ermac | d8a7bc4d3d900e901fafa5f3b781a94cedca930fd34b120497c0521847387398

Analysis

max time kernel
148s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
21-10-2024 22:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d8a7bc4d3d900e901fafa5f3b781a94cedca930fd34b120497c0521847387398.apk
Size

3.8MB
MD5

533e38ae9ee490c9a7009eb2bdc7db91
SHA1

2b3def93f7795396a4e5c05c7402f252df49092e
SHA256

d8a7bc4d3d900e901fafa5f3b781a94cedca930fd34b120497c0521847387398
SHA512

456706099a29f7c819c1d7f3d1e2ffb8391fc08c199bc634725023baad1ab79a5447d7224ef667d6f3f164f579d9d0be0fc89b8847ca30f332e67ac2c0d73fc3
SSDEEP

98304:Sd9hMBfd6qGUjEKgcPB87DkWDNVTkY0w24:KfMBfdx9BkJTY6L

Score

10^/10

ermac hook banker collection credential_access discovery evasion execution impact infostealer persistence rat stealth trojan

Malware Config

Extracted

Family

ermac

http://81.177.140.60:3434

AES_key

rsa_pubkey

AES_key

Extracted

Family

hook

http://81.177.140.60:3434

AES_key

rsa_pubkey

AES_key

Signatures

Ermac
An Android banking trojan first seen in July 2021.
banker trojan infostealer ermac

Ermac2 payload 1 IoCs

resource	yara_rule
behavioral3/memory/4802-0.dex	family_ermac2

Hook
Hook is an Android malware that is based on Ermac with RAT capabilities.
rat trojan infostealer hook

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.dagterjias.matreyqaser:AppMetrica
/system/bin/su	com.dagterjias.matreyqaser:AppMetrica

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4802	com.dagterjias.matreyqaser

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.dagterjias.matreyqaser/app_van/lf.json	4802	com.dagterjias.matreyqaser
/data/user/0/com.dagterjias.matreyqaser/app_van/lf.json	5065	com.dagterjias.matreyqaser:AppMetrica

Makes use of the framework's Accessibility service 4 TTPs 3 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.dagterjias.matreyqaser
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.dagterjias.matreyqaser
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.dagterjias.matreyqaser

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.dagterjias.matreyqaser

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.dagterjias.matreyqaser

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.dagterjias.matreyqaser

Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs

Application may abuse the accessibility service to prevent their removal.

evasion

Prevent Application Removal

T1629.001

ioc	Process
android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction	com.dagterjias.matreyqaser

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.dagterjias.matreyqaser

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.dagterjias.matreyqaser

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.dagterjias.matreyqaser

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.dagterjias.matreyqaser

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.dagterjias.matreyqaser
Framework API call	javax.crypto.Cipher.doFinal	com.dagterjias.matreyqaser:AppMetrica

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.dagterjias.matreyqaser

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.dagterjias.matreyqaser

com.dagterjias.matreyqaser
1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Makes use of the framework's Accessibility service
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4802

com.dagterjias.matreyqaser:AppMetrica
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:5065

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

User Evasion

T1628.002

Impair Defenses

T1629

Prevent Application Removal

T1629.001

Input Injection

T1516

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.dagterjias.matreyqaser/app_van/lf.json

Filesize
1.1MB

MD5
e72c7b279eb19c8ded23e6f77c003616

SHA1
2916c00f13ed7519ddf9f6eea3593e0360443e6e

SHA256
325d4484e85ff102a8951f260938385a94df231bbc9a4b94ae51cb302da09ed2

SHA512
80f4582dd52ec9b97753ac2bdd94c85765afdd2ebf84639b1f4021799e38b407bec5ad3cf4baa6fad491f190d5bb37d19e52c306cfee3e2c7b40695fbe48d683

Download Submit
/data/data/com.dagterjias.matreyqaser/app_van/lf.json

Filesize
1.1MB

MD5
af028fb66993327d3da2c32a5aa60002

SHA1
e992b46dc68a0942b3fa3168d3fa4b6e18d2aa33

SHA256
ae61137fa0abfa1adc626ee171910602ec1277e4ad2d643264761c8cfea6d387

SHA512
b42843be5dfcfcc43f33a288d3a0b63dbc8d983cecffc009586667ef251727714058ca352e82b7abdc8770d8dd1d1ae9844ce659ef76651c07dbab130596d996

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb

Filesize
4KB

MD5
57d9344f5e883eaa96815f9ba95feb96

SHA1
6dd736127c32adc4f683a25661e530fcba92b7b8

SHA256
3ac83b7ec7af8a6bd6b676025f0baac3bbfb3f69ce8e9f61486522fac3c50c75

SHA512
1b9b62134e77786731f293225c5545cf04204a7eaaf4d6fef0b1c671a371dfc318b4e54da30eaf38897ca3ce3d68ed12387544ec45e9c477e7170eb3507d5c1f

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-journal

Filesize
8KB

MD5
3ac6e9fe23fba86b5dedb7ed487deaed

SHA1
0c62694a7d5c41c23665a89ef680f31889351be0

SHA256
81459a8d9676a51df2332466a1aca9a0b3e2caceeccb1c3f09b031600a05f965

SHA512
12f83c939519c68a5b7452a97958f6b8601957539ee7de9539d1cdd0be1cd0b224b4704e24ce056a92d7db766402ffae41016a1cbeba458da326e20c0c45abfa

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
106621ca7cfb8a62ee19316093b7161c

SHA1
821fa7cb0742a7631c320a94a3c6a9659343f21d

SHA256
3dee762a8e12d59b3ea3d851a760c0dba7f2c3f411c319eff184e01a911adf28

SHA512
6b2facec2f05dfbd040ffa55da00455a9376f50f28b59cc9ee07fd259141bc853d31b67c629fdeaa2f234ff00855177d7f08061d0ae271ba296f2c39610521e8

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
7d49f39d676d49ca28ae727c09cd554f

SHA1
9ebb49cb67db9d158a870ce2419a51ee7c26eb65

SHA256
c0ab74e2035086630e8271679ebd81a5ce2bd580dc756e644638132ae629bb1b

SHA512
fccd439572b014ff552702a428bdc73cae5803bbc8fb9c8d8f2efced1f2296a3c3280cec1618a5db498289d947a371bd166b738b7ba87cc170ad35a1b15e349c

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
84222ec1db22b4796994902194a26d95

SHA1
dbbb4d05f261a7f44f43c3d47451f1f7fd0bcfcc

SHA256
0ea3d02be6ea2a4dd77cb85688ea05b12f77b798df918241312a9a72cefb40fb

SHA512
6bc706d45a12661cfd42ca900c39c9ac045794e685a90818087ed37c5e4ba2a4dd1ae9f12dd8228345b375989a5df2ebae8bec4538b59eefd66b6578ccf0cdc1

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/androidx.work.workdb-wal

Filesize
173KB

MD5
1f5f6b5f0c12da01454cff986b4d13bf

SHA1
5de47c6fcac10d7f37180380122100a609f9fe96

SHA256
087c58ce20adf0fd16d0476ce8e265c11dedaf3945ed8957af104b0367140b49

SHA512
6f8e807a2fe3c093a6b7d0fb16ce8f5e5ba348cdb5478c5acff48b09bdbc9896a18d6f5abcfdc611c14c78078f273d815a592f48776eecb0f1e9c0261452eb8f

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

Filesize
231B

MD5
98b2d2efad651b6b9499597686e942b6

SHA1
52fcb6e1915b1d06e38bb8dbf3bb21e73d679a80

SHA256
82dd852695effd9bad6688aa3461ead3e1c5c07f2c7bd89fb839808e2da10242

SHA512
f14e9f4553be24e3caecb2d186d6c4d2c681dedcaff89f1b5460ed5a5d392f8b2ebc319aa6f05148fae2f81506c991df9ea2453c0e1b842ef46869bedb33123c

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat

Filesize
306B

MD5
132ab3d489375a30156a2da815826217

SHA1
ccb93519ca0c971ce0e2a50233447fe6eeab4b4a

SHA256
a0ffdb354123f3da02501b4f9050e4074275f35c8eb19f97c9f9a605fa65c656

SHA512
1c1042ca4e7363752ec23e01fff69b6c2c02dcef36cb72831fc0d153b21446292a4859b1549bbc92baa7637db595bc242345de2832c70dd0ec6cfb6fbce464d2

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
3KB

MD5
c4addb7dad6b36143200fee170b98453

SHA1
c1e89ecf4107a4a438876e9c65b676c6078502ca

SHA256
a392bf65bfa5aebf6f70474ababa481f95a88c23baa6acb9d16544008d443e25

SHA512
bccbd4fc77ad9b1fed346b4aa811cee796701563e8fef19beb70ab0777bfa2bc84e5bf9d5441e3180762c3b0ef9a52a72039e3558beedac2029267b8a75571ef

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
233B

MD5
ec4aebc8afbdbe29919cbf297466e5a3

SHA1
030860d66c0b1ea21d1fc224579f38d7dfbedb09

SHA256
2158b572216132f3cf56028506793105b6a6807e26f9e0ff105c1c68036c7d34

SHA512
ec804fd96b6ed99d28901c2a2bbdc8b8fea35477b24474c006389939035f5b75a39067bad20c4bf70fc8545dbce81eedfe9d4f689a639a34ea9625b6f55e1a1a

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
5824da486c1145a967733467cb95106a

SHA1
2134afe277fd91f14f07a51d3d3300a2d7ae531e

SHA256
32382257f2df077c8ee446498ea4dc7aeaab02521b10c0a20b0877bf1e41cc9b

SHA512
be71c8fe5b3a524199fc9083b0fcfe38dd8a071ad905fc8cdb6357f534b3a2542caa3d7447b28a0da0452b82da74c62a41a25c04bcdf535f338f43ed4ba7cfcd

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
242B

MD5
fc2e05efc87ccc5458c8dcca2f2793a6

SHA1
7f4010708a789818e359b6928a0f51a65fec0e75

SHA256
898dd53083e1215c06088dd078e4b901ec985ad8eb39366c5cbc1216dd2391ed

SHA512
52c337ad615d97ebc51cb8a80ebda109e00bb869f5f1d0f4bb52cde6170241740ff0cc941e92b9e01500ad4c36c573d286fae65704d22e61d088570ad9ed54f8

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
271B

MD5
e72e350c1ece2c1849c3c735bc98d527

SHA1
168a9b1f4e2c4ecf86042088cdfaf19cbfaf35c5

SHA256
796343a423ce421d49911b1d3ac65c32cf5c57030835c8d66c0d7ac74d64b1c2

SHA512
d554d0a81064d68182a4fabea2f83a052d67128961495c6ea858915d7563d075060ce06b9ca50c86266eb7c1f6530185bfa9a3bc6f03a628e656311b66dd4fd9

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/appmetrica_vital_59e53daa-636e-41ac-bcf5-45bced6b4fcc.dat

Filesize
300B

MD5
489ecb33af03aefde4a702117665a13e

SHA1
ea75b1ddb933a05c635764473942890aa7ca08e1

SHA256
85690182d72987f1166a2dc1b295315f20f0fefb2155a833c2cf24ee455ed57c

SHA512
5bafe991e3b24418f4475b941946a7066697a60fdfecd8c961002d3d7ca2d50444976b4ae8ed7c7b5236518b9c9ed5b5437e4fe1659d20778079db88d9f7e013

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db

Filesize
20KB

MD5
f5337276357c35867d9766aaae120b37

SHA1
a75c3c04bf49cd633c77e6864905cbeb2dca18d1

SHA256
28f7b362b96a3206ba1df7aa193f282f181a17219008a801eca73e6706525273

SHA512
07f7288d32e4a7e5256477488e2e4c28df5ea0aaf97acff29de7363933f66103ab2cad3a6ba49c3f61132edbc44338e7ccb77d41283609b4cf0a072fa8a5c5e7

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
512B

MD5
c9d724916fc50d28be259005730397c7

SHA1
c431cd3993c6c7463063f036b0c0649f4ede7ef3

SHA256
dd9e4b1e734be4e1fcab134f86fa771d374a6b0931a6ac399e7604a979ff863c

SHA512
1d473d5cf0be18136573d0ddfd5cc30a336b3407995a8b53703f3a1a1f91cc6d6a6aeb2d5262c26b0fb1dd69d09c6dcb6e52c74cbe7c111ecec4bb65876b6586

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
8KB

MD5
1b0121ba05b7b35d4c28b9dd4ab6b8e2

SHA1
eac67a8454d3e85ef160c31278cf00b1b9e7c122

SHA256
f8f60eecd24ec7608e18d81e6164afa8d9109aa2b8c4f18f18e5220d8510d4b6

SHA512
a5d01a2d448adbd4b03c83cb9dd1ec97abf82356f93e46076bbb3642537dbb74b26544b0e1baf67da3e99a57f3a10c569c4bc3ad31f4819a46d7ae30a07ebd58

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/auto_inapp.db-journal

Filesize
8KB

MD5
b4957fdcb23ca4fa52f4e4f19b866993

SHA1
ab63fa1f7b76627e6ef9ea39ded20280a9e1f35b

SHA256
86f5b43ced20bf112e918785feb7621b60c6c53c0a2a87cc4ce21e48f810f209

SHA512
9f927d7c04f221e9f2f46ee5b85834878b4d4fb40bbbd8272ad06f3236206f78dc122511cee66b9715769a20aff5c83bb94ee9828e5534efb084ef34e902f804

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
b3aa6a06a5258ba67f788bc39f7ad869

SHA1
24559b1d6c25287d936c9fbf66dd58eab66e33e0

SHA256
40162a5f663773ba57fc3fb56d033551c81584dc19fdf539c26a7e933d681bc8

SHA512
e2ab04ca5ec126a9fc476de3800d6b88143d4095adf33ec36e7fe4a37439ad34df3e9b8c96add28398fcd3368b283a8c24f90f46aa2979a1036bd92d08c1b443

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
03120dfe67a54c20181544c835ab002c

SHA1
a3709e7e9e5e6f909ab59a5a5b1525c11053d9f2

SHA256
e89ce527b9ef8a0f1273aebaa6697bc82cc790b1d883d469ccc86517dabcc608

SHA512
8a7bfa846c312dac4e92112085d39149f5ef1033fafce3e512ad06cfcb50c42d3561892e59849a234c1cd465c9f874e295127f77f9b4353b82ebc963ec02990e

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
e27f1ebeb644589e3944b7b0db7811ea

SHA1
9d82cd33a1f8b458c6ab81268237092763224fe3

SHA256
825d011d83fb5d9f9b9367244d9582aa8494fa3dca15eb9a7cc6a12655681ea9

SHA512
879c440f5a82a39db3bf1a4466d7adbdb264a1c933bca958c718f338f4de6f1464260ca70d60378d20034223f764a974e301b33704d073ae06ff521cb044910c

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
7072db877c0f1eae3dd1c869658cf214

SHA1
d2cea5dc37dc77af03af1117dc679b7b2efb2c24

SHA256
3f9af442df549ae3dfc8e343295c61e551ab94852d2c59ca1b854b5c5fe43828

SHA512
ef5b14bdbb46710e568955651c5af5ebbc31343d2c46a1c28a75d7b52b30b055ef65ef1e58081d8e28a181bb9a34d81cff40f3088ee61c99822ac96c80789bb7

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db

Filesize
20KB

MD5
6f8f79b477fddf645946183025174fd5

SHA1
3ddc39100f60a3e0eddc5a173c2b5d228a9d14fb

SHA256
757f17c6ffd00b2792bbe35f0a00b9d301140674a26cf1b6a20fb36f99d592fc

SHA512
1a676559e824dab9dac3d516e2e9f750e9aa36a320e7b6938da810ed7b479040506e04e3051cdccc0d7c23078eb5938ec2b9e38eaf8c2922442463f1d549e771

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
512B

MD5
132e4f2d5c72d9760ec9b07c9156ed83

SHA1
eec987fb85288b956fd4307aabeb9a8106b1e4d9

SHA256
841b05ee84b2966060f6e155c1aefbbc20f0ab1c0e20bea0242cfcb37db541f2

SHA512
7a27b2c823d6f77266db1857782a2b9ead79b2ceed7ed2c5b83637ecc8d916938a327aebb29b3cb039c549f97d673e1419df2d22174ab4e5238a03f68d4a2822

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
8KB

MD5
8b748716b92ee880530418a772a6a905

SHA1
ecb62bfa84f965a2263c8f43fb09b6b69e6e8f6f

SHA256
0b9b43237109c0713ab68109e2908f7d287544080db41d57169a16d27adee7d8

SHA512
2b66e5e10672e7df96f79571698a2151ed3f214d2e468615366a4c5f22827538c222c74954411ad611be18da9abb73bbf30defaa4609c275376ab0defa5f5b70

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
8KB

MD5
29c58105763aad04231431b3fc14f669

SHA1
5b4d4a8944dbce601bff1b01ddbcdd8087d24707

SHA256
45689d771f3b9c4be4899184a5f23e2225b3b25ac033018f8c6ddac0d7a65ac1

SHA512
0c2e7c30234b534fc519fea432ae3d70d0b7ca433490063b8d4df9ae4d9a0b681b0d57180814d3fe9f6555ee965d3d4cf2c4b9bbca0c6e3b4809664959bd0340

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
12KB

MD5
372fde40408bf2db768263471be0ab78

SHA1
e8665624853613a9f8de281a970e5e9167fb6d92

SHA256
e0e36bd6d3b039fe9f6dbb11b62aad7c5ba710de33d10f6e40c4d596f0006edc

SHA512
53af659166860d984295b38678e60c0884a22b69fa4df701f4d8c700e4ea5d80fb42b3cf642e4e99381b4edbde1366493f5eaf266ec8b556f319d0171c8aa9f6

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
20KB

MD5
6ab13691fc95d4d8f9bf0263406a0ac1

SHA1
bcc48b5d807c9aea23eb321313bbc73b575daea9

SHA256
baafbadf597ba4bdcaa7f91cf2256ae45f970a61f1ad6be409efd46461651aec

SHA512
a0e7dc50ee8bb6a0ad5a24d87723600f29edd46b32842052964f23fa319d1124722b302cc129ba8bf14634b53b7adb8e1610c40fee940d83e8f096c8d2c4c27d

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/client.db-journal

Filesize
36KB

MD5
9fa1327aa0bad3f190a2c16b2904bf05

SHA1
d482bede511b7214ce5f189f3ab908efd00ff4af

SHA256
234887ca1b1092d2cd77bafd118eab9f005189e0b6a7d2abd0c0b9ee64328a39

SHA512
f7c93316569de6ef9ee838a373bc93a6d4577ad735a1901e09fcc763a3464fb5a5312919dc745f80315dc4567838ad00e916fa605a2955ab9b2528616f6c6e4e

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db

Filesize
36KB

MD5
f422f055198b254e795dcf0f21c59fe7

SHA1
f4b53369aca6a1b2036cfec238ee9f4065bcc7cc

SHA256
74b9c2a131963380311aa85fe68db40471a5a4c0be9b0b2331e5523c6cae25cd

SHA512
aa87850cff970bdb9ba365807644d72f4c7c2b9d2fb8e75969d9c35cb4b3b2aa77b45e11d6a8ddcd7de713c8abce38d85a479d8749f44543803c0c6780edd7b3

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
512B

MD5
337d977a04609609f2aa616b3149c247

SHA1
1e37e8215f02b62a80a2e402e2f9d3016a4da070

SHA256
031c0603d96a7304c30394a4c815bbca91ceb8ce1d8b569e4389eb8086fc0516

SHA512
759cb000d3a5e252e4edec1c7c54755373835e566cdfe3b4f7c7309c6134df7bbf72c28ad0aac9ff1e2c542b9473e12d37d1a019629ddadb9b47d8362f714b71

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
8KB

MD5
7e8cf5a70b6327a344e2b62f8a0b33e2

SHA1
7bf834f30374142eb4008f6632b75ffcd0463b13

SHA256
b591e45668e813983d70584596486a6ca10f18f7642c7c8c3e4938f757f8954c

SHA512
dd09f89e3762b489b244592f3cec993e3a9cc14045fb7ffd008084347f77243d366a65e5e6616db6a6ce43ade07b266f64845217daced034736c300b2ce9d452

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
8KB

MD5
40fa2b7e40bd1cb1a2cf3ce8f8ac4280

SHA1
790f5e1b1caf4a184a0fe7f227078f70c0e90734

SHA256
7700138e1bd6f1e16379787a8829adc9c12ebe04ccc4f5824216e8b4b5344ff4

SHA512
d274e5e39a59aea00ffacbc9b6ca93f9d56ff20e6ca4b30e6e863b3f28a62a74a59a70189ae2eb7f02154e5f0787c8388138f85e6e6885a306135ec39f4f4021

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
a9addcd61548be99ac0a3d388e8b23f2

SHA1
b9f1d1edef5e8b7b84fd59870b9911603d672536

SHA256
490efd64ae4bcb51a47eaadc174bd44f79cf9e292118d90446142a0be08ce74b

SHA512
10e36b50324b0c96a60cbff370a42142a6fb7a9c8e0fb7418a141d016ef2951b08557235ea96127e35f69b119c2dfc2290c95e294931a0184889a945eddfa864

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
9d11d46e83b907fc71c27ce2e68de67a

SHA1
e2d476fddebcbfcc2bce781b9500fba8f02643ab

SHA256
dca8ef8047495cabb8bf6eed96d8a7c5f1507eebee656eabd46383a0bc3567ab

SHA512
657a029acf359e728e9ee6e05d3f580a813a5e9619a1e8242bc86690c775b8268a45f65df8f92eff6634cac69aee6ae2fab94549332479f408e0fa264af6a4fe

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_20799a27-fa80-4b36-b2db-0f8141f24180.db-journal

Filesize
12KB

MD5
d210bd7cc804c9918b9e7e66cf3689e7

SHA1
99d2d917750a26ef16a2b117622f1b167b77b64f

SHA256
1691c5ca812a3f48de0a3db5f79d302004339d92cb6d8169280db76f6c0eea71

SHA512
103c04f1f1cac3f8ddf7b23800f2ec10aa840223bc59c90a71c02860e7b5634a7e2224f9308953ce89cb29cdce5e9b87ba751acbd9c0cef3dab4cf6fa47cae8b

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
20KB

MD5
e483600fc00a453bdfb3da568dddb72c

SHA1
59b74e07d180ab9ac4f740e781962b3f702dcbd5

SHA256
5557ce8f48a81dab224a3b44b35cca645356deee06e3a353fcf0b4855f5504b8

SHA512
40a0a00493428db5addd36497fab42450b69fd420be351db5153f4db291e44440c163123febae74e04803edaddb897fe43a51e2dcc5dcda0d8f2bc0d4a7379e3

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
e2f95b9bbdb3d93ed955491b604f8998

SHA1
28fb6de488e42cd7dfd8281cf24a80374b5fea8b

SHA256
c5ed4d8e24d398e7cd7baeb742d12531db696661015e1fc9bdb36b56fb2e0d40

SHA512
ca3423c297fcc7035e350bcd4c02f8ad8ef826dbfac8e3699d6d6c679ea5c64bd2a4a8e1d951d412ef25c1b814df70b622a516a022fba553bf4ef7b64cd78453

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
775eccd5a90dca4fc80d398da746f158

SHA1
33262629b19170a9d64d12d5742b05690cfb655a

SHA256
49c09861f534d2f626f125a6b782ea0f80416f00169b96f8cf6e3eb275a79c31

SHA512
e644470831a7e1bcc2dead7d9c555516b9f190287d17cb05391a6ce32480f6688723d0e370b6b2d95cf8da9a7e3fbae2c2900042fde954526a6fe5d64b21d283

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/component_main.db-journal

Filesize
12KB

MD5
2cb32d7cd3d09341c69e7b2978110d99

SHA1
52a6eb2ad64a3dd8b16ecfd4fa64455c8e5e509e

SHA256
42b9d78968dcc5f24e6108b256e0f9cb5e355acb2e90a7e6e3b4ea03d59ffbbd

SHA512
8be95daf86892982676e57dae68f8cd35e29e2fab3fca21e88315d337b8774e29b9b247e713dd792d3493041fdc57e34039b6098c98bbcbb7203e8798ab787a7

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/db/service_main.db

Filesize
28KB

MD5
c3d4fce8c8cfd407f8e9689081d52112

SHA1
f112694f2891c057b55c9e2102ed6c53be2673c8

SHA256
72dea753e54cfddbdd00ae6ad8eda2f51657912a6a8865f0b4eb0b43f51856a2

SHA512
3b3aa3f5eee08f30c73028283222a90f50e1931c34466285e50944f7bc957940f2df49843eaa0b812d29e8771f269e11a8f9130920a6731e4bb9365ccfa2309b

Download Submit
/data/data/com.dagterjias.matreyqaser/no_backup/appmetrica/analytics/uuid.dat

Filesize
57B

MD5
12c96a1fb5ecde9dc099d8882fafabaa

SHA1
7b2458d53f180303be4818d55790e0f42af3fb91

SHA256
a16727143ebb79c47ed6934b02bd442fa0df3092e4eb55d48628f51926957977

SHA512
6101240a40e5bcfbd97444405f3382274a7d06178f3cdceeb6ef959cfa08a6507d597751497e55a984a79700bb8743caa13f7441082fd6625ee39d72e73ed02b

Download Submit
/data/user/0/com.dagterjias.matreyqaser/app_van/lf.json

Filesize
2.6MB

MD5
0c4f55a0aea0687aa04f097cabd75e84

SHA1
0b29f7ffc114a63f7c9146ae67dbda76d7f12faf

SHA256
90e0cc833139874f4f78b1364feb6e56a71ed2819c74580db6e1da12d8a34a34

SHA512
1230587adce6dedad093ffdad99c0b0a4ef4c2fb3d1d618a9e9e2703eb5131c8efe3960e6d52d1a30159b5926096eb6f40ffa09fd9b5399dbfdfe11889863c7d

Download Submit

Analysis

Sharing

General

Malware Config

Extracted

Extracted

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads