0032274481e9190256dcf016a51ce793e7dfda4518405db2717294bb1cb8cc82

Analysis

max time kernel
143s
max time network
154s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
19-09-2024 05:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eab468e4860b9cd3be82137bcd0476b9_JaffaCakes118.apk
Size

19.1MB
MD5

eab468e4860b9cd3be82137bcd0476b9
SHA1

de7f02a1ee7b4561971aec126fceeb2f58dfef3c
SHA256

0032274481e9190256dcf016a51ce793e7dfda4518405db2717294bb1cb8cc82
SHA512

41dec1f4972f636fcab1291a03c620b3ac481030635f92c5085a44bbb255c6ce2b78b2ccf0031cedb378aacd04a5733b62cbbfe630fd8c722f57b123b04f3914
SSDEEP

393216:VB0mDXaiwmFEgKPTWssxVil5N6P0Vb9OzRurApH3Hr32E4PcDkRRTXOTMum1fdaB:4mDXtwsX4WsE0VbMqYXL34rX3f4i6

Score

7^/10

banker collection discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.tc.cm/app_e_qq_com_plugin/gdt_plugin.jar	4617	com.tc.cm

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.tc.cm:bdservice_v1
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.tc.cm:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.tc.cm

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.tc.cm
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.tc.cm:remote

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.tc.cm:remote
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.tc.cm

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tc.cm
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tc.cm:bdservice_v1
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tc.cm:remote

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.tc.cm
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.tc.cm:remote

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.tc.cm:remote

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.tc.cm
Framework API call	javax.crypto.Cipher.doFinal	com.tc.cm:bdservice_v1
Framework API call	javax.crypto.Cipher.doFinal	com.tc.cm:remote

com.tc.cm
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
PID:4617

com.tc.cm:bdservice_v1
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4674

com.tc.cm:remote
1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4767

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.tc.cm/database/pushinfo.db

Filesize
24KB

MD5
878413e145c6699ba9c6d0e7c5035e89

SHA1
61c82dc95792eef098e72e8189cb1bfacdf1418e

SHA256
eb33426ed3079be59932fe269d0a3249c4b89a89f3e7227924d3059647e5d6bd

SHA512
af18845e6ba195e3a155234c01da10c82841513022e59c3b743a065ce798e0b33bf0a40b915f3181f6e3752490fcfe929b938c342642bee94f8cfdf17bf9b405

Download Submit
/data/data/com.tc.cm/database/pushinfo.db

Filesize
16KB

MD5
478489dc436503185fe750cddf2044ff

SHA1
5622e179ee8a155c74a30e6c39df58fd70094f44

SHA256
8966b9de2fa1b3d7195c5294da7af36bb20b41098cf5d781f5d22c3a1737a94b

SHA512
fa4bc6ae29d91dbfafe5c1322fe9ac469e8299901dbd722ad6f9d70d03a3183ca27cc052373bafe36a5c5b30c2402e1b95ae12aa455fb6c7571387cd179f9a7b

Download Submit
/data/data/com.tc.cm/database/pushinfo.db

Filesize
28KB

MD5
fb0654ec68858eabccf6d5683ecc1a6d

SHA1
39c40899c7fe821a1a5c0995599cc4e313a2e74a

SHA256
794f3c607ddc94a8811b1b1cd1e893699df0470461abb5f0e6cf5e528686748b

SHA512
250fc4e9bfbc47b04a9a186fd282bb18208c00101cd907b3cd2ec868a42b3a7b16112c4f12151715aa34abbe730242df6685fa0721d3b4e0153917e8be4fbf38

Download Submit
/data/data/com.tc.cm/database/pushinfo.db

Filesize
16KB

MD5
9bacf65e81065a71f9e8d4b31631b53b

SHA1
11a3a30de5ea6666ddf0260199dc8c6265d649d7

SHA256
b2f62c6e1b9cbc512c2a7d7db7c695e5d31c8446a08e56137f92d65d150e42dc

SHA512
aca7134ff50ac9615fe820d68f5e6dce306105fa7dd6cdbf2062ae7dbe7ba0406d8564eb00f16aaae6d73d2caadeb27c2acbc90eea9ee5be5324ee81d4cffd87

Download Submit
/data/data/com.tc.cm/database/pushinfo.db

Filesize
16KB

MD5
bbfeb042db03132f7755081ec9488d41

SHA1
65ea0775d3fd49ce9b16ad43b368d64ea329ec06

SHA256
a6e06c935618e3962b74f4bdef4100c782d76db38b07c095ea8a532be5430536

SHA512
67198562ea62ab0ecb13db4f6883962d9400772026713debc874f0bdfbce83fb08b6f011167968efeb92104a86b440d3d0bfdd99db4cd39c24859b6e159327f6

Download Submit
/data/data/com.tc.cm/database/pushinfo.db

Filesize
16KB

MD5
04bc209d849540df78fd30cff3809a2d

SHA1
ff2dacb2947f688aaeacbc600278bcc549bde7a7

SHA256
ff0462764cdf1725c51fe644e40b8c251b667597be57219c34a1b92aac7e3e15

SHA512
92ba8ebda13e994d280b15a411c4ff91f5d4ff9dcb56d3570da363174e3c1a545eea4946c88374744dd0fe4f3d1667c001b087be46c1505ba2abcd4736e4ff98

Download Submit
/data/data/com.tc.cm/database/pushinfo.db-journal

Filesize
8KB

MD5
44617f617fc39238f255f7af1e0d680f

SHA1
26c60c863bf35e7c6701da1c48eb5ed914be023a

SHA256
13b63524c84ad58266d0d97f220523ea8eec9a7a76d037cb1c7a576b739c3a69

SHA512
2e5b1ce4e4c3cb54d651c44114338bd08196099ac0e83892d713b24d9a461bb189cbb590598bd17c68554ceb3bc0f63258df93ceaf10d52afbc75780539db6df

Download Submit
/data/data/com.tc.cm/database/pushinfo.db-journal

Filesize
16KB

MD5
2accc64a787fded82a4d93aa6b1de413

SHA1
e2ed42481c47ed70fc964845688f93fdac59c3ff

SHA256
79f5f85a79382d7582be0604f88ea40a9becf7d82663b177f3de243d33985a16

SHA512
ca94614c68987372d72de02689a636a0c264b92d5b91c4a2af0e570ac5ec5274f696b63a5cbbfacdecb2f7f267b3939fbf3263ed612d9de86e9487b72c7d429c

Download Submit
/data/data/com.tc.cm/database/pushinfo.db-journal

Filesize
8KB

MD5
0128fc9cd8bbc9b9af7fb0b81d9c380c

SHA1
869b420f9a6f80d1a0e661670fe20b164e3159bc

SHA256
dc83f4cd4e362d7cbeae505d8d6b8e676e4c2331d4b1b03dc6dee4a98c822df9

SHA512
daaa6e4fefcdaaf023f70c997192745897a8ad62c480046e2647dbe46e746130ff8e845ed215359a3b92e18dc37f3b43ffc7d73b990865fa80faa760f27b332c

Download Submit
/data/data/com.tc.cm/database/pushinfo.db-journal

Filesize
8KB

MD5
5ff31b61c9becfec0db4a4dd183fc509

SHA1
bcb0a7d1dd50f519c5cd53d0fe6131e4bc1d9315

SHA256
333942890761f52e73c2cc685f8da976c3deaa3c58616a71cbd8a90dcedbded2

SHA512
47404be5445cd666800b1977a7c234d4326f27d87179067ece873b69452237f51635559dd64e999b73a5e5edd33f520f8a5a57bf3c0d4ed98b88dc006648d388

Download Submit
/data/data/com.tc.cm/database/pushinfo.db-journal

Filesize
8KB

MD5
dee26a3c2b1a9958df6fa0eb5c2d492b

SHA1
eb0853c15568898582dc27d7ddfac9330ea8ac37

SHA256
dfb582ce6781ca7d9679a95c1c8193aff56a46bf447a840df363cd65ca84b67e

SHA512
da7e9814b4382b863014d5a16248d5c2284e0b029d1b7811e8d4726f48f89701a30c2190490bdbc2446de5039b7ef5305cb7bacc14482bf17c777d4fc9fff970

Download Submit
/data/data/com.tc.cm/database/pushinfo.db-journal

Filesize
28KB

MD5
9b435ad6a26d5942063035e29c343478

SHA1
88e05392bbd789cf812b9016fec7ea28528bdaf1

SHA256
eef7b1ba162e29880d92b9401cde27daf658bc3c8fe43e3021561fb973c0cee3

SHA512
ee9c2f5616589883b365f44c37e6cc59a5100924d4ddad544b4d7708d54401fbd7e59e76303ea0d13942beba7f9eed379578b0a4b86befbf57b7189b9c0452d7

Download Submit
/data/user/0/com.tc.cm/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
102KB

MD5
1f9697fedb8c1a68599f9849fa23debc

SHA1
1977b1f7f83db9292556c65885e86d3e062c376d

SHA256
278aaef0d3db0b27f06eaaaf77e53faff06aa64dccf6e865e4faf41c2de563ae

SHA512
83ed4170d231dc93d0af2e1f2ea23c2a42853b75a57d91420337c53641dbfe07631a18151d8843f9dbabe8266c601aa49c3db7f263875ef751e03079d180a591

Download Submit
/data/user/0/com.tc.cm/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
242KB

MD5
776910f8e65369707cce7d59a635a6eb

SHA1
fe1e7e281b3ea407cc9e8616dddb82dfd99d44ef

SHA256
6bb3c59e39eab8b0545b2ae41cda53a4d85ec0be1e05f9b9731b269e7bdfe57b

SHA512
8dc0adfcbe640aa736850f7ebc97488716734e967efa3aa76542f9638316432f403d5376e7bbbd4c1abb42eeae7fc9213d84d3ed8a3ec05f9d33787521d132e0

Download Submit
/data/user/0/com.tc.cm/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
8KB

MD5
d73e1c29eb73feccf5d990ba7df4a255

SHA1
09ec97cc02129fa5d0e74b982ff7802772ad7a8f

SHA256
90dd1260ee0bc3be28912725c5972e956263a47c0565631df89a88cd1d7b9c54

SHA512
32493426c607c247500ee1aa059c60e3729b11c3965c80b4112667bacf08326383fd73f3b7240b9c1bb3cdaf093ff3ec8d46f47388f2b101f4411cb8dc966863

Download Submit
/data/user/0/com.tc.cm/app_e_qq_com_plugin/update_lc

Filesize
8KB

MD5
79edcba04fac3b2adec56798efbf90f5

SHA1
fe7beb6625a0a66dcefc8e1c29c68b24859ebc80

SHA256
9e250d97eab1de8f7bb773d166af3269eeca715eca7377b8cc841a3b3ac04480

SHA512
544c4212078281e881644c84f79d49642dfbedde063003f9589adf5b0dcbc8d9465f761d392db561229744ca3a6b79c6e5b5c5deed43b7b41b6d0eb2acaa229a

Download Submit
/data/user/0/com.tc.cm/app_e_qq_com_plugin/update_lc

Filesize
8KB

MD5
15fe8bcb9826677d02ff79d6f6265a8d

SHA1
552a51bcdbea62c10c3e8e8eaec3b67eadb48274

SHA256
c243107a45dba21aa162e72f84829f73c5ecd29dbbb0fb64685ef6c48ba38e70

SHA512
70939ed137f9d5f53e94eb9b1693113ba49d4d5ca4dac126a333a6ff65e8878a8899a0ac1ddf985bb8f96f704af688dd41c2181aa8708eb0cd6a8dbace8f5f4c

Download Submit
/data/user/0/com.tc.cm/databases/GDTSDK.db

Filesize
24KB

MD5
e26065889bcc2311efa46ed7724fecd3

SHA1
4470212c170501c95fcf345cda11f55a3d75f1fd

SHA256
3230510ff27eacb03f0425dac3796d25bdf9af8fa150661057be3ddf04d6af99

SHA512
44a7f3e96c452efaddaa77f1e37551fd5d3b69160a3acae74589fe7cccb1055ac772376b6429f019c01df99a400122d720623fa3115645e3bce2fdc765a4266b

Download Submit
/data/user/0/com.tc.cm/databases/GDTSDK.db-journal

Filesize
512B

MD5
901444a6ffb8fe6efdada8a40fac19af

SHA1
f67a21138af9c12165e0e3dd2034eea9be642602

SHA256
d1971f12f2b1cc4a95b58f23ba36145af18a3be3c198c9388f730d961219dd6c

SHA512
1a4deb6be1e44e16263280daef38b0c0146c979185581f53028af24541f87c672aff9df77d16787004c3768d4dc611e23e05feb506751cf34ce86eb122232933

Download Submit
/data/user/0/com.tc.cm/databases/GDTSDK.db-journal

Filesize
8KB

MD5
32385431d5d0a4ff5f38fe0d62f4a756

SHA1
4868671fa94e8ee5beb69413ba5bfa913462beb7

SHA256
84f90672a325f108469ed885f7870ff6eee1e24a397c463650103c64629b844e

SHA512
a70e3bf4be458c4d80df4db35aaee01ef255b712f0c77f42e84a2c315a0e4e63efd66838d08c29a4eab140917429cfa655fe85367263905b5fbfe1fd1886fa14

Download Submit
/data/user/0/com.tc.cm/databases/GDTSDK.db-journal

Filesize
8KB

MD5
d2846dceef76e1f4dd73e5b549ca415f

SHA1
a8984c46f15474a3a2390b77ddc2da26b6156d62

SHA256
d4576ce095dab22e9a2098917412ca050bb333507b22e79ac1c039713c174bbb

SHA512
832250ee2e5250025604de16a7018194f7dafb76d342fa024edfcb6299d7f835c1cb2b5e16a70a1698d0393ff060c844cd6178bbed3b50e3657e14bb778cf3e2

Download Submit
/data/user/0/com.tc.cm/databases/pushstat_5.7.1.db

Filesize
52KB

MD5
60935eaa4b94c87fb7fda702b3f3cada

SHA1
a0916e090a35f8a3f8e0e4a708ae0e647fcb6d86

SHA256
e446939da917175bf4046ce99a26dd6349c0d3a4cd0f55d0b09c0e6964be9a96

SHA512
29c54c434ff8950838621b8fb9b89b4c72c11ce937205214143162881360cc71d8ccd77a58790bc26ab1878bfce19ed4e841e6ddf1a966264caa737fab000dd8

Download Submit
/data/user/0/com.tc.cm/databases/pushstat_5.7.1.db

Filesize
40KB

MD5
9733503baa72a9fed6d45c00695d6b61

SHA1
a57a1d3fcc7dc366f6e8fd04ce973c56ad1eea3d

SHA256
c0cdddda8cf2d901aee244213816081f6b16eccbf649bb69edbaac432cab62cb

SHA512
1ec0e523d639a4c13852b8cb197c775a4bcb1a3a85326a07f3e939f7fe4a1fc11d215f20c12cbb32d33e91c572d604afb357d448ccd94a5a3ed01e144562aa6c

Download Submit
/data/user/0/com.tc.cm/databases/pushstat_5.7.1.db-journal

Filesize
512B

MD5
de98cd0f6ddb5ddd19c1a5f30b037f10

SHA1
19a5dc2b4c6e7ee29732858afac23905c0001fb4

SHA256
cb20dd144e576a9bc87a6d8130a30454dbf2fcdfdeb1cc4f9edd9cbbe155734a

SHA512
3ff0603cd18d955d7501f93a110fe90395e8497f6fb5d1e9454784b379cd8052129588747b323397f12993b540331ca777b5326eade61a1f60596d58ac014718

Download Submit
/data/user/0/com.tc.cm/databases/pushstat_5.7.1.db-journal

Filesize
8KB

MD5
d9bcff12894390099ee97ca7e343287a

SHA1
a40e7d23ccd01fe82aadf91554241740fac53a91

SHA256
3b5da2c1f3780dfd6b773c929e6fd65e3e13d753768e9e14106a676289e1c4ef

SHA512
9ddf6b49497bb479edcc45b44f6d2a65585da4bfe62d7bf106f3f1f1a54ec31054cfdc9c2aec237fbd9a48752e060e9b849ef28e0e5b38d7a6688e88b783ed23

Download Submit
/data/user/0/com.tc.cm/databases/pushstat_5.7.1.db-journal

Filesize
8KB

MD5
c66d78d5ba7a8677ad7ba90a2490e43b

SHA1
b968450d16e54ed113f06a2742a2118db1115bd8

SHA256
2f0bf69f2d665e4dd0549e3c7ebb0ae04ae76d5696332c00f2b4beff2309b89c

SHA512
7aa921f2f0fd564f518657b245d68052b3470d5fa01a3fbc3373a55d71fa2c11e94b5e6affb9822f0fe9479aa43325b550c797ea89990baa28b58b4a4c97c732

Download Submit
/data/user/0/com.tc.cm/databases/pushstat_5.7.1.db-journal

Filesize
12KB

MD5
5235268864e68e0869567cae9bc237f9

SHA1
4ee45c11579fd6f0147b16e176512a321f1bfc04

SHA256
5a388cf3c319f781f966bb62ddffaebebc9d98a4e17e96966a0d39472c512412

SHA512
9467a2e313775afd8dacec490ddf968a483dcf75f0aee7a10be0e3a58e34dffc824dedca19e3fb80d3b41e074066e92e97dfcde0ee58fc48ef022afd40740163

Download Submit
/data/user/0/com.tc.cm/databases/pushstat_5.7.1.db-journal

Filesize
16KB

MD5
5ad52c97e1119ae2bb00439e19593e34

SHA1
73bc5294040d25320ef54102094a82b88e2edbdf

SHA256
dfdea3aff7d9ecae743af586d81fa0e26bcf42721368cce82ec694e63676baa1

SHA512
a64afda4b9ba53557062f7df741f7e8a05689d948e47c86b33bb3480042336367a85238aa4a18778c69223efefa3c60beb7caadad4112c0e734e1782de8d0dc4

Download Submit
/data/user/0/com.tc.cm/files/.FlurrySenderIndex.info.AnalyticsData_GHSD5TFFXRZCVJBBZX9B_171

Filesize
80KB

MD5
81a416795ad85900b4f6aaa10976fd8d

SHA1
01bfab1088f1b17a617cbde4aa68fbc71d513eff

SHA256
b6415756ec91cd098832b08baffbef01a9294312027318e92c765ffd13f0ab76

SHA512
0ada7b344840c4c3c98b063bd3d03570f14af7724301cb0abdff3a59ddea2bcb3a2e28f385a877857259c1acff34d063ff5947668588fa80d93b66897271a340

Download Submit
/data/user/0/com.tc.cm/files/.FlurrySenderIndex.info.AnalyticsMain

Filesize
8KB

MD5
ecbb0e9cf065816cd95de4b472b5a3c8

SHA1
7d68353230bc33444f9489bedb42c45a2ef29516

SHA256
9950a4909590db879dc5bd248569572efd99135f13eb14737726d65f9bd6d8d3

SHA512
15501fbf2fec55f2496ea3d13eb8a7634b94b678c0a1f0a4463da682cc920d3a8eb189a755a41e7d2352b48da0ce818f780c1cfb010d8f60acf7934f1f4ccfbe

Download Submit
/data/user/0/com.tc.cm/files/.flurryagent.128f33af

Filesize
512B

MD5
f0ae7ee6761693426692b63c049b2033

SHA1
11b300e3049df01a340521c23bec1fa59f9ed6a0

SHA256
02777ffe78e0f4e7436786354ce6dd2e703ec6d9e42e49aa43531acc1e936077

SHA512
80728a95d7baf513077afe51578cc9cd8572cd7eec627c81c63b88b51e1113a98ce18cc72811c1837ee1442c0e911e75a4a7b7c30e6a9232746e47273f0738e6

Download Submit
/data/user/0/com.tc.cm/files/.flurryagent.128f33af

Filesize
152B

MD5
0db43a2a3320a1b8f4e878bfb25bab46

SHA1
d590e8b36236d972a68a04c183a346d305c8e2fe

SHA256
76ed1ceea8db3a50deeec63c67c0926a03a3423e00121dc835314f9b138045e8

SHA512
55092590a87f1726348bc6f3161a1f52421db337c173d4ffd2922af112b9c2394d1af2a749a49bcd7fd1948228edc5d0513be6b27231998d91274c822c1abb64

Download Submit
/data/user/0/com.tc.cm/files/.flurrydatasenderblock.243b4482-0a15-4ce2-8af8-709bb05c9065

Filesize
512B

MD5
8a4be064f3334c3ae4aea479f98a751f

SHA1
2818b6f5de2fd65e0f26e67277767e3022bf3c3f

SHA256
0b6dcd0dbdca02b32941b67bfaa5907c4d92c52fe13901b5b3bdd1877cea44f0

SHA512
cc6a7ae5ed4619346db1dce7161d486d99127a7f93a45bf814964e9a1aa920b1dedb8a49ad0e5ebf8fde1839186105610294ff9545caad5927ac5a9fe71bb695

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db

Filesize
32KB

MD5
5338a6cb1da4b2dfc5fa91bc48aeb9bb

SHA1
5befc76ff8606b22cd58efc8894cb550bae96dea

SHA256
b5f8bf47b0ca454ee7486c38afda7f54b44d13eaca349f775ef246cd00b80508

SHA512
1b9fcb919190b1c46889b71a8c0400c095af6e282c753ade0afab0ca3078457a43cde8c9ea28463e6bc8bdbabc284c4e9fe78171e4a5d840c1ae1fa42062b95e

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db

Filesize
24KB

MD5
ab7bcd674f894cfc38a57267d315578d

SHA1
fa80349ff55a8e700a2a273870e75573917add80

SHA256
13502d7ac79e6c4c7dbbdefae5961859180158bebe91b5a74f94c43ca65ce4d2

SHA512
d4eb6e63662653ac7c726db8cae289622e35805a79b77e70c533861a4bdb978a6ed479c48afdaceb9ea2169782652facd301b16475cb82c0a805ca0f09640e3b

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db

Filesize
24KB

MD5
75a9143c813b92567e24466ac6161168

SHA1
7d34bfffc147bd57c57bd0bf4140cfddd813e228

SHA256
fc3bc6327f9e4ecee9f0337a1051c9c19289a264f96db2c08232a31db096385a

SHA512
7d55d5a7fb35a9f0c32a02d4e0a7b0701066ea26b010c5a2eb73f792b4ba5d2330c84abacd366c66cd869775067cfa10e2b42734a683a68f3f1dfd622ad55b41

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db-journal

Filesize
8KB

MD5
d164202151dd467a28d5d87d2fec6e57

SHA1
867cdcc95a4f8539b3df728c6d076b0a56b51580

SHA256
cd41df62453ff25cd86c2f4b520fc348e00285a5c02978499fbd3e150465c58e

SHA512
b07961e99fd6368005703e179f4e55d84f280966872fb65ec654ee78a2c19a48af1f7d8b5c59d3a8b7686a44166508e37e22441ac9f420d04005094b3cef2131

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db-journal

Filesize
8KB

MD5
68f25ece01cf9039f87b8004b7afc186

SHA1
27a30c9f34725bb9eab8cc37352265f1d13d036f

SHA256
230fb1c7fb3e3d66cdbccc095c511f744b51d824fc9bfc9545cf4a7efebfe98e

SHA512
58f6a3b9b7c60fcb4055599ed936088edbdac2920d27a52d6b6627fe69be1a88f7a5c5e18360d35621023582b630aae521d62759294d2641fbd9464d0ccb7775

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db-journal

Filesize
4KB

MD5
a142bd07037dcf5a129060fe4f759c77

SHA1
c80acfec2c923dd9a82ae33761e78c9d16ce1092

SHA256
3dc2ab39eae920c244b42b32c19109b3389406a42e22ccce0139beb5d44df5da

SHA512
57924144bfbbcd6d7d2264f0178c678ed6a99b732e66a64517cc98e2e25aa7a134c73545f57ca01e5dc516ceaa6ff1a9da64237669943f5cc5774e7efadb9724

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db-journal

Filesize
8KB

MD5
fb2fd4eecd2c6abd90f2bf111f6d6073

SHA1
96fa4b0b7587cb9e63b36f042ae7e9cbf0993a64

SHA256
a4ea54f377cf4cc268cef053f23ede30090d199cd09e4e33b4e850e6bd65d02c

SHA512
3c25e70f05def8bc8f1381363dbc0b192e26018f5dcf443421530754f2214b05a328d9a46b85a44d81a4f42ae48c0b8b1adb498f47d0a66568b9007f7e37f7c9

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db-journal

Filesize
8KB

MD5
b18c1d362a7dd723db4f1e40a5b80a27

SHA1
094808f2fafd77f2679e52d7b8f8830a206882c7

SHA256
7133afeb6851b014dff90c9c6533909b91ece789c59dfd19268f1cdb221e2eed

SHA512
ea4a21306f5f9554cd7a3d5e22061011de17cee0d566952281ba74ebe98782855a77bd14dc431907b5044f1f76a11fcd4ebb3a79ccc4a129783cd838205dbb93

Download Submit
/data/user/0/com.tc.cm/files/TDtcagent.db-journal

Filesize
12KB

MD5
86a769df3af6199fcfe0c046822e55ae

SHA1
776f51253e849e618cedd2a2e4df46838cdf8508

SHA256
2577f879818c017a1cfe2e47a8a9c8000877328e3282b5c5dfc85ab0bad61592

SHA512
d45027e426b62f9072e748cb7a81ca6658e90453d6efdbfc957d1340da7d7a8e966e5922ed2688d10874555762449de516d40d6bd5cc3c77e6333df5731584ff

Download Submit
/data/user/0/com.tc.cm/files/gaClientId

Filesize
36B

MD5
76ec90622863f6764991f99b453f356d

SHA1
46f29b9d643749e9bc8ac3bef227afd30592c778

SHA256
4fc89da028b2587b70fbd2deba63b95f6c716904d691f93ddb35e361dfeba0c8

SHA512
735ad70cbb42dc1093b72716b31d0dcf94c5db61cf668acade9e1d0f3dc325aa0a4458d0512bb4280c22096e8fe4035db791a04fbcc89f207c2ce317af681ce5

Download Submit
/data/user/0/com.tc.cm/files/libcuid.so

Filesize
109B

MD5
9ddd415f98889165815b8601077e83d5

SHA1
bd1b15567ebd355bf0daeec5917578827b2cb104

SHA256
81f82b57c94bc7ab5db363bda0dec955164969e65b3b50bd90c4112da0c03b37

SHA512
48a99234203e4d80d9acf84729b8e636f8f0ce12f5168506fd7977341480fb06aa227f545f2e14eb9145c53869661fe957aed6862af02683e8619ec78fe4791e

Download Submit
/data/user/0/com.tc.cm/files/ofld/ofl_location.db

Filesize
28KB

MD5
0f1d016b72965660817257279fe6db8a

SHA1
c6df5e5df595298450460b93783f47d41de93da6

SHA256
28c646a98fca3b32bb3bff6b16e1804300bd374395fb345c4d3135f827143ebd

SHA512
c6200160aa333f7383ef48b3a8f0b94ec2e7fbb08ae8fa6df872a6e29b95457efae0ff9a0624e336369c69ecb91d0266ecdef94fb8d037ce94f99ba362a13773

Download Submit
/data/user/0/com.tc.cm/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
3a63b6796932ac4a8363be357b951128

SHA1
36b05ba9ab87d6dd92da648336b059a31a742fd1

SHA256
d60580406bff78180a822147b1daf1fe7a97979df49cc3edf600afd9d252aad6

SHA512
826e2b4628e1b3f6c182ae74688d60e2ecfb0c778625b636e31fb3ed7ea146f4c1a0db598dc4f96404d401b3545c356352f9415a71e3ff55aa3e3469b7ce6129

Download Submit
/data/user/0/com.tc.cm/files/ofld/ofl_statistics.db-journal

Filesize
8KB

MD5
87c002530dde7f6f854dca4196c9f9f8

SHA1
839761e7aa5856f086d8d1469677082797361758

SHA256
7fa929b7e6a8e8d99b8556dabdb4b557bb7fd8176f015add8727b309cdd3c3c1

SHA512
a286c54983740948a2f4a8b1cc46f4b6c9e44661f2f9e1ea7cb416b77589137ae4a8cee8f2ad598c99fd9587bf9e2293bcd06b2c366249d76f0f2d1b10bc9e55

Download Submit
/storage/emulated/0/Android/data/com.tc.cm/files/icon.png

Filesize
9KB

MD5
ffc052ce453005c8b37a823bff9718f3

SHA1
3f2c686276b7490858043b4c218cb091b0fe92cc

SHA256
a999b3705435de1c21f9a13a463a9a71f97fc42307554423f33180c09d60bcef

SHA512
85f500191d76b2da227792a7041ecd8866d437f107e742eb730276250caf86659644e3d6c036c63e9fdb64130d671e3c482273db9101af7a3927d5177a69be02

Download Submit
/storage/emulated/0/Android/data/com.tc.cm/files/metrolist_1471580538

Filesize
19KB

MD5
26f7c816e0ebcfb27ed1083a7b0403b4

SHA1
7241a72913d5c300b16a606ebb7fe7645643ed3d

SHA256
d85d640ad9dd6e7587f8b68132ac9eb90c9cbaab35a03a59106323ea4959c75f

SHA512
5de0eb4cb97022c17ecbf00ba9c83cd52fc7fd2471a5564461475156a036e474366d84a6827af66c836fa605be01e9282fd07bf6fc0c508fce4747d15a2e4ce3

Download Submit
/storage/emulated/0/Android/data/com.tc.cm/files/user (deleted)

Filesize
20KB

MD5
1d2c49f2451eb8923ff0b78b62aefc39

SHA1
35cfb56300874b4acd98f7f8d47e2b7d3cfe6b21

SHA256
20161b98d0e1aa80503fe60dbd191649b44280d44327baa0f06b8e991fe91d10

SHA512
3281b0a25606bc7d391661037a2d7ffbe0ffcc2b4e66b39074d2925c42b2ba90c8b1ebdd97bee7842deb9994e64b245027216d85af245e5ac23a382dd5076d13

Download Submit
/storage/emulated/0/Android/data/com.tc.cm/files/user-journal

Filesize
8KB

MD5
8c5bbe2f4ff6c3bcf16ae1e053a48fcb

SHA1
3343cc0e66ed2ae1f17849849e729c2dbabcc81b

SHA256
195e99915359cdc2f6bb34d65a2a9696b3f30c62afe1bfd9736bbaaf4f6dd788

SHA512
99d2480e137dfe498a80ef27854c6136be299df6d76c0e09f4efbccbc1486f904a8b24f70b05f9bea3281ea2510a8cb791f0f830ca23a7bad95e299957a1d888

Download Submit
/storage/emulated/0/Android/data/com.tc.cm/files/user-journal

Filesize
8KB

MD5
eb0f438bb888130ccd30273e8f816b82

SHA1
5b87d29206dc25aa7c1a96a95003cf65d8025cf6

SHA256
83cd45ddbf99d260d3bab1b10597dd62758910338223b18b0c55f8b20588795d

SHA512
3a3b5b3bb7e515f205036f06baf05438ebbffd2979a4ea196b39ab605c1990614f2d92652eccce31af561210ae483f822fc676c888adfc21ff8ecec5539d4846

Download Submit
/storage/emulated/0/Android/data/com.tc.cm/files/user-journal (deleted)

Filesize
8KB

MD5
091b2b2206df266206058a0202e1702b

SHA1
0cc7132b45513398f00d88873a5ad49577354868

SHA256
994252e3f8500c4d034a5f9de1ed3784547176f2bfe7fa5c1a89313aaae45caa

SHA512
18d30a1edba59e58441f79d887ae853905b18966c3c70e71136e371c371f747ef789909f802bf6c40bae0b0e08e670ca2d92d2a0acc812475727f579cc890c63

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid2

Filesize
512B

MD5
174563c8a965a083e8d304fd91763927

SHA1
20886f0d1c1900979463a80d3ecb1d23cc9e7571

SHA256
4b4304d9137bc5d4c92128db464a6029dac81cec75628589df70b33502ed2721

SHA512
fb47b7edbcb26ad93ef6b5ea5386d6703c2421d847f2e18183d8325cb688b88619e1e05790856ddd6b425c412823294345a5f4deb062a130854413eef8c295de

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240919.log

Filesize
12KB

MD5
2387d87df75beb035deb188fa7a0d9ed

SHA1
8350c8951efc9270b54e58f4d6cbfd9456e8058a

SHA256
cb3f887246685f84fa8ebb36f842ac99fff1f53aba813a7e80c20d07a857ed74

SHA512
a57d6679d62a480542cc8190b4a3e7fd8ec47838d14aade61808ad6889a50ef110b6c47972f718fd56dcadc8ef81594b0e31b73164c072c11e4f6b9b741e4877

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240919.log

Filesize
8KB

MD5
d89529a1f9a3640a7f290de3a2173860

SHA1
9a5161e212d22df20e9709757c2e8831849e49f1

SHA256
c819f2ad2f9702d86bae84bbc4d3fddadf99b7d54794b2a36b810d72c8ff8640

SHA512
3eb9935de237295b640bf58fa1bf75b2a16e6915dfdd696f6331623ae6774e0e4be1751e66c9aa4da67f215f9b3d59e0e2d2112e695226461efdcffff05e0d08

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240919.log

Filesize
512B

MD5
6c7ad51b75c515fb78a93b69abc767f8

SHA1
4d0d34df3277f0c3bfc73d6a20fe99e500165863

SHA256
1748a21a7cc477cb0a9b34b06f4505f751bf35622ec5164b092d5b9d8fc78485

SHA512
f02f59ae4e690d1fd19a986f94c421de6a53c045c95490c34d31827089d3aada0cb0f7215dd9daffd6bc5e1bb59a2d8b7170fc7e796f671b7de4e5a8c0052227

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240919.log

Filesize
20KB

MD5
c5d582f279e47c36d44f64793c7f41a8

SHA1
d3f1c876ecfd26278f3eea9f28a3787166ab52aa

SHA256
cb7e057ec1eba1839f521d5560b02c3d844c82482089da5b4a38f03ec8a3b590

SHA512
b9d83a4422050ba4c6950faf3a04b9c2d65bd45da47ae01ecde8b27b1f11b8c8025b2b6d0620fe2a812efbd2ed3ab33606841b3389a9af82444cd3477c1d1825

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240919.log

Filesize
309B

MD5
354b9a72bb0192f4579d8553c0bda7b5

SHA1
fc8a3201abedf1434f40aa0192f11b64ad3e0f5c

SHA256
533ecd5744d2998e7deca00f66cbe498e1aef5d012a18aee6c975c1ef3a08b50

SHA512
f49f887ba592f97aa22da3a498b0b724da23e29e236c52fb13192793d86b3f5774d3612fa3e61169036d23a28d35c035ad30505f6e400ae2fc6649d6b31832f2

Download Submit
/storage/emulated/0/baidu/pushservice/files/msg20240919.log

Filesize
512B

MD5
b6f0800c3cbff4b6a3bfaee1d5652eda

SHA1
d1db2daf6261ac2b5b6b6f3dc48ddfb48b80558a

SHA256
54155f20c1fce0c17dd22a06cfca3f5c7d90d41482c39490e7cf91c0770e45e5

SHA512
8673be9aafd7dffae391014c6ddae0c634f7dc433a1fcb913956e3731d5c1413160a156f277485a1332c60d2d3c40129ad074b6a751fc6fc9479533e89a9d183

Download Submit
/storage/emulated/0/baidu/tempdata/conlts.dat

Filesize
146B

MD5
546929975ec3a45b76335478b667ffef

SHA1
299acdb95112de2873fcb52867a000397c944362

SHA256
841b26ccadac6fdef370a0f3056241f50a3ed2140ed47be8d9191d434577644b

SHA512
ec53647dea33f6715da2d4926d227ece3b37b15daa87b788fba1d589cb9a25e48dac2875621ba677741e301482686ca4d9ca4c306ac6a8f310a69b59c138a3b0

Download Submit
/storage/emulated/0/baidu/tempdata/lcvif.dat

Filesize
96B

MD5
567e1f8059afe836a810ef1c49dcd768

SHA1
5de0eab5e434902073f3959369c3528756dbb6b4

SHA256
98ca96ce4155b51a3255b737e951b4ae890c41ff19822300e13cd90fe31e7e9f

SHA512
7fe5bf4e99904d1db3a88dca54854e1928e181e83936c2266aec33c2ac05fca8318b753d738146c92c3efd515f6b820d613518f2dbbe8b9226bd3dd703824187

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads