f197992e20bf5231d7ac883a1a81464e4f285198e1bbee73ff6de391c245b28b

Analysis

max time kernel
148s
max time network
151s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
06/09/2024, 18:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d02cd2475c7418bd8539d8c8198b0a55_JaffaCakes118.apk
Size

5.5MB
MD5

d02cd2475c7418bd8539d8c8198b0a55
SHA1

ca656c1ba88c9f59e4f5a569afddb02e362e8e9f
SHA256

f197992e20bf5231d7ac883a1a81464e4f285198e1bbee73ff6de391c245b28b
SHA512

bc4c599a2e0d4f327c9d6c942f61b0087a2c3b5369b4bfb023133cd9e426a3ab15dad334dff56c33570b621d1c3e77b50eb9fdf422cf1defe9af15999caab2b6
SSDEEP

98304:ncEFTxe1kDQcHNl+FKG066mZtkHXYX96icSUboW9xvojJ7vCRXwj4vvFh2Bp9TSA:ncKelcHP+DZWYXcWWfAjJ7qZHvvv2sNq

Score

8^/10

banker discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 4 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.mobile.indiapp
/system/xbin/su	com.mobile.indiapp
/sbin/su	sh -c type su
/sbin/su	ls -l /sbin/su

Checks known Qemu files. 1 TTPs 1 IoCs

Checks for known Qemu files that exist on Android virtual device images.

evasion

System Checks

T1633.001

ioc	Process
/sys/qemu_trace	com.mobile.indiapp

Checks known Qemu pipes. 1 TTPs 1 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/qemu_pipe	com.mobile.indiapp

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.mobile.indiapp/app_SGLib/app_1725966528/libsgmain_1559231564000.zip	4312	com.mobile.indiapp
/data/user/0/com.mobile.indiapp/app_SGLib/app_1725966528/libsgmain_1559231564000.zip	4365	com.mobile.indiapp:worker

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mobile.indiapp
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.mobile.indiapp:worker

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mobile.indiapp
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mobile.indiapp:worker

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mobile.indiapp
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.mobile.indiapp:worker

Queries the mobile country code (MCC) 1 TTPs 2 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.mobile.indiapp
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.mobile.indiapp:worker

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mobile.indiapp
Framework service call	android.app.IActivityManager.registerReceiver	com.mobile.indiapp:worker

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.mobile.indiapp:worker

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mobile.indiapp:worker
Framework API call	javax.crypto.Cipher.doFinal	com.mobile.indiapp

Checks CPU information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mobile.indiapp
File opened for read	/proc/cpuinfo	com.mobile.indiapp:worker
File opened for read	/proc/cpuinfo	cat /proc/cpuinfo \| grep Serial

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mobile.indiapp
File opened for read	/proc/meminfo	com.mobile.indiapp:worker

com.mobile.indiapp
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu files.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4312

com.mobile.indiapp:worker
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4365
- sh -c type su
  2⤵
  - Checks if the Android device is rooted.
  PID:4892
- ls -l /sbin/su
  2⤵
  - Checks if the Android device is rooted.
  PID:4912
- cat /proc/cpuinfo | grep Serial
  2⤵
  - Checks CPU information
  PID:5011

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mobile.indiapp/app_SGLib/app_1725966528/libsgmain_1559231564000.zip.tmp

Filesize
249KB

MD5
78103ae3fc171556bba96e89a3ad4329

SHA1
fb5ed51668e444bf0c3d8dc3addb848faf520097

SHA256
e103680872c7ecc819423aa40582844b17f9f2a1dac79ece85437f53e064a6e0

SHA512
a1bcddc9b374e069ad8c38b6f74c172647be169b518d825e3d7fbe688f29bc4bc75db6eb5e1a3daabc3547cd1bcb7acb651396fd24ba9dbe35e9597c7e1a1544

Download Submit
/data/data/com.mobile.indiapp/app_SGLib/app_1725966528/libsgmain_1559231564000.zip.tmp

Filesize
249KB

MD5
40f15f4d0fe071d0652fd1e4e4d03d5b

SHA1
6b5fd02be0e736ca160406afbe3c790abd53f198

SHA256
d5f192d7f4c3b8ebd19206979d3ab50c5adc2821fd291fc58691cbfb8f344ab8

SHA512
9739ac9938524038a80e572354d901816c82f6f39a2d6f1c638a2db90b2ebfd10d8d11e26f9729adfaee00607d363acb5149d031d515ef8785bde86a3eafb83c

Download Submit
/data/data/com.mobile.indiapp/app_SGLib/app_1725966528/libsgmainso-5.3.7011.so.tmp

Filesize
407KB

MD5
eba887b98a03fa6f1d868c14a171814a

SHA1
f6f0a582fb9ca0e88614c4a7f1a41abd75529053

SHA256
7ce595b7db405a3d66622bc6be9aeb04b0c4f4c48f3aa055a78ed65331f82e07

SHA512
1f0b39d4c329dc1965a3007f1e1d049e3cd8705e90aa7a48a1e1c182059346da4fd3822533bec1cb3d9e04bc0da870b6096ec46cb1440729e7ef5d54b6527144

Download Submit
/data/data/com.mobile.indiapp/cache/1d6456c5f6b74a1a9f5fafc6ffb010fc

Filesize
1KB

MD5
8cd2d733a2021b6c92236a36bc52c742

SHA1
b7fdc8bfa0fae0ba4415aebecb3b0cb571118979

SHA256
24621d94a8745f0becd18a781d24d7dc62999100ed0603a82a52a0b8210bb519

SHA512
a6e919767aaae110aff04851ba48abf75260a9de38824fa6e11114f3d0ff325aaa44916307ba93fa37ec4332547b9c3e8caee0909db69de9a0a88c2c7481fd65

Download Submit
/data/data/com.mobile.indiapp/cache/65817283419548b39b80e40b90b82c9e

Filesize
1KB

MD5
6dd93fbcbb6df6cf3d19305d7e9a2f64

SHA1
c078a6dbacacc00208dc64ea8e216edbe3af9be2

SHA256
8a01c593d09da20a6fd87b15a99c857420103709d7c414cfa34cd6c91eb42626

SHA512
53dc0e365fa664c570bd501fd08e896467b93c3ed0ce48e024f06dbbdf4dda3aae247a186922c8fc743a5ca249001008a785259b2802fc2a3ed82b59240e7a25

Download Submit
/data/data/com.mobile.indiapp/cache/httpCache/journal.tmp

Filesize
36B

MD5
272f7954f9fcae260e2a664f31deb12e

SHA1
b7877fb67e01899584cc7db7d3847b0e7ff478b4

SHA256
50a6b3b739274a38b654ffe83223ca164faccd60b21b169e70084a5253030ebe

SHA512
74d0ed91f1f31eb4fdea3b99ca1eac433c91da18bcfb0dcd25001b35bce9e72713264759f4b310832b4de5bcf0632026a8fd42c8c8ea1fbff7be4c442e4ee9c0

Download Submit
/data/data/com.mobile.indiapp/crashsdk/tags/PPAIDNI0ELIBOM0MOC.ss

Filesize
1B

MD5
8fa14cdd754f91cc6554c9e71929cce7

SHA1
4a0a19218e082a343a1b17e5333409af9d98f0f5

SHA256
252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

SHA512
711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b

Download Submit
/data/data/com.mobile.indiapp/crashsdk/tags/PPAIDNI0ELIBOM0MOC.ss

Filesize
213B

MD5
a9f6f5314954c816bcba3ae04472a919

SHA1
5178e395a26ec050309a1397a970689220b143bd

SHA256
0ab725d434f1549acc4d17109beeab7abb21f614ea5d7ef3668d63dd5afb4837

SHA512
64f04802dd9a03bbf07f36c6b85152b5611d7b28913754edf9ee956d9392186e13e53d055808eef50b754ab7aa84e1b47efbc17980cfaf3deef80d90ef48f9b5

Download Submit
/data/data/com.mobile.indiapp/crashsdk/tags/PPAIDNI0ELIBOM0MOC.st

Filesize
104B

MD5
3bea8656a95226d0450c3166beaa157c

SHA1
8cbfa2a0b11a2f64f07692161fd454cb214e7c38

SHA256
85c6bd10cdabd36da9af8820fef24f00db024f02d6afe5bfe898659a80d21d67

SHA512
a31a9dcfd108e5274666dd508e2a217f10cfa7cf7f4f7a006aafa770b116cd792ff61a458fc188b904163f0cb0cd781bc718c6a881fb7f1476429366627f8d26

Download Submit
/data/data/com.mobile.indiapp/crashsdk/tags/unique

Filesize
36B

MD5
98fc25c7f6304ac965a1f16814fb2de2

SHA1
5ff0eeb04029e9809d0efe08fe16ba3821291ab4

SHA256
2852cd279797157473a2591ef77e9c8e0266d210de59d80a0f929b379c3edec6

SHA512
b18a270224f39843ac32f89dba5e2f9bfc5c546af2e491812ea47e8e7c3803ac663c22867f2c5fabd47a45eec06bcf1a0f513ef307709d25c469470bb4c399e2

Download Submit
/data/data/com.mobile.indiapp/crashsdk/tags/ver

Filesize
167B

MD5
e12139b9dad96dd870eb31a619e98f2d

SHA1
fca7db0e041cca75ee948cde09e2acd79a4e005c

SHA256
66fb772720d8ba6936e6357c213ae7a83ead3225a943390a745b8136b59e95a1

SHA512
2e75717f428872c713054616a417448e8ebfd59f6eaf2c3f568e0b01285bca2f82d8f698e4cd7049ec785a831de8712c94d3ec1130780d4e2ecb65d9f99e46c0

Download Submit
/data/data/com.mobile.indiapp/databases/WaSession.db

Filesize
44KB

MD5
59883adfc6fdff2480ff69ffee5b6e02

SHA1
84fc896ff4097eabe3a82061b00b6cc9ff487503

SHA256
6f3ca103a8b15d090010089c1965b5f14a3948a2a11f03820974e0813006b8b0

SHA512
10f2ea7a41cea1c76250a1b90a79f3aab72214a6e4cd8bceac5f4cebb959789730be46b267d8853c69f15d08afa5487ca6436717ca650d9bac5de325ffbe392e

Download Submit
/data/data/com.mobile.indiapp/databases/WaSession.db-journal

Filesize
32KB

MD5
9efffdbb786db0587bcc418ee8cbdcef

SHA1
51b14f09f033c900d4b9526e3980fea8939959dd

SHA256
3a0f884f946f8305a7d16cfd59a54e7098cf83c6b994e9c066a8e7afe0ea830b

SHA512
8b559a3c9b91c198b745c70751951e2ec6b24c9cb9400994d95dfc800e5f27ec2fe7320efcb6c71fc6afcd09ca1c5226d4b5d88f9d24d2107f5745425c967b9c

Download Submit
/data/data/com.mobile.indiapp/databases/WaSession.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.mobile.indiapp/databases/WaSession.db-wal

Filesize
36KB

MD5
8a6bc1fc0099193675a49b04317ec666

SHA1
20046df881bdef2701182e305954ded15e0c6c3f

SHA256
be82621b703d261163a3233ed86d6bd038f4da2107daea39116e2400f08f319b

SHA512
b3541810fc6cd2d6a7df692eb4f68facac8fded266a61219d7583677903209d23e6ab90ac85d497d74b968ebff79e67192864c2139438f1a1ba9634e0b43d3e7

Download Submit
/data/data/com.mobile.indiapp/databases/WaValue.db-journal

Filesize
512B

MD5
66a88ef375e0b451cc980c427e83889c

SHA1
bb5feb7c95d2b4aba2c452079dcb9580d8c3d595

SHA256
cbe5a6baa269720256e981ec90481713689b986f8ad32262e7840a89b0924bc7

SHA512
0b598f1a23a1aa67ccfc66fae905ee1076358f57d595da5f866fca0bcfb31b5600e21e0b4b7912335efb48711d194cf994384003697576e978be9388df0af1b5

Download Submit
/data/data/com.mobile.indiapp/databases/WaValue.db-wal

Filesize
40KB

MD5
035f4417f2763470d2bd13f1ebe2b304

SHA1
8c0327c30b89e40b1db6e22a3eb1e96447e4e2e4

SHA256
689b428cad15f028dd8b1f25244f17ac9e665e91e0c0a54d7bff47b84ace05f6

SHA512
c8e9428836a90ab2130f0906a98ccaea10ce006fa54f12d8a92ee633f65896a494cff2bf30bc44ac86742ae11b428d43bb9c2522522787e24d1daa8a9e066f28

Download Submit
/data/data/com.mobile.indiapp/databases/accs.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.mobile.indiapp/databases/accs.db-journal

Filesize
512B

MD5
a6798ff82204b4a8b7d517247ed9b9c0

SHA1
b60bd30776a820f9542bf21ac5951f3141d15afc

SHA256
e5e8ed5c524d16e91d0461475519668e29f5a768336a5a9ae3fde3f3b3976a39

SHA512
6b2ecedaf6959cf925caaddbdb6073b53f301238ae9a4faa0c396d0759ddf225c7f4d8d6fb31b7e2603eb3a6a2398bcf721522998b082f56c5fe824d8fa9e71b

Download Submit
/data/data/com.mobile.indiapp/databases/accs.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.mobile.indiapp/databases/accs.db-wal

Filesize
32KB

MD5
04aa2d21f5c48a800b99c654257c914e

SHA1
b432db725b55c7b6ed3a6bd3e36d63b920d70324

SHA256
340ce8eb63d521c5177bd241947c84848e6c24c2a756a0bb72242813b0c6ddea

SHA512
ff0ef8cb4c706a629878f9b8d38243733e733ca2252a320cdafee51e8756dfdc9ff7a9948b9be52e77ff3b26f2b93811a1a7cd1ddc19c5ac694613a21698e67d

Download Submit
/data/data/com.mobile.indiapp/databases/common_db

Filesize
4KB

MD5
817b0916ef02ea05bc33a171fffff56f

SHA1
f4f507c19155a3d455d97f9d674fd4a0b5684d1e

SHA256
fa9e675f72fe5864e671685ac27814239b0ec4a1c45782b1a94f9f72edbcf35d

SHA512
85a56993e0ebbc4de2b4beb7749154528143f3716756b31d5e0e4451c82d00d74aefd78c0b2708e0b12e2459008f8bf053d2252f2ba8a23dabd385cfb5ecd7f3

Download Submit
/data/data/com.mobile.indiapp/databases/common_db-journal

Filesize
512B

MD5
1267e3d4ae5e860c9c02a413b094b11a

SHA1
0a8b6367d06344962195f623a9f885f05aed1bbb

SHA256
0fa15a935a6da5906cefc386cc608e22c1da64370199dc7a5465e217480d1b7d

SHA512
99a7668faf63fb427da189d0029b3c88a68f6d871b4ad2e97e08bb9930244c4ec1391e8dbba0e064f393056b81d5acae82f37acaa2b3bcdbe6f1dde0c1f7a1b8

Download Submit
/data/data/com.mobile.indiapp/databases/common_db-shm

Filesize
28KB

MD5
882d74ebf8172981fbf36aeb85c9f512

SHA1
8682278a4e90d134eb19dc30ed1a58bd0c96e691

SHA256
9d54ab32a93ba08e836ceb684a05c2aa7f157d7a0f346581d084fa588c99c003

SHA512
0f200ef1c1db39647b29d867a96fa4f6c4d5b5c51c9d0b8f872494a7d201b0789f3e02e9118dc1bee27f6d8d1b7719770b686ead37bc4d19720670b1186b7f7c

Download Submit
/data/data/com.mobile.indiapp/databases/common_db-wal

Filesize
40KB

MD5
8b52e92b27bbb6563af3ca28ccbfedbf

SHA1
3179be566a53c189fddff73041029375f1107ad4

SHA256
04d371c192f8c451bfa704ebaf2e1cfc0b635c876378aa60b1a8531f48206e10

SHA512
d806bdcfa6f88d980ee2a078b374bcf1f4a2af8352e6d4a6af4d52cef851de67e8c032e5d249dafdd72c2be8ddedcca1f1a46b5086042b75955ae5649409004c

Download Submit
/data/data/com.mobile.indiapp/databases/downloader-journal

Filesize
3KB

MD5
12eeaa111a76c320340374e0f29a53ea

SHA1
1b9a0623a6a5d4ab885f83e820f57263e5d5455d

SHA256
68827c8b5dde33ffb55fbd369ab013a88c2a222286845124689e11260d17a9db

SHA512
6ab0b899eb646b78ad1dcee250f2780bcf9c9df1a95690bd71e3bba490d9f3002e30c055e61bde60f9a5666437efdc68ac0b4fb40de652d3e4cde6789d6ee574

Download Submit
/data/data/com.mobile.indiapp/databases/downloader-shm

Filesize
28KB

MD5
7be695a458a0c520933e8e7dedac5905

SHA1
db608f6234efc4c9850e38e78f489f3db35b8236

SHA256
18c2276ae28a82740955809d2551eaa14beccacd2c264206ed2af01d5e477c73

SHA512
13a6be97d2d402ae46e1129f02042254c7dfec00d9dcbc9aab0cd19980d863226776acc82e382eb1c3ac1310d29e18f8fb30f8cddeb4f25f368f6e8a54f2fab9

Download Submit
/data/data/com.mobile.indiapp/databases/downloader-wal

Filesize
36KB

MD5
4415410082c79a9397904689cd36b417

SHA1
adf1742593fb02d71f256e805a0251ab224a8c66

SHA256
9676be2491cdcede4c8c2821a1ebd59b6b6c23772824a13312be0744f837ddb0

SHA512
46945128fb42c6ef7a1efdf89a709908c3aae1d9820663500f4f38a4bfeb6f41a5edf7c659d0af5c641cbc8ab1692b43c1e51c3b35f37e33234ae38db001bfba

Download Submit
/data/data/com.mobile.indiapp/databases/message_accs_db

Filesize
36KB

MD5
486e2bac2b3e9e1cb411d2838a4854bd

SHA1
81dd0a7537f4af319b830ae834908986be85da8b

SHA256
5644a250fa6cef16c2c802b98275656a5fc39dcf89bcc22193742d85c7313f57

SHA512
c146789563dae163e373489b3df53f22efebd32b69643992969241eb5ad5eec668de67e7cd2aaf5c3a8af57b0842115d00183825734f57643d3fdb09835fe681

Download Submit
/data/data/com.mobile.indiapp/files/SGMANAGER_DATA2.tmp

Filesize
512B

MD5
1a63e5758f5b3e4a851cd2fb2e2c9233

SHA1
52116749bd09fabacca1a8149a6e849b5cade692

SHA256
d8a0757900942f373e152cd7a0de843adefa5f0bc776e4a4705e8e72c2ac039e

SHA512
c3a82edd477b5c564239da22b2b1fd33904049c4f75f223f955892f06a536c3ef33f60c73c331e53361dbee32058c51000e3a8dcf0c0f02f432ba1007d09f0b4

Download Submit
/data/data/com.mobile.indiapp/files/SGMANAGER_DATA2.tmp

Filesize
143B

MD5
e226bf9446849dc009baa24a537ac74c

SHA1
b6b4de6d0febe5a29c94656ddbf85823f20d6204

SHA256
f4748057d8d507d1ff277a03fdef8184f0e215e4be2de5315b48c647fb0d8a19

SHA512
0acf633e9b926ee1c43ba5f11357a9f31524a62e7487fe95b70feee27740197a4cf725c3a0aaeadb2fdc441ce4af69e0800ae23bb7a64c7525e7044ed49c6541

Download Submit
/data/data/com.mobile.indiapp/files/SGMANAGER_DATA2.tmp

Filesize
216B

MD5
b54fd28d048208709a578c7275e036db

SHA1
2ec3bb1eff10ab7830320a82843d5606d77cfe7d

SHA256
5c3d162ebedebe7cab9b28375c53b898b2ce4aae0ea7d6304ed81667cfab8ed4

SHA512
dd64d465e6d9a3789cf1e60de406dc67bc05d84915fea2ed0fc36b9d8cdddd0a0aab286f56b2605e0f55c7d4017a85bf64a9466c81ac6785c59372d826346f81

Download Submit
/data/data/com.mobile.indiapp/files/SGMANAGER_DATA2.tmp

Filesize
288B

MD5
c7ea4b26bb185d2d1cabea6c64b50cb6

SHA1
453d8b6c12f614ba9819036fd01b5f573b940d65

SHA256
61205729a8a10f814364c9952f179738a3d06f0c2839abce7ee9f1a9a2a4414f

SHA512
a5c16485898deedfb9463b4b5e4406e9324eace33d2e6eae1b5be56277d4ce8d87000812519327bc78a2baf1fafe5d05563994b22607ee1c8f8d0b10d50f8167

Download Submit
/data/data/com.mobile.indiapp/files/dc70f204dc38012396

Filesize
5KB

MD5
a86dfd7a465778b86aa21d5d5a26c7af

SHA1
60db617b6ed9313cc23f4b41aaed121b65a72107

SHA256
7256f1fb64cf5130f0e0810c8f5be73d46f881f38de5bc6405c92d6d21ce1276

SHA512
dd31946acd018c2e9b5e54c486ff5f3bd134c4bd1f2c2b3b957f4dfc82cf2115287b6e2ed8b3723ad86c0ce679a88467d2db8bcc0e5071563f6d96cf36907a10

Download Submit
/data/data/com.mobile.indiapp/tiny_wa/1725966559539.wa

Filesize
88B

MD5
3aa8b0d23d32c48e16d54ef59fed3b05

SHA1
248e312f25fd1488dc4cc10e6537e95f2b8e1f11

SHA256
308ef5b8dc4935e7806d8054cb1d3740be61cbb83dac36c6a53b91115982da1d

SHA512
8c71966874c7b6ac79420e1793ad7c7be927aa48d9b4364a8d17af49b00c53964a97cad394ae8c1c9fc1aa9702dac174b0ad5ce470e19136804e97bfffd42b00

Download Submit
/data/user/0/com.mobile.indiapp/app_SGLib/app_1725966528/libsgmain_1559231564000.zip

Filesize
42KB

MD5
b9fff83be0423460003164d3f885b71f

SHA1
a25c7545f0a83ec66dbe5550a2c906d38d7244e1

SHA256
6343f3d34569d3a38b2571ecaf0e754d9c49360296e4ebe23c6813b6bdbbd4b1

SHA512
57abf9d30424991bcecc6d09837fb85461a8725556efb7bfc4374c34bd3e372c1bb3f0c9003ded7e97a52d4e78907424e19edcfe146a2539b3b96d01d2b9f954

Download Submit
/data/user/0/com.mobile.indiapp/app_SGLib/app_1725966528/libsgmain_1559231564000.zip

Filesize
42KB

MD5
8f388f06caca62732f1de59df8454b9a

SHA1
55c04257d8734090960d179f5912b03cbe624eb2

SHA256
d2a4094f53a9bab584ae7160072499c0eddd968d14f56221d0ebe698174312b5

SHA512
c186e0146cd9848f7798545c680673521bf04958e38bf9cb6f37c284e2fcca854e893d0751b65151a2279c16ce879b59fb4262429e14f3b804c54e6d30ece68e

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
28KB

MD5
9083c30a1141e71d26035c4a84f1b36e

SHA1
d9ccc08b0d97dcd90c5e967b8b1162cce082e062

SHA256
72991ab47f65de6fca13b8957e0cbb2faf54ed2c887e397e4f446a6580a53736

SHA512
74caeffa9731cf40eef704fe1532284b15bfd774b72ca34822d28efd07b9ea0625df89b1d6ddadd4e440dd1113c4bb7853221a2c23c56d432defcb69e3dc92f6

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
32KB

MD5
d541ce7c01647c955ddb3f6182e1b280

SHA1
94aa690485cc3c76d22d34391a91a2d2043d619e

SHA256
a9c5af7a45a59c385ec32b655416b7cee5ca1f5e9d01ff04928455bba2e6ab93

SHA512
261a3ea9034362cb22df79a7f1380de15d66bbc3918f92cef5de576983e088dda2163be2704501dc7d9c69e8bc3457c1f43f7b219caf84e4d460ed0ea896fe48

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
512B

MD5
534ef5d4d7cb4744939e48c386a30868

SHA1
a36d3dc8d3826f21c049e4aa991c077b6456cab0

SHA256
895d37119d406df42cc222cb51b899f098418d40b31ca620fb57acd5c5dbac95

SHA512
a0352440868436ec018dde12206377a9dda30b8aa0592dd0ffa73c703ac75e647f665a6957dde8e98007c7a34b050c4869889371ffbbc86f8ffcfa99ac5b1d6b

Download Submit
/storage/emulated/0/.com.taobao.dp/dd7893586a493dc3

Filesize
576B

MD5
a596bdbecfd0300603f009988f0b4022

SHA1
2ef6934137e6260881c8a0dc878950a6ed61369a

SHA256
0097a122d2f8715e95a4d4cdbf8c1c184ac5da0ee70258fa4754fa197077b390

SHA512
09b5c6822e6b534173feb4c81d117eb85845d4e96dbd2fb7bc427f1ce18504ece587f3d183cd1c07d5b54479a9fc8d6348629a60a25d806c06ba03b191f5f64d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads