48151bd27e6babe69a1ceaf94fc221aa57b0efab32cffd7c7d47d0442bf01d4b

Analysis

max time kernel
139s
max time network
152s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-es
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-eslocale:es-esos:android-13-x64system
submitted
18/04/2025, 09:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

freevpn.apk
Size

31.2MB
MD5

31f6bd01f28ec5f75073a503d6ecfc4c
SHA1

e7a5aa833f406dcf7a723a8aa906b2477b5b911a
SHA256

48151bd27e6babe69a1ceaf94fc221aa57b0efab32cffd7c7d47d0442bf01d4b
SHA512

d46b0dfadfc3020ab95c722aa43296dea00a8abfc40712c40d008a68f4a69d86a474aa3e2d359008ec60518ff0ebb8f552dbe0ce47434baed37c6360dcde829d
SSDEEP

393216:VsTfpYWfjGveawX5+uwiH2vgKKTfZZaOCgkOtEI6ahuYNBh:yeWKzg53IUZZ2gFtQahuYBh

Score

8^/10

collection credential_access defense_evasion discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/failsafe/su	com.dwqkkmk.bam.ommyd.uhcbevh
/system/sd/xbin/su	com.dwqkkmk.bam.ommyd.uhcbevh
/data/local/su	com.dwqkkmk.bam.ommyd.uhcbevh
/data/local/xbin/su	com.dwqkkmk.bam.ommyd.uhcbevh
/sbin/su	com.dwqkkmk.bam.ommyd.uhcbevh
/system/bin/su	com.dwqkkmk.bam.ommyd.uhcbevh
/system/app/Superuser.apk	com.dwqkkmk.bam.ommyd.uhcbevh
/system/xbin/su	com.dwqkkmk.bam.ommyd.uhcbevh
/data/local/bin/su	com.dwqkkmk.bam.ommyd.uhcbevh

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.hardware	com.dwqkkmk.bam.ommyd.uhcbevh

Loads dropped Dex/Jar 1 TTPs 22 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/system_ext/framework/androidx.window.extensions.jar	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/system_ext/framework/androidx.window.extensions.jar	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/system_ext/framework/androidx.window.sidecar.jar	4505	com.dwqkkmk.bam.ommyd.uhcbevh
/system_ext/framework/androidx.window.sidecar.jar	4505	com.dwqkkmk.bam.ommyd.uhcbevh

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.dwqkkmk.bam.ommyd.uhcbevh

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.dwqkkmk.bam.ommyd.uhcbevh

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.dwqkkmk.bam.ommyd.uhcbevh

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dwqkkmk.bam.ommyd.uhcbevh

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
defense_evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.dwqkkmk.bam.ommyd.uhcbevh

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.dwqkkmk.bam.ommyd.uhcbevh

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.dwqkkmk.bam.ommyd.uhcbevh

com.dwqkkmk.bam.ommyd.uhcbevh
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4505

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
782d5a6af97f47776ca2d64b3a6f309a

SHA1
5f2a9d8b919159a513524818de4d1edb8c4e2a74

SHA256
049289191dbbaaedacfa7d431be96dea475288f4f6e6fb4fc3cda9ec024a2c86

SHA512
3ec39b346841f83a4226b8bf12ab3e5cb41fe63299c67232b7e71de87ace77928aee63fed087c09f710cf534ee4c80474b33e27a0c9278425eb2f53f51ff73aa

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
9c94a426136c8539b8918ae8607bb2aa

SHA1
47cef8a4ea499afe261400a4e439250050119cf0

SHA256
b84ebdc1c78f8aa9a64231a17237c379e23d5fa5c691684ad74749da12aba834

SHA512
b5cc5872cf4c99b1ca916e5c4af95ed6041f099ec8a2f76cdbb03507b56a10d5e8272500f97a7d2e9bf659ff444c00642026ec73ef57bb575b2dd48fb96a41f7

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
6555d70d41eff0de2ac146c7b7d40867

SHA1
8d17b84fef027d6fab2e1bfa524a8877a2f14a04

SHA256
6c131e45ce29da3dccd3c15822853d68ff8ff6d08901115446b7fcd5fcfa9ce4

SHA512
85aec26d553e3cdfca287f7a0076c5022bd78d58e723aa231bd0020bc078751236f21241b2bdeede875d66b82ebcb0f936db0ddc37eef1a5b86424c6d5f6023e

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
1db585f88fed461d6e4c0bac2b709ff5

SHA1
b0f3347f83b97e8cd2dbfb9dcf833a106a6f5df7

SHA256
89f1cd83c2ff8748f01b96d3bf069000140908a412ba46143c59d68ad8347bb3

SHA512
9b1e9bca52b38b729b282ab0c050e77958b4a0bd9268f0686333effd40fdd993629316f5a4d1eded566882364d815b852a3fa94ea49192894d082b9249b599f7

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.act.jar

Filesize
12KB

MD5
db2a4faad3e3fd5f4830e109f642aab1

SHA1
07e323f948f83feb773339c0bf6edc358660cad1

SHA256
54b7ad672b02c2bc24f54a16f40209e0f866a2a60caee70b81662bed9bcfe99c

SHA512
4b238308fb8df1447aeaf937a72b643832280568787ac00c62357dae489995a583364e1176d256b71750e83fbf74d2c94c7270b0ccd2eac0687ec5b0c1f93164

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.adc.jar

Filesize
652KB

MD5
e538f5d123378b9d0b668b215f465ae5

SHA1
d5b45685498a1146780720202b9731d359fbe0ef

SHA256
e6c7dfa48713b1b2b008017adb78abdd7bef716082a68c82b7ff61fd49b33979

SHA512
cb60c57d63d26dbca43ec9a5c8e1cf46444eb0462a51c6f5adf0c1ad7e0484db42b2cfd49f99843d0be1e108d95738dd75bbc44d37ae3a3c6d6ea8523b5bb0f8

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.apl.jar

Filesize
1.0MB

MD5
082f7563181b2ce29bfefcdebd81560b

SHA1
cd24e3448f8dce0c09454fb99b6649fc12d234a9

SHA256
33c10670c64173b14bfa8e339742bb487b3cdfc612b120ad04a0a957fa989d10

SHA512
4088fe9915a2fd43644490c12e215a7a81510d72ebabb2fbc4e1d09019ceed54daaec82cedf2e736934292818d41675eebf2a97ef5f700c3a57d2161ebf65c06

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.chb.jar

Filesize
329KB

MD5
9e660a1ff0e21e89a9a9f91656309eab

SHA1
5fe4ecdab986ae66972d9ea9085f3dd0bd4b5ae9

SHA256
b79b4292f99aea0034b9c14962bb6e9a7ed8febc86a6c9ccd86c8588da686d9f

SHA512
2a42558b7c0e8eff0a4d3bfb0daf63996a92229bec8eb7cf2cf534ebdf8d5d10725e06fd7f614f8b43aa02ea914db5a2a0da5b7ac0a7b3efae5a265ccd7efa96

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.dat.jar

Filesize
3KB

MD5
831070f219d92fccb3a00984b6ada1ac

SHA1
db4977b158ca31102802000315d01136c1d9619e

SHA256
0b626583e61fd0557b75a27515408d670eb1b00432a86f2e2468ab17cc048aed

SHA512
79ec0d688cb69d556018745cc69325193bebd105a5238d8efb594c9c9280097d427290e7736e9b568ad8104569cf059e416c5e2ade481d015dc8c769df573ad9

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.db

Filesize
5.4MB

MD5
b2d25db4225bfcc75b0fb5be43dd5af5

SHA1
fa3ebec2a31bbc788239f7e4c47cdd53b40d3e33

SHA256
0e23f57b31e262e00bc491f9032220c41fe5a353e62b96f6188d489b7a1357c2

SHA512
65cca6ae2aa8091fd339838c02d18b0e92d9d5473ba0d3cb209a522f9e5723d5e19a5e4b72a8af810d27080073bc444260fbfeb4a2d7e1df2fdaf34f1b45da0c

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.ext.jar

Filesize
1.6MB

MD5
6455ffb10f7d4ec17e33eedcf2138028

SHA1
73f7ef61cefb7cffb59b36b8ac1b15edbbed6578

SHA256
bc9c06430cd84d7898c62ee917837031de81bbab45dd63fe636039a89b753fc0

SHA512
b1e6b6f5f547036b73fe983eaab5c22595cb726008f8ca561541d435fb7db197b7b40887d76e9e6a8e25cbbce947aa751ec7ba01c5b89c4ca86ad54cf011ae28

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.irs.jar

Filesize
698KB

MD5
87a8d79aa16a5d087179b3d7e9f4c843

SHA1
23dfb3e4a2f0eac5cddc1d45979155220bb10a1e

SHA256
e435be13dc8e945927dbebed5f4c6b88c9ed8f87d8785fb42329be3ffc7db154

SHA512
07afe4de7bb30c4992efac78cde1379557b46020b3f1f3a569a8020e0eac4854b241d74ac8e460314009ffd5a3815cf67728700238486e0fada8cd1d796d061d

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/databases/uhcbevh.uni.jar

Filesize
916KB

MD5
c1b828aec04a54e4905351983fedd656

SHA1
86bef04598514e292e4eef645aeae26834568251

SHA256
9661d36b8d5b71f00b599beb22f609f67bf4dc6b5b9bc9c10da0451bb2ce791b

SHA512
baf272292fd48ef12e7d024a84d4a40211584ae2f210299d94a3d3d5fff0a29d74da9dda64b9bda0a43f1eb869e2fccee0fb35cb815c687c882b67f3b7824e05

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/files/.com.google.firebase.crashlytics.files.v2:com.dwqkkmk.bam.ommyd.uhcbevh/com.crashlytics.settings.json

Filesize
792B

MD5
40f6d61fc420f031cfd91a5eebe4d995

SHA1
c6f7af27736b21da1cb4787b5b656160aa36ee5a

SHA256
ce458f1f11ddf033959a3e6927bce5d4d065f60b53ed0bb86f05d3021dc77a11

SHA512
1140615a653a84549513ae9b39dcd3bdd6bc5a5093dc412a2480d5b8e269ec98bf9dc470f992937cc153793fa0c587f1c5c0c6878c8da645803a040dc90dbd5c

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/files/.com.google.firebase.crashlytics.files.v2:com.dwqkkmk.bam.ommyd.uhcbevh/open-sessions/680218C60029000111993AFACC40F542/report

Filesize
755B

MD5
0194c4ba23ad50619bc29f2947eacaec

SHA1
e94bbe0ef2f1e72774e9f7fd8cc76dca0544363d

SHA256
5c071359e7fdeb9bf38db899264da6f3bc7f0c0762433d34a3736d1f6a49546a

SHA512
3be54a5ed81c52f83f8255e7d6be695cfc0e06162fe7775f70ea8f4dbc16860383acc8170b0daf4fde48993691ac13cf3910404d87c632d7619b0284782c4ffe

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/files/PersistedInstallation1651380600146607410tmp

Filesize
90B

MD5
5af3a448f517727576713499ceb0a590

SHA1
33fb33b64bcf8fa80c983e189b797423e8beafe8

SHA256
203a53e38dfa53c48f06ccef44654fdacb3cd0e214e802d7d74143e7c9292455

SHA512
b03141d6fe08800e9f19654a4b62daef5256e8936895bbadbecdd1dca1a2a9f75e010a56d0497b3bdbe7b50dffcb67649d61c395af38db920d03d4873d655fab

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/files/PersistedInstallation4800615465026523829tmp

Filesize
568B

MD5
d9e5bd05e8862222cab4913879c79ba1

SHA1
bb34ac4b5613f85413e008b2fad7e723e5d5c1dd

SHA256
74fe19cee2eed39673dae4824c2866f253d1b113306b1dc5933a573215852db3

SHA512
0a0bcedb82c8dc7d4441d9c38967888ee5f44f0f1a0cba05c2f6bd99331cb0fef2b345b1522197078468f003ae85417b32e34755c953be7141462c2628603fc2

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/no_backup/androidx.work.workdb

Filesize
4KB

MD5
0eb157e1a86d4d00aa601dd2f6ff3ee3

SHA1
fee434f784e73cc7916322e949f727caf8363102

SHA256
b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4

SHA512
b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
122ee298355a8f9a81321b6dff2db696

SHA1
7c61076ab4829dd1678372f0729361b059bd8362

SHA256
ed16d6caecb31a095207123ed22eb15bc00c2f244b15cb1bcc32403ab6612a53

SHA512
79badfb7383030a863529b9c82f94e54c6ac5da25758480bf40a21f6e0ad785901f80391de31b86f73771ac99a668e58458f78ce3091ecdd34d19a7bdf21ea61

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
6ec48da9cd281db77167ad04e9ed53b6

SHA1
0943df7eb7bc0daae1057cae0ab2ac67c06a18c9

SHA256
c02a1d99d734254f223e5d087864b3ad914d65595264cd12896e71707a154ced

SHA512
68e043c2e530cb4b3ca009774ce2b12ff2b2b43fc971c2b774a5fd5a90713da661eddea782ee51462c14a1a1d7f01a06a1ac60f1e840a5e5943a7b0830cf8ff8

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
f1201bc4a9596e0e41e20eb668f8e5e5

SHA1
d96be5525bd0b58b028fa2704c067f4ff8750420

SHA256
eadbdb4c50867530de06129ddbadacb3091d93d1e982519c8be48818307a436a

SHA512
43361e51d8bbd5300addc4f1444ddf3a08799b996aa75b782d67d9b1f858855ff9ce33533527003f78c1fc415e8472784fe9a1b4c98060f83a267e7c5b7db34b

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
40KB

MD5
3e15c63cde4d9e995365feee222a7e3c

SHA1
a4ff34f2d750e678d2b8d2b998b636a592a8afd2

SHA256
f655a253c1d41bfa12d391f69df3271def6016078526d5cb8412e5aa3a01b452

SHA512
59a81e2a7a546305f09dd075543a30d4d568dcb365ca10d1fc1c27c65eca45413b51367fc97ac91ccdc7331fdfadbf902c8ecf168f8e50fc7f30a285419275dd

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
53KB

MD5
f1b46c262705df588050297aa91e75c0

SHA1
8f2b271af5fd4bb95dccea2baaa207986da38014

SHA256
e86689296300080d7fb5f30fbece79d8fc32e9c2528679977f0f59b26d8cda6e

SHA512
9687ce860b23f01428b2d81f7a61521f1b2b7f8bd0e6d987737eb8cb09a357475c47d94d5f30bf27c1433517263ee7cf3bf7c89046ef8bb67f19327911e1ae11

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
92B

MD5
835f4b8789de69f88d7503e7ed88113b

SHA1
1ccc74fcbeabe022d0897541cca02dacb50edd51

SHA256
28cdf5eb0cf76f672c8e28264d362e72174bd5b93b168cbc3ece6a5c631bc2e1

SHA512
0862b539a1eda6be6aedadbc636bac6239a001d5d78aa68043bb49d5d8a4214e86f83e7dd010ccf5d0bd1a9b8cbc28348d881c07fe42576e0792a28dc5fb564d

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
66KB

MD5
cb348281afcd4db7897430efcf31682f

SHA1
336cb8d55e3420650645902a94d2c93f421c293a

SHA256
cda18b0ab4a09f1f5a19e35e13eeb45b99f4e2a13def3dc3581d57edcf5bf2c4

SHA512
d1914b3a7f4f42918f14644190f4822dca300c3fd7b338143fa6dbe13b130e48317b9aed2083b3e3f11488870fbc7e2ad798ec57fa75c51fbf6dc09207b465c2

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
42KB

MD5
9f22df4cf478f75bd50d74b8255702df

SHA1
374288f11c2b595fc7ba968e9c360869d782760e

SHA256
a97ca6818823ebbba115d6a10f97a78451d56943d0fe76fdd67f91deaa91488d

SHA512
18956871f903b94cc5950570e5d563320275c125f93c120e0a8278f6ac80c9d8af6f7e09d8619102a277d37a0a2d0f4c8931b1c6138055ad479202be9cdfc710

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
23KB

MD5
a381f5e9ca3947b11426ab6c7903efdd

SHA1
e5e4d01319d1a3d9618a538e8409784982c04944

SHA256
4009b5de438a09ec7658855f2de449253503284a89ccb461c4d8b58af11da3b4

SHA512
954e3139cf30e67cc5c0e57daf4f1842001eb6200ea51d9d5656fa888efd487e77c513d327e0e946983ee376ad208827d3d6d915fc056758e8f7518450b354a1

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
132B

MD5
9f61f250dab6b90557c2211ea35122cb

SHA1
9fe6e090e7f7fb8543c39e8961db0861a66fa8ca

SHA256
d7d3680caca5e30e976eff05c5f94e8d2c4660fca6a731d4e12e5deec1a540eb

SHA512
14bb6af686ebc4946df33441b2807a2d859bdc83a24bf31ad97409225b54c48536c0964e1feab1ee659222c5279d0649e55755e19ff861e8e274488d9f1a7e29

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
264B

MD5
a68a8439def2f05707ad014f04820565

SHA1
11c0b758fdcac9fc6dd4d64a0e13c8f00330b29f

SHA256
6235e7926ee4ba9d34cb15626c7379ff76bd2e1f8a341ab86c2bdf4c45616c5f

SHA512
e044d7124baef0943bf6e003986da921d13ed44d6917e2d5d3dc64a3cb5c93a837d08e4f5ea8acb699a42482f640cbb004491c6c86e4119e3cf377e0b156b018

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
11KB

MD5
63ccbdeade8147f12f42403cd24d317a

SHA1
0d724dc765de416425bdf007d65d1284c21575f4

SHA256
ecff325e1d1f41683bdaf343d3c7fc5ba0a53dd35e9028acb0c9002b75b0bc95

SHA512
28ebe5d291ed918dd355fb3dfc78948656984acc438a0970aaff0760c6f267c45e672e55291eec5483b53ed6d7a90a8814be6c149fa750402eaff1c889ce417d

Download Submit
/data/data/com.dwqkkmk.bam.ommyd.uhcbevh/oat/x86_64/[email protected]

Filesize
56KB

MD5
5d9563fe4ebe8c14fdfdf4b1541282a8

SHA1
14b29d9899b727e7126f05b8aaeb959bcd724e5e

SHA256
f6f52938815836089974e67007e7f2c93f49448a6e326dca8785c4bcd274f37d

SHA512
846d8d2a4789933bea848a03691319d7263a61f1062de0d2e326dfbb9928b10a8e544a36a1b04ad0af95076764eaeaeda073b1ae09a51fe77a31de18a552f8a4

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
1.8MB

MD5
09a94ca6cee56b461cc5473fc3bc1cb9

SHA1
32d08a6108211067f6d8b41f720ad412dce1412a

SHA256
ceb413c5bd39cf6e68257dd5b223246762d8e18264e75e5a5b1ca3930926d6ec

SHA512
3f14002c82086efeaf600a5c33325418c66a3072caac11a5e28f9bb21e06f00af2b15bdf830fc964a17cbdd60c5da38d01ca3135db4eb212330a90b139f978d9

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
2.4MB

MD5
7339a567d9a3fb58fa065af11e01be31

SHA1
6b119f61e4e0a195f0506d622f420789299a52fd

SHA256
1f4df2573e31071787255537360cc2f48a00b20dcbf2d6485275f456b1202152

SHA512
55445cd86091afdc747ededd86c384d9218fc9be1826961bb32e2f160ae7aa0bf917534771fe06594bd52205214dff70710e221c46031e6bdbfb46235c0eace7

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
24KB

MD5
3acd0c57acde61c160ef49e5dd5dddd5

SHA1
538e9b6b86e2fd6b41aceca95890aa73457ff8e0

SHA256
5c363b91f2d1938a99bfdf5b9e0e12aebe7c8bd934759ecb34f05a7d224df9af

SHA512
4934fefb92032ae7762389ffdcbe8a0b2df342a42992e8f69c1e65224d6c318032e88b4b03eacf81fbbda70a61bd40757c81a90af5c1f8e6178522f060e75b4c

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
3.5MB

MD5
3b3edd892a097092ef2851390802550a

SHA1
d6b67cf55ec5d8c271b65a4a13dd302f847578f5

SHA256
47578441ab64a0c40c73b932d131c480c8c9ef02df0bad9e408e0acfa41e6acf

SHA512
68210b4bce4ae8c3a159c27176375b5da3dab0734b5a8adfaa8fbec5aca2fed3380c9708db1cc669a183346fb9373e6ad047e4933130e79bc51249a5fd1ef10a

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
2.7MB

MD5
bcb112aebd4c872ff9cd1ba36e274650

SHA1
705e6484dc7f2e1fd9d2369d3f305d043c5cf182

SHA256
838b8f0723d027a7c28266e3132027011801f463cf708dafee64bcec18d14b3f

SHA512
75fcb7c68335fb9fe1df214e6259763bec13733f529f2e76952e6adc85ca9d0c7bff9756ad92b665e5a1f6c411ee43a2f2c544260e6da7fe1e0133184d61ff6c

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
1.5MB

MD5
bb655a6b2ee2d75142e6733b1d24b161

SHA1
0d92e6bbd81f4158c38bdb3cf917c54bf1f18c4f

SHA256
965081443a952f45fd9109be7f122cbc0176528c2b97a395261d4255ddffb74a

SHA512
10496f7f47937e0c580580d7b85e5e52a4288b7e5515775f25a69f0161192bce5e6a485bfe871bd1475b7cdb568e24000c082fc5a38eb2f5630b9fe725fc497d

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
7KB

MD5
61dffe80d63b6b9d33fd40fa04aa9ec1

SHA1
efa87c1748dceaa3c3857c021389d360ee8a423a

SHA256
d7a76fe19781fb2e963e1e9d0d3858bc1daf5bcb9c3d2322bcfe1c8cd432bf40

SHA512
0761a818cdc3662abeb6bfbe54c31785ba79395e21bfd4e1d4953b3faab1a92afa9968d367e85d179ea7f457b7ca828be726e5b8b59558d3f503d955d1cfcb75

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
8KB

MD5
3429ca187aeafdcfde5fde42f12aebc7

SHA1
1f996bcf80fc8a18215cf26d4e69634a05a46daa

SHA256
ba8a012e12503e42868044c2374d076887535ec4738f283c46fe5a649b7fabe3

SHA512
65d95386c0fe765eba03f8fc4ec8a7b57526c6d7933e78631f699daede935c9de5362070f0f1548b5980f78478e8ef83d97db59aa37c9cbedc5672aad65be337

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
904KB

MD5
5304f9fb0387d5449ca34fbaaaed05aa

SHA1
e22b452810683f79c14a0371b7282a2afe6c0ae9

SHA256
70569fcd90dab64049a1b0efa7841593273885684be378c098481eb2e6c49343

SHA512
a6736ce08f8bbfdd59c2d1242fba0d022fb04212ba667a7e14ec6bfb33389730a356b04f5e2cef90e4b2cf7cd7f5fbdf0d1f959da082b20e6088b75144706f2d

Download Submit
/data/user/0/com.dwqkkmk.bam.ommyd.uhcbevh/[email protected]

Filesize
3.0MB

MD5
b18ab03453d5d70113873d8c45c10d2f

SHA1
ad3c48b1ca11b9c84f380b9ae7a025f957f3d02b

SHA256
bee390afa2267bc48829ee7a0f4286895bf32ba2443ff447451f515818f7203b

SHA512
63e75b38dd472b2de19f6e513026e732ca040699437be4a1684827ab2ba4baf2077b053c0ccc4a702b72bfbc2ed7e343296b9a9f85ba906be37bdd6f905694c8

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads