1794ea2b91487fb130c9568b9ee301cbd097d3d5ef294fab69c1ecb9ef354494

Analysis

max time kernel
149s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
07/04/2025, 22:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1794ea2b91487fb130c9568b9ee301cbd097d3d5ef294fab69c1ecb9ef354494.apk
Size

3.5MB
MD5

fc2cddd695703c2803cbae0c17765758
SHA1

675e261902686cad8595d4c425178b45e72e31e1
SHA256

1794ea2b91487fb130c9568b9ee301cbd097d3d5ef294fab69c1ecb9ef354494
SHA512

b3cad164c17fc1d2a85f92bd1f96674d3a3df965bd8ba5d2f8750b2880f4f636ea8ad30e8fcd6215adcfe7f6dd263f157aa5aace4a307b130fd3b9931b4d205a
SSDEEP

98304:zy8qgP+VJP/XiawvIFWXYzMjHpBUpF5sr8Tgkbi:2keiawvIfaHCnTdbi

Score

8^/10

banker collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/bin/su	ru.cbqtzewa.wnyrcynct
/data/local/xbin/su	ru.cbqtzewa.wnyrcynct
/sbin/su	ru.cbqtzewa.wnyrcynct
/system/sd/xbin/su	ru.cbqtzewa.wnyrcynct
/system/xbin/su	ru.cbqtzewa.wnyrcynct
/system/bin/failsafe/su	ru.cbqtzewa.wnyrcynct
/system/bin/su	ru.cbqtzewa.wnyrcynct
/data/local/su	ru.cbqtzewa.wnyrcynct

Checks Android system properties for emulator presence. 1 TTPs 3 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.name	ru.cbqtzewa.wnyrcynct
Accessed system property	key: ro.bootloader	ru.cbqtzewa.wnyrcynct
Accessed system property	key: ro.bootmode	ru.cbqtzewa.wnyrcynct

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	ru.cbqtzewa.wnyrcynct
/dev/qemu_pipe	ru.cbqtzewa.wnyrcynct

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	ru.cbqtzewa.wnyrcynct

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	ru.cbqtzewa.wnyrcynct

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Legitimate hosting services abused for malware hosting/C2 1 TTPs 21 IoCs

Web Service

T1102

flow	ioc
34	sites.google.com
45	sites.google.com
86	sites.google.com
39	sites.google.com
24	sites.google.com
27	sites.google.com
33	sites.google.com
36	sites.google.com
42	sites.google.com
25	sites.google.com
26	sites.google.com
35	sites.google.com
40	sites.google.com
44	sites.google.com
23	sites.google.com
28	sites.google.com
37	sites.google.com
38	sites.google.com
41	sites.google.com
87	sites.google.com
29	sites.google.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ru.cbqtzewa.wnyrcynct

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	ru.cbqtzewa.wnyrcynct

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 1 TTPs 1 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	ru.cbqtzewa.wnyrcynct

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	ru.cbqtzewa.wnyrcynct

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	ru.cbqtzewa.wnyrcynct

ru.cbqtzewa.wnyrcynct
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks known Qemu pipes.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Requests cell location
- Checks CPU information
- Checks memory information
PID:4785

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/ru.cbqtzewa.wnyrcynct/databases/PackagesDB

Filesize
644KB

MD5
a582ce99563f70f93292ea7f29d980c8

SHA1
c87956ae9c510b054d7f7e4ec7381fcf44b3f8bd

SHA256
3e6c16c14f99abbd5a1a5fbb8d2bc6eeb1eeeef47579acb9b48911531a7810e5

SHA512
e439fc1f1af5756bf96b5ccdf3eb387f812804088a53f8e126f0f457e78c61d024726055f1f098e79c7a2c6ecae777d76f8221b1e4de5b90cfce91bb81f7f2bd

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/databases/PackagesDB-journal

Filesize
512B

MD5
462d5e4bf3d576a50b71e8fa2c4ece11

SHA1
8c365bf110ac96cfa38648977b4d2f0866dd1902

SHA256
395948cb586ca54644c294e2e4e06dda8a2a3749dc4e90dab2d58681431045d7

SHA512
b7fc1baf76a8c43b9c2257f5471471e00e6a7868763542193e7e05b848c40fe83c20e47d6fe25325b310dd35ae52e0373b7ddc81492839ea0513224557cba061

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/databases/PackagesDB-journal

Filesize
8KB

MD5
fcbc844a87b42696cc695ec9263f4719

SHA1
71ca1459cfb225b42f8e86a98081d4c033c56b88

SHA256
b7c4d20ca45739af5939d30ab1eb96054771f6ee9cf5e5e9925ff1730d39b171

SHA512
cf692c73741090a83d97dd14be1c3e98f83e834071938abd90aad44ab91e03597665d8da3683684a28c43738dcdfdcb1baaa0324165db01d7daef06a0b462cd2

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/databases/PackagesDB-journal

Filesize
8KB

MD5
548c3fd7f167f5168441a6d50df69109

SHA1
3ef545e982301db334613e4f913dc05e584875cc

SHA256
2fce0576c3c019a1b19355699af99616d6ad1356b4a20bfceb9e90bcff5d607b

SHA512
e760472a162d8cef78728b7c13aef60d52975395b45b44fe73639bff4a0ae1d66a4846d1a5354573de535ef3e1f9a360aa21d6c872725453c023add15bf278a5

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/databases/PackagesDB-journal

Filesize
12KB

MD5
30e9a5144f74083f45edd9aa9f960d5f

SHA1
2703ec0b28fa0d3b80d7bdacfd81643289a12945

SHA256
4d7e2cb9605725c8a0e550921177b4a40ccfcdac5fb9baa15149a756b933f4a2

SHA512
4a9673498049bf1da67e25b2a126885e7b39b36c0b9ba65a75ce77d4fad360988630d9f905e822bd9f1e7e3d61db893bae7f79fc1b43bca554c61e6b69320f45

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/databases/PackagesDB-journal

Filesize
16KB

MD5
c106677972dec75e889a44c91c95ebff

SHA1
c3fdb3248850e2c70a70e79bae53917c9433add7

SHA256
6c161e58a12c48c90f19027d869d6ec8b4d0ca8d6b9e7ff3ef17d90d2ce894fc

SHA512
e4ee3a4da9f5bada1f08153c60a2345fb9177833e18933eaff93e1fb1ca6c2912ec1dbe077d4065525d5739a9b5bee9bae13f0a10779708f7651331e3ed75ec3

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/databases/PackagesDB-journal

Filesize
28KB

MD5
57c377b78de690e7e249d1f6963653c3

SHA1
a8609806876c74ad13b47599a298a55ba458afa6

SHA256
cd34d22d9dee00ff8f6d73d28af45c5ee7416e04855ec70692289a649a35adbc

SHA512
450a497c684991560825036e6709a6df4e1ccc47f8575ba22b006ca7f00653fc7fadad947a6b811974dc1b799c653ee46ae53a837f4e81f4c0107a6b2d1aa9a5

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/StartappAdInfoMetadata

Filesize
1KB

MD5
b8146e470ef30183f4a109eb6f03e326

SHA1
1881531e6599fd0058de606b8ecbb8bb14645ff2

SHA256
96e3e238259242f9c9573492296d1f55f1ee8642cf01618766e9e0bec6e4927b

SHA512
afb5555974474909a909885c82fa26e0fa229ad1102bfac35fe2097b1fce31621895d5c6375b6cae73fbef9030e3e2c77ada43892c8ed246e19f6d3d3eae3c45

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/StartappAdsMetadata

Filesize
2KB

MD5
128503719bfdef6b09d4c8feb1a096d4

SHA1
8ca4eba243150f61a8660ed41c42510e16f36cb1

SHA256
db1874b1c410bf8b36c2715ddd5b274e67146a1b75c6393be20abb9dafd6c20b

SHA512
038e1cc07930281bbc2e6395baf41f9d463530496933a0f26bc1a37de4f3a1d75536ee1425a6f1580f8f32cda1e2e2fa4db754288d09351d81af5aafaa4aed61

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/StartappBannerMetadata

Filesize
719B

MD5
64837ec60a5def703db0471648bdabff

SHA1
f1eb4a00833351d6dd8040d9658faca109c0859f

SHA256
04e4c66980a46478b18296ce2620239907d7406143d003fd7ba7bb6382440ae3

SHA512
e856f892b0a8b4c645fb87d841e4faba64e2398589dbf25ee36f20e7df7a63e2e9464276232a625be4063659c924a005d8598fe03aa967c9d2a8d97b4ab68f34

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/StartappCacheMetadata

Filesize
785B

MD5
e9a968e4938a9bb9632799e2f10bbbbb

SHA1
8c9e1e04c6784d0f9d182081e6329897c957d166

SHA256
8afd711f027fad53c5c96bc0d79574983b6d661af90aebaddf0f1dd858d03f2d

SHA512
cf76a0a9051cade548200101d5e0837b1d1eacc441fed901641e7e9fa87ffa3304a98ba674c8d20ea30ff682076f45b60cdbf260e3dd2770b8f19ff2d393f133

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/StartappMetadata

Filesize
7KB

MD5
c8fd648d59afdf58c5937a66ac5ca30a

SHA1
0d7abe41dde13d075e782789dcc24a758fd6f2be

SHA256
a3995a575ee2d1f77ebec659ac229ea8dcbbcb5c96de2c48a8c346143134a07a

SHA512
5967d0941032bc14136c9f5a3d45155af744f614cbcc647b55bbbe931886e7d37726d52eec3f2d606a303d36cb9b1bd5cb1c870bb3042fdba4f4ea806c711383

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/StartappSplashMetadata

Filesize
1KB

MD5
0302ce08ba73302790197090c860cb71

SHA1
8862982c5141c315087a42c26d13aa0735898db2

SHA256
24b7407c2173d2f4677860d4bbe538fa2aec4b61db3bfba9b264f9ab1dd5d706

SHA512
1c0ca83b8ca1c23c2e43a133c10c270ea30b751f7ab26007a535e810687de00ba0fe57ff2b3fb95565c613b43b8d885a5eae7d9c09d2c7647dc6287d0b3c366b

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/UnityAdsStorage-private-data.json

Filesize
41B

MD5
16d3e6eac0e79222a9b368edac765b34

SHA1
48d5e621fcdd84108f5750d6905180b622715b11

SHA256
3a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7

SHA512
d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/UnityAdsStorage-private-data.json

Filesize
623B

MD5
47b681c0e6eea77a4fb02678a5757731

SHA1
92944bb96592912ab1c5117214734977ac68816f

SHA256
e4edf1747e372c766b7c3d405e7d888a854af4c99f2a472b716fa744f4d15541

SHA512
8d99e8d08ad91ba18433e1a56b4ce7be25c80d1593e6dc6e3d1f50202874b4360231b9845d281b87234fe585fbd4085a66db0e3673bc4b215780ef6baebf2e38

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/adc3/026ae9c9824b3e483fa6c71fa88f57ae27816141

Filesize
41B

MD5
be948aecc38887832616d20c3b40085c

SHA1
8efbcf98d000ac2a914842b26d3b9394b828a3cc

SHA256
28d865d25ec483005cbfdcb954f2b5e441b5a3caeb073a99a1dfdba5cf0ca350

SHA512
348dedccfd3b3775eb62333a56cd675329f40e2f918f2cf3f169ac0d05fdd47979532b1009aa690fd0f7e498118aa1c805e021c26ffd50ee0f4f258abdf7ec62

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/adc3/AppInfo

Filesize
68B

MD5
429059fdba597db89e491d6bc8d92b45

SHA1
2500f7f118b7d4c29521eab5030ef652d21c3630

SHA256
a9ecdd5568d8ab46101cec0af5a5e2d14a0d44859e442ff55e241383e293f557

SHA512
f9ffc61326c7acf79ca5c6e3405126ed2035cd422841392c8f4e485313095e13ef0220c275a756481dfb8542e75ad14e66311d6d039dc2aa51d799cd63de97c1

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/adc3/AppVersion

Filesize
26B

MD5
6eb9d875430a99955374e25f2f97391c

SHA1
4e1d76b64aa72811961f1d739c42883b7d13647e

SHA256
c6803f8750bbc227ac9d7658d4c9fcd2546d4d2db8fc00b42bd674d0508b3f55

SHA512
d1264629f813c95b93b12abcedd198da3117bfc4d0d0785b4332dc213989f0a4b7536bb855bcc6200d20ab9d2c7b4a96d3ab12a8908b5f423abef4a29fb79057

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/back_.png

Filesize
1KB

MD5
ebc06fd3d86c27a426932a83325eeffb

SHA1
461c990e677114de3baba2a33f0a60c0a10bb9d2

SHA256
ada010f03b82133ccddb4ac69a7c81a1d507121ef1d276c7c191bb55401c2230

SHA512
3b3c682dc3876f7c813bff1a38e53e0c20f6c776eeb8362a8a750b81d0a3132a207b01740a493c61a03261748399e020aec5fcb7354c723e4f5703efe5418b2b

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/back_dark.png

Filesize
1KB

MD5
355eb0af21063fefca005d93d6afa9c9

SHA1
f854e3d2f0c0470a54e55f31017f9c499bd3671d

SHA256
b50339f939827a8e5a918ee4ed1d8213e27f6d546a98313f90449b27a1ebc00d

SHA512
ffff59e303636383dccc1282dea4c13b8c46d9aea1d646d745f7d26607cfabc25aea8001af873942749129291abef5dc5a858e7360cbfc145f870b80689b34e9

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/browser_icon_dark.png

Filesize
1KB

MD5
cac9a26c27728066be7a285defc0df6c

SHA1
9931d42eea7663aaec4eb901bcf279b246c19e34

SHA256
9347cbd8e6e2af4d09759e55b7595474648619da07992d6485b9756ab4d8170d

SHA512
11a3abfc4558e6c887f1f809a3837ffe6f4c1702407db945319acacaa5e677f6b117c07ca676cda6438639a1ebc447a2993e0ff31be8ef797bd219700f508ba5

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/busybox

Filesize
209KB

MD5
8c63ca86e6f030fd7a11fa739a319fd3

SHA1
c4ea94cf652af134c451dbed0d794ef7ab9937dc

SHA256
145ad43b8aaed463ad4333b71b464e44efed3803713846b974abb7a4925b8d16

SHA512
7db10d4da18917b098630c304ccdfad0090add058364a4724c9a69d94266e540f1ba1728f12ec62e0010842eb967bcd04f2c1145ef9bbcf9991a67fa56b80126

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/close_button.png

Filesize
2KB

MD5
2d858e8af5d9426fe061df5c82ffa6ff

SHA1
bc1b2eab876aa221b6449d11e482de24b777d58f

SHA256
73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835

SHA512
aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/empty_class

Filesize
140B

MD5
6ceb6f454e31d55f7a0c4bf3000b26f9

SHA1
eb8fd3e0609f2f3db8bce7bd3ae426f3eacbec38

SHA256
e0aeaa1d698e1d1149ffdcf116e7b3e98b3a3097814e01718c80caaee147b7ae

SHA512
ed7a03de9547f858965a449d39fad799c7ff9c2fe66c9c256d4a1549d785b60a3207a4db6e5cc8438839161dc1fe4e9575329db2f5185960b3429a435532c3fd

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/empty_star.png

Filesize
895B

MD5
76ce13c6312eb334fd351e3b5cff4bf4

SHA1
203bd863b812c071ab3ae25bf4ab2f9c4d42942b

SHA256
f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8

SHA512
d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/filled_star.png

Filesize
753B

MD5
317f802aacfab6282b8f74f280e841c1

SHA1
3b746a76f6322e97fd6c09a43d03ac14631d93e1

SHA256
f37f9a17c20ca3068f4f9db08c262c62b7b86544532f612a78421bdee92f4196

SHA512
a714f902ede615507cef840dcc03a5eca183c21c82cc419a924587f38b6974f5aa45fcfcc2bac4d6cf82b81d1b6ad452540e0581751bfcad72e524c83757a301

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/forward_.png

Filesize
1KB

MD5
9ee047a6801bec9459a9dd5ec7068078

SHA1
1aaaffc208e2d86e53fc031e8413169850e65746

SHA256
9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12

SHA512
8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/forward_dark.png

Filesize
1KB

MD5
12bfe20382337a84c0fc004a52b9ba9b

SHA1
ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9

SHA256
621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5

SHA512
7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/half_star.png

Filesize
895B

MD5
a40e6a567b7aef329bda0ac200f7a23d

SHA1
2fa463649c7ba586b28670675a15e0d7a630c7e0

SHA256
ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556

SHA512
5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/logo.png

Filesize
2KB

MD5
45c24a8686a0978086c99f7039accc17

SHA1
c63ae2601322045390c7a4f230602b74ae18d2d8

SHA256
bc9c4aa36a0dd7efe16a8b3bca9172d970fd13d70d3e718aad17a78269079912

SHA512
d5861c64b9dc9139904c3bfc7da26fa6f3d9676a5b4203ad617c661d54d3716508fb02f282f5c204bf9d6a0c7162bbb565a44f2ceb96d825177065818b797727

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/p.apk

Filesize
177KB

MD5
97a1cc164e79d49dd6798c130f02903d

SHA1
8540acd87f84f6994b9dfb6ba193c23d3c281854

SHA256
8c9966c106347df02ba0c3420d5a66abc48bbb13acc3d912d91af9949f8177ac

SHA512
6a6fcef7a350ce60f1437eb06e90830f32854529b379641f9ccc15a9bdce325b8e288ae3d0edf8f901dceab1509e0e3319231f96aad18a5536f7fd559d2a0c76

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/pinapp.apk

Filesize
93KB

MD5
ba57f9fe62bbcf10348091b7d08ce123

SHA1
0fba82354a775094f68fb49bd8530f97f6db97cf

SHA256
1df6c43a03bf45cb91c83eb81d123877eb4f663b0693daf4ba590df900a01160

SHA512
d030cb078a399eb104e5780426e14efeaeeaff93c4710186d1622b64a5ec547e20e318f72ac3c6adc3baa4680a955a3e43fa5964dd87a0684b21902672854e69

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/reboot

Filesize
2KB

MD5
42188ebd6c9a1dcbdba7ca266cb2624f

SHA1
6aa25d11f567bb2749cc6d1c5972ac58d15009b5

SHA256
a5227e0c7e3cba03626204a645748b508c387b5f8c297af31b2e53a96f471f09

SHA512
b28b0dafe618de69d2a97bb40a730978d5387ca55b260777f99ca16324e38070128686bffb78de177b237e4de95a97eebe395c3846ee64679594a421af6d192c

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/shared_prefs_sdk_ad_prefs

Filesize
153B

MD5
65026ee778e1372d9f4aed742772e893

SHA1
5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

SHA256
15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

SHA512
589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

Download Submit
/data/user/0/ru.cbqtzewa.wnyrcynct/files/x_dark.png

Filesize
676B

MD5
1b759349f0bf3e55c51e2a2c2802b3cf

SHA1
5a608a093fa5f513d1ba52e8a9e01f693c47da98

SHA256
59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443

SHA512
3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

Download Submit
/storage/emulated/0/Android/data/ru.cbqtzewa.wnyrcynct/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/ru.cbqtzewa.wnyrcynct/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

Filesize
2.2MB

MD5
8ae099facbbe7c96b1a7de24dd3f8bcb

SHA1
9bf04713a81ef1c94e7e5f298d990d6fc944b09f

SHA256
2cd36c5a9f434b0d32f02cd3955c572151b8fa9c7517a25069ee4719a6511410

SHA512
9d6e4eb82494e76d4741b7743ea561f198d244bfa575a02c21a05d5f3649d5e2508b21719409e7900a06fc8b9dc93a6e556c67aa4a217007af7927873ca69a60

Download Submit
/storage/emulated/0/Android/data/ru.cbqtzewa.wnyrcynct/files/LuckyPatcher/AdsBlockList.txt (deleted)

Filesize
1KB

MD5
634ab5e3e49b830079f88825c88d7f80

SHA1
cabe4068d07d52c60f5b9f840fd887051748a3aa

SHA256
2824000ad496be920c29d0a78589c72935288b40ce44b44c5fae672fbfe87fe4

SHA512
ffc893fcad8d81f6ca272cf03737ab466eafd135599e6f6f20285d7f4c3454bedde4de5929dbb1be5010192747f5f11d86166509f24bfbf778f949762e47ef72

Download Submit
/storage/emulated/0/Android/data/ru.cbqtzewa.wnyrcynct/files/LuckyPatcher/AdsBlockList_user_edit.txt (deleted)

Filesize
29B

MD5
302f7b6d9a4ffeccdda9ef94184c8326

SHA1
d4038ca0629f57b7e5c4056e74a395e5598aa16a

SHA256
5b36134b695f0a9a32f570b08cc3ef74e0687a0d2aa228853bc0346f77bffebe

SHA512
299fda4936acf6479e22f9166d545976d5d99ba6fe7a5b7298cb336cf730eb7790524e4569fe64bc03c598c7e4117f163ddffc2e2889439f709c4d80ff665039

Download Submit
/storage/emulated/0/Android/data/ru.cbqtzewa.wnyrcynct/files/LuckyPatcher/Changes/changelog.txt

Filesize
44KB

MD5
7df5a520521c9463bd66b92a34dfdf39

SHA1
f82a7ce246446155459e9ebb591c88f16ab9d717

SHA256
542718c2251f3cb789c7996b719064c112f5d0cbd6bb921ae94c5ce3f036c600

SHA512
95a4b72b5a560bd1bf354d21fe5619af6fe688de18ac798d12f2dc9b2ba3485ea7f2d612981d0284bd7cafdf41e0b7f9ab4a395d7c45e608c0ce973b4a4a6d16

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads