b5d12962c8519f2aae18709ad0e13a13070d3a296667f48cd2a72ceea3e99131

Analysis

max time kernel
146s
max time network
157s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
06/09/2024, 14:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cfc8f82fc224bf7098bc6eb9470cf105_JaffaCakes118.apk
Size

9.1MB
MD5

cfc8f82fc224bf7098bc6eb9470cf105
SHA1

2c800f72d2595c69d28dbe2f78cb449681161ee9
SHA256

b5d12962c8519f2aae18709ad0e13a13070d3a296667f48cd2a72ceea3e99131
SHA512

c585f5643af9b9c7a3195da6eb046517a77043e09a9cf568408ca43cfec4f31c6478c2704f7f0e03b0efed75933a6e47977555d9aa6c637defdce78c99b33e59
SSDEEP

196608:7F0vQxpCdg6Yv5m5ev85CHFAYQCm31gyDyXXtMkGejX:7FDrCs5m5evYCHFkFtIXtlGA

Score

8^/10

collection discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.runnovel.reader
/system/xbin/su	com.runnovel.reader
/system/bin/su	com.runnovel.reader:channel
/system/xbin/su	com.runnovel.reader:channel

Checks known Qemu files. 1 TTPs 2 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

ioc	Process
/sys/qemu_trace	com.runnovel.reader
/sys/qemu_trace	com.runnovel.reader:channel

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/qemu_pipe	com.runnovel.reader
/dev/qemu_pipe	com.runnovel.reader:channel

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.runnovel.reader/app_SGLib/libsgmain_312768000000.zip	4330	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.runnovel.reader/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=72 --oat-fd=73 --oat-location=/data/user/0/com.runnovel.reader/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.runnovel.reader/app_SGLib/libsgmain_312768000000.zip	4241	com.runnovel.reader
/data/user/0/com.runnovel.reader/app_SGLib/libsgmain_312768000000.zip	4519	com.runnovel.reader:channel

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.runnovel.reader
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.runnovel.reader:channel

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.runnovel.reader

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

flow	ioc
34	alog.umeng.com

Makes use of the framework's foreground persistence service 1 TTPs 2 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.runnovel.reader
Framework service call	android.app.IActivityManager.setServiceForeground	com.runnovel.reader:channel

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.runnovel.reader
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.runnovel.reader:channel

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.runnovel.reader
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.runnovel.reader:channel

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.runnovel.reader

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.runnovel.reader
Framework service call	android.app.IActivityManager.registerReceiver	com.runnovel.reader:channel

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.runnovel.reader
Framework service call	android.app.job.IJobScheduler.schedule	com.runnovel.reader:channel

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.runnovel.reader
Framework API call	javax.crypto.Cipher.doFinal	com.runnovel.reader:channel

Checks CPU information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.runnovel.reader
File opened for read	/proc/cpuinfo	com.runnovel.reader:channel

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.runnovel.reader
File opened for read	/proc/meminfo	com.runnovel.reader:channel

com.runnovel.reader
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Requests cell location
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4241
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.runnovel.reader/app_SGLib/libsgmain_312768000000.zip --output-vdex-fd=72 --oat-fd=73 --oat-location=/data/user/0/com.runnovel.reader/app_SGLib/oat/x86/libsgmain_312768000000.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4330
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4395
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  2⤵
  PID:4415

com.runnovel.reader:channel
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4519

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.runnovel.reader/app_SGLib/libsgmainso-5.1.81.so.tmp

Filesize
591KB

MD5
35880e0b09a52e8abf762e07181e8ad0

SHA1
a83df31d51cc5302929e1e1b1bd973a9873cd325

SHA256
dd344486684554a72c210f663fac197a7e01c68530f25aa6bc517c0978d6dd2e

SHA512
9ce09836c200286621927517ceef023e5970ab7d21addd5899fadfcc6bb3d594a54dac4fe8d12dc0874e4e0843cd292f4bd4f0f219fbafa45af940ec8ed69558

Download Submit
/data/data/com.runnovel.reader/app_SGLib/oat/libsgmain_312768000000.zip.cur.prof

Filesize
281B

MD5
ede08159c115d09530455c036dd39ef9

SHA1
9b547225975fd299c949196c56fcd36b84a4c47f

SHA256
9f911e98a34581d035ab696fc79d54d556bc2d31d826e867b3effac22ac5e5de

SHA512
4ebd1dc11de49c41e7aec4c1a3db09e58c5fae904cb0e04724f6bcb11c8529c507103581682e6ada85af36f49629b63a2d38b8133d47e7e46182fa1f25ed7fca

Download Submit
/data/data/com.runnovel.reader/databases/BooksDatabase.db-journal

Filesize
512B

MD5
daceaec1be764b37c62f1b499a639771

SHA1
d9bc6a83b9271eb6fa800652c58bf70de0734596

SHA256
e63083a89ecd480fac7c1fbbc82969ed9c6a3a1c5333ebfceb3dc39ac5a314d9

SHA512
af9790e1dc8c17c2f8e12786530f384bcade48a21499206d77a96d2b350a5a95aaa6fcdabebfd80b5f3ced87becdc90f6d39f82480347fae24bdc39e913f6bde

Download Submit
/data/data/com.runnovel.reader/databases/BooksDatabase.db-wal

Filesize
40KB

MD5
296a07d21d9699e3df3c804acb22c677

SHA1
4903fb78207fdee86492ca7dcb0837c48283b504

SHA256
464da8e801da451115f6ab5b932312abd3cae92d75e98e76d508e197d1c2659c

SHA512
5be53c0b3db521d007c44d6adbd4e8fef6886b16a701098d3e298f2b845455ed99c47da29c4a14371b44ba33169a039cf12480851dd657343ec3918ccab3e9b3

Download Submit
/data/data/com.runnovel.reader/databases/MessageStore.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.runnovel.reader/databases/MessageStore.db-journal

Filesize
512B

MD5
a02366873486a4a7b700326f558275d6

SHA1
3012ee2e0bbd793b31e5a359d4f791bc74e964bb

SHA256
7590e49978edeab96b0e7752e259f0b7f56b2013c992ed3774f1ec8565b91c08

SHA512
c59cc6f1fe86217e57099f3c38da3ddf89b5265e2b4f568f65bb65e254cfe4cacf82d94b21965794e8d765b5e3898a28eb128337707843faf4c9be48d81924aa

Download Submit
/data/data/com.runnovel.reader/databases/MessageStore.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.runnovel.reader/databases/MessageStore.db-wal

Filesize
60KB

MD5
718bc519d68f384daa0db5b3866c3e9a

SHA1
1c6957d10cfe0117968720e5f3a0896f22b4bed1

SHA256
040c5964093bf9b359e1255fc2794d6b10c0fc86aa681352ba02bd59836324e1

SHA512
ab54c164567844e3dbd6b51c93481a7181a3aec9919a859ccb19909f126692a3f71afe795a44b60cf177a254da63631ae3457cd81a227dca1354195d5819cc39

Download Submit
/data/data/com.runnovel.reader/databases/MsgLogStore.db

Filesize
4KB

MD5
9de675ccd196d9f8c569849fcdbcd824

SHA1
9515e79d86e2399b6f09375770849e16301b520c

SHA256
2fa2750fc6bd3a514d9c1680c93a9586c381b58641476cbd6baa8b3a99be9e6e

SHA512
8ba56607aefb625acb705dcf675341aa189c45c7aafc52360dd9ba90bfb67f4e9a4d3dc954578935c5d2cfa9982472de005d21750f82829f7b13fcb9b804b1b6

Download Submit
/data/data/com.runnovel.reader/databases/MsgLogStore.db-journal

Filesize
512B

MD5
73ba3b3e3909c5e7d7446f8e74c333cf

SHA1
2ed2ee5dfaf6dbe8ef1c15dff423d5b317a4d212

SHA256
85564eb0d2ccde98ddf6b1a0986957e1554667146938e04761433f418ca27fa3

SHA512
d04fb458aba18b7a44eaff034bf2e4ae4969a221bfe18f5513b7f967d3e691fdfa36d6aba42252a461b15149d91db6448be646f8a3f6e2953de461941048e92b

Download Submit
/data/data/com.runnovel.reader/databases/MsgLogStore.db-wal

Filesize
60KB

MD5
9586ef58e08ce73a48894db64f1fb8e1

SHA1
01b11cc214b9085d5b84526a6c9439918ae99204

SHA256
23201c54b4836c77293a25fc905bedd3c250d4aa8ffd0e6eedfabbf4da76718a

SHA512
558a73a85296bff292f61efb9b5c345fb6727a4d5c6925c39542c5b10181114cef7fa09c250f9bda19ff3dcbaae0f3d4352d99cb20b849d6cf985c23f837b52e

Download Submit
/data/data/com.runnovel.reader/databases/accs.db-journal

Filesize
527B

MD5
acdd8de56bf566cf1a48cdb206060410

SHA1
2e9879de0f82b9451c8e7c9036734ad8b5fee810

SHA256
4a32f23e669db585a73d7e7b08f9f0989301d316a1bba527771b816c44fbe12c

SHA512
d3af70dd9d2d1dffaae381402edd24695a409c616b1f1f2b03647fa6b937e674596b046b6b1ec209edd25d320fe0e283e2c82dbd1bd8966f4af3f978e6855dcc

Download Submit
/data/data/com.runnovel.reader/databases/accs.db-shm

Filesize
32KB

MD5
83fa116a338f85aed6f26964534cb251

SHA1
0c2e17293a0bea9e23be7a4a88e095945a10f5e1

SHA256
02396118e86893b59abf2c7c6d9cc5e6ca2f3647e9afa5868e4ebba90a6f1cdf

SHA512
52d192e1ac6d174fbdf0c46e779bcaa93803951c64a29a9961e7a8b6bd9adf069f9f0d27ae7e800f9a666533b8810326fb27edb931c55c7727f72acb5b6122bf

Download Submit
/data/data/com.runnovel.reader/databases/accs.db-wal

Filesize
32KB

MD5
5d024a95240ef216166d340de22b0c7d

SHA1
9e17d0702c506527d5f0ed13de26e91f8d973d2c

SHA256
53e338b9d2ecbb570fc8e5f140cb57928a4faefee4312c6cebde6c1e8e627127

SHA512
ee3273068f2d3908b6bf50fc8f8c8883b82af477623b84849fa407af551eb60ce12c5a3d684918eb7f212940349ba423b5ef6429d380b0f1909dd72c310d15e8

Download Submit
/data/data/com.runnovel.reader/databases/cc/cc.db

Filesize
36KB

MD5
5d7ea1a23af19b4340cc8d90f28297d5

SHA1
4cfe95b23a9e98378d69c4290af81b51fbe76aea

SHA256
474c4a54534ed96beacad7cc9a805a3f53ec9c0522fc7bcc59771cf500a6a0da

SHA512
33071f4c92da0a3df01c4a61dd165df7c7e0f4f37753cafe02d19fc876a5e7fcbb01c069c804e140ab8bfa0644a55f50fd1373646d1c439f817baa5ffbd47f7b

Download Submit
/data/data/com.runnovel.reader/databases/cc/cc.db

Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.runnovel.reader/databases/cc/cc.db-journal

Filesize
512B

MD5
983028fa0505d3235c5d4ccf6411fe55

SHA1
395c20624c8fa61fdd34e7c276e01a3aab4dbdc3

SHA256
569fc2ce6a7194a95dfaa63f3d899c01e05a3ea6b829c760742dd026694e23bb

SHA512
7d75b0e87a06dc9e7ac2bae12ecd1188450c2e3deeb867a73a76f03f290f1226d0c8867632ceac47597affa072193620d1a5c691c61967902f4f04b43e1bef5e

Download Submit
/data/data/com.runnovel.reader/databases/cc/cc.db-wal

Filesize
48KB

MD5
a086f448a245d4c48855a7321878fbe6

SHA1
025c9069a34b3f06d79428e3bfd347ea7774ba44

SHA256
8e44439e5040688558b36f3b64b64d7b3469c1f88e70d43058116234fd15f42f

SHA512
7a4abb2cc9c518fae904e078a0da11bb9cbd0959964de1785d82007cb48770bb3e17a0d8f43cf20390c6cb5db1660bdefb7477da7dde1f6f3483ae601e8dc4b8

Download Submit
/data/data/com.runnovel.reader/databases/cc/cc.db-wal

Filesize
16KB

MD5
1b7a054bf13d248f54ddd028b4976faf

SHA1
34116106c80c8d33b3938cbe565509d055b6df52

SHA256
980f854dba79693550576e51d714d9de3b86abbfcf1a92f5cd1b04d21fcbd656

SHA512
533ab817b6512da4270c4a89ab652f35b8186fe6dcc0c7b209c9f496f841946646f7527bf80410926c92f3f669f025af5e23d645b796e1fdde3fd1562773cf54

Download Submit
/data/data/com.runnovel.reader/databases/message_accs_db

Filesize
36KB

MD5
486e2bac2b3e9e1cb411d2838a4854bd

SHA1
81dd0a7537f4af319b830ae834908986be85da8b

SHA256
5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

SHA512
c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

Download Submit
/data/data/com.runnovel.reader/databases/message_accs_db-journal

Filesize
512B

MD5
167f4435217014927f6d222ee7432a89

SHA1
69ece10d59127581e929351f5ea8e5b95e21961d

SHA256
5d30c06e3e20a70a9508df4a1d7348f9ba27bc70bbb418419909afdbcd2662fa

SHA512
8adb6323be0a0f1e53961f466751e779a1152acde3c0166fc81d9065025e2190bc852035a1ac04dac401538530ea6e87546aafea2bddc4223bd4a8d812d7fc5d

Download Submit
/data/data/com.runnovel.reader/databases/message_accs_db-wal

Filesize
48KB

MD5
652d68f9a25189225b555f209d80bef1

SHA1
ad4cffcfa1bc3072d56da87bcab3851d92380acc

SHA256
456dfbe2195d82837a850577537784b16ec6358a79b99412399bb360fcfd6c39

SHA512
50122e217e5540ac8a0cc76efbffd450687b292633b7bd702496feea4e1337a47f6e7e2923cc3991fed102dcfd3a44cc98d57f3713d22d9b682699c0857c60ab

Download Submit
/data/data/com.runnovel.reader/databases/tencent_analysis.db-journal

Filesize
512B

MD5
6cd6029678cfb44eeae23e5233c571f1

SHA1
5732349730bfcfa846a6b8c51cc3f395a77fc1a0

SHA256
08d606bc7a592cf2638209792c60949160a1064d926a778544852747fd194a60

SHA512
2653ed2ebfb765992319587a1f02aa11606787fa4b859d02de5707fec5a54ae72a6de96e5f6e3a91fe134f9e62335ad70394ef2f7e89fb65902c9a644d8b3cf0

Download Submit
/data/data/com.runnovel.reader/databases/tencent_analysis.db-wal

Filesize
76KB

MD5
abd349cf356893ff4f37602bc07eb87f

SHA1
fe65d7c98556ff61c90548d7d2f6fc73fb0a1897

SHA256
a61fb17cb120456f052a6cac6fe27ad11c2263b671f616ee61a98d45812d043c

SHA512
0477141e4b28faf82a326aa7924b22a7d3ad3fbd04934e2b9cd7d48e80408772288999e16a4b58678c292e0028a8b71b9198d09f1bf385751e94fc8d960a92af

Download Submit
/data/data/com.runnovel.reader/databases/ut.db

Filesize
20KB

MD5
fbbd0617ea5c74f171dcdb3d98f78099

SHA1
4a2419e3391dc7337dc3d45e30a878689a33d1de

SHA256
dbccf41a7379ec7267ef78fd9efc46449906c9ae420c50f326b781258c592e58

SHA512
b2a47c196c96038adbbce077531994e98a0aa802e33489d0f61bbf7c70db8b7d459f083c8550f5d8834402218c2e9ee580617e00f6d12dde5f77e1fb7ecd04ca

Download Submit
/data/data/com.runnovel.reader/databases/ut.db

Filesize
20KB

MD5
569c9f85a9c75ef828e957d3058dadb1

SHA1
763ff98de375c661e3caca91e020931651d027bc

SHA256
6b081d708360159fc6287d152499edca6dcfafea10874b34d6d73464473a820b

SHA512
7ec6987d65e3b594349639b4eabd7d72116eca950d7290a649b4a34268165365f46767768c263a06e7f5217efcede6fb2339a83f399e43440e3be7b607aa920a

Download Submit
/data/data/com.runnovel.reader/databases/ut.db

Filesize
20KB

MD5
34b1eba23e8f8614ef411db67ff82eb9

SHA1
d2763787fedaa89c3f68d9aa4677bc7c4576836d

SHA256
bb48374063994c5af6928e1060a1b47f42411fdf91924fed22d248e643ea4d8f

SHA512
b996135acd82332ebdd1183d4a3384c2b36768279a65a974b601a6876115615591b94224409745385cb0e64f71b2dce99611f6cff6bb3dd066d1a19efcbe4474

Download Submit
/data/data/com.runnovel.reader/databases/ut.db

Filesize
20KB

MD5
c9228483e6ad939df557b6bdc5db72c6

SHA1
d20b75bab9e1987970e2762c49c41a739921a9c3

SHA256
9fe2b53e51bef72de2f1c6babb256a8a76578825c25b2162b07a644c8cba269f

SHA512
085fb83c535de0161354370da3d2f1424252b24dc8e533e1a3da18cf3732978037cae54538175939607f2096002dc5c320a28569f1f3459fc36e1e874166c439

Download Submit
/data/data/com.runnovel.reader/databases/ut.db

Filesize
20KB

MD5
b282b6429d633bdc91fcc87e1cb88248

SHA1
7a7ce7b32697a6082038dddefbc9bc94a8483154

SHA256
04c78f2d24d701a0620e8ebd794258ba680c9717ae73e7abd1d2d8b139ede1ef

SHA512
829e2bc3684bf2b552c0e8f4a1daf56547cd2591a853d16e336670e037d3a19ccdfbd565344bfe211b0c77f43dd4b7e784a625746324320b36aeccac53ebb9f4

Download Submit
/data/data/com.runnovel.reader/databases/ut.db

Filesize
20KB

MD5
653193b88731005632e8d492fc220f21

SHA1
b50b4c67c7e25540d7d8af37b078c2d51623e2a0

SHA256
3a783891845ec8f4fbcb9d11df2ac6fcdc08d202e79ef12e2264bd00864fe4f9

SHA512
1e8c9fa6094dfc9438755930ea60e8fdb0e168b1bca2ee20752772362338926c6c187569ad675c7bd9e9b8dc8f52bd6bf65ff492902b99736af7456ed0de1788

Download Submit
/data/data/com.runnovel.reader/databases/ut.db

Filesize
28KB

MD5
d2a2c621f27d3cf11ab99270f03b8a06

SHA1
dfd3767b5f27953f67a356165e19da022225eee0

SHA256
bf8bb3f532dcdfb988c36e534c750c8bde429756bfc811401da8f06568579462

SHA512
d305c3313e47b6bc8b1301ddcaef73ad779419eb0a6da79a808a5bb1691a2ab1becc3ad33c9e3b1fa6c91b50312c9cb9c3a68a3242553f4988b97450f4652815

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-journal

Filesize
512B

MD5
6c73f98400b9d8e0ee94dd0dfa603b0e

SHA1
b7e7bb6f909a82a5df8296fb411e5689154ae18c

SHA256
7bd95db097c05eb0e0d79cd6e7f27b5e8e7c6fbb87678fdf1e1d94be726fb086

SHA512
e9a35351aee0a2a187e2c288c12f8acd58ee2da37fb0f6aba6b1317f68de0938748c6dadfd4ab49e54ffb7bb7b788f0598e9788bb8f85d3c861188cd01509320

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-wal

Filesize
8KB

MD5
5ff9f9b8a2db50e2523f8dfc66ee20c3

SHA1
0cd457b6bfc3443b882eae406e0240439834a981

SHA256
7477405dd14ec59b40ae765edac1c7ee03798c87c28001c8539c9a8594f3a135

SHA512
d1aed04b1296fb2cb198fbb6ade94859a849a3db02dd655da422071aee60d9af1bedad00f1b36db3f7ec866452000499732a9232802b44199941980250c20bd1

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-wal

Filesize
32KB

MD5
15e549700deedb02ea730cc922921375

SHA1
138dfdcb350b1ae7c5e3cf08dbd28138809a976b

SHA256
8859142ad551f609a1847060565ba43ac6211b2d6a390daf31b0fc943c4e3acc

SHA512
5e346c230218846e2c78a6967897bdb350f6b39bb91938d3525c76366436dd256332c9f04c1a0d52ede915c2c6c14dad40c42699b9116dd0d205b575b102be21

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-wal

Filesize
8KB

MD5
a5ed119b37b88a7a9e842300feb84661

SHA1
4877ab100f7c010a17352ed60cd1e3a572e04556

SHA256
681e44e8139faa81ee9f255f799b5b7f2d30956fb90dbe8009dd26fd3e4a88ac

SHA512
163330b0f43271ed457b49fab8ecba28f4596b57f05ef7a13ed69158b37c04f0c5ea820922fe8f6a148073e9cd788e05a0c4d613e942bfd15c564d336d985897

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-wal

Filesize
8KB

MD5
f1f06d85c7b3e5ac08f9c1a29fcdf9cc

SHA1
d145d32d2c5b62051fff0fa24e969a8735b4508a

SHA256
ae66977226c82bbd656ea8f43bc8467d4661c641355eaec36e7e9b036073af44

SHA512
aaff12c17128b556bb80c82c64ac60925d50e144d02fa32444be057dd32303c271750b1cfbb7077af14284edd057a0f0cf6dc8b6c64b6a2038d140cddcd7f2bc

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-wal

Filesize
8KB

MD5
0a61929f7eb25fe19e23600c771cdcde

SHA1
68c1f0174527d15d4eebc36f5331c787450a40be

SHA256
39a4edc82e827d72f01f0e4357cdac71983b58a463cfc28d12404ea164addcfa

SHA512
7f28cd8b5b37455e8dc661e091869aa7ae97d1c2d0c80edb496a31ec97e1f1f5a6b402bc721dd9247e96433b5ee65b566f6a6b7fdf48e7f32d97faf49189bfcf

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-wal

Filesize
8KB

MD5
cfad821ace61087aab6d05059fd919db

SHA1
e7a2bd518cb0c870edaf475d01893384c2226642

SHA256
c875427b199fde8f091d94b943ab952bf9298a034cabb1d5abfd8e1be4f7a703

SHA512
c3d009273c7e84917c35815231dd41f4d155b9f1b0ad19e6ab44f6aee384791be570d532617fc78a543b4e267a7b821b42132297bc409058d53ce0e32a8c3462

Download Submit
/data/data/com.runnovel.reader/databases/ut.db-wal

Filesize
24KB

MD5
88de14cd64a103ff23c6d7e8013f46ad

SHA1
0432113d1cef236cd8bdc8b486abdbb9f908bd93

SHA256
1fdef1219979970a622daa61ece60fa9be207f82482c71810d8aeba3410324d6

SHA512
fceea88a34a71d3daf7eef8e7c686cff5b83c137c6ca74cce6d091a0a3a76755dc1906f20494883e45fa8f04b447845a2d9fc10b67f7f265e7d285198dc0207a

Download Submit
/data/data/com.runnovel.reader/files/.um/um_cache_1725965470116.env

Filesize
1KB

MD5
bf996460a1c1fa1053f583888a775811

SHA1
82285fc2a78df867a92e468ee3cfc9cc6c00ee07

SHA256
6029d56b5e4536f80a0510f0584821c4a8d03269fa825227b4f3f35f97680091

SHA512
3c060d9e51bca9e0e08a605d6e244c829b4c70fa675a83396b2d97f0a0a4f57b1d2d6f5733b6969e9c67e80e1f568a4f242aa788b1f413236a1798dab3bcc6db

Download Submit
/data/data/com.runnovel.reader/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
7c4def2a071872e8736871eee8d414e3

SHA1
53fb8352069921621f201191b620f7b62c070f68

SHA256
b1d5e2f69351947713adca836c0839a37b751dcbfad10dd713e0ccc78de57211

SHA512
fabc67eae7f131844b2a67ce8aa88350a0a535334eb575ef26988d42cde7f8143bf447f25015fd7067b50e1585bd4df0beee828dac4dbfd798f7d282081ab349

Download Submit
/data/data/com.runnovel.reader/files/0a231bd8575dcf72.txt

Filesize
40B

MD5
24cb3fd044fb514b85360a46e962de85

SHA1
98c7b9616c0dbbf49feaf7dde33703b36c6690fc

SHA256
c2fa76abb90254cf4ed3faf11953695feb5fb4dc4c997b04b997c5742ae11cc7

SHA512
fc5f8cd217f579bbbd8d6466d20928da9cb935df3aeeb5e0c1088c37c56bf1291f3cba78e8c91187b56943cf7bf0d891f3694347d5a5e1e203ef17e2efef77cb

Download Submit
/data/data/com.runnovel.reader/files/21c22f492aba3de8.lock

Filesize
16B

MD5
74b918141d8852195213a2ceba1d7824

SHA1
a5085619593db32003dc2f27687ddf5ac73d11cf

SHA256
2a6e5bc90e02e504f4ecca1c035287d4da2819603d0fab8f7415f89023e850f3

SHA512
157ad40aaa89413180fe7aea77d788e67834af3efcaa0069daf134037fb4ac3293c0812488343a297bb1e1a7da81bce28ae3acfdff5b59229d17e9134f2cd341

Download Submit
/data/data/com.runnovel.reader/files/SGMANAGER_DATA2.tmp

Filesize
72B

MD5
f58f13d0fc991322df1eec4c68481464

SHA1
fac54fd6dfb4fa6e0b0f548eb024573dca8cd259

SHA256
1d3ba112a38305e67ffb1aa4a0e0e70b3a22809904675efecec0c949d0b76396

SHA512
e1ef5bbe84095b5ed02d1d9b23bc7e034b67715b3535473553a2d797b86ddbb81028e0cd5ccc457be1828893413eb368e04f29b7c3a2878f933a025153cca535

Download Submit
/data/data/com.runnovel.reader/files/SGMANAGER_DATA2.tmp

Filesize
143B

MD5
e226bf9446849dc009baa24a537ac74c

SHA1
b6b4de6d0febe5a29c94656ddbf85823f20d6204

SHA256
f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19

SHA512
0acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541

Download Submit
/data/data/com.runnovel.reader/files/SGMANAGER_DATA2.tmp

Filesize
189B

MD5
6a8863dd4be7802445180fb86132a879

SHA1
318b6be6ca08b4edd3c0e949f0c4ee34b1b1b768

SHA256
003384a9be52ac8b293ce45c557533b3e72efebf1165f128bc9dcaee5b414e08

SHA512
21c52dbe0c216efc38950433e9601102dbb0abfc1bcf844e24da21e047cface75f0fabacb07bc38042bd46638611dbd6b7cc7a41e25c824725ec8112f0094780

Download Submit
/data/data/com.runnovel.reader/files/SGMANAGER_DATA2.tmp

Filesize
262B

MD5
0438489e26550304ace8e365664531ae

SHA1
cb4e150d8a2f36dcffb61bf28f01f2c6313f30e4

SHA256
a179e2d846f440a85be5d1837704df7092888784914b38b61067568308ec76bb

SHA512
6e0782109933287e1fc72b2da6db675e4ec1b0d3cd17e95e2769fe362b4a880664d2159c5521f7b15d7287cf2671d8e73a93b570d16888cc4280a90c38072dd4

Download Submit
/data/data/com.runnovel.reader/files/SGMANAGER_DATA2.tmp

Filesize
334B

MD5
af72669d1e5caa6f92d39a4326eba9b4

SHA1
bb3751e0d6090486ed5ec4a450859698a1bc15d4

SHA256
56039338e704ac433f9796f27540460c2c2397025b1e476efcc2bc23532b1c0e

SHA512
c3a62580c58df21fe44a88d4cc5704cb7b9cfc1bb829cfa4e46bcae9caaf7105fa9776d80040f7d65d1b97f3efdad7001485a082c3df6325186d544c7ae4902c

Download Submit
/data/data/com.runnovel.reader/files/SGMANAGER_DATA2.tmp

Filesize
902B

MD5
601d99652c8aa469a8cbf5a93ceedc31

SHA1
aff1aca223230c4eace706aeda230df900b2c991

SHA256
43ab19a4ca7d5c963d70d60a17bc458d49dd6152e84b811214dd4ac60e7fe710

SHA512
bd415fc4a9dd7af5e5f03f443f67d16e58593ed164850959421e5c44029fced73f82ea360fdd7b7479814ee97fda4c9370b770d4badf9117e447e13b83094d22

Download Submit
/data/data/com.runnovel.reader/files/com.tencent.open.config.json.1105670298

Filesize
1KB

MD5
f526172de1566b34fdcea744710d9559

SHA1
000cb54d9a008a807a1c5a3fd2b2e7cb41e7939d

SHA256
8572be02b59f4d514000939ec04a9b4e2380c55265256b724a617d8d0f4c6940

SHA512
dc81f0fe345b18c96b1638c67b9ef4c5e60059dfc4a02f3c30a23645d4847abeef46cf467d044c42597115c48052ce0e8ea24328382114a544c5dfd039a95e7d

Download Submit
/data/data/com.runnovel.reader/files/exid.dat

Filesize
62B

MD5
2374e073a2e1613af5746879ce5dc24e

SHA1
acd9881839e753d361dca30c8a0410dded6b13ce

SHA256
5fec6415542674c49c96f910c8c48b4bf16ac8e018b62fdc785b686ddd701eb3

SHA512
a4902040b8c611309c062b4e4199fe9881295d889ddf981230d3ad98f146f471f7cdccdc2c6fbf1818a0704bf972f312ae134298489fb97d94ef3f9d6118b9d3

Download Submit
/data/data/com.runnovel.reader/files/mobclick_agent_cached_com.runnovel.reader200

Filesize
2KB

MD5
8f5ccb12628f52bd91612462227628c1

SHA1
6a73616198f1c4d0d4b20d69ec79a95b4592837d

SHA256
8683d36ce2e2f8da9f733c3fbe141373fbe0e994ee74af8a7a09069f6581a882

SHA512
e6f0829e56f34803c969b4f357a360ca921d9a4bf91c1fa1706c5664940ec8e81db02b259cb5930b20ad04107e19597d3373d96f20b9fc1bcc62134d3ab0b2c5

Download Submit
/data/data/com.runnovel.reader/files/umeng_it.cache

Filesize
415B

MD5
6a6c44a78cebfe6da0f771fe9d9e8674

SHA1
b5ce208ab659ccf043860222f2fcbd9863744fb1

SHA256
85a1c2afdf4cdce64dbe5151a6234cfb125555a27b0d8845e6c4611c7b478218

SHA512
2f5b7a64061182cd959bdfaa72a4f92e2e86a192b3882e015a634c27b697059de4122eade6e954750f9d7eca3dafe5726ad21772440566abd6ea75ba4330341f

Download Submit
/data/user/0/com.runnovel.reader/app_SGLib/libsgmain_312768000000.zip

Filesize
65KB

MD5
0c2f2989749ff3910446998637c28286

SHA1
054aba5cdeb4e66a4473b0a81680bc50f6a0cfc3

SHA256
f3c52a07c3cb0a749aa880b5819ce43a5b76065396037f5f50c4577ae522d49d

SHA512
72acb607e89f7dd62c21e9449ceba58c8917afcf4dc32c789f515d6a866e6549b2fd53e90cffbdfb7a62d577534bd9eec052d1ec9a912321f9bf25e7f719a70f

Download Submit
/data/user/0/com.runnovel.reader/app_SGLib/libsgmain_312768000000.zip

Filesize
65KB

MD5
522947eaa37b029a247e3973f3be3621

SHA1
31c88e0d7c9b51904c0f598e80245bba41b1c7d9

SHA256
d06601f9eb8d8c991f00426ad30bada9d2bb7886a6de21d78cd0ccb7b7e62156

SHA512
f5eaa9ccf08096bf0df8f004fbfc1b893ae08fed3e6722e0adea1fdea2719a45876314b765134905841f440c27216c897876e3ac6c8903fc44b697854eb02c0c

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
69880c5d07928dec3b750de7d3aebb46

SHA1
14f732f4a03ed606aad679e38f7f036a75d33d1a

SHA256
576431d43dd82a96baab1a1fab44563bb263b6286218fdedd5c336e70c7c7bd2

SHA512
2a99485b9cf0c948bc1fdd571175888ac24fd87cd6379d087fb5b84a7da6b7be770ac804f3baf380f240ce4b32e22e03e707539609c5f79e6d44a47ebfd83bb0

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
213B

MD5
f285463d1fab5aa4bbd01f927a69d0a2

SHA1
33665619ce6bc4b0bfd4829b8426011b1ca2e303

SHA256
58422defea334145ebc852985822e733afb55cd0fb26403e6bb6b73e699f330a

SHA512
105e9080db05dc14a52abc27ee79af4c5edc17667361763a6ad8a434a00871a5c5299c10949644ea1fd4d19fd77ed329716fc65b08af670069b7434dc486ce0a

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
a3062bf00f74e1edfff97379d547b270

SHA1
ad2aa0f6d838b0d80d1b28e514c72869c307264e

SHA256
ac7bfcc011c8f86673a91e9638ed6cea635cc0289acf9527ec655394d30e45c9

SHA512
c539b75f3cd050007ef13023d88e419c1984b593049a1419f2c25404109106127100b54e44ad369d7b356106d3512e8e8d55d653bfc8a8036b951c89019b1e46

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
d667f864a7ad714f7a0f1ac74f933789

SHA1
6aa0b52848e6b50dfcd8c79393c5e9958bd19bbe

SHA256
261d780ba6fafff7c2ab871a8a4913cda24f07a0863b802b3a43e0a48b32c024

SHA512
d1777cea32b475622840ff7e2ceac07297665a38af9a6e875d52f1a2364967f119c054a8a0c76dab2ac67b54a28ddfa92c6004b07b19b766557cf6a094e9344f

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
32KB

MD5
b15b00bf90b7c93b3665eda88fbc4808

SHA1
5d90cbaee0798753afcad7e6555a92d2567dd02a

SHA256
92882182a7ffae56437ee1b2b3a68ddc0594b28c1e3a4254920023015cb4b429

SHA512
cbea5c61e2043c01bbf5b0ba79e45106bf011e29447317a4bc66560afb52177f2268f5fd95d84868152b25b1aa4368256392d24eed3f4fb9a56cb2eaa1b27059

Download Submit
/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

Filesize
512B

MD5
5ac47092807d9cb3af500733835248c1

SHA1
b0e76372efdab776ad782b3e7bc823771797d116

SHA256
23febf633fb74c59fda1fb8a490fc8de308b53667508f8e44f84995f4c70c2aa

SHA512
e9e9687462860e4a33dcc292d5187e10e0fa564c049c6741f2fee38c7db9df49786fed36e9cf35e1be520b22d04ac58aac836915a96eb53e579113df2b4ac3b6

Download Submit
/storage/emulated/0/Android/data/com.runnovel.reader/cache/726e578a004c4fedb773789be533a946

Filesize
1007B

MD5
5c9c612df9e0a2bcd7a3ec5c32189826

SHA1
9ac8c09bd812cd9fc787af2e9d9eedecff6e4977

SHA256
1b8d38ae0aff05d3fcbe2458cd7b0080ab2508e36f3d03af768e4ed992d1b45f

SHA512
583b89568b7c367f306f57eb91e9ec680b1a7772f10e0747c576f4f992302383ca9ccbaf4f33e2093b68f76eb70b4ecbf54fd33b5eecd227649d18eb990a59f6

Download Submit
/storage/emulated/0/Android/data/com.runnovel.reader/cache/74bd9675e8644980b3ab2be6ed509093

Filesize
4KB

MD5
0ac21e10e21c52a1235f115eb611c5cc

SHA1
2e073f7d4e59f762b5fd3c890ec37473d70e24a2

SHA256
448bd23aa41f6d73364fa3886669548c19a3a6e9d8008a9411118226a53a36d4

SHA512
5a8d5d85f82183d97522c8b39eccd1f109517b0aef7cc1e3b1155afe248200fab16f020b5ba81202c2267ae012aacbfd10dd675eaab510ce03279c005a5b5e23

Download Submit
/storage/emulated/0/Android/data/com.runnovel.reader/files/tnetlogs/inapp_20240910.log

Filesize
33KB

MD5
8976e631e1b119850f3bee9b4c99bb27

SHA1
1f88fff20be40a0989a8c28dd759abf93cf41b5c

SHA256
c07855d1efc58bb21e895528765db4bfcfcb365c7b15d2492b74b980c31f1d0e

SHA512
3a3a34b2337d5763a24816c9d2c1b60e940f77a162983b3053944ad1ae66f5f4dd4643bf02c2347f30517eed0d7ff44bd83425393e265e6147c61bc347229f5e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads