c6597211b68d47393bc2686426574ad6167e3a5ee78a51f9c86598eb48d614b1

Analysis

max time kernel
159s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
25/08/2024, 10:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c08227a5edb8585e200ca6bb6330c126_JaffaCakes118.apk
Size

4.7MB
MD5

c08227a5edb8585e200ca6bb6330c126
SHA1

a63d0376795e9159eaab2de4c8bab340ea672ed1
SHA256

c6597211b68d47393bc2686426574ad6167e3a5ee78a51f9c86598eb48d614b1
SHA512

768b2afe77ac65a0ee46f32f481dcbd3bba3d5796ec54e2d27f20c6c8ec8b06fb9a956dc5227eb64474cd7f63443db70f3117f1e51c659ac9fcef928be3d399e
SSDEEP

98304:Ftc1Bb04zDisHePvyHxG3zjutSezEFEO7CVj/uG5ukEfX4Ee7axG5pYOKSedE:FaY4/1kqHIyzEE5pWNLR4axG5pYPNa

Score

8^/10

banker discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.live.xxlive
/system/app/Superuser.apk	com.live.xxlive

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.live.xxlive/cache/gg.dex	4490	com.live.xxlive
/data/user/0/com.live.xxlive/cache/gg.dex	4490	com.live.xxlive

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.live.xxlive

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.live.xxlive

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.live.xxlive

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.live.xxlive

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.live.xxlive

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.live.xxlive

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.live.xxlive

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.live.xxlive

com.live.xxlive
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4490

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.live.xxlive/databases/ua.db

Filesize
36KB

MD5
4a8120c91e3143b2db43971dbc77cf8d

SHA1
37c5700d35059c4e0a718ced73b3d73ba5d2b277

SHA256
1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb

SHA512
465cd282927e30a0a894a75ad261feddde5a31869c8cea6b548362afce08fbb7cff7a784bd1d62c3e4c95916ce30e758d3919dd4cdc13176f29d68c2620c185c

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
c4d08a7e6713b987f29c13022d1b951d

SHA1
5ac0c9fbb2448d1614d18de850550b7f42d747bb

SHA256
5400b33b588069511a36d3cefb4a1984061f7851bd748b1f2c2e7f8cfea4076c

SHA512
5ad3a144c2934cd3e2e0cfecac5fcfe3c5f266842ee0b63e7da593fc3fe50d8b84305ebda4e3cc75409fd5bb75c2b1c384093a5fc1367741cd92e9f0987a205c

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
721ea0acaee0c72818707ee5eb42a6fa

SHA1
f79b3b24882609bac9cc8e38f12ed55c4dbe9e7b

SHA256
15bad8f891adba3050ab36e94d52cf554be29afea4bf4dd0623370fcc4268793

SHA512
750f473dc88397ee13f47a3665ae9d868d197e0cfa7f4cbbf82f98230e2203d04c76b17dc4a1eab34ca98f1c463061dd00f789768fe3a0981b49a1d34bd69622

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
3f6e8cb1ff09793cf3f3de24681653b8

SHA1
99ed5163ff526e2f669514eea999b8dfcd20a9ce

SHA256
a7b292a0f571b7d8532c8c15d2cb1bfc1d0fa984e91f267b1f1b4cc1477a9867

SHA512
0f5878e9fb91e905d16d33b62d80ce2679e0cec2d8cb79a574494d54dbd10c6470df36f8121039489ad4b2d1e03bcd963df4626cdee3519b81694fb4265a6450

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
16KB

MD5
a327e220b7a012bba8fd1f72bc463414

SHA1
55e19921b3be1ee1f353f9317200cf278a844005

SHA256
026361ad3976cba56a27e226871648c9f113be1826e05170eac85ffa776c6c2f

SHA512
c82229853bbb4f3fe7618102a9d6c2cc53d3f3f2884f8a1aee4412e8b07a55b936ec9d237fdb1b892665ff2fa7e967d0194d57fe91e3b127633656281260b26f

Download Submit
/data/data/com.live.xxlive/databases/ua.db

Filesize
24KB

MD5
730e25303def4d28f8e90f24ee986e9c

SHA1
8efc867fac54df7fe08775738fd7c2c61f10c80d

SHA256
c50d9352885aef24478c86ffbad9475f4c20827166e41617aaf352bef1ac5ddc

SHA512
838271d3a298ebac2b02fdd689d436d3ecc25ef82d93333bd2db501a26d1de90dcc8e5fe5ec9d2e1a32b9bfbf90c3ae8038b6a490984640ff963d39891c96fd9

Download Submit
/data/data/com.live.xxlive/databases/ua.db-journal

Filesize
8KB

MD5
ecd62d9f272ed33d0e02255fda86bca4

SHA1
9e7544e3986a480a65cbde50096ff919d6ab56d4

SHA256
00561219e78bce905eb2e4847e04c8812020ad99ef3cdf13a74cb44e56946d75

SHA512
c62dc30ce218de0dc39c1de03538f2269d59d1ae871de06d484f936b74414878f1c1f0d2ed3562e34c27997a2b997864ee4f3da38c9c07f11a7dee4cba980855

Download Submit
/data/data/com.live.xxlive/databases/ua.db-journal

Filesize
8KB

MD5
f837d8bc311c4170b5734a840e5d707f

SHA1
7f5b7c631bf9f2bee855afc018fcc588600dd636

SHA256
86f4a12141f540c4ca77565ba898240667bc9d39c32ef2f6d8c6117d9ec99b30

SHA512
b17b445edd87b7d4b95cc9346966591f4c0885ae81db7271fb5960c5a25da19ae64cb857e9f771bce027345db6377f458b634de7f01ca5fd3a05f3f26549976e

Download Submit
/data/data/com.live.xxlive/databases/ua.db-journal

Filesize
512B

MD5
69b97bb5c7a27ceeb34d0605c40870d0

SHA1
a4efb2a824de392a726358c2dbace1b941671dee

SHA256
1236720ffd886fb7dc115a8380ca45054a6825c6c95e34812e47c232093436b0

SHA512
2aeb1c3bf85cd7e78b1f6d0367cc65ae9c9a905527a0b0a6e70354bcee3a368d0d52081a92bc9edb2fce9d46ee958b52a1b47db363aaf154dfc4655ad94352bf

Download Submit
/data/data/com.live.xxlive/databases/ua.db-journal

Filesize
8KB

MD5
558128bce6a4649570d20d9359a34315

SHA1
c12f1803e0a8261aa3f4bb7f8d26def1ed2eba3f

SHA256
8a06fb1b85eab0f1cc7d896fbb1d00e7aed9a5fdc9e3d279fc4003a28211800e

SHA512
304998cd070df6846dd60cf41fb850f8c75be2e49042733f5573a94ab89894b2c94ea4913a4677b6bb4733ee37c6ca5c0624818b726f9a8f10ee450608670f77

Download Submit
/data/data/com.live.xxlive/databases/ua.db-journal

Filesize
8KB

MD5
cfb6d7db035e58dcaa2db342bd151098

SHA1
6306903d9c50c325f16daeff50d4f9a56524274c

SHA256
611a3d823565e0dd654d6d9e8058892c7a31c56907690c1098a15821710d955b

SHA512
1e86caad7b98ac005ee72071aecdafd5df5c8fabe11a5515116897ccf3a8d014a05fb054ab0cf3149c5af9e036a6113828dd52ab32f5efecf25f003a98f8ba61

Download Submit
/data/data/com.live.xxlive/databases/ua.db-journal

Filesize
16KB

MD5
4f9d3d9611bb3ed73c6ef84ca9a18428

SHA1
a02749d1261fb035ea09aa350803867d69921fde

SHA256
da1f580b45a76afa41cb7db9a88697e7621814054e7447906dfa0adfae074a6c

SHA512
858e2ed039d13d6081ec5a8963ed355f6a318ef792e714db1f375926acf99a5732e2261cc7b95b6aae7dbb6bf1866148568cddec65f45e99bb98bf0a171fd300

Download Submit
/data/user/0/com.live.xxlive/cache/gg.dex

Filesize
164KB

MD5
45fed4c5a279c6fa22258ef963916cc7

SHA1
bda125976f40b8fdf84580d3e0600b3071c6091e

SHA256
1354684c547ddb91f703160e0111818458b32381da21f1fa103b90b92539e34f

SHA512
798651fc48c856c564d92e48aa4c75e30c2cef08815648d11312b08d366618ac308d0d4e25426d2514cfa74b08e4b87ecc98f17ed24ab01ca7e1f8098c0b1d29

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/1a63c68bcaec41ac164115209013ddfaf5389b4d21763b4fdbd9059b88cff7f8.0.tmp

Filesize
1KB

MD5
8bc3d52d1e3451da7c072c098afbbb1a

SHA1
33fa661b08835289e6442c17c36da97ae66b8314

SHA256
269044af24942c7a6f591cc1c005557dbd9bf908a5cfcc7eb171ec8b5be30efb

SHA512
48c28d7060a758af7a9f0876262c2ff52273a7a770fb3632f472faac28683ee1fff6ee2c03161ff98e8c82c73bfd5f4728713d202bdfb2d7e322e14d5fdce209

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/2413994b1212be5cd69945f46a3ae842a985d3560acc3827de5c395dea67afe2.0.tmp

Filesize
2KB

MD5
f918daa936d009a1b744d1fe09aa659f

SHA1
ad754502f97b28b72970d6fcbef4dd5d7e3350f8

SHA256
3850d105ff6893ead69f2f8c199e32bc987c51c4574052be68593678cfbe7c3e

SHA512
7e05016c4aa34fef7f72f6754943ba69eec59773c62d7106fbf4056824a15d08cda936f6e1ba79eb78ea0a52e245d08b8eda348855aaf05ddf2491bda896cd3a

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/50c9224dc5cd8e5f496e9b1f44d1030e35a9e8670a106f09a6d8ab849d7ea5f9.0.tmp

Filesize
1KB

MD5
469b41b1cc377a5915f0ac49061a9587

SHA1
071725dd543b8ab27e1120e362103de111a64070

SHA256
cb7c270801cc00eedb3a00a35f6adcc47920111b4aaa287763115cb30b9e498a

SHA512
f8f95da30a112d9a8ae743576aa1651fa80fd5005a1056aeef94c38a9e01215af5da480828ff1bbc15b4c2bf5e29593d560af1471233018ae9650ac7bc74878a

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/70050b75bcce6efc36dc6e03db67d8a559c1efa04af3ef1ff02b04052b9c70bd.0.tmp

Filesize
2KB

MD5
ae8222aa8b5f0e0a2483a02999dc4d5f

SHA1
a70207547a6a1b41f924bbe2ddecdd8a0ee9d081

SHA256
da0db1bf885919a160459fc5308f60c63c9ca4f90913785262c354fc8f1c08d7

SHA512
847858ffeae526c9dbb5dc72f8ee70d29f0612a758e556b64106af0376ff459abd935ca4bcbc8696d0b691344b6681247ce91d1b5d703b1e60ed745ccd74a2b9

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/9080f86f56a8887876ed4fad507cf2199a2b894c113852e87f2bfc35717e1a5f.0.tmp

Filesize
2KB

MD5
189e069aec5f5cb86fe08c108384aefc

SHA1
288509ad7e23ae42cc57d92553d3060e35be91f3

SHA256
010654100d889ee9495d71b99509fd9aad655fe1d476fbc029cec340295bdf64

SHA512
3f93ed8aa90c1e4434ab632cacf06a4e95e86b6435e8922511932ead3b65ccc151388c6e0a65a524dfdfdc6065a36c95d4daf2cf389cf95698f401d0d2f51649

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/afb31af1a661a689b76a95d09f06400c074680400221a858975f97b8894d860d.0.tmp

Filesize
1KB

MD5
2b943d25eba202d2ce4e5674da234997

SHA1
4597839edef2117c409d676e4ad48491405ffe1c

SHA256
4b5efd5689c8e4ec1ba66b934e55e0c144583418d37a106c5740a46073e3fe1e

SHA512
35dea0f244fe5a3ee7e86775d94937ba3a44ab73abe3a51ce0fb0e8f4eec79d793636a6faf27d5b246e12d1541c11e56730c5c24789f320ef496dfdfb9a709e7

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/dd40762c624679e4d00997850b9e566b6c83f29c33e00a5d032bed7810ebf7a6.0.tmp

Filesize
1KB

MD5
eb8fb0d44a02db94d9507b8c6ca1a812

SHA1
29162e1fe059b6cc848d72ff656325d687744922

SHA256
21a2a5c58e4b5de54b32f1db1f009f49ec78aeed878383f2f34584572758e724

SHA512
d4b46580bf0f5bdcc71f11e27efbb62c85e64653e2c0702f63d5cb141d5935b2869c299e61574a1005b02577ee2afe5933e7faebf3b475ee757737f5bc6b56af

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/journal

Filesize
1KB

MD5
b65896c7e6e9564acfadf75ebb6b9aee

SHA1
0175af5aa2b24c5106d77eb1909258bcf7d70cb9

SHA256
4c485d3f6e8d67bc0e7e1ffacd337ed5f1e58d7d154eb7c3d28134ffdd7b6f47

SHA512
e92ed6d6721cdf15c85fb1629b199bd36c567a8146f0bd298f0366b76d012e55db66840885988de26b402ea02e695e47ee2d383db06ace03c0c0a6ccca987829

Download Submit
/data/user/0/com.live.xxlive/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/user/0/com.live.xxlive/databases/share.db

Filesize
32KB

MD5
4d8d2af5e79ba08620d0ce8f8f470958

SHA1
bb8acba370eae0dfc619b5f3e6084adf23b888f4

SHA256
f3129fa04e905e8a600038448690da9e69854eabb7321350a2fba4649108d4ef

SHA512
df9fcfbcfe051751d88db9fbe0925483cf950d451ee915b1cebabd220dc3169b7d2b22f17e2cfaeabbbfdec7076907eac4cacc60491714a4343a4ce4fd75b6ab

Download Submit
/data/user/0/com.live.xxlive/databases/share.db-journal

Filesize
512B

MD5
74b8eb4c618e6003c721a7669ca244e7

SHA1
1ebce8ee42b555da6a5aa9b3bcad0be3768f5c19

SHA256
e47baa0352bf1c59341d1374320ae899ebd97fb46d00872a803bbefbc1e4baf5

SHA512
0f58c16f070cb6681010dfac77df46e74361b867aacc96e7e0d82e44433c1c52f4e36eb9f70b91b4f6048a612ab9b8973b9628603afd5e2947d76cf9220e1909

Download Submit
/data/user/0/com.live.xxlive/databases/share.db-journal

Filesize
8KB

MD5
a603caf0e4bdccd4be38902fb1b8127a

SHA1
e07eade4bdebd6a0db7c6881b0aaf6d469bd4490

SHA256
36998e5561b1e6ab61cce12a53254dbd48382ea79ef7008aba3193c4f9dc24f2

SHA512
35ad7d38f3504d52c7311ca8187535795715a5027e41618188f18b34045d8a5a7bab15b412f0fa91c42868614b7bec38960fd0d59de97a954b4b6f641584e2ad

Download Submit
/data/user/0/com.live.xxlive/databases/share.db-journal

Filesize
8KB

MD5
fe82b6a35b0055ce3715457ee91e6540

SHA1
7fd2b49489e6dbc5a309ae715f812edbdfe97f7c

SHA256
104d642b6f2bfd22eafabbaa070ca34cb9f85bacb96f14317a2f6f4e4bc171ab

SHA512
c68965733430e3633237adbc26c8ab0a33f200feded118715288eaa8f0d1ffe36c04c07d49c7e6b5a4116c851ca42ae6ff1e89119c8931041d1cc4d0668308dc

Download Submit
/data/user/0/com.live.xxlive/databases/share.db-journal

Filesize
8KB

MD5
650d8633d672937e0c367b3be3755662

SHA1
86e51d918dfcd480b5e21d907b45b154d206bf9d

SHA256
c5714a659ec4f6fb2a6bf807f123413dccee91b85b9475d0beabc48c91074e1d

SHA512
7c0c5d9f642c06cd23224ffc8fff03341e3c0f550fbe28a7f31bbb408a4f4bf0efecee1eac603b1b339d02dad5a877465b650cb1a52f21fbcf079e0e3abebace

Download Submit
/data/user/0/com.live.xxlive/databases/share.db-journal

Filesize
8KB

MD5
0d56d03be3581396e30a5fbd909a631d

SHA1
7d55d84745d93281d4ec8aed19c182dc2a942fda

SHA256
ed4037e2dc8b536502d42cf5b56e3176d409f7cc217e84b1c73b8d578d23a7fc

SHA512
428143e4be3e5a6299e740eeda94994a9db7211500c0bce285f846e64b5bcee4bc76326537c9e509401c1bfabe3df08c6c6d22b8d059542dad887e5a1f4bb082

Download Submit
/data/user/0/com.live.xxlive/databases/share.db-journal

Filesize
8KB

MD5
b109dca2bd1e44d87c3f60bb2fe68def

SHA1
c02345cc583df091e499de577e8172ea4327b686

SHA256
c892a70813f40052cd9888fdf0a94839aea2aa3044b4b4819cbf0f52baa1d0e8

SHA512
77e6d935d9ff3d6a4c2ce3578abe13442b072c2aa12fa6e6d035c999d3f69dd438d43785e730addf8352d6647447fc837c0133eaa9be027cdb1cadbe1d112c65

Download Submit
/data/user/0/com.live.xxlive/files/.envelope/a==7.5.3&&2.2_1724580670319_envelope.log

Filesize
1KB

MD5
6d05a9e6c3901fa0f636a187685e675b

SHA1
7e4c233f781de1506f7483a3b9e422ed8cc43bd3

SHA256
82b38fa1271a83f8c4c55de1e15b84a6068f8c9073bc2377d6ff85b6a5caab35

SHA512
c32f460ee2a9654d1bd733e92a9fcf4a2ed7c71a826054e5f51bd3a9934a74f2b82f7778fdb8ffd241c7f50107961c2c7de3b550428aba55f01b42ce52a0a3a7

Download Submit
/data/user/0/com.live.xxlive/files/.envelope/i==1.2.0&&2.2_1724580671205_envelope.log

Filesize
2KB

MD5
3e8ca1a7eef23440b13da75d40e535dc

SHA1
f7d77f109b8d612f383ede516eac76bde78d8519

SHA256
32af23a30478247f184a565d25b3b1759df0e829a84f5e3ee8ee88b514006338

SHA512
aadd563490b03ee9c8a7b16ce9e1ac71e16c361f78e398fa0e40a855df4cf8ca79d84ad4e9922eec6fa741486160950b98ec60d337d88c8d011ea82fbcc9aebc

Download Submit
/data/user/0/com.live.xxlive/files/.imprint

Filesize
923B

MD5
c428e881104fcee1e612fbdd8b22bcbf

SHA1
1ae3e8cf82c34e44bdf73284ec4e77d3533870f6

SHA256
c91259ab134b1f0e1fbb44c856f483e301441d3f3bd1310b4e4bd3a1a4120eaa

SHA512
beaec0b97a1e0dca2e3b48a1646cb18e35a797d3a78cc68d7af82a9c023e26eb8dd058b7dbdef4eb3505e81095106f7f99b683750ce860574632b499728833d8

Download Submit
/data/user/0/com.live.xxlive/files/.imprint

Filesize
922B

MD5
5138d855a52bdae81a7f577f6eec1bcb

SHA1
e0e7f98cb552f69ef7eef30c2b145506d96bf692

SHA256
434db45fe58878f468b59bda5d68b3f7acf9bea1cccb7dcc00fb164392eb94ce

SHA512
fcdaa59b3425a530bfaff0bec2eeb4a25e7dea232738e4bc79fdf6207dd7a2c7d3b1e5e0c86bc2219adff4efc5f0355d448d05c4b53dc12b2fc7782e6a273d69

Download Submit
/data/user/0/com.live.xxlive/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
f44e9e233700274fcc7fce08165e365b

SHA1
4b10057eb8b0d192ee2465e817cde377a6f2be73

SHA256
b4d3b59aee42cb5aec7df47338938674f09a15b2bceda231e2c6a1f7897e0099

SHA512
7a7fd2307454210ecebf33181af9ff77fe628add4ac6871eaa630afbac86c62e592609e9895edd47c6cd16d4b6a1c2eff2e78273455feb8457607dcd18ed7e0d

Download Submit
/data/user/0/com.live.xxlive/files/exid.dat

Filesize
55B

MD5
7f5b373ceacc275bd9fe6cb9d1dd6dac

SHA1
6a64c15903d39fcf07ca0525ecbff1468e8b549e

SHA256
d443c8dca51c12c563de6811a4500487055d4fdabac330620509be20adb998d7

SHA512
84e34619434180bb9ef70a78876ccce7b01ad24880777af6519bd864949c72b45cd2afc8d62fcd061a0434ae1b0805e7237b3700295af2a862947a4ea305d8c2

Download Submit
/data/user/0/com.live.xxlive/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzI0NTgwNjY5OTQw

Filesize
1KB

MD5
caa341c5caf9ee3860199d440f73f9e7

SHA1
6387eddd2d56f6cd14289f04a33177b33e2b574d

SHA256
ecc674735ddbf4f53d4eadcc286aa0304b4b8f190434447395504556b6640c14

SHA512
e16d19db8c3e012e173bba4acc06bf59318675a9def7753a5ba336b514c10d7a325ea2edb99909ac5bcb47c47f9f33fe15edb5a41571773764479a978f94367e

Download Submit
/data/user/0/com.live.xxlive/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNzI0NTgwNjcwMzYy

Filesize
1KB

MD5
edafb49b3125d050c725f22a0707c31c

SHA1
15b07b588dab189382e62975362693c76876b510

SHA256
2c5bdce55958d698fcb93c2f8c4b0110dd6cd88daf7cda02f4777e5bfdd0881b

SHA512
10b8a9cedb52179f7190a6eab4d3a6117243cad0ba17aa70b6be1e62556bd5e4b54a87a27f68d847f996295f4543485183f5b69f9fb44058fc991c1b777a3785

Download Submit
/data/user/0/com.live.xxlive/files/stateless/dW1weF9zaGFyZQ== /dW1weF9zaGFyZV8xNzI0NTgwNjcwNzg2

Filesize
1KB

MD5
446caadabba20c26cde8dd0a6ae76099

SHA1
963b7f8d727cf77e9accdf1404db5acd863f5cd1

SHA256
d3a3640a4a842ba9a1b29f9e5dc3181d59852b8fe0cb59591bfcec82a4b2d7f9

SHA512
a788c714f0088a4589da0e11d22bd49d271c2cfb9c709d1dff08660aa9c52033f5ea467e5abddc9bd707799ef891e754cb7212cb42b2a09de29dd2a834239805

Download Submit
/data/user/0/com.live.xxlive/files/umeng_it.cache

Filesize
350B

MD5
41a54cc2c30b5260dc6f1c4bf8214886

SHA1
49aac086b3123be403f1983a5732bd7e5c6dd199

SHA256
1e82201944fbc6d1ccaa623b0f76006cce9df3bfc60ef2b1f07e549f6d1e1078

SHA512
e4609fc06246cd45a85ddc92d42eb02b4476b5bb8ea97f01a2bc5e6f15b303d3c7b2b751c02a4041e223d8b86b269821acd080243240e15d4c92a8f2a385f089

Download Submit
/data/user/0/com.live.xxlive/files/umeng_it.cache

Filesize
178B

MD5
b8fc4677a5bc1a87bee67a2fd2f9edad

SHA1
ed10fb4eed03fc4129922f842b1dca566774bc1b

SHA256
bc0714c841f0017634f7f0aace16d11d49e060154a2169c6398e0348761844f4

SHA512
32946e5279f3bbb30e4ebf1fd0ac137f4b0d1c9ef446e0ba0b0f80375da306ba2344e422f7f9d59ebd4a46b720034e9cb89be1b958c740001c10bab53a37cf05

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads