da6f5a1a18a1

SHA1
e332a191de15617c5006a3950cb7086624e37b06

SHA256
7bda784216be14e68c906c39031c42b8be17dc4d0a4467968987cac471e711f9

SHA512
121cd0377dbe4dbb82218f988c8f5a803d88455d0192fa54441dccb9c90c8c16cf77328cb1cf29ca59bef48f45a419c7d8171eae3d4b6a7facb4a03cd9b74134

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/afb31af1a661a689b76a95d09f06400c074680400221a858975f97b8894d860d.0.tmp

Filesize
1KB

MD5
6578078da08ed55cadad0b9769a1328f

SHA1
be10279ccbf9ee2fd34d61a1fd3d1a7f48f6c351

SHA256
d7a62ddca22fcb4a8d591c84cd4aa62cc1069b1478009eabe6d5d5163beb1542

SHA512
eaead140a05d72736a7720a7306550fb80d7551dc977e05224dc9d73a4598fc539cceb45c2554fbb057575d010bbd8c1a6d1c66890a5f1fbe5257919f6d43e66

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/dd40762c624679e4d00997850b9e566b6c83f29c33e00a5d032bed7810ebf7a6.0.tmp

Filesize
1KB

MD5
b873a0a933a8864137127d10f497eaa9

SHA1
b2357789b095bca7b484103b7e0a925934d077b3

SHA256
7f00d005566fed003ec25621210750af19fb236512d7a0e14cdbb5f1b3f1a6d4

SHA512
9f29212dbfd8ecfdc822db4b5e3c9dae7b1245e5dd636368f83ffeb56a5a29f2ab66f650d14f54b7ceb26935db3120339bec3221532a26d0ad2deee85168b533

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/journal

Filesize
1KB

MD5
5c0cbf042e3c73a98f9f7c9bea44a8b2

SHA1
f65be0fd8e5a2e5476872e6a318cb2b87f872bd8

SHA256
df027d17975ceea8922c57fabb51593012f8302022520d7fa52c2a0c6aa350a4

SHA512
12796137a7948dec90f5a961ddb49f71df9d23994bd50f27eae1407934879c98be68edab2eb9c3abcb9c28a1b613a0fcc44ec45920ea5c6b75cc13b3fd3205f5

Download Submit
/data/data/com.live.xxlive/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.live.xxlive/cache/oat/gg.dex.cur.prof

Filesize
118B

MD5
0a30646199a1000b284c96a6c917cb17

SHA1
78c84066d81c8b116001b42453e240f17e775228

SHA256
e1e93f0af017519eff9977e3f0bc277f6530c1473ed242f1d7349fdfc13b6d7f

SHA512
2543f72273d97b0fe921ea6d4c10675b04a3b038c5a57c8082ba11282c9a551e1cada65c97696e025ba720da8278837251fcd6d2c196d20dbd7d06188b755c9d

Download Submit
/data/data/com.live.xxlive/databases/share.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.live.xxlive/databases/share.db-journal

Filesize
512B

MD5
b0bd0d47f7ba8103b4baea255db1499f

SHA1
e96953d07495ab40801dc71dc572e8a6ede0dcfb

SHA256
0f8a3cf189b5e86f2fda4404fa728cd878784ca46f90db442b3d4e7b006b9502

SHA512
3e6effa0065af99773f7148869a9621596528383602a9003351de768ba8ccffa786953939391ddee1e40e9fe91dd9621e26015b5794a46802f8746d4de6757cf

Download Submit
/data/data/com.live.xxlive/databases/share.db-wal

Filesize
60KB

MD5
dc837b578efb4383c23c81881aaca4d9

SHA1
b607b82df7982de95c0d8a8df0102e5d7b693825

SHA256
da7f6336a69cf61a8c02e019e0f0f9dc76ec3bbf4fae4efcd0ebc6569384632a

SHA512
d04f3b2bb86f3b98d1b47fb0a5c3cbb75c2a791509e4be03f015ed81e7683153bbc4ef899a3115d8fe5e011944d667f0bbd5384acda320f5558ba5da5f37b2f8

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
36KB

MD5
0adda9c85a5e4808f5b1b74c0a8591a5

SHA1
5048107883ab1e345af9cf2e6849ce46e0e612bf

SHA256
1e17860bba2bb4e3e92df3890aa6dddc973d6602c71519a15556d37bb69de2a1

SHA512
646061d3d5849772511bd94e36ca2d775a9a672851629d1812942ec0f0f925714eb7d4ebac44889911320cb6710a2f586014f6b1e126739cab653c4f8deef2d1

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
24KB

MD5
df0a5a1d70574c8b8909da23088c3d42

SHA1
c25b272eef28cf562b7baf3b9a2301ce73bb4f89

SHA256
b6581910b9a8cb5f577b783bd222f4507edefe0f5f56472a9bdf25cbafb9e4ff

SHA512
0578ade8016155e3b9f8c61d107fef26581dfa440796fc8a6e7be2e1158f340852e88013c9157de01873f00dc3381d1ce2d6d762a84dd96ddb30e2ccef4017d5

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
7969ee1a379b0ba8fc44557da4941cbd

SHA1
72075cbd6138c65ed06270cd9d34dbf6895ed8eb

SHA256
fc84526ac6381bbb6f7b5bd2ba3bffd3f837ea2e064d7c3f20a6fc525d39c180

SHA512
7f22983896bab1e9f61b4a98533a9010e56881d6d638a54f8c00a5dc572d8c5da0715e19dd7b739eb0f4bcd0cebab951a20e3ec4b0634264d34067fdf86ae1e0

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
771a03b6d8187b1c2f8cc70806d57b91

SHA1
c85a7d8731a096c0f94b4381748da88c53d5ec5f

SHA256
157a69297e2cc76bbea1de577a019f49ac10712c6ca464c37d11659fbccf9377

SHA512
100a01b9386f167dbad681ca8e38a285d41e2c45cf5c1f7d6c8780c8beea02aa422177b0c7f02601cb73c8056a436946f33ce9ac8ef076e6fc1cd5f5b899d5e6

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
6f2fedc16a2f8f4b0f01057b8771419b

SHA1
17005037de2bfc1268847858e1745b8c70633fc0

SHA256
daabb64ac12273678d56df953cf509d8d908635a4d5f2454f14d29e965c3a20e

SHA512
574c458295fe92c12ef752788498ba20b77a3bbe97a1103bf3a5ead3ea760b09048cccd09f29f970ed6b1fbbcbbe8a7cc715ed0a03f6251a8eebb775b0c5b00a

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
2bf57792a8ee6e17a88fa88113cbcbc3

SHA1
d0790cba149604a49112e2e25a1a057f165d7840

SHA256
764a538fad9c1ff0402520e9199860d9d88deb96b8beb14610eda4e350e4ed13

SHA512
e160058392998ed828eab797893ab330cd46a0c1101111f6fcc9c9bf65183ee85454149b88901da58cdd2aa550f0a2f80e8e2fee7ae0c0832a20918218587198

Download Submit
/data/data/com.live.xxlive/databases/ua.db-journal

Filesize
512B

MD5
adbfaee8fa3e65965ba205b8c6046548

SHA1
4dbad1dd1ee4a7ae74d3a64c4aaa31c819a60857

SHA256
d0dc47202cc73f5af7be1e3550c8cd6b6bf550480860e05bd2ef992751dd4348

SHA512
3d53eb94de11d287846a941d600fdb1a27bda4bcad615d5ffa0d9c66e6330b9720c95bc8338b7a398d65dcbc3394a460aee04dc8009b43b15365640584305cb3

Download Submit
/data/data/com.live.xxlive/databases/ua.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.live.xxlive/databases/ua.db-wal

Filesize
48KB

MD5
abd225af2923d16a80db0a56ab3a4557

SHA1
1b8c7ff8bf29863c1682a0300419c27f72b10917

SHA256
70247b2e22e9a11a176e98af25ae7a99c74736dfb3d036b15f3ebe926954ca45

SHA512
2b34ac5ae2f3436ac1867affa9c80f6d8009b79b1e266a08f0a0086b813564e9ae47ea766647c8ba99a36513b620b41810e0f1020a9fa7d3fd21a59194ff1568

Download Submit
/data/data/com.live.xxlive/databases/ua.db-wal

Filesize
12KB

MD5
7c9fc0ad4fde4fc92de651943db87e3a

SHA1
7439d922d498dd2df69bc39bd114896f49ccecb3

SHA256
ee47100e32f3d2c869ec87a17a27337823d369d0b643437486f08b0406b5f525

SHA512
5119a4d1a445e2aed8c49d4dc906da8250b0fc1a181a3708a9b45886e86fdcbf1d32199ce8314c7e5dadc8543b028e8e217711eb38902baf2281b323ab10671b

Download Submit
/data/data/com.live.xxlive/databases/ua.db-wal

Filesize
4KB

MD5
7dbc492e0186efb91fd8286121c01f29

SHA1
6ca871de2d159e45272e7a2a5082b2afaabfcd82

SHA256
192f111f0d059f02c9dff0dd4677e97add13d6bca92a3471f61b2caf50b3dcb4

SHA512
aec1efa4612d76827d4df3b0e310df87bf09c2b7f3513d936758d85f15d70408e2e7b56626ad229cfe1706c3223e00c85643892544f7afa595d424f2dee299e1

Download Submit
/data/data/com.live.xxlive/databases/ua.db-wal

Filesize
4KB

MD5
6a7382ca2bb534c0aba005295e03d08f

SHA1
ac70665bd3fd451cdac26dc9224c653bfcdb2d8e

SHA256
3374aff5e9416a05f149ea480d65b37d9533a70709175ca2d552920cd43c0476

SHA512
a5b620610e6b6953d22e1187f075c4f221ed66434861158cb3c25f46910320ffdc3dac8227ada64eea7d83ef38db5316baa3af464dbd1c99c2545a8ddc16ba1d

Download Submit
/data/data/com.live.xxlive/databases/ua.db-wal

Filesize
4KB

MD5
4b1f897d2705f5bceaf312cc22c5d688

SHA1
ac6c6eafe08d293d1d945b9932091a18e42548dc

SHA256
1e36aaa354e1e1980d0b48303321a5e71ed9685cbc81faf0eb32ece1094bfddf

SHA512
301cd7081a55af0f4d57921a9cf1e97bda4283f8323cec51795bf715faea980ab7e74bafbc400b22bd96df71547ada881ac0463fd3f445b810743697e58a930e

Download Submit
/data/data/com.live.xxlive/databases/ua.db-wal

Filesize
4KB

MD5
bae65ec46927263434b0b5977554bd63

SHA1
7c7c77079d552d56afd31c076674b110cdb5f0b2

SHA256
b2c1dabf848c160bde135380d4d761f570e19db29033de93aee7a11bf10d78c8

SHA512
03de4295aa4a1880c85138614d55ba989dae974879f69587c8ea93df0d10ec46f6b4de3d7aa375e8063ca2cb8ec8c145130b6ce9a657911cd73548fc7a1a6a31

Download Submit
/data/data/com.live.xxlive/files/.envelope/a==7.5.3&&2.2_1724580663100_envelope.log

Filesize
1KB

MD5
22690495a8f65d5ae079508d71a0498d

SHA1
bc84fc54e2b270e27b8e2d1341eca5178b79ae62

SHA256
1eaa1a8ecd2f12ec0c19455d0d3aa7d87fc59c044c033adaca3c145cc823c1b7

SHA512
bac6ef683e5fca67a809b2a82b4ea7f2f96360b16536e144ac4d5da7f7d5c2e87b94bbd8598f6c60cbbe0ab1112b496146a38047a76c119fa44a04d63263c85c

Download Submit
/data/data/com.live.xxlive/files/.envelope/i==1.2.0&&2.2_1724580661508_envelope.log

Filesize
2KB

MD5
0b72e1919bee87046d9a9215c963e6a4

SHA1
472e16062ac16343614e6cd4f1f7679e7579fad6

SHA256
00e90811e82a13ec420c38ebf866458048d5ba2e679797d9ddd5c64aa8d764ed

SHA512
29bf161d458a5da646446b0318289b6bd64b7e29f218b0a312b15e852459f1bd7dd81ea07bb1041cfaa28c63dd9727c150c587a88675ffd811e5000d1be92b60

Download Submit
/data/data/com.live.xxlive/files/.imprint

Filesize
486B

MD5
33ada69b370db0101801364a0158e0b9

SHA1
0b1d08f03dd060758c075c7a16f7ded22de4b7c0

SHA256
b7438df0a28c81448250eb3dbb83883f567db86e5d17eddb0330186df51e3c62

SHA512
90c0d2f67842623d151cae32322b5e9f89321b5e37226db9adfd7f6c8aa22820f5a22c67041becc71da00286843a525c78ec2cd6cec82805764fa1f5fc081fe9

Download Submit
/data/data/com.live.xxlive/files/.imprint

Filesize
991B

MD5
ba64ea3cdeed3a57d0388aca11ad0f58

SHA1
c140154205b1f762707dcfb2edb636351567f3ec

SHA256
2d1f0bcc797fc198ad9f1e3bb6956371ccd8053939c5ee877cf40d9859b79269

SHA512
cc49c3026efb114d050009cd9159f834e078823b1c79745c4a1c62aedd2094a9a22ad9f3cad79021151c9020a0fc11065b93d5a3e0352a46a848cc0e2be4916c

Download Submit
/data/data/com.live.xxlive/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
5da9384629fc59e416dd625f74b3c4ee

SHA1
c1eb268f7cb9b419c4cde96fa30ab767c0c06c52

SHA256
e5b472def159649948b1d3acd1aa83556a064129deb3028d2cc7aef84bff5d9a

SHA512
f461ad12c2e5173123b3d0a009aa2a8a3b7319107deae1a8e930b2a4d4ac9cadbabac98316303dca419ed3f1e90008047666555e6b2dc748a75314df016b3e78

Download Submit
/data/data/com.live.xxlive/files/exid.dat

Filesize
55B

MD5
7f5b373ceacc275bd9fe6cb9d1dd6dac

SHA1
6a64c15903d39fcf07ca0525ecbff1468e8b549e

SHA256
d443c8dca51c12c563de6811a4500487055d4fdabac330620509be20adb998d7

SHA512
84e34619434180bb9ef70a78876ccce7b01ad24880777af6519bd864949c72b45cd2afc8d62fcd061a0434ae1b0805e7237b3700295af2a862947a4ea305d8c2

Download Submit
/data/data/com.live.xxlive/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI0NTgwNjYwNTIy

Filesize
1KB

MD5
a0c522efe8f266d6da3c24744dcca4b7

SHA1
ca9409c42202d9f1f61896d21e2560f935254123

SHA256
2d21d000d0ff8d50ea8c0ef7cfe10ccd628244c1e8f2746af1339146c5ea449c

SHA512
5229bc6be062e0e5cd9a544930fe8c568003bc3c27bd9f6d701f7b6b582b0937539f404d9de80001349d507cddfb3fd8ad579ac8ac1449a80fa6615bb5f7d204

Download Submit
/data/data/com.live.xxlive/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNzI0NTgwNjYzNDM0

Filesize
1KB

MD5
c2879d13dd0ba08b41f8678c64ac74fa

SHA1
7546a5e16b985c8061a38fa54211495abdd87665

SHA256
6eaa7e13f7294a8c39419eafb173a7f2f5c0249d9e6a30366c4716cfecb71a8a

SHA512
74636af5de4cde2b701baa2e66aa5616d4c0ba69bf0f97d169cde76345abddf40e8d0eac352f19d11fbef270fd681d7f312ef25aa64ab25141791b873035d219

Download Submit
/data/data/com.live.xxlive/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNzI0NTgwNjYzNzQz

Filesize
1KB

MD5
4df658fecb056279603e45b2a7cd3a97

SHA1
e6a7f1ac4c034611a304033b06c7c3792496251e

SHA256
373bf877a2ddd4f241a94324a14e55ca49ba75398b6532bbb869a9d4a453515a

SHA512
779ab20e7900a8f82c689fefa4aeb4fb01addb3361924f1fa37a5b90998969d01e8f2d8cf3fd3640b2787c76e9dbb5e1d9a1df4f6473e13ee5b0fbcb34c531b6

Download Submit
/data/data/com.live.xxlive/files/umeng_it.cache

Filesize
211B

MD5
224e466c4c7f840b28692e4f3e7cf642

SHA1
803f8adddd6765faaca9361a7af8c61a85385edf

SHA256
e91f45c30a666948683c1c165bd5f2ffbe33ce62a1f539cab988913b2764e433

SHA512
f3abe2aedc0e054ad5c414bddcbd10aa76d0e5915e9d4affad4573c46341233d5455453d5b638f47fa37b5bccce24860ef2d214e2d6b9e7eed1f236a386d51e1

Download Submit
/data/data/com.live.xxlive/files/umeng_it.cache

Filesize
415B

MD5
9549f40fe1f3d2bfa17a9125ee7c7b92

SHA1
751817088e88b00871930188f9d3e3a1e1a5bfcf

SHA256
650384a8cafac1e7ba97a08e853da185e86e24d92b2c2717423f3ed7bce519ca

SHA512
a0ed12ecc21404ff8c10fb9ded4a3f02c7c05a4a900c1f9c5cc30ed2b6c3a33371d681d10b3c3c3892928aa9a61285bbe32d7b119bcb62bb1f1d2dfefa3baf05

Download Submit
/data/user/0/com.live.xxlive/cache/gg.dex

Filesize
164KB

MD5
8d18eae9199c1931335e8e4b720c098c

SHA1
77d13dca11a7b022633abbbd8f236247183d001f

SHA256
ee3ca8c648ffbb0b6551ca8f6985f1c724cffa593bf1e98c8da107936f48941f

SHA512
086786978fd5ce87453d4f520d19de97efee0da20621e488150b6b87742d57a022024dae88156be2f8ac9afd7921c534c5dff80f5578136ed80067a1711955e6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads