90c38715d0962285b8b4ea7811965be386aab9f58ed0216f1b71277bfe7f0f14

Analysis

max time kernel
8s
max time network
19s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
30/09/2026, 00:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
XStreaming-2.10.1 (1).apk
Size 80.1MB
Sample260930-bb3tnaztes
SHA256 90c38715d0962285b8b4ea7811965be386aab9f58ed0216f1b71277bfe7f0f14
MD5 e12e79eee4f1210c4fc57091a14a714a
SHA1 f4bee86bb447916045811421347bf93f62747425
SHA512 37ef5e4aafff59210bd818ac0a217348a56e88630bbaa37b34d823d84c95a123317fb3e693b515023fa1fdecb2a61312084acf57aa16bf61d97def6faa0e791b
SSDEEP 786432:3+zpkgqhyYy6RrGerLz8jWjRIPux8/vRUUvrQim9JFLShbHXtJeiX+UJ9yFzih7:ulkT/m1/N0ieAb3ejUHGzih7
TLSH
T1AD08E01BF60D9817EEC3B0BDED4206C176157C445121C2DA2C26F22CEA7BBD94BB97A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.xstreaming

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xstreaming

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xstreaming

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.xstreaming

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.xstreaming

com.xstreaming
1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4075

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

736fa75d9ad692a70c4cc28267b44de2.0.tmp

Path /data/data/com.xstreaming/cache/fresco_http_cache/736fa75d9ad692a70c4cc28267b44de2.0.tmp
Size 3KB
SHA256 7070c055f74e93ea9ee8cdd4a190548b3079af97a307fd4cecda6809d5e26988
MD5 4a00c7e219f9b21c6b448143ffdd64e2
SHA1 b4f44fc438ff805cc81da0375065ec415d3da7da
SHA512 69bc5eaca56ea367addb9afeb9a4f9f8c9c36ab1d51c0b1b0c5875946c07df622db543eedd733234f7aec15164da8afc53700f5fcfa9f90af7c5d845a8e40bd9
TLSH
T1A6713B3A0F6012216EA2F5F1C9922FA93050A65A8BE1DCFD618416134A84BB9BD374CC
MD5 SHA1 SHA512 TLSH

Submit Download

736fa75d9ad692a70c4cc28267b44de2.1.tmp

Path /data/data/com.xstreaming/cache/fresco_http_cache/736fa75d9ad692a70c4cc28267b44de2.1.tmp
Size 107B
SHA256 96457a1d25447562e130e0735a3b4991ef0aba6bd871f30c63ef462328f86e7a
MD5 3a1e2330ce5909b5cec9ded9f73a1ac7
SHA1 3600ffdc206298222d0fe3054844d80afee19fd9
SHA512 7f437d402c0eae5f29246f6f89480e4f6779aea6b163388595c2cfd6d4a94d69dfce2b0ab60961448a4b7260b84290a49d2e7cdc99ba134ca74deef86536791e
TLSH
T1EBB0129C5BE7D1CDDC7D38389B9D654441DDDA0101344E39B8818C62A1210D4660D93C
MD5 SHA1 SHA512 TLSH

Submit Download

bd531e7d227795748df750b05ba2954e.0.tmp

Path /data/data/com.xstreaming/cache/fresco_http_cache/bd531e7d227795748df750b05ba2954e.0.tmp
Size 6KB
SHA256 5709a8c2ffe98d220894001d29e54b9596ca4da604a19ce221b4b65dd7dd11b6
MD5 617e7180c8751b5466483f2928614efb
SHA1 08fe043417b0ac4055bddd948cb4b8cf8076e1a5
SHA512 27dd7b9476023c7ac43c098cddfc91f36aee68f158db648cf8ae1dae992cc0f4a65f2d70036e86387a8a9dd2ae53b07dca83a3ab027e0efc84945097dbd5b556
SSDEEP 192:eTMvuDGR3lfm9hA1mCWWlxwxoF9AUSL4UyghjieiZh8hSL1SLlXhLJ:duD3bAwoF9YL9DhjieibBLgLlRLJ
TLSH
T1D2C14DFED31525380D81FD62EE99D3865031E54ED0B1D0EAFA55315946CD7A620CB2CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd531e7d227795748df750b05ba2954e.1.tmp

Path /data/data/com.xstreaming/cache/fresco_http_cache/bd531e7d227795748df750b05ba2954e.1.tmp
Size 14KB
SHA256 9f8fab769877115283921f76b74b7c500cec61e5de8d2546cea1c988020bb15f
MD5 1e13b1ed8ecf5ab3b438ba9835898a01
SHA1 aa19364ce6f736fc0c11a4b54edc171e2732c542
SHA512 c2f84c5a99e8dcb69346d8999775e1f9eb6b88a8900156b90b70ef41ffb19a010f659e8c0f6e799c9f02e73b345f6868ab94d150103b97984820347a525bc5d4
SSDEEP 192:rrwlsGWkMDKW291YTmxz5H+ShXE5Xdhl/o6RKZmaJFGB0QcvUiOaa80fA20gp7HS:SBqy13pZEt/ImOwB0Qcvdi80ksHOfaW
TLSH
T18362C089271D20334862F08F7AA9771B0694F7D22B939630D939F4B50B46E76BF0230C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

journal

Path /data/data/com.xstreaming/cache/fresco_http_cache/journal
Size 212B
SHA256 c54fb93c741b9d85a2da59e0badd3b516cbc934bdceaee67baf8729f6bbaa14d
MD5 6c2708aae85855fe02b814ce01d805e0
SHA1 19ad9a0f0ecdc4cfd4b82795deccc82895dfa57a
SHA512 63f0373ac219ecc1edbae245b7e79fc9d9307ec11c5f19db6881a36c07807803040ec9b4203b16e5dba53dd2564bdbc95a56ebf1fa044e5d5915ae6bcedd8f05
TLSH
T137D012F2501079C3DB83BCF02612394FB1B6787482F6422B44086519C803C02D210860
MD5 SHA1 SHA512 TLSH

Submit Download

journal.tmp

Path /data/data/com.xstreaming/cache/fresco_http_cache/journal.tmp
Size 36B
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
MD5 SHA1 SHA512

Submit Download

ua.db

Path /data/data/com.xstreaming/databases/ua.db
Size 24KB
SHA256 e16544bf9795df2c7113b8139d54c5b99d10b992aefccdaf50eb7cb39fe915d6
MD5 822ca44537adddf60442677681611b46
SHA1 269a83633db4a7cf35eace1c5144d36215ba54cf
SHA512 9ff4beacce48ba387807f3158fc7b0f2df06f21d8efd805a2c397fa39d313aa0ba2f9eb202b673bed4fad730611c53e7d89d00a33febb66322b0e83ae0572979
SSDEEP 24:TLcxqRrL4PDiP/b+cLglJWcKbEGSP/I/GQ:TYIpwDeT+EsebTSP/IR
TLSH
T1DBB2E2C7B51812A9C2689137CC67A2211A7C5D1E49BE8BB65AF100D2FD97610A07CCAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.xstreaming/databases/ua.db
Size 32KB
SHA256 9dd2fbaacd9697da7c72674c73e9358cf871ce5042f3476fe57b5e1e9e199ce7
MD5 5ee23ddf4c5e4387068dc5f8e2e7b56e
SHA1 d9122c84263c8ea5020826641c5827fa7f901cce
SHA512 16ac7f89518b4faef461dfe3589d8b4919dd55b6cdc31721464d3b6392ccdb4569e53c58859c7657ec14ad0bee3315e321f73146ae398767d2aec70270d4be39
SSDEEP 24:TLGqRrL4PDiP/b+cLglJWcKbEGSP/hv0GZZ:TRpwDeT+EsebTSP/hFZ
TLSH
T1D7E212D7761C22A9C3589037C81792211A7C5D1E5ABE8BB65BB104D2FD97640A07CCAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.xstreaming/databases/ua.db
Size 36KB
SHA256 189784696dce0b3f39090e02c2f3382d601f68716f89c1a14c5668d43261dba5
MD5 b95f41f3cb8981cb15dcbff678d08c13
SHA1 69cb637a722b27a94bf62c4336c1cef36bd0b6a2
SHA512 0e668a61344e7f2e0875c0dd943fe0d2c05bcc0d4c910b9a0354b0470d7c92215d64412c45f757eda86d8f53af930a1af00849c6f880742b90fb7609c9ca45e0
SSDEEP 24:TL2qRrL4PDiP/b+cLglJWcKbEGSP/sRFwFvFrsi04sh4AGS:ThpwDeT+EsebTSP/iFirK4s6U
TLSH
T12AF268C7B51D2295C2789032DC53B021167C1E1E8A9A8BF2AFF114D1BC53A51706DDBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.xstreaming/databases/ua.db
Size 32KB
SHA256 df0de3e4209cce3bda8118cda66719742e256558f30ed915c7fd84f1ac02953b
MD5 249a98504671481bec48c47245d9e5f1
SHA1 2147ed02397cf29668e6cac20577445cdb55565d
SHA512 3299feb31739a04a41b8208a1cda57c2ae7dfd13fc9a0983063f0c7b47c0e867b00e9561ad2b2ec00a379e2784a08be818628ecc7edfb111a22475e40ddcbb12
SSDEEP 12:TLsxSQwRr+o4PD65N5PPJhb9gBcIkJbglTSF7VAWWpNtI7MJ+bvRmBEyPbP/WE:TLmqRrL4PDiP/b+cLglJWcKbEGSP/W
TLSH
T1D0E2DCD7B11C1398C21C5037DC6791210A7C2D5E82AE8BB65AF100D2FD97A00A03CDAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db

Path /data/data/com.xstreaming/databases/ua.db
Size 40KB
SHA256 521d072de7a8f234549b0dccba8513932d5801754a7c0d122a525b6af8507041
MD5 fd32ba7f3e116fe7ef7c9c812ef9d535
SHA1 e6012b6364408fc19e28363ae54360bc01368bd7
SHA512 443b99c679baf6fd27db8c3c3a916ae1f32438f59b09a9540f21c7a13d400bf7d8a542db356e3716add5c42e2668a2e459ca477d0041aae4d48869a14340afe3
SSDEEP 24:TLmqRrL4PDiP/b+cLglJWcKbEGSvyRFwFvFrsi04sh4AGb:TxpwDeT+EsebTS8FirK4s6
TLSH
T1130333C7B72922A5C1589036DC23E22017BC1E1D4ADA8BB3AAF114D1BC936416839DAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.xstreaming/databases/ua.db-journal
Size 16KB
SHA256 f1ad28257cadb60888196659d20a4add725e7247c12c5b44ea84532fd8be1edb
MD5 550bc3ecf62ec72d524eef621810ebe7
SHA1 3a744c6d89e93f24ee7efccb68df0745f85a1c90
SHA512 ccf7b4b0a62c0b83cd010f1fe1c9b0933dc66e218df77a6ac0a7f5cd944c672119b52afa9a5482c1b58b3690ddb628b8b1a721aee8c6f012ac2063aedbb675e1
SSDEEP 24:7+t5VqLmqRrL4PDiP/b+cLglJWcKbEGSX8:7M5VqxpwDeT+EsebTSs
TLSH
T1AA72EDD7711D13A9D25C5037DC6391201ABC2E5E86EE8BB61AF100D2FDA7600A03CDBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.xstreaming/databases/ua.db-journal
Size 16KB
SHA256 737b7116a83c5773bb61abc822dbae38b4014c1c25041bdc453b5f2464f4788e
MD5 dc270d567cb598edeee9e27cbf44c67e
SHA1 090d239c07d274a89ea9735fd5ca313770214374
SHA512 6f48384cabe866179b81ed84176de62e3ac95b59b7b9e902c839bc34c28532006d1551784990a6b23888f99742e5dc0dfdb19c3bd422e5087b2c6d273474ff39
SSDEEP 48:7MIJqhpwDeT+EsebTSBqYIpwDeT+EsebTSM:7NJIpwyiERbWBopwyiERbWM
TLSH
T1887201D7B20C13E8C2185037DC6791211A7C2D5E96AE9BB65AF100D2FD97600A07CDBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.xstreaming/databases/ua.db-journal
Size 512B
SHA256 38609b4000843bd962ebec1057129f1f1b151e5fc7c502e0ab4cb00798867299
MD5 7e94608a937a2861dade45516ddaabe5
SHA1 47b4921ca3fbc70ba598e2997dc980235a82ca18
SHA512 f650b188cbffffecaa7f4fd925c0e2e4f5055244e9f04d83795f47aa5ad488605cfccf00fe48698ca52f96c3c8c20fa241ef52778357530326e3656eb476dc8b
MD5 SHA1 SHA512

Submit Download

ua.db-journal

Path /data/data/com.xstreaming/databases/ua.db-journal
Size 8KB
SHA256 a7f664f6a3572f526461743d31ec5e0741c472b69a7d3c98d9a3fb1e3fea560e
MD5 cee04c531ba7bbc7aa327be358894179
SHA1 6ce6bcd618c553fc183449a18cda010aa7c1bf8c
SHA512 e40a67e9761030cac095da1e266e8b1d88a1d46ecccc8b442627a581de0ca2d8975746be9371afdc103873e920db347ba5ea91647895e280d0a4b3a7d09e35ef
SSDEEP 6:7+/l918Hn10TWg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKI:7+t7NTWqLiuWd7RmBEyPbb
TLSH
T1EE02229867800812C819677790F4C3C00E00AB188262CB27059008A8BC0B4CCA8A4D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.xstreaming/databases/ua.db-journal
Size 8KB
SHA256 e192d00f46ea8834cf07576be02a6dda62cefd69e72b083853128b64d69aacf1
MD5 b9d8aae806807d01f285716825cc3ed3
SHA1 50539793b00980c00d9577217508fc1af02c937d
SHA512 14aabf30cf93af837a39b26efa43bfabec5e4893bc51f91cd65d63ce2a1a22c0bc011501de191cb8052a7294e9c3d95964c75ce9324cbae192ce5ae696897d03
SSDEEP 6:7+/l9bFPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKOt/i:7+tjqLJdKBRmBEyPbP1i
TLSH
T1B402C08E63801813C01D677BA0FA83F09E13E716C333DB37055108547C8B6CCE898D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ua.db-journal

Path /data/data/com.xstreaming/databases/ua.db-journal
Size 12KB
SHA256 54cc039990881169ccec842201a874bbe8ee865f661ce8a49d6d92ac5c6cdb3c
MD5 4d9fb94683067b37158209180b45529c
SHA1 c8b0ee9b1f1d7f765bac25432cdb5d96748ab843
SHA512 ea5073a95e7ec51de70dbbfc9e3d856c57668ba6c60cb0066b4ffec5df714290a63b8492a14de94bb87dc6c8558fb3c06767a745126cf3baa832b46af91a260f
SSDEEP 24:7+tssqL2qRrL4PDiP/b+cLglJWcKbEGSr:7MssqhpwDeT+EsebTSr
TLSH
T1B242EDD7B21D23A4C21C6037DC6351200ABC2D5E86EF8BB61BF100C6ED97A40A07CDAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_zero_cache.db

Path /data/data/com.xstreaming/databases/umeng_zero_cache.db
Size 20KB
SHA256 4091847859c3305cfd08720e70062218145f6915da4f0b0957cdc7a53d739951
MD5 2e3a6269377a80a7da4fd9f799e6885e
SHA1 2ac693a11cb10b63e5faef4000835d350596d48d
SHA512 579c2bc564ec4c5a4fc6da0008db5ce952dbcde06845d730596360f09ccd35f89d8be207abfd5492ad18b9a55c135d340ca0201cc39dee33826a8c75cae3eb54
SSDEEP 12:TLm0WyNTSFbyEKMFUvL9TtL4+qRmBEyPbAVOwG:TLJ9M2xTtLlGSEG
TLSH
T1B492ABC7A7801386C60C45B2D8BB73A10DB0561EC391CB9769F114809C43AC854F2D3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_zero_cache.db-journal

Path /data/data/com.xstreaming/databases/umeng_zero_cache.db-journal
Size 512B
SHA256 f35656074d0aba71b5f501c06ecc4143bf89d1175e1f1b215722dbbb49a197cc
MD5 79135dea599eacb0cd1f86280ae84d6f
SHA1 53beb1ceb521d1020a9f41fe42cb731969707b38
SHA512 bab16a5ed07425fa867e6fa5122de52d3ac12e5b648291eef4e51025b6596d8fe11a7e161a06669684156cf2cd736e5c3001cebd4c7ce03682cdba32d8950c45
MD5 SHA1 SHA512

Submit Download

umeng_zero_cache.db-journal

Path /data/data/com.xstreaming/databases/umeng_zero_cache.db-journal
Size 8KB
SHA256 b9e347557b4c72063e29120bb48b959ed9b83dbe9188e206483d6152bc60e52f
MD5 f50ee58ea634721c63a285d4e4922136
SHA1 d4c6e698209acd313377cedb7d812cf2bf97461b
SHA512 552ec2c9d45b05f3738b09c69606b1f691f3f193fd40737bca44a292456768c0093851dcbcd9bef7444ae38052093d1e8d617f12a9da6d499330d6eb833f118a
SSDEEP 6:7+/l9H4n1tJvg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKgZ:7+tRWJvqLiuWd7RmBEyPbz
TLSH
T14A02C0DD63810813C81E5777A0E8B3400F40E71C8AF2CB77155008A4BC035CCECA0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

umeng_zero_cache.db-journal

Path /data/data/com.xstreaming/databases/umeng_zero_cache.db-journal
Size 8KB
SHA256 76bbdb72f041930a58906d7f717b84b0d366edd7a5cb4dbdbaccaf21c6d517ae
MD5 1cd0d1742cbed467578b5e29affd612b
SHA1 352c3bd49d1a5e74ec71bae43f64d522f2e84382
SHA512 f9f73f116047321efb32f01ff9e35ba25d42871a38679e9943d3ae837b2d4682b0238df00fa0a8d92e378faa0c46f1474a926d60838f847e0ca09574e5d89605
SSDEEP 6:7+/l9CFPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK8vkl//KM:7+tcBqLJdKBRmBEyPbCXd
TLSH
T1C402228873420813C01D5F7790E883945E10A7349323CB27896008556E026CCB894D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i==1.2.0&&2.10.1_1790729978693_dW5pZnlfbG9ncw== .log

Path /data/data/com.xstreaming/files/.envelope/i==1.2.0&&2.10.1_1790729978693_dW5pZnlfbG9ncw== .log
Size 1KB
SHA256 475916b2cdf5b18106f241b866f1a5b5106567418fd679c3879f22a6495b26c0
MD5 3f0b3b75a2e5da60e8fef24c4552228b
SHA1 398adc57d8e93a94af243c64e6c3e0a08952dcc9
SHA512 f05f29315097f581588491e9f385a57e39745db85c28450f28e4845d89af07faf2ef051e0d4c0543a9b40f8cd30fff882fdd87120defad75fdffc013e2e7a17a
TLSH
T1443119DEEAA1E52D0C5148397CA7C09CC66673DC2A2F646A6017360193CF1C303057C3
MD5 SHA1 SHA512 TLSH

Submit Download

t==9.4.7&&2.10.1_1790729978805_dW5pZnlfbG9ncw== .log

Path /data/data/com.xstreaming/files/.envelope/t==9.4.7&&2.10.1_1790729978805_dW5pZnlfbG9ncw== .log
Size 1KB
SHA256 ebed81d105dbab9855698a9ac1bd1801e4924054c6c20fbe67ae1bd76df0a322
MD5 d2736a3d7c26ab3412bfdf45688a9e6a
SHA1 7c9bdf98c79ac6c2fb13e1524560d9feaf580160
SHA512 edbe99a524305ab23ac3cc5a31fc399896845d9d96ccadd08edf8880f4693339a4956e7bac739468da8a57275a414b30d52cc5a53f4825087dbe08ce40da2387
TLSH
T11321BA82BF80266944AD67162C76443046222D045B7F15FA8133A18D51FD8837383A27
MD5 SHA1 SHA512 TLSH

Submit Download

z==1.2.0&&2.10.1_1790729976808_emNmZw== .log

Path /data/data/com.xstreaming/files/.envelope/z==1.2.0&&2.10.1_1790729976808_emNmZw== .log
Size 287B
SHA256 62b38dc8de6fae93855d5f29cf7d279911dead68301180f47ae426c3041e10e0
MD5 fe5c28c59fb9d47d7310664f16818eec
SHA1 3d84439a8b7925b437b90b8964ea5055bf8c22bc
SHA512 2d9e8d3a6e2a13eb01da0363e58b0892ee7b0b42a417938145373e2c66ed9e96aa048c515dab56103e3323666198a4c16ec860728da1d2ed7bec5cd80c484666
TLSH
T124D0C22ACBD8229F14F89A247A8080845902B129840F502A96A5E109648F813E376EA5
MD5 SHA1 SHA512 TLSH

Submit Download

.imprint

Path /data/data/com.xstreaming/files/.imprint
Size 91B
SHA256 be0f94fa47f6ff685950c8800e1671118c69931e50ebd25d74b398c0d9cc7f71
MD5 75b8c549af2f4474278d80dd63d83ba6
SHA1 f01d8058f7aa74a048ff1cd13d84c377fa507e07
SHA512 f831450ee29ddca5959d6fdb0c7ec6655eb5e3e8435cecac6cc78b9bceed6b16dea2aeb43292e39a95668b7b6469742ae0c55b874074ac54c4d97708d0829edd
TLSH
T166B012E03D2652B1554D491C1AC4CA1152F3D10640403338791090605227944761E214
MD5 SHA1 SHA512 TLSH

Submit Download

.imprint

Path /data/data/com.xstreaming/files/.imprint
Size 198B
SHA256 7bf55af0514aeb833f8b125de230d39eb772e59237c98b35bc4402afea46fd92
MD5 f6b13035710b791ca0b89f76ab07829f
SHA1 0a5c22620dde49c539b0dc007cc866e9ff414b1f
SHA512 8d85e974521b38d3640d581c39b09c90223a6031ea7162157abea564993c108bdc6eb35dccce8d192b5c82e1f7100462030b4e3d08894eaa4a8633f5588a8131
TLSH
T1C4D012C0BDB151A0E58AC21506F47256044DB46798C0556C9D50F181031B849D957D45
MD5 SHA1 SHA512 TLSH

Submit Download

.imprint

Path /data/data/com.xstreaming/files/.imprint
Size 295B
SHA256 559022162c9d2fe06bca62d9205ea0ab8be05c426bda2f2239a84b57053b6ce0
MD5 c1670fe6657e04b06ba29d29587c260e
SHA1 e979d6bb971baba5a11370423fcc33a9eb564893
SHA512 006d8878493cc22d49364d3e710283df6b9d25b1f7b1fea4704c5c9a1355a64a728996eb940aa31759e07c31e78fa4a1256a4fb4c80f19589147a312e0bcf290
TLSH
T1DCE0C2C079B042B1F806C30005EBF7451158B62BDCC4806C5E91D4D06737808D596D5A
MD5 SHA1 SHA512 TLSH

Submit Download

exchangeIdentity.json

Path /data/data/com.xstreaming/files/.umeng/exchangeIdentity.json
Size 162B
SHA256 381d17e3b8a9507148d1ea3f347f6a12543ddfdbb17c9597e5d0c529ac211141
MD5 8651e2f2d363d2a6964328eb51c5c2a7
SHA1 b8865663bedde318f5fb7e2184a2dcbf92edd435
SHA512 b51da1941d7964eec58580a27e3194fac856891ed29668a627818daf0b56ab4be3395c08c1247fe0e318e3c24549c5037dd94371f90fbcb870d5f2988963ffd4
TLSH
T19DC08CAAABDCF05A099A6A2E001188592B43706C80976460D1E0B21E508F8F31BB2A89
MD5 SHA1 SHA512 TLSH

Submit Download

exid.dat

Path /data/data/com.xstreaming/files/exid.dat
Size 60B
SHA256 c24e09332efd4fdd47f172dbba40c74d838695a77f6b718a904bddcf20f1ea10
MD5 3c1c5495d2273c603c929c75e652e137
SHA1 fa6ccb453ef0b430684f2b8d1bfc53b0d3ff9c5f
SHA512 3a8aa7abe0afe038f98a1353ad5f2aff4cf668e74e519b21cc780a6cf37ac513fa441ec198563b5b30f13e8215c7ae1ba8f7f791592fe729c86aaca472a5127e
TLSH
T15AA002CB5A90713F902236DF09858E1227177276446160546A646514809A882C349A16
MD5 SHA1 SHA512 TLSH

Submit Download

umeng_it.cache

Path /data/data/com.xstreaming/files/umeng_it.cache
Size 285B
SHA256 d73013afd5aedbe437d5c6ab675db929def21ae7d6c63092c44b19eeae4b044f
MD5 304af5d97bf6feb5682ef2ed05f98cac
SHA1 0c65c4d23d6982de9b4859105fb5137b464c4bb6
SHA512 a5b1363069f82d39861f7f0c3b1e17c2f4041cf88efe75a645b8d0dfbe7fb5f31f3ab59d65211d2624eae030cd197c9e9030eb287f92e23a105c561879b03a0b
TLSH
T1CED0C71B42BC1126F91E56D136FDF342DFCC7818E0E250AC5131DAC75C15A98DD5CD18
MD5 SHA1 SHA512 TLSH

Submit Download

umeng_it.cache

Path /data/data/com.xstreaming/files/umeng_it.cache
Size 145B
SHA256 e12a373d7ec24f6f272b923508eeb2a86f6e32d94c16c9ffc4aaeade57ef770e
MD5 817b1f12ce88c639f2b688c394039029
SHA1 1329940350ab97f8dd26b70d0680220890dc7c9c
SHA512 a87aaa61bc80393bc25800dcbc3eb1c95a619f30d3edb7ced3b8869536b939bd740fd5d1e07d11a79a4c87aa491919680b2c6c092d0ccc6f08e1253ee906a5ca
TLSH
T16FC0921B42B81035FD0E02E136BEF282EBC83808E0E150AC0021D6C71469A98DD64C14
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads