61a6fe435d81ba07c5628fc9a5507e9c04cb9044f98529c0b1abdb577c11d609

Analysis

max time kernel
67s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
22/09/2024, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f24a4dcb7979897a5b03e876a5ef5554_JaffaCakes118.apk
Size 9.2MB
Sample240922-st4bksweng
SHA256 61a6fe435d81ba07c5628fc9a5507e9c04cb9044f98529c0b1abdb577c11d609
MD5 f24a4dcb7979897a5b03e876a5ef5554
SHA1 8851cf53448b3ded8fc1182209d9557eae58ea9d
SHA512 02b5b658e531a3d43dd4ecb5f54948b77ea61dd3c4160ecbe04de9fa285c75afe62b0c491d38851eaf93c9dcc6cbbe5881ca6818a4b1508cff1e794eb6952f55
SSDEEP 196608:YZoiKhR/SLYKGaNqCNcVl0Q//aHY9UzcT0++j46IIkipmN:YZq4LBGboud3aHhcT0n4JIkxN
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 6 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.myzaker.ZAKER_Phone
/system/xbin/su	com.myzaker.ZAKER_Phone
/system/bin/su	com.myzaker.ZAKER_Phone:remote
/system/xbin/su	com.myzaker.ZAKER_Phone:remote
/system/bin/su	com.myzaker.ZAKER_Phone:v1
/system/xbin/su	com.myzaker.ZAKER_Phone:v1

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.myzaker.ZAKER_Phone

Queries information about the current nearby Wi-Fi networks 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.myzaker.ZAKER_Phone:remote
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.myzaker.ZAKER_Phone

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.myzaker.ZAKER_Phone
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.myzaker.ZAKER_Phone:remote

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.myzaker.ZAKER_Phone:v1

Queries information about active data network 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myzaker.ZAKER_Phone
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myzaker.ZAKER_Phone:remote
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.myzaker.ZAKER_Phone:v1

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.myzaker.ZAKER_Phone
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.myzaker.ZAKER_Phone:remote
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.myzaker.ZAKER_Phone:v1

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.myzaker.ZAKER_Phone:v1
Framework service call	android.app.IActivityManager.registerReceiver	com.myzaker.ZAKER_Phone
Framework service call	android.app.IActivityManager.registerReceiver	com.myzaker.ZAKER_Phone:remote

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.myzaker.ZAKER_Phone

Checks CPU information 2 TTPs 3 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.myzaker.ZAKER_Phone
File opened for read	/proc/cpuinfo	com.myzaker.ZAKER_Phone:remote
File opened for read	/proc/cpuinfo	com.myzaker.ZAKER_Phone:v1

com.myzaker.ZAKER_Phone
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:5063

com.myzaker.ZAKER_Phone:remote
1⤵
- Checks if the Android device is rooted.
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:5120

com.myzaker.ZAKER_Phone:v1
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:5221

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

ZAKER_DB.db

Path /data/data/com.myzaker.ZAKER_Phone/databases/ZAKER_DB.db
Size 12KB
SHA256 c5ad683dbf24390d50ee619fa2982496fae918ee8e2b61a9a51aafc3ce649972
MD5 66255cb3e586ac98c7fe987ae81defbb
SHA1 0666a6a317bdc90e68a61f4e5bce650f21760fd3
SHA512 97ed6c6d3b8a9a6352c7504454d79b2648c265428d42dc96fce97bd05a45cdd1518474d023746a028223c1e60a654ffe9f1e73e7193489cf02adf2ee75956355
SSDEEP 12:7+tBqLEy0Z9CNUTN8iqPs3RmBEyPbRHOw2:7+tBqLEVrTad1GSR/2
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZAKER_DB.db-journal

Path /data/data/com.myzaker.ZAKER_Phone/databases/ZAKER_DB.db-journal
Size 8KB
SHA256 6a8aa2ff232a6af3e6445a3c6b5608728f84f9e5c1d1690bd9c527579e8769d6
MD5 7938c9084fba754f3757fa4c35967895
SHA1 54ae351f112f62f066b223fc060c02f2ad9d7dd6
SHA512 9a63beb45f872872529cdb6e786804f8049c78228e8121be863e4979ead514bb94e0d33ab3113e308087da8c53b3ef3dd9e97a2083033e29f733fe22bb06b8cc
SSDEEP 6:7+/l9BaOn18vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKgwn:7+tWvqLiuWdwRmBEyPb+n
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZAKER_DB.db-journal

Path /data/data/com.myzaker.ZAKER_Phone/databases/ZAKER_DB.db-journal
Size 4KB
SHA256 dba0e5e21cfb6cc53ec95b7fe1bdbd5acccb1afafafefa5d5f3db78df3a2c3a3
MD5 d5b30c6fcb83bc3b1cc6fbec5101ea16
SHA1 73782c6c8549cd157482ba92d3899a1fb6af2856
SHA512 77ac64407b6b5709d9aff85597958f7d797695bf262ff4fcd162840643b9fa1195d10810a294323fbba676ea55746c5608fa933f6517407d600fd41ad4c18061
SSDEEP 6:7+/ldFFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKKn:7+tBqLJdTRmBEyPbln
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZAKER_DB.db-journal

Path /data/data/com.myzaker.ZAKER_Phone/databases/ZAKER_DB.db-journal
Size 512B
SHA256 728a03cbd81a775cd0b5dfc43a030d6e6b0976964e7c3ab03e25f305eba8b544
MD5 5b7ccc42e376e6332481731b6e3ae64a
SHA1 29eabd218beccfeae60978b6c5dbc99dd8f2e573
SHA512 eeea88058f772f381700ba43fc0697565d402026fb35cbf6ca8afc6f52ea33fdbbb9760caeb7cef79565f934f5acbd32f36cbe86a9139653d440b5ef7e19f566
MD5 SHA1 SHA512

Submit Download

push-toggle

Path /data/data/com.myzaker.ZAKER_Phone/files/ZAKER/DataStr/push-toggle
Size 1015B
SHA256 a4bce5e03d753aca677e32c7af3079ee1172d796477b2ba2df27ef231887f879
MD5 fc2211a6f3dfc07ae601822f81a42fc2
SHA1 3832b5dd949be14afd9e0151afac33ff5224359a
SHA512 830accfe2be84eaf270a43afe97ecd0c77e0cd42fa34608c5693820f0f6a00437bcee447ba4ca231948228f431b9a22d639e68c227f5d3a8ed5b766099b8d140
MD5 SHA1 SHA512

Submit Download

__local_ap_info_cache.json

Path /data/data/com.myzaker.ZAKER_Phone/files/__local_ap_info_cache.json
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

__local_stat_cache.json

Path /data/data/com.myzaker.ZAKER_Phone/files/__local_stat_cache.json
Size 25B
SHA256 c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19
MD5 2d805b13f2f28dc3ca9bbcc000f49bb5
SHA1 9eac165b4d81258fd3967cde5cc53b53b1dabcb1
SHA512 5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0
MD5 SHA1 SHA512

Submit Download

zkid

Path /data/data/com.myzaker.ZAKER_Phone/files/zksys/zkid
Size 8KB
SHA256 bcda81c8446ffb47bbf020dd87141cf6ec9a356e5032580866e5f8419993bc8c
MD5 03b0cb521319fff2b74677f896e90d9c
SHA1 85ee006b73e41c72bd9f2b160cb7c0d39d93ce16
SHA512 19de07cf68a669845ed0948532f10ec94c35884eed8c19cbd3a7b614c406a77466b0d4a16e87b86cc9f85d8c1906cfb30ac35d492cba91830838e677da26ad1b
SSDEEP 6:7+/l96AFn1iLpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKqi:7+t+LpqLiuWdwRmBEyPbbi
MD5 SHA1 SHA512 SSDEEP

Submit Download

zkid

Path /storage/emulated/0/Android/data/com.myzaker.ZAKER_Phone/cache/zksys/zkid
Size 512B
SHA256 5cfb601f2e762fbe20a8de2429fe972676313435bd9e33b850c2c3a8d10e710f
MD5 d9d3afc93b7c4a6e7eeb5e3a0c156c50
SHA1 6abaf13946619123e8d76571745ca4982acb0d1b
SHA512 5851742e1f6abb23348bdad55b83e76a98d6a0dd36022b0aeff6ea15f7fdca7ff1acbe5638810be1f3fb44cd49dde7d5095a39803e585a3c3b46439b3988a916
MD5 SHA1 SHA512

Submit Download

statisticuuid

Path /storage/emulated/0/ZAKER/DataStr/statisticuuid
Size 16B
SHA256 67a0cd2139edd01848b055d1bdbafcfa786d003c7ef1e677a3e8da157caae425
MD5 8e3d1e90c339b5e1e449c434b282630c
SHA1 04d0f22e07adec7ec0d3db2f92f5bca0154c18fb
SHA512 969481f9a1e6d5d9f0aeeed03dee47b262464f59be846847e189ad79171024fe500531d6e26888aebffc4798e22322efd7ec060d1ccd87934d6d94249b2981ce
MD5 SHA1 SHA512

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 20KB
SHA256 5bca03eeeeab6a8d20f150a4c53baeddcb66b194ec0d23935e4338c8dc5c5024
MD5 3f7bb1c7c018db2c694d1605116bd568
SHA1 dec75e1396b55bdd6a2dadc779342190800198e0
SHA512 b6f894207809afaaadcf0aa0754a96498d1f9172739b9ec18ba291aee45d585e1851ed85b0d5bd0c64b816cb62292160f0558f0777a230189e9274da4899d871
SSDEEP 12:TLWROv/UyNTSFbyRxw59YERmBEyPbAVOwlNCOyDl+iGSpem:TLZHBSrY/GSE7CVDce
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd

Path /storage/emulated/0/backups/system/.confd
Size 24KB
SHA256 c8a96684bcbdbb3c1da9a0c3cde99f8d3d2bcfbd2ad12def9b48b9caf0d1c809
MD5 24d00f261015dc7b7701f7eb3cbe3c53
SHA1 fc936e00c42dffcc08b2ae60bb1f61875b6ac865
SHA512 21178638c5b1c0914ed698c613121082a02fc3749906a2463357eb6105152eb1f43a30b57812c34a61e327646f9307b5c50111da3b4f6726786be2582b1c8fd0
SSDEEP 12:TLi0QrR0y359YurNTSFbyRxw59YERmBEyPbD/Dv0NE2it:TLiBXrYuBSrY/GSfyEh
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 512B
SHA256 d11bb77406c0b4851f3e48bb5fd4058c2fce22ff97780e8e590bffa15e9cb3b5
MD5 8bb43c542aa88320380566b718c609bd
SHA1 ee645ffb03912f648360dcb9f4cc24488e53faa7
SHA512 4586a908567dbc70bff8d86a0f347336e3790345ec9808c40917ad10a067bf5e9683b23a4c0b877ec31f5975b8cb159ac54b913dfe6a962190dad37d9a0bc2ab
MD5 SHA1 SHA512

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 8KB
SHA256 8aae8d501e5ac2c1832be73af6a25d8ed1be23e06798f965f371ac2c6dd4e343
MD5 3c410a7f840c326e787e7b30e5b4f872
SHA1 73d5cd949b328a063b7fa927513d6e5c26b9a8bd
SHA512 b705c49a58a41b6f581c86c369c7bc0c751b32c345ed640cfe77204c75a9b1adef940d62e6076e6e9bd9b31ba20e106914e2424938e108f3d26e492da9fc19aa
SSDEEP 6:7+/l97Fn1Kg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKH:7+t5OqLiuWdwRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 4KB
SHA256 c2ccbba63e237e66f36ef821980779724ca88cfe56990f162e2210a2cd38c865
MD5 ffc4c79df50071a3115abdbae912fc17
SHA1 5ff8cf3f4ca12c095fe2c7b784f9b0275acbb0b4
SHA512 25b338ca9ce5b16bf82ebf8c63a1ee5f9f60c1427b2f29c6574611e6c8d858df468f12a9600487b04616adb64d4f15725e43f6f3cebf3a625ac97f7745c33c9c
SSDEEP 6:7+/liOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKu:7+tiiqLJdTRmBEyPbB
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 8KB
SHA256 1acfbda86a44a4d7e7d6deb1df651150aaa304c3367c305da79ad496565d0d1c
MD5 85d9b71c98dc0537657e2482a571494a
SHA1 ecf7cdeff3d96b671642c9557fd6808d2583d21e
SHA512 4b9bf676c44c437f0dd40604c3716565a542b6d79d9b481850264c01942d1200d67fe8d2646d03138dfaa04c8f95b3b4de9a10735b7567ff7512351d44471ea6
SSDEEP 6:7+/l9R4H4Pg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKg/m9:7+tUQqLmqCRmBEyPbfs
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 12KB
SHA256 7098b130236211c38487c92cf2514a358c3aa00e615f0f16c8d50cb18a11b1a9
MD5 9893f056be1e688929e2e02a77bd57df
SHA1 41e8a66b52d69265c7166310e976e015d624233a
SHA512 cabafc212d24a5103847a1012115fa7d66bcb2ac8b155c6e3a76b865cd6477211adfde9076c022842de2dbd1e46fce866a5ea8d177916e975c8d8ff7419af484
SSDEEP 12:7+tRIqLyKEg/UyNTSFbyRxw59YERmBEyPbZ:7+t+qLy9gBSrY/GSZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

.confd-journal

Path /storage/emulated/0/backups/system/.confd-journal
Size 12KB
SHA256 995a9d31b20848725b75606e94c6a8172dfbe8a563a886bdf321de1ae7058837
MD5 bdd8ebad8d7cced194b5f76865aa0128
SHA1 f47b058e39b7071d36312a92ee352f438afe9bde
SHA512 71b9284eeea2855b809bf25b0305ba5afcadbc78353ef96d2e819e1a2dc66b5849b32fedc3148b720b5f19ae6f70a3d406942a880dd177af8f9e66a58b620740
SSDEEP 12:7+tb/6oqLSlrR0y359YurNTSFbyRxw59YERmBEyPbP:7+tbFqL0XrYuBSrY/GSP
MD5 SHA1 SHA512 SSDEEP

Submit Download

.config

Path /storage/emulated/0/backups/system/.config
Size 25B
SHA256 50e7bb4deeec047ddd200a41e3684840d95d6925e07550248c27ebaa5317a9aa
MD5 9c8c5d1e944e2a68881d9e8f701b3074
SHA1 642022496b55c2dab4632385e101cee07dd44c6c
SHA512 6fcc7f7dc9065cf7775c5485193c73b4ce4fc00f5b3404830aab06730c818e9c135e9549c6b476bc65a5efbf5f963e9c8200e8d78d12bc7058e5c15307c204e3
MD5 SHA1 SHA512

Submit Download

.config

Path /storage/emulated/0/backups/system/.config
Size 50B
SHA256 fe6202105e2d831bab9fb1e16b21c36989dd3219f069ab77ede23ce17efc4498
MD5 2106f26f2f1f06954ad7b914e5907962
SHA1 a7fc9572b9c9c44177b0297cd7fd1de67aa2df6c
SHA512 851e83b3fbf72677ee702f3575f6d910ac0c0deb4b4ea66d689f3713d5c06bf9f1cba802a463268968b59ddf21ebe29e8b6510084c5fa9c95ed879b5de2c232e
MD5 SHA1 SHA512

Submit Download

conlts.dat

Path /storage/emulated/0/baidu/tempdata/conlts.dat
Size 12B
SHA256 f52db31332534833414abd5e870f78c810b8ebbe5b134bbf599506beecfd1b93
MD5 8d80bc8ea90e9cac010d3ddf97bda5f5
SHA1 f063bc0d356e6ba9ab1eb9a851131ffbefd8fa07
SHA512 9ea732dd572a9a4ba91b70891972230a09576687ca1bc19e62d5a98b5b84e0f2ae11985108008bc9fbccf357219b8bd3dbf146bb70752f618f70dc5d0c46a7c7
MD5 SHA1 SHA512

Submit Download

ls.db

Path /storage/emulated/0/baidu/tempdata/ls.db
Size 28KB
SHA256 5f266f7cf5a44a3cfcc9bfbba94735081851edc224cb071fa6e650227e214279
MD5 2cd47ada17ad7a4e3d5e2717cb2762c6
SHA1 7cb844672cec4a3bce75c8cf81e80e8ad7cc49e5
SHA512 c25229cca649bc8ef54c0770a976034801c0a300d181c107c41879d7f6b7056c6282210c98661428078381032dc6fb0872112dde7e8efb1a9f9b333877f18dae
SSDEEP 6:l9bNFl4/msW1O+9v5puKx/zrAvH8i8PQtLu8iqPqqLGf2OJRHXF/XWERX4PBX4oJ:TLWeO+9CNUTN8iqPs3RmBEyPbGtOwI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ls.db-journal

Path /storage/emulated/0/baidu/tempdata/ls.db-journal
Size 8KB
SHA256 5b4fc99179b3d8dfa31621eb187a831be012989b84a0c9d2065ff4cc84817da6
MD5 0c7d67257eadad79cbf339091198fc8f
SHA1 911f9b9a5a50a90d09bbd4eb59d3a13fe73913ba
SHA512 e7131d36acbcc30297e8916ea152c270a71ed3cc0a8b3eaf6f3d124dd61856842d36cfbf7a6d947d9cc06c8b39ae5c50d45af445c0b4cdfb37a7347f3174c948
SSDEEP 6:7+/l9atFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKnt/F:7+tktBqLJdTRmBEyPbCF
MD5 SHA1 SHA512 SSDEEP

Submit Download

zkid

Path /storage/emulated/0/zksys/zkid
Size 8KB
SHA256 a2c752530e063a411163d6d2f95425bab1df4fa7a5e5cb244456056bc86fafb1
MD5 9bedc072230b41b6d2d5b211e4524226
SHA1 dfcc8905576e5d2005002a3d8b741f04079a1421
SHA512 3e772f381253a5cfdb64f872e0a1c4fafeb8c43f173868e85c3799e37dcafdfd7d769d7245252e3578f2bce19f9399523215d4f18ace62989a3e7e42913bfdbb
SSDEEP 6:7+/l97B/ing9bNFlq4ys+bvH8i8PQtLu8iqPqqLGf2OJRHXF/XWERX4PBX4ogLu+:7+tZpinqLZ+ATN8iqPs3RmBEyPb3aPn
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads