252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492

Analysis

max time kernel
22s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
13/08/2026, 01:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492.apk
Size 26.3MB
Sample260813-bdd83sydnd
SHA256 252ec25d8208d17c487ca99eb97c620be8a7de5314200241dab6d0a408595492
MD5 31b1a17fee6413ad28322183344b786e
SHA1 b350b9dedc9101cfb7db97d61bc187d3ab2ac707
SHA512 6130a5ed8e4c1ee443bdac1026e417d4eb0e6864bc80b87011283b3ea4d7da1d4d7cd7c7727c236c5d6712a700fdb34dfacdc92c5d5c1241d21e2f52ae8306bc
SSDEEP 786432:3BeFmZWuTzFC9SAnRssEr/+/iNX2RQ9PLKvRv9L:3sFmZ5k9ZRdEL+/sIL
TLSH
T1015733A7E3A928AEDCB664714A7E403251278C3483A7B79F1C88B2356C776E5CF447C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.classic.cuji.retor.cam
/system/bin/su	sh -c type su
/system/xbin/su	sh -c type su

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.classic.cuji.retor.cam

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.classic.cuji.retor.cam

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.classic.cuji.retor.cam

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.classic.cuji.retor.cam

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.classic.cuji.retor.cam

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.classic.cuji.retor.cam

com.classic.cuji.retor.cam
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4692
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
  2⤵
  PID:4873
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
  2⤵
  PID:4894
- sh -c type su
  2⤵
  - Checks if the Android device is rooted.
  PID:4978

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

MAC0ROTER0IJUC0CISSALC0MOC.ss

Path /data/data/com.classic.cuji.retor.cam/crashsdk/tags/MAC0ROTER0IJUC0CISSALC0MOC.ss
Size 1B
SHA256 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111
MD5 8fa14cdd754f91cc6554c9e71929cce7
SHA1 4a0a19218e082a343a1b17e5333409af9d98f0f5
SHA512 711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b
MD5 SHA1 SHA512

Submit Download

MAC0ROTER0IJUC0CISSALC0MOC.st

Path /data/data/com.classic.cuji.retor.cam/crashsdk/tags/MAC0ROTER0IJUC0CISSALC0MOC.st
Size 40B
SHA256 0a431587e878fa750df4acaa19507c8ffd79999dd26ca2b014f2cc3d55ddfdae
MD5 8255039e1e714e745c519fb1291dff85
SHA1 2378c3f97668e723d02dd7956930cc0e39f58602
SHA512 a8408489470c4cadee9d6df1e72863e1cf7ab3b83fb2ba252a6ccb17f1cd5ffdfa1b1db518e9de988fdfc441619ec10952d5b848e56440afc0100b4dba729602
MD5 SHA1 SHA512

Submit Download

MAC0ROTER0IJUC0CISSALC0MOC.st

Path /data/data/com.classic.cuji.retor.cam/crashsdk/tags/MAC0ROTER0IJUC0CISSALC0MOC.st
Size 40B
SHA256 35c42e2259ab2d34c1ca8be50e6270db3222c9778e95e1689cde2975c3153f54
MD5 ab0f586e101d74dcfa43c73997d7b649
SHA1 6c7257d7f0ee5c1fc8a473cbf73c8dd8d12c5a3c
SHA512 684d504718e7960da814f7bcd3dd32e1e16faa160c1f1310fac3e4915b1a7868f914819c688876d6ce62149407966167bf451bd5f6c7b468804b625b9ca600e5
MD5 SHA1 SHA512

Submit Download

unique

Path /data/data/com.classic.cuji.retor.cam/crashsdk/tags/unique
Size 36B
SHA256 1b88b8c19b528fe4543eab1bd07de518e6ff146955acf0de6372d35cc9abe7c4
MD5 f2c691a048cc1d9e310b2e29f85fc7e8
SHA1 469133f7ea4b16584fd7edfe3d6d385479dc4ad0
SHA512 67ed688d78ad32a0577c457a8cfefee162ce5fee21d4254b444991982191503b0a9666f0f6f223eb9d270744b916aa0b476d989dd48945f6e6f3241ec20abeb6
MD5 SHA1 SHA512

Submit Download

ver

Path /data/data/com.classic.cuji.retor.cam/crashsdk/tags/ver
Size 22B
SHA256 9287425b98f07213c148d87e2fd5dd31c235471949bac8258e598d24ead1b2bd
MD5 2388f1615ebdf6b1e5b730671069326c
SHA1 39b025eab7006f6521ba72766f04dc63d3dcc0ad
SHA512 f6f626b918601c5ee1d285e8b8b5e700df3bb747cf9a2045a65169318717f3bbc6b4171a9acc212658ea9ea35305ba26e1fd114160a7af3e8deaf42ccf6e0f6a
MD5 SHA1 SHA512

Submit Download

ua.db

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db
Size 24KB
SHA256 85f67955c1fa5cc7aac54dd9e6e181b0180c16155414afd5c36d2c7dc42c64a7
MD5 1892f51e7f2f500d64d23d73967d1ef0
SHA1 7fb5ebfaf470994684ff316de36e07156544d19f
SHA512 8ec5d19e259c8039e7fa6c7720e0b95faacb059cbb1971d2099f10797a425134b804a763382d2f8a8f817769576c01516bef95f87178c36d1a188f6327705220
SSDEEP 24:TLdbqRrL4PDiP/b+cLglJWcKbEGSP/ySMwAGQ:TJepwDeT+EsebTSP/ySLo
TLSH
T163B212EBB21C12A9D1185137DC135220097D2D7D56BA4BB62FF100C2ED9BA00A07DCEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db
Size 32KB
SHA256 f9e4ba68d7b0094c411d1f3bfd6594792a92d7bdcc72d1cb56010a83b27adb3f
MD5 aae960924bb872669ec67a6a8aacd5d5
SHA1 82de2110966dd3d6e4b186b1d7a460c619921be9
SHA512 be0af4e1ced4813e310d4111e209bc0be6be3fb72a4bb891ad73479b3b1056d5f5280a09d4ff3221a83c540130f61a9423fb959137f214e79517b3ca5bb51328
SSDEEP 24:TLhqRrL4PDiP/b+cLglJWcKbEGSP/hv0GJSMwU:TMpwDeT+EsebTSP/hdSLU
TLSH
T18DE212DB721C2399C1085137DC1352210A7D1D6D56BA9BB65BF104C2AD97740E07DDAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db
Size 36KB
SHA256 45c2067d2612924ce4459f576b4c5280cb29fe7e9b81d0eb6106fd3968bc96a2
MD5 c0384761976b52d4391191ac9dc89b7f
SHA1 b7ce48ccc94f45113d7a700d69de66e2a4c55454
SHA512 46004063850045d2134ba17ad71d229fb515a769cc3f35660ac1af08c9d029472046b130d1253160222c38f743a823f92a71088fd310ecaa479ce782ba2a6f8b
SSDEEP 24:TLxqRrL4PDiP/b+cLglJWcKbEGSP/K4dZHci7WDcl6upeHLVrY:T8pwDeT+EsebTSP/hD0U6upeHNY
TLSH
T1AAF257DB711C12A8D115513BC85391210A7D2E6E877B4FB72FB108C2ED5B940A03DDBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db
Size 32KB
SHA256 941644e2d19079c56a3950a4d906bc6696c467884dc21ad776ef45becb32f02a
MD5 d4db1c378299569e6071bd4ce3407f43
SHA1 e3371e93c885d6de2b2b855e952615e90ef85ea6
SHA512 8b85535915da048488a61faed658a814b76743e667a926371f73dd8812af722321f12158bcc5b517dd5b73f7d89d59d7a193241c3a9b04b370ceb3739b083186
SSDEEP 24:TLBqRrL4PDiP/b+cLglJWcKbEGSP/Wfe:TspwDeT+EsebTSP/M
TLSH
T1CDE2DCD7B11C1398C21C5037DC6791211A7C2D5E92AE8BB61AF100C2FD97A00A07DDAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db
Size 40KB
SHA256 faf4469a60f2998f3be184473378e6f9628f1a76988feb9d6f8f78f40182a9b2
MD5 7d2da1847e9d880362152ef614db767a
SHA1 2ebcf8473fae58e31566367362dcc9b73946768d
SHA512 e85915414fd4f5431587a86ca81e8343f48d89067bb5d48ddfdb38f9b395a7954a03b49ff44f0d7117b9eaf19bb1f37620dcb190cae5fe0a99538a68e458bf86
SSDEEP 24:TLBqRrL4PDiP/b+cLglJWcKbEGSv14dZHci7WDcl6upeHLVr:TspwDeT+EsebTSiD0U6upeHN
TLSH
T15803F3D7731C1278D518513AC853D2211BBC6D6E4ABA4F772BF104C2AD57540643DDBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db-journal
Size 8KB
SHA256 466faebda3fe309ba05431e397d563745d4a1158f88d0f34d666daf1e1ff4237
MD5 c4c8063c77d1eb86d9a35a485557fa66
SHA1 45178ced3092b422751df954d8b56baf4cdad216
SHA512 482b1ee8c2840c1a6fd628672fb35170750283a41f48eda99a7706322faa3fd9cd7ed1d79732c70ae82aedca02c1958ea367320618b875063af34a1f937f8d1a
SSDEEP 6:7+/l9fPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKs/Xkn:7+tpqLJdeWRmBEyPb/Xkn
TLSH
T10502C0B8A3400803C02D377BA0CA93C01E14EB28A333CB871A910CDC3E07ACCEC91D40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db-journal
Size 12KB
SHA256 a36315762a2230b098d674b4c0b73cb0827573635e6a9ab2d7b2e7007b4bba4a
MD5 aeda3f043352e1e6435bc48d06046898
SHA1 de20d4904027d95bd4856d489bc7f1f9db222c0b
SHA512 13989d9d25bcfca0cc6f6ac92982f568a92daff5d4ac63587e835b03cd275e9f32bd9207242c4542f6c77714da67793d1ffa46216aaf24b6fe9cedab2d524d9a
SSDEEP 24:7+tKIqLxqRrL4PDiP/b+cLglJWcKbEGSo:7MKIq8pwDeT+EsebTSo
TLSH
T12A42EDD7751C13A4C21C5037DC6751211A7C2E5E96EE9BB66AF104C2EDA7600F03CDAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db-journal
Size 16KB
SHA256 3f2e0339e19f82f3a5ba9b46d4862d61edb5de3b6d0676abd0c2facfb842a94a
MD5 5cf3051502e1a86c9e7c5bf06af3ca40
SHA1 7cd3e9648497e035f58098a31a7f9ae87da0021c
SHA512 d18db45ef3d941c53874af6c4edb9061e26cca22d4f177c18719bc805574727fb724d906ba5b34214952950bc43dd555751e7c90d735024f3d1354e0de1f77bc
SSDEEP 24:7+t5ZqLBqRrL4PDiP/b+cLglJWcKbEGSi:7M5ZqspwDeT+EsebTSi
TLSH
T15C72CEDBB11C13A4C128503BDC6BA120197C2D5D56EA8BB51AB100C2FD77600A47DDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db-journal
Size 16KB
SHA256 768de366deeab06a61032df36c6a6c93d7d2f25b9d65c60fb91574391f2fa6f5
MD5 0706615a48c4def428fb63008919da60
SHA1 9edb1baf225ee027c20f550c08806b60fbae6b86
SHA512 790738c0238909a8cbd605593ce7cb70588bc821091c2ae9c1d7c5a320cf9479b8dd2a42bf633a8f22404725cd3a8ad903efdad5e340531ef81ca0d56f8dd332
SSDEEP 48:7MjSczq8pwDeT+EsebTSDqJepwDeT+EsebTSZ:7kz5pwyiERbWDZpwyiERbWZ
TLSH
T1C672F0D7721D13D8D1185137DC6352211A7D2E6D92BE4BB66AF100C2ED9BA00E07DDBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db-journal
Size 512B
SHA256 23fcac715146cd302b1c4297bec7a8c7f8d83eb02e4b986f98ec296890e3c5ed
MD5 fd6a1abdd1f1433c947f760a0faee300
SHA1 a5bc3dbeb356d5968b7fd5954fcb33aedb98ba68
SHA512 9b037b8e94e3046cc36c2c5c0ae7a10ca2801a98f9950c002fb9157704de8072b53b1bb5e315e022aa97e17ac35341e67a19485aa42dc0801b8ff111235eb225
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/ua.db-journal
Size 8KB
SHA256 9411d5cc26d275ff9f01b28246502498944881012616ea047771ceede7344385
MD5 d3549bdf47e5c862f446f1e9769b33cf
SHA1 3be766920f9934be47b5cb821b2b264a710a84c6
SHA512 80a5efef834722a2f414f328d1d65fb4f1ff3b69ae2d89292c728b4218e412490b0a72d2811d74b4c47e9d310739b0d9ef6175bd17c4c1968d4f824f539c5198
SSDEEP 6:7+/l9Zq7On1Sg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKHn:7+tm7JqLiuWdYRmBEyPbkn
TLSH
T1F80222C863801823CD2A1F7B98E9834A0D00E72892E5CF571AA20CE42C074CCA4A2D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_zero_cache.db

Path /data/data/com.classic.cuji.retor.cam/databases/umeng_zero_cache.db
Size 20KB
SHA256 5617afb521e54443ab321ab6cf0f7ca6641c040975dfcf30248684d0940200d9
MD5 be6c792b8a6a5c290b97626af17dc49d
SHA1 239f8716cf8c6f31952a3002a58f6220df353227
SHA512 0c96823118cf7ab65091f884f1b22beaedad21c150a23582ec21bed48caee5c8186f9847dda661f66f229cf9366f4286ec5a03c32d4310855b2c4df54513c533
SSDEEP 12:TLmaMWyNTSFbyEKMFUvL9TtL4+qRmBEyPbAVOwG:TLXw9M2xTtLlGSEG
TLSH
T1D492ABC7A7801386C60D45B1D8BB73A109B0561EC3958B977AF214809C43AC854F2D3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_zero_cache.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/umeng_zero_cache.db-journal
Size 512B
SHA256 f89c30b4b0371b72da3bc7d92083101d5cda18297392394482764b391883eed6
MD5 591851c910800281951f1b99384cf160
SHA1 a2899680cea08e3c2bcd3342e58cf44ca9e36d14
SHA512 a394574c6f33d235c5ad97cdbaeb118525e1253463bf586e2908057659061b94193c7841773dbf836f61463ec464b107fc4b402e6876fc681887195d6b3197b8
MD5 SHA1 SHA512

Submit Download

umeng_zero_cache.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/umeng_zero_cache.db-journal
Size 8KB
SHA256 47cca969e47fb798c95e4fd686d95c4e319218990e1b14b757d21e6539d9ccfa
MD5 3e5ebb549ddfe8e1e74a88c1142f1feb
SHA1 264b6a10579be065cd397ba1f78fc63af969ec57
SHA512 85162fb15b616ea9334bd99aa83280d3016e65d388fe56b8eaee8873a824506402de6efdb2066b2073a0bb03e5b19af9864f3cb26fb09fdb92f661d4ed60c241
SSDEEP 6:7+/l9hG4n1Mxvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK6in:7+tIRqLiuWdYRmBEyPbLin
TLSH
T12602C09EB3822D23C82E167F90D583980DC8E7288571DBAB169008D47C074CCE4A4D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_zero_cache.db-journal

Path /data/data/com.classic.cuji.retor.cam/databases/umeng_zero_cache.db-journal
Size 8KB
SHA256 f07eace98246f1abc620dd51c4da986abc3004335e9fb1b8c9052334f7d957a9
MD5 08841b1b79faeb770a9a7638a8429446
SHA1 91f3e53c40ebdc8544ad54b654f6a7ef45e9e951
SHA512 83995c654ef90a000bc35ee2dff7e586db3283268467aa1b4dcb8a1071114b13feac6f531d7e197394d96b2c08d6d770f01f44534e58ac7f87c56b2eff3a483c
SSDEEP 6:7+/l9fFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKR8l//en:7+trqLJdeWRmBEyPbg8lXen
TLSH
T1A902808E7B411913C53E5B77A0D983561E24F7299373CB57179109547C47ACCECD0D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i==1.2.0&&4.9_1786582899191_envelope.log

Path /data/data/com.classic.cuji.retor.cam/files/.envelope/i==1.2.0&&4.9_1786582899191_envelope.log
Size 1KB
SHA256 88b352021b79dcb6332bd06c678d22c23191198d60752259289288ae552b7bcb
MD5 28c1e3babdc32b28b3411938363fcc0b
SHA1 4a833af496872ba4a20032dc44926f4ea39be4ff
SHA512 6c44602ed994d5962532e159f80812a769a7d614e56776324bc6449672dc06612a7c44035298dc75bc285ac4224464656fb5dcff78527ed92c5ceac39cbf7893
TLSH
T1684138BA7CBE0DE56BA64597308A1E1638BDA717FCE1D42025434308240AA013121CA4
MD5 SHA1 SHA512 TLSH

Submit Download

t==9.1.6&&4.9_1786582898844_envelope.log

Path /data/data/com.classic.cuji.retor.cam/files/.envelope/t==9.1.6&&4.9_1786582898844_envelope.log
Size 1KB
SHA256 ace8e6803d00113dda1bfb8ab1934ed27eaa3b9dbc9961f92bebcdb1c0ddcc9a
MD5 c31d1e230b273cb6b688ddd2b824ed21
SHA1 a2e86e9cd2350553db67cf8213363c62bec39c61
SHA512 47e44633456b1cc30a8ec4b199ee975d360b471ec0881883659ab56c797af7590745be88c6d6a137d0087211c3875da50d82d1fb84ed4e5ad16a13d3b89f55f8
TLSH
T1B231FC90DD7F8AA72A5E8814B1CF4CC3C06D4F30BC5E056515AFA01CD05CBE194AB674
MD5 SHA1 SHA512 TLSH

Submit Download

z==1.2.0&&4.9_1786582896610_envelope.log

Path /data/data/com.classic.cuji.retor.cam/files/.envelope/z==1.2.0&&4.9_1786582896610_envelope.log
Size 309B
SHA256 8282854504182e35e0c530b4391b8d829a67900192b93c55a3597b6c679291ba
MD5 7a1f70a9cdeee86c30d109ea39bb21da
SHA1 9fa657184ec6beb594fe29166e04e9e496bad336
SHA512 a39cc95d2916d003bf25140b50120f67298c093431223a20db1e1516776faab7c93d457c77eab9d14625786e2e39e062a5257a8281beb483470e31b799f8ee57
TLSH
T151E07DB4946B0647FA51A514100A29898753BA55F9D35D301E373B07314895185B19A9
MD5 SHA1 SHA512 TLSH

Submit Download

.imprint

Path /data/data/com.classic.cuji.retor.cam/files/.imprint
Size 140B
SHA256 99dfb1b6df4aa477fa861108258a8d270b5de7ed79b127eeafba6727a660d3a2
MD5 172b6f0e841c030973755226f006509d
SHA1 7d69650722b11c9045281e2bea6447d7fa7dace7
SHA512 48686583046989e2317f42127e4f9450ee882ddb0cef9708fe3e013bcf60300a3dfe96d0f571e466514b98c202678bbf1be41a9f7e09ed0afb4cbbc40a02873b
TLSH
T162C08CD1BE1621F1A00CC48869E28A1013A694634008A0BA280021322E24C2431A7909
MD5 SHA1 SHA512 TLSH

Submit Download

.imprint

Path /data/data/com.classic.cuji.retor.cam/files/.imprint
Size 684B
SHA256 d510fd0e60726eb78eebed9e4ea76097bdf34ac12106fee4d268015b8bb86729
MD5 257fb74f502b7ff0cf4e65c30e97b63e
SHA1 06d7d765ac57a0ab9cfed910a19fbdd5f24c2dcb
SHA512 44c10608f4a112c430fca76922e8366e2a481b0e7c12e157672a929fac3c51ff2917dabfba356d15031d36504bf551b3e60ff9f74fc80874327cbc2c234a58dc
TLSH
T11701C5DDBB5201F5B889B4941187978E23EE6063D842E328D9E072F3096EF48574D004
MD5 SHA1 SHA512 TLSH

Submit Download

.imprint

Path /data/data/com.classic.cuji.retor.cam/files/.imprint
Size 684B
SHA256 5130c6c2641bc9457b8800969755b111176e8af964e80ad7d57a5e42f27bf519
MD5 61201cb81e53076605526b6348274aa1
SHA1 45ee8c30f7e59bcdaeb486eb5ab9c93f9ec9fa05
SHA512 14de1dec4b258cbf48a45178c5d6293c16ff506fefc68c5f809e3860afacf9eab6d309f45f97c90a9f668c0b3a30c53b4fef85bb51500ca133e879ab19ed2e75
TLSH
T15C0110D9FF5311FAF845758640C2AB49131A68D3C812A12A9CD2A3F3012EF8C434E804
MD5 SHA1 SHA512 TLSH

Submit Download

exchangeIdentity.json

Path /data/data/com.classic.cuji.retor.cam/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 c18068774e41aaaee028087c62da070267afbd3e9a600b67fc79b8d6d7f83d55
MD5 c19549f65012e53f97c12e8f5f10ca24
SHA1 c6733c3f39f2704517b7360c940219a570b2f764
SHA512 f5c9f1322c86aca71b049c94c983ec6043d31569346160f55896823139314e7d2d3b0bf50df6814029ab6d5ab173186e054cf9f0db11506b8562b74bcc488d41
TLSH
T130C08CE2E1668A912F5E5519442B08131A0F1B699AD38A006F4A680DA81CCA8A5628EE
MD5 SHA1 SHA512 TLSH

Submit Download

exid.dat

Path /data/data/com.classic.cuji.retor.cam/files/exid.dat
Size 60B
SHA256 710ad254d6bd3870d5e2165244519c8cfe7fc28f7759b4780dea59f65c2da641
MD5 fed8fa1b6fa80ba30b141a05a7c1f9bb
SHA1 4b8e2ffc345286a999129bc82c35817f5795e497
SHA512 91eb13d5f604a20c89fa6ca2ceabcae7e4e88c96b8be24e8253c8289e95cd361ffce51025936330c6a900048f8bb25f1d11e9c38ae3ee605d21994266061a5f2
TLSH
T1B6A002C7E6A986B79D6E72DA014F1D165A686F658A900110991E0403845D491D105C41
MD5 SHA1 SHA512 TLSH

Submit Download

umeng_it.cache

Path /data/data/com.classic.cuji.retor.cam/files/umeng_it.cache
Size 285B
SHA256 cdbe1462b0203f5d62b1fbbf6103c9c8311e3bf50d63add6ff7bdb58b5997eda
MD5 3a6780074635b4fcaa0761326079bb9e
SHA1 4f7c5594990d7d642b72efc1db08fb42103c9ce6
SHA512 76fd2a2d12b654b213a1d4f7585c8f7dd917505834b0d8a1058ac3c99fe143392484f8864534576d06a528177ae954962a81937f25d914b94c20a947f668d4ac
TLSH
T198D02B4A3EA7134269A8CDD281476055D3088083E56217FA31B172D367FEB21CF6CF58
MD5 SHA1 SHA512 TLSH

Submit Download

umeng_it.cache

Path /data/data/com.classic.cuji.retor.cam/files/umeng_it.cache
Size 145B
SHA256 b1e9663a90464748090e332f9a8ecf4a34f287fe7bce76e06150d3b4289bfab5
MD5 11d8073f3dd47f4396c7d079f705fd21
SHA1 d16d16f26e200c4202ea42834a232a1a4de41e26
SHA512 3f6d5c20d428470737a6d6a500329a766dca807bb85574beaa9be0d702ae59f1cf6d1d5748a85fe31fb5323b7ab653ed21c24dc78d9c893504b412cd1e0f4c72
TLSH
T171C02B463E6612805888C9D151439055E30800C3D45207F930B072D357FFB21CF08F08
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads