d43bbb754ced809f9b43db609a0af4567c002097219f9caf36d824181dfd3a9a

Analysis

max time kernel
44s
max time network
39s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
18/04/2025, 10:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LEGO_Star_Wars_TCS_APK.apk
Size

30.9MB
MD5

f18677d3c21f36f7253a11e67ea53326
SHA1

84696e6685ff472c1c1b87eb318ca502310c80d7
SHA256

d43bbb754ced809f9b43db609a0af4567c002097219f9caf36d824181dfd3a9a
SHA512

ab088f5abafbca53ce305309c9fb82ab412962e2b0e04934aa27bd4aa8375f373e1964b982ed1ba368473f6d96565cad18be0236701d8e0d1d55c239d3ba806c
SSDEEP

393216:RB4nOsVvmrL89QxnigD3aFwMQ99fGJqt8L3VVhcaoCQzCgJA:f4OsV+X8OggOwtOrHDvpgJA

Score

8^/10

defense_evasion discovery evasion execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/bin/su	com.ouxglop.dsnun.kkursx
/sbin/su	com.ouxglop.dsnun.kkursx
/system/bin/failsafe/su	com.ouxglop.dsnun.kkursx
/system/sd/xbin/su	com.ouxglop.dsnun.kkursx
/data/local/su	com.ouxglop.dsnun.kkursx
/data/local/xbin/su	com.ouxglop.dsnun.kkursx
/system/bin/su	com.ouxglop.dsnun.kkursx
/system/app/Superuser.apk	com.ouxglop.dsnun.kkursx
/system/xbin/su	com.ouxglop.dsnun.kkursx

Loads dropped Dex/Jar 1 TTPs 20 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.ouxglop.dsnun.kkursx/files/audience_network.dex	4331	com.ouxglop.dsnun.kkursx
/data/user/0/com.ouxglop.dsnun.kkursx/files/audience_network.dex	4442	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ouxglop.dsnun.kkursx/files/audience_network.dex --output-vdex-fd=60 --oat-fd=67 --oat-location=/data/user/0/com.ouxglop.dsnun.kkursx/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.ouxglop.dsnun.kkursx/files/audience_network.dex	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xe1d6d000-0xe1d6ed54	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc0569000-0xc08edd4c	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc12d8000-0xc165cd4c	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xe163c000-0xe163e0a0	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xe1600000-0xe16020a0	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xdcbc4000-0xdcbca1f0	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xdc8e4000-0xdc8ea1f0	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc04e9000-0xc079a718	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc0237000-0xc04e8718	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc0a41000-0xc0c10b08	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc0871000-0xc0a40b08	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xbfd5d000-0xbffc96b4	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xbfaf0000-0xbfd5c6b4	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc0b28000-0xc0c0a2dc	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc11f5000-0xc12d72dc	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc107e000-0xc11f4e6c	4331	com.ouxglop.dsnun.kkursx
Anonymous-DexFile@0xc0d91000-0xc0f07e6c	4331	com.ouxglop.dsnun.kkursx

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.ouxglop.dsnun.kkursx

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.ouxglop.dsnun.kkursx

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ouxglop.dsnun.kkursx

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.ouxglop.dsnun.kkursx

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.ouxglop.dsnun.kkursx

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.ouxglop.dsnun.kkursx

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.ouxglop.dsnun.kkursx

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.ouxglop.dsnun.kkursx

com.ouxglop.dsnun.kkursx
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4331
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.ouxglop.dsnun.kkursx/files/audience_network.dex --output-vdex-fd=60 --oat-fd=67 --oat-location=/data/user/0/com.ouxglop.dsnun.kkursx/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4442

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ouxglop.dsnun.kkursx/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
e23d25624edc227cf413c35631e09273

SHA1
18b7661b399f9f27443d9da667c076af5f0d2f09

SHA256
cb26291aebc0687ac4550389075dc633f5e24b4d4e520126ec376c97ded30145

SHA512
1eac444b1a0daa5b30d490b19b0c21d37b6f6503420090e81f711f529725a91e7f5664e9e5ab700d9688a6956f49df49101f04af8fc3fd67c91ff7246849c0b2

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
34ff2184a1f77fed3160e7a115c96aed

SHA1
f658a5c2f5578e4d83443a8b2247d08dfc902a8b

SHA256
39a75028198315a4715f0c595edf81c53e4a5befe339565c10b56b5d1ec45039

SHA512
87c4e67b31c0bb0b85e32387a5fc1d3ca1994777cf58e18d928fd3a324113574698277b83b5fc2237be7d20ff129360ef3fef0cdcf3c95f591f8d60cf772a56a

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
85b70d957aefc2dab77506f8276abce8

SHA1
33d3518be61f830b3aac27b0e71d62e567d9d1be

SHA256
bfbc0e695a6c4835429de2efc7a2ee754c5e9619f88d8c4ce4c165aad8c21ba0

SHA512
29ed197d96eb6c772b06fcf2bc9b3ae3ef95dee2e0021d66a96cbbb57affaf988afacb4f3d6506d365c80117ca0276953868a8fe3924341453b97db84ac1cd65

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b0137cf03190be104216ba174360fea5

SHA1
fd67878103eb2e46075988c081f59e77ff224c6f

SHA256
cfcb9babc5dd2b57bfe29d9e22cb42db9df948e6e05a55cd01a0cd64c87a3d75

SHA512
2b1a02578ed5548086a6eb0d48d2c73224e2a6456044baa7802046e3d6c07c24567374962eda1dfc9912449fadc8b1004012c0587de020b69d59ebdae5bd4392

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d6a03313bd4a92f7a98dec7d2777bf5f

SHA1
c111d7d8e0b5e33715ac0e8665922f69ac3703cc

SHA256
2891c15eac99defb31a26b303d876beead06f1c79a398d576a1f59b7aba0a118

SHA512
99c839e84079744ce3bdfda79c82ebdb85cb1933066a2e7edea78b07a2dc2912d21a945dce1ea8ae073b83cc1904ca543351c1e90834d280c489767975a989ab

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e8f6c9a9825f3ff3c7d9dedc8bb740e3

SHA1
2022c56c5aded23386c6baddecaa86ab8a191081

SHA256
51393b9233d5f3058fab325f2404017d51c2e9305daaa5b5473aab0de7abb0d4

SHA512
dc9e708ee494cafd9a6b50d5a02cf927d8850052ee5ef31a630421cda2e9c81e23aa3c2c0b36f3c8fd3b9a0604de9ac890914205a5f5c35015e5407f0e44233f

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
00a62fb24d06075c6092dbde825759d4

SHA1
cadcb44692a9d6ddec3ef20ab5d8dbf4b3ad2153

SHA256
7d6b0bf7ff3b3fe75dd6606ed3b417211c9aea134f57d74342cbfd3ebc830a6e

SHA512
21b76bb5808e3c55c83b2260c674f3f5d5107c8694b046ce2b71b68be3debd83c03fccd990c09d6959a22e6e61747222ac2ad031309cafe8646b3a3a49e0d787

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
3d64c76d484b1b45e219846f0ec4a16e

SHA1
637d5e78e28811daabef27235517166608fd214a

SHA256
0740b7eb50508dad437372546f1bcd1d822ea376d2dfe99bd8b0a25e2e08a808

SHA512
9bb4d1e9504ab4f6475fff6ebf217b82a680d55876df23dd6a2ba7b4c0d439eaf2a3bbc8e5c87295932f2615ff75d755b0e8c4e41250e0ecca9ed40cdea202ae

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
d584c5be2701d009e9e6e1e1e346a7e9

SHA1
a256fb9ad49cdeafdf3e76ccaea49af1fcbecff5

SHA256
bd992a79bc23a7bfce33f6ca5e20e2ada354cbfa115e82bb7d4965c7af102b0e

SHA512
227e3a520f8218ac955a8deaf906f23822e9e08afbd5fb15d6d825fc098c1222a393eb2a6a39f31b5a6a28aeabfb88dac44d73084d8a3d8c37f18a56bde2f77b

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1fd575c7f58bbcd7f4bab304c176a6df

SHA1
2c1ba2ee844518f03d5171e858a23bf832aa0d4a

SHA256
7b122621348376c6f7951882cf360675161492413a5ce8b1d0cce16e94fb6b9c

SHA512
66a370b9630d9d88138dad334aa474201400c3a8c4d0310a04d712206634f85118529fb01eb418b325e1d6221929ba94b848c61f8232969d535e4ba4afdcc717

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
80527a1fa94ac0a8ced82ef17bed685a

SHA1
eeba5d56b93e387ca73c56c332329c90b6842361

SHA256
860385ba53411c5ea513ac24ef9acb2e58f3d032150e79b31f8b2593edf300ef

SHA512
5b4263c4fa1ffdbb390b21884ff879ed8f56b2f20c0fda20ae5ab50481e285ed37af940a6858c8aa12598ddc7d74f66663b9501c5c8d98b422359ce4c698bf0b

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
dcec74d00aed29304f578eba6e7d85de

SHA1
566ca97d585da08e6c5c20d665638dc396bd0de4

SHA256
32f1b0d0b04cb26605831fb5d1464a84be9c7883f2c34a28710f4da4bc2fa025

SHA512
4a338d30ac79032dc212d3c211a26c1bd0c664b8c102fe28b1015a797f8e3c4979089e1773e5b12ab4d178053fa1d8746a4daa6402f8d48aacd9631f902153ab

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d174a07f24f9872131a76153c1c27d0e

SHA1
c7d13bed1518063ed0fdfcf385a3db199f33aa21

SHA256
67e4d2619910b627bda8fb263e7394d46c0a88352172d68e475131d7d89306df

SHA512
2632e65faa69fef59731e8bcc5304dcf04d42a4fcb229e91039b00d21bf84df546bc953a741fe1e58f3b40e1b621239d576ed669a22de1be2dc682a19d72eb56

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d099c764774285d1c1bb3f2aeb84fb2c

SHA1
ee84fecc6c6fdfc59aedab08dbfd5f1fdc4b310a

SHA256
f90537e09e8fedd7768746a70f6fc9bbe3c8a21efb496eb31b0bc0a61293c429

SHA512
5977a39cb7f8bdd52c97b60fdd3b9cc65706184d41a254c3329d41f6864135b94997d657a08458398388e5b42cd836dd21a66cb6a38647c0059fcb7c8e265288

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.act.jar

Filesize
12KB

MD5
5f3f1694876bc11ec2069f03a4b1847b

SHA1
7ee7d8d5af35415c16f5aacfa718b3fea9638cb4

SHA256
41eb4456b3462183ffff06f23023d1798ab049fa4f94f94fd8ce067e668727de

SHA512
d44b0429c0f1b54388ccdefdfb3deb1e3d7ce3d47de2b8d0bde77810ccd384c29e6c84f8f120e2f1a21f4bd2a525e79e3d915a95ef3e5124c4d759173f240759

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.adc.jar

Filesize
652KB

MD5
1a1556b76cae7f434d1c409c43928581

SHA1
615bf261d5eb2f5206b580ffb9ab61dcaea16332

SHA256
2af348fe2be2dfabe5ee5845e244ff6b1bbdd22b18003918cbbd85f776a7a1cc

SHA512
a8ba8d116fb34c5cdcabd9f6995a1e26eb5a3c6227cfbbf48585d1e3eea245b3423f435d32984b3f9763569ec6de4bdf1b8f9c5488c77a1a553ea25e0d2be977

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.apl.jar

Filesize
1.0MB

MD5
fb670ece63865a66f8778d1f0a257c6a

SHA1
bc18039b7c509f60b100b22f9b4e6ad9cb2169e5

SHA256
3759446170b7bb705cde738c0c6ff883f233d87476fe429c745cfd62d236ad54

SHA512
fb62d7a755b1eff3cfbf18ea5e7ec764bae59bad52ffbce688c12199d6178c20e703dd975b1079eb911ff533a2149e05ec7d67abd8ec4bde36aaa3c491a072de

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.chb.jar

Filesize
329KB

MD5
1783a062bea0d96d126082393520505b

SHA1
6d15ec1e9c863fadb2d27b1d52a1ebddcc337079

SHA256
6764d48dde63fdb755810767fa66726bef91279268bff413c74a41e7a91d3ee7

SHA512
0a0fd44267f11c5d56bcc11a052529187256640c817119e8c8afeb5d5cc6692bac00c7d6704bf0bd038a2ef42a2cb0931b24833bf1e0a69b539306275333e49d

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.dat.jar

Filesize
3KB

MD5
d4e240e2bd4d6a523bdcc1f4c50aad06

SHA1
92a01e88343bf9dc5baf96c16dbb017aae004034

SHA256
1230505c9d58794c1e5e7ba5839a6041bede90b0e435b052e723a63c1fd83b6e

SHA512
f0acfc1db6b908ce69438d3648d31fef4f776f0d8365ea2f1adf658e71a729268d63ba4f62aca659c65d09f6253e1e3b5090940700122e5d420c7f315f7d6bd3

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.db

Filesize
5.4MB

MD5
58fc631af85da81232cc0daa737e4dfb

SHA1
a596d1f31be9858f501b4d6cad807dc45b38d5cc

SHA256
fea3fdcf1eb7d6cf8ba8ae32b8559989e4f0b9439204070340e820cff2ea216c

SHA512
85af5a53cdbd401230f60460a74a77ec1f0d83411bb9787f0c57624f17a862b80ac3481cb869f1a4f5e1869c172b2e4ce55d5e256c1484597f5b12b1d7db65de

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.ext.jar

Filesize
1.6MB

MD5
94a2afe727ef81d061c9c25a9487468f

SHA1
f88dcec22dd90336bad45f930a1a807552e1ff4f

SHA256
e847878b58c0c813533693d5477eb083495a6201ddce451d128434658e5cde1f

SHA512
e27b3808c3a17183f6cbfd93a4800d7083528f1e5ab76b0df301bdffefc7ce998b6a6ed60e5d3798b090803984009c24f98a1e23cf7a8c8d54d62258b807311f

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.irs.jar

Filesize
698KB

MD5
85faac8ed1c1cab4e3a51318a9311ff2

SHA1
82a20a120eba42fb46115ff15273038b7c8ecafb

SHA256
c2ab540a5b231dce42f3c23657cce2b4c7aaa630b3cc4fa17e910ae51b9fbfdd

SHA512
3c1fed0d0954e3757b01f936f9ff63e9cdb021b577d845044560b470cbcacc8abcaf0793d12ae8658267812a61df7ee56fd0ee748d491980ebfa1f2ab5b2600a

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/databases/kkursx.uni.jar

Filesize
916KB

MD5
07972870903942062cacd9b2d28a62be

SHA1
bf6a7c718da5f08695a0f90a461f40c4c5435245

SHA256
017e1d20f25101d60b180bdaee15573dc51a29baca8b1537b78e72becf23f970

SHA512
f2c2a8b31ad2fdd3057bc98016629e1ced832293bcb04c3b7873958b431b6ac679989c11217cb095ef645f0ffd3f0c13988e5c2ec71f65f5deabfe5897b7fed6

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/files/.com.google.firebase.crashlytics.files.v2:com.ouxglop.dsnun.kkursx/com.crashlytics.settings.json

Filesize
792B

MD5
c63924de381725ecaf2f8ffb6898b504

SHA1
f43f3290f8de31ad07a3f3f81cf555c006ac4712

SHA256
5ff5170a5588b9a4580fceb0f8993b1ae596060f7d98b99cc7ab013cda383063

SHA512
a95cf4e2f231fb5be45b4b6014932396a91147b7d01a902d5a536831e8e3a9dcb66f688a4abf9f6b0e9f313c71e72531c283a3bdc8dc619da05c5a8e29c9624a

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/files/.com.google.firebase.crashlytics.files.v2:com.ouxglop.dsnun.kkursx/open-sessions/68022E140361000110EB9FFEEF7762A4/report

Filesize
748B

MD5
ae9808cf245633e372d7b825897996bd

SHA1
0553a98730c6a95fe2f38f68caee1a2c9a03c07b

SHA256
466ae94256d4319d8aaa894a448caacdbe157db04d6d06609e7cc9ddcdb080a0

SHA512
7208dde7b6f2598236395ed9cd96bfe141c7a600e2443646dfe7062ecff042253cae6b312de647f00f3b152aea65fc9c50fdb179cc93270106a33b8312c30271

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/files/.com.google.firebase.crashlytics.files.v2:com.ouxglop.dsnun.kkursx/open-sessions/68022E140361000110EB9FFEEF7762A4/userlog

Filesize
186B

MD5
cec19cc04cf305afb9b6c43443e44847

SHA1
3ea78d603349c8a01bc42bd659eff3f5686b9e13

SHA256
94f14ff49de4834edd2a0fa79768cb81c9aec9ea63a376fdb5facd786a0fa1d6

SHA512
5842e27283c6110ddea10c013a3313c823ef2ed5bf9828b10b97859c4d1711bad174ac62998d46b4cbed49136ae3507268c14492eeb712b106abc2147989fbfa

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/files/.com.google.firebase.crashlytics.files.v2:com.ouxglop.dsnun.kkursx/open-sessions/68022E140361000110EB9FFEEF7762A4/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/files/PersistedInstallation6933365140272810031tmp

Filesize
566B

MD5
df5732b9cb5226cc1be9a75bdc42b60f

SHA1
c30776f65919dbba09d80560a98e1b6d755a7151

SHA256
913ad32d5c8b1bba0dd2231e9cba35819bbd3de9d2bc904584f818d4930348da

SHA512
74de5aac9460471f0b2729c96255e2289dd4e6a1f1b91224186beb24b11f39e40980729d2e16be9bfb8f7d95396064802e4d48c159eb365b686e83aa12bba382

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/files/PersistedInstallation7283541014371074579tmp

Filesize
90B

MD5
b966a0971eb7b15843c17e091fbaa20a

SHA1
fc9ea6b269c14fab444cfbc4cc2d596d5fde05e5

SHA256
590af0a944b8238b0ddf04a5bd6c93d098705a995134b826aa8608b286f90748

SHA512
6f0da77c74c62a53521eb8961cf82d89b540b0b5f0d08e0df7b5137a7fb89f676f631c062fe914c0dae36d968acc06988d7b950eeb178a1c2d271546d4e43777

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/files/audience_network.dex

Filesize
3.0MB

MD5
b18ab03453d5d70113873d8c45c10d2f

SHA1
ad3c48b1ca11b9c84f380b9ae7a025f957f3d02b

SHA256
bee390afa2267bc48829ee7a0f4286895bf32ba2443ff447451f515818f7203b

SHA512
63e75b38dd472b2de19f6e513026e732ca040699437be4a1684827ab2ba4baf2077b053c0ccc4a702b72bfbc2ed7e343296b9a9f85ba906be37bdd6f905694c8

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
41b4404697e5f729145053017b38f19b

SHA1
a598d136c20a3b70100ad7e51259f0c79cb64e66

SHA256
d4376f9e6d3873f99a184fa6f72cab728c8cf20d665e42303b73e5fa708b5030

SHA512
d71bcdb984a8ac8fa2ed23299a4b5bd74a6361651927bbbed7b41fdeefc796e0e8bdb0e0b3fe2cb5d63b92def30d2eeb8e438528825381952679c126325a69d8

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
3a4b214380624020cc99efcfbc11188c

SHA1
4ffbb22c0b4105cef8b9e365a70ae233195ffa6f

SHA256
c9399a61bfe5d4806074b2986b7b449ff74fdc1236df11c100d947e5e1d3646a

SHA512
e86f3dc5f705fb90a20c7dfc6dbf04e7a26651e4df73e383958df7de1958c175a5c72ce09e496b72adc243356b78a2127d3f90a649a54b5074784d6985a27436

Download Submit
/data/data/com.ouxglop.dsnun.kkursx/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
6c244c297b2a586e8418cf6311699477

SHA1
70db523fbf48d414fc711d3c2c5b9f24a803dd43

SHA256
47911754595826c5bc3e593d673552a75e725b76335f51babd94093fc85b8843

SHA512
112e30f10b7d5f90964b569db30fa5535a6e7bf74e857a9cfe899baa712696b8c31ced652db7f1a51ea3a6253724a8b1e4e3efddf2684ad55504da3708d57656

Download Submit
/data/user/0/com.ouxglop.dsnun.kkursx/files/audience_network.dex

Filesize
3.0MB

MD5
a31c863b7843d64af8070b7e12b6a3ca

SHA1
e94376c90f3c4aa57a1f278f5357f506fdd7087a

SHA256
24eca4bfe4321e3e99a16bd96a6678e3be23e706d1bff0d99a9d641c1329ed7a

SHA512
88eb89220a0fbd8ef088bc93c3a6635cf01ce9bb3d2377fcb5368c69f77a5a545fcd6b2314e8ca900fcfd4565ef2c60a7edbfb57f5c8987d80efd9fabdf0f534

Download Submit
Anonymous-DexFile@0xbfd5d000-0xbffc96b4

Filesize
2.4MB

MD5
7339a567d9a3fb58fa065af11e01be31

SHA1
6b119f61e4e0a195f0506d622f420789299a52fd

SHA256
1f4df2573e31071787255537360cc2f48a00b20dcbf2d6485275f456b1202152

SHA512
55445cd86091afdc747ededd86c384d9218fc9be1826961bb32e2f160ae7aa0bf917534771fe06594bd52205214dff70710e221c46031e6bdbfb46235c0eace7

Download Submit
Anonymous-DexFile@0xc04e9000-0xc079a718

Filesize
2.7MB

MD5
bcb112aebd4c872ff9cd1ba36e274650

SHA1
705e6484dc7f2e1fd9d2369d3f305d043c5cf182

SHA256
838b8f0723d027a7c28266e3132027011801f463cf708dafee64bcec18d14b3f

SHA512
75fcb7c68335fb9fe1df214e6259763bec13733f529f2e76952e6adc85ca9d0c7bff9756ad92b665e5a1f6c411ee43a2f2c544260e6da7fe1e0133184d61ff6c

Download Submit
Anonymous-DexFile@0xc0569000-0xc08edd4c

Filesize
3.5MB

MD5
14b8a1ecab06f4cf44f8d2b666011df4

SHA1
6b1dab2d12dc42a22896aced5065732a85ab7b4e

SHA256
e2ca9b02b7ca07bfa3df8946dfb72069abb5dd99edc2da6b37a6a0aaccf4ddb4

SHA512
2bf0495e27bc2fd20194471ee00ea14fc91d7ca8d833e0b101f2d90f62487ee00c4b921b70702bc34a297561d6128989a48d2271e342229738daf16f1a3ad7b2

Download Submit
Anonymous-DexFile@0xc0a41000-0xc0c10b08

Filesize
1.8MB

MD5
09a94ca6cee56b461cc5473fc3bc1cb9

SHA1
32d08a6108211067f6d8b41f720ad412dce1412a

SHA256
ceb413c5bd39cf6e68257dd5b223246762d8e18264e75e5a5b1ca3930926d6ec

SHA512
3f14002c82086efeaf600a5c33325418c66a3072caac11a5e28f9bb21e06f00af2b15bdf830fc964a17cbdd60c5da38d01ca3135db4eb212330a90b139f978d9

Download Submit
Anonymous-DexFile@0xc0b28000-0xc0c0a2dc

Filesize
904KB

MD5
5304f9fb0387d5449ca34fbaaaed05aa

SHA1
e22b452810683f79c14a0371b7282a2afe6c0ae9

SHA256
70569fcd90dab64049a1b0efa7841593273885684be378c098481eb2e6c49343

SHA512
a6736ce08f8bbfdd59c2d1242fba0d022fb04212ba667a7e14ec6bfb33389730a356b04f5e2cef90e4b2cf7cd7f5fbdf0d1f959da082b20e6088b75144706f2d

Download Submit
Anonymous-DexFile@0xc107e000-0xc11f4e6c

Filesize
1.5MB

MD5
bb655a6b2ee2d75142e6733b1d24b161

SHA1
0d92e6bbd81f4158c38bdb3cf917c54bf1f18c4f

SHA256
965081443a952f45fd9109be7f122cbc0176528c2b97a395261d4255ddffb74a

SHA512
10496f7f47937e0c580580d7b85e5e52a4288b7e5515775f25a69f0161192bce5e6a485bfe871bd1475b7cdb568e24000c082fc5a38eb2f5630b9fe725fc497d

Download Submit
Anonymous-DexFile@0xdcbc4000-0xdcbca1f0

Filesize
24KB

MD5
78b89276a31c434614e44b91826537c1

SHA1
88683d87a435c3d1be182334470771e708f56811

SHA256
61b71f7349cc71adfc80c86fd7312d2a71225c14b9a81bc9779704a4cb824640

SHA512
45a37f5f9cbcf656134aa5fc3f36d682f25513a78f94cfc36f6659a4eca70cc27030c850713931ef8f15bbbf44074caa2540bb15b91fd90f9c6c8dd8e711fae8

Download Submit
Anonymous-DexFile@0xe163c000-0xe163e0a0

Filesize
8KB

MD5
3381af1941e48bd2cf09a7d0f4dbcd77

SHA1
9699d5602774c4f9468c5a591529e8a40396d134

SHA256
e1ad2be798317778f1c0e5f926a47a622d445ae7e2278051871ba301bd01516a

SHA512
3177702334757e24ca1265001dcbc668a5ed5d7bb009b014304fa18492b8f1201d19d16ea3b4ec7bb13e209a428211bc961dfc7d11c621cbb022eb726918f470

Download Submit
Anonymous-DexFile@0xe1d6d000-0xe1d6ed54

Filesize
7KB

MD5
42ddc8b634a7069b88e738817fbcb868

SHA1
7233122bb69093c1b929f762b43451bd9da88180

SHA256
02805191c324ee00d4ae12f675efa3aef8485d248b672fac43a8ac6c5cbc15d3

SHA512
543bfeb39612c679c7df49a4b25d61710189cf80948806d4280381da0fc9b12a6fb3a53759aba9e6e81c4245574a102d4cf1a06dd61147d1ec4620dfa9744b5e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads