f30e749a8fbee94bd0c10fd4f34cbf0b46468896b52bbcc077d55b5641c4e732

Analysis

user interaction
yes
max time kernel
24s
max time network
152s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
30/10/2026, 01:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MoonlitV2.apk
Size 18.3MB
Sample261030-byvfssvx4j
SHA256 f30e749a8fbee94bd0c10fd4f34cbf0b46468896b52bbcc077d55b5641c4e732
MD5 695819bc787e3358d6c3bc339086e91e
SHA1 afafada975e1f2d7aa0de09ca727dcd3b16c7d57
SHA512 4702628d1afa0df0c3f73171fbb24d120dbcaa538dc65eaf1c37c8c2b549aaada5b16f47c9757b5de9c4148d049bcc22f6d1f0ccc5a03218883b961cc1104121
SSDEEP 98304:zo+9CXVhAmiotyoM7SRIxjK62y24su/oEzcCQ1pdTE5vVXDguJQBg30vhjIcuvtX:zPyVubXsSzDQ1pdTS2qQWrcXuf/fZpr
TLSH
T16717AF02F3429D31D49CCB366CF68B857B316A557B439B172044F6BDFCA36C9AA942C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 29 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/apex/com.android.wifi/javalib/framework-wifi.jar	4321	dev.moonlit.quest
/apex/com.android.virt/javalib/framework-virtualization.jar	4321	dev.moonlit.quest
/apex/com.android.uwb/javalib/framework-uwb.jar	4321	dev.moonlit.quest
/apex/com.android.tethering/javalib/framework-tethering.jar	4321	dev.moonlit.quest
/apex/com.android.tethering/javalib/framework-connectivity-t.jar	4321	dev.moonlit.quest
/apex/com.android.tethering/javalib/framework-connectivity.jar	4321	dev.moonlit.quest
/apex/com.android.sdkext/javalib/framework-sdkextensions.jar	4321	dev.moonlit.quest
/apex/com.android.scheduling/javalib/framework-scheduling.jar	4321	dev.moonlit.quest
/apex/com.android.permission/javalib/framework-permission-s.jar	4321	dev.moonlit.quest
/apex/com.android.permission/javalib/framework-permission.jar	4321	dev.moonlit.quest
/apex/com.android.os.statsd/javalib/framework-statsd.jar	4321	dev.moonlit.quest
/apex/com.android.ondevicepersonalization/javalib/framework-ondevicepersonalization.jar	4321	dev.moonlit.quest
/apex/com.android.mediaprovider/javalib/framework-mediaprovider.jar	4321	dev.moonlit.quest
/apex/com.android.media/javalib/updatable-media.jar	4321	dev.moonlit.quest
/apex/com.android.ipsec/javalib/android.net.ipsec.ike.jar	4321	dev.moonlit.quest
/apex/com.android.healthfitness/javalib/framework-healthfitness.jar	4321	dev.moonlit.quest
/apex/com.android.devicelock/javalib/framework-devicelock.jar	4321	dev.moonlit.quest
/apex/com.android.conscrypt/javalib/conscrypt.jar	4321	dev.moonlit.quest
/apex/com.android.configinfrastructure/javalib/framework-configinfrastructure.jar	4321	dev.moonlit.quest
/apex/com.android.btservices/javalib/framework-bluetooth.jar	4321	dev.moonlit.quest
/apex/com.android.appsearch/javalib/framework-appsearch.jar	4321	dev.moonlit.quest
/apex/com.android.adservices/javalib/framework-sdksandbox.jar	4321	dev.moonlit.quest
/apex/com.android.adservices/javalib/framework-adservices.jar	4321	dev.moonlit.quest
/apex/com.android.i18n/javalib/core-icu4j.jar	4321	dev.moonlit.quest
/apex/com.android.art/javalib/apache-xml.jar	4321	dev.moonlit.quest
/apex/com.android.art/javalib/bouncycastle.jar	4321	dev.moonlit.quest
/apex/com.android.art/javalib/okhttp.jar	4321	dev.moonlit.quest
/apex/com.android.art/javalib/core-libart.jar	4321	dev.moonlit.quest
/apex/com.android.art/javalib/core-oj.jar	4321	dev.moonlit.quest

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	dev.moonlit.quest

Enumerates files in the device's shared storage. 1 TTPs 1 IoCs

Queries the system media store to list files across shared storage, letting the app discover what documents and media are present without opening them.

discovery

File and Directory Discovery

T1420

description	ioc	Process
URI accessed for read	content://media/external/file	dev.moonlit.quest

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	dev.moonlit.quest

dev.moonlit.quest
1⤵
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Enumerates files in the device's shared storage.
- Uses Crypto APIs (Might try to encrypt user data)
PID:4321

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

File and Directory Discovery

T1420

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

framework-adservices.jar

Path /apex/com.android.adservices/javalib/framework-adservices.jar
Size 326KB
SHA256 c1a4b59ea8d2fc38cccee7f0fb32521c8fb2116b3a01818467b7710c5bf86d25
MD5 a7a344679019f08d96a869c476a0e8ba
SHA1 1c89d0bfef45d3ea88ca99a4243d0ddf613eb5fd
SHA512 ce6bdd4a2ed39c01aa877d6d1cee93866f754988ebdc368b821eea90ea979475e497db35ff2d1be03abc5a8f0d496ed9239329c3d3a0acc741b0d68879985270
SSDEEP 3072:x6SLBwMdExexVWSq6dO6vnBCgxwf0X4kPXARN4pq4h1wP/mEkdDyAaa39eHhx6I1:x66hds40SXjv3+0nQRM0PO+LUJWrBF
TLSH
T1126408C7EA811EB3C86D8A3A19BB47213B3ED4402367CB234194D5B53DDB7CB2E85598
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-sdksandbox.jar

Path /apex/com.android.adservices/javalib/framework-sdksandbox.jar
Size 64KB
SHA256 842233dd46f31abddaa1fdf001699860e08b3697c1eeb3bfa8d3cd51c97f01b6
MD5 58f6163d1cd7242515348884bbe22618
SHA1 0518669b850b758bae66c4ff9651d4401716b93a
SHA512 04839a4ec9c3cf3dd892c3926ad2b823d7f38b97240e90b81c87201452cc8af4eb65b7ef9447ce58858617d7a4fe3f52177d56a01b8ebc74de4b3a8a10687db6
SSDEEP 1536:/7OxoZrS098f84ZoaV0luV9IlEKTB53BqGyGjDXNCQEMnA:/ixoZrFa0luElEKTXBdyGjDXNLA
TLSH
T166530903A74018B6E9FD533A68AB07059B31D3918237C3931654C6FABDC27CE7EC599A
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-appsearch.jar

Path /apex/com.android.appsearch/javalib/framework-appsearch.jar
Size 169KB
SHA256 daef8bd66a572bd090ec1a81f887c2819b04d5d521948a6d489cefff5447fd4d
MD5 a0c83d2a1438a0a5b9ad3639e397979a
SHA1 d663f27db145c7df744ba8e8f3356686efea01c9
SHA512 7ee7eaebfd8b4f8bf10988be81a9d37378791e1d6ddfdcecca790fc143d9e17af5096dc5ba8380cd5f8c58fd6cf0900fda44457f2709ed499f831b919c2593be
SSDEEP 3072:MBhtb+UUuW/6nr5lc/S7CycPmT6IislR+B4CCDyyZGqJ0sQsrRl74V6/G24U2544:Mfw6S6nL6qCzPvfuAQ9i
TLSH
T13F040902F6CA9C56C8AF423A60FB1315A772F5443356439B5A0CD8BD3F877C36E8265A
MD5 SHA1 SHA512 SSDEEP TLSH

Download

apache-xml.jar

Path /apex/com.android.art/javalib/apache-xml.jar
Size 1.1MB
SHA256 72fa596bcafba7f2558124f80e350f70a28eb2e32b95e7bbdb7decae60899954
MD5 704b06ca5fed180a97fe803fb9e1d289
SHA1 2d349c60c3cd9d828b89ad366de882aa3e7d2db0
SHA512 dca993c8a59b19d78020cfdc1ba3b0da93d6837c5b7e072ec917217a29e6797ef7d127782719c61e67f039c0b5a6ad22baf284cd3726203fa224df7673b3f372
SSDEEP 24576:U1b9IEZusrjYEUofu72SzFgXxntKwCFPkuR7cb9:U15IIj1fuPzFutFIPkuR7i9
TLSH
T1A5458D0AA9868E37D4E80BFA50E3070C7331B51AD79743978048CD75FDA32F96AD7289
MD5 SHA1 SHA512 SSDEEP TLSH

Download

bouncycastle.jar

Path /apex/com.android.art/javalib/bouncycastle.jar
Size 1.4MB
SHA256 bfa6f6e81b5f36c50b06bd9db33398f111ee90a43c9f1c1088a6eaea386d67ca
MD5 9b5ace8b5a362e5b6d3cd2eade413d32
SHA1 128e17dfbab8444afa6aee0513c8e7bfb8c6089f
SHA512 67948038a6d2a4d8bc5656681b37f4282ca8ff47a7de9602dac9fa6f6d383f366460381dd0168dcdb738056f50a054cbfdda226d5af90f405299e549bdc8d346
SSDEEP 24576:PW16JMcjQjm5wsRrr6UxIiaieV6sCLhmaJZC8Ob:S8km55RrfLhmaJZ1Ob
TLSH
T1B3658D03DB414E36C4DCC379A8AAE7557736B6481383476B1D49B1BABC437FB6A802D8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

core-libart.jar

Path /apex/com.android.art/javalib/core-libart.jar
Size 558KB
SHA256 f8446de0652007eccd8ef142f772aba8df7c728d07b7f66319af5cf9ab1dc646
MD5 40fd0aa0d6547dd8063285fd04b67fdc
SHA1 f02b78f775e97d5b87722831a29672df6cd89c19
SHA512 f9d40eed10fe3093646bf3c5c34359f20c2a63ac554b5de069dad76ee71ead5a1544a176e4a1275c13638084a6096691cfc6a0fca1ac6a263ea14c624c8dffb8
SSDEEP 6144:LWrUtlufApF2FGUJFTe3IsIEgBsa8o9g9Oap+4ec5SXYw43ptAkKaFkxjafL0Ycw:LWAX2F7sJIea8o9g9Oap+4zK04/u
TLSH
T1F2C46B02DA854B27D4598B3A08B7B760A731F19C53C3A34305A8D93FBDA73E657835CA
MD5 SHA1 SHA512 SSDEEP TLSH

Download

core-oj.jar

Path /apex/com.android.art/javalib/core-oj.jar
Size 5.3MB
SHA256 26f2a49dffe39e31bf24520d07802e1409526c0ebecf6426d447f8fa3101e9a0
MD5 e86c9eb7418c41207df5641bc0de3f6d
SHA1 8a9701f74dcc4fb12c3ff281893c0b4fb72238b8
SHA512 f45feab5613edd0702bffee9b998f4f9110ec6e0d2a28992e9439a57374c198df90be66ae85022f758608270e81aa84af37654e5f29621143cfc4ad9da034703
SSDEEP 49152:zsYn7xMlf9a0RT7B4RmQURzzhJqJBIfOF4K371O/Yzz24g+34jbnGNuPA:zsy7xMlf9FP+Bcit
TLSH
T179469D53E6A31F32D06CC33784F34B95B73AF1A92B870B838404A6746E537E67E561A4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

okhttp.jar

Path /apex/com.android.art/javalib/okhttp.jar
Size 395KB
SHA256 f6365c62b8b92ad4d9860f0c480e567cb5b9aeaaae21994f939bbe0b8d1e3d1b
MD5 d4f5770b2a6a4bb04fd537f8814ed1db
SHA1 2a725cc27793e9c91b22331d305cfc78d938a89a
SHA512 00b27ee117eeb3cf30c6ade1a9be8d6ddd900a20c0ec0b5bdcc9718d5759489206e835d86d53317a95f6db87469631e82e8ce0e4be3b3a4a076c9b3dc81a241e
SSDEEP 6144:IkDcyfQEmrq154kFOZ+SY/j2GBFDHPiUA25mnmRILuwQJffJC/K1MkUM6y+3+BWF:PQlrKgZ+SY/j2GBFzimwCBUk+uAS/y
TLSH
T10D846A5BDF524C26D5AE437805B38B16B339E6CC5307C7631148E574BE933EB6E8A288
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-bluetooth.jar

Path /apex/com.android.btservices/javalib/framework-bluetooth.jar
Size 1.1MB
SHA256 910aed1aa1a636a17790c6ff6e3bcd3acf8b162deead4da34b68002279f0a18e
MD5 b7d6edbf53b3606f4d41a7019f4439f5
SHA1 88b1703df8546952786a61abc35cf5c3883fe6b6
SHA512 308b725926b5042320cfd42a307edfdd10b3de9a1fad9d7d894e4773577b334014dea9b1bcc5e8e957a0f221fb2adb841e19b445353adc66624d73a32fecebbb
SSDEEP 12288:PPCNIUMNLOct4xdJWP4u8YboI+03zepPI9YWHKINm+C:P6g0a5DYwPNm+C
TLSH
T16A353993EFD86EB6D4ACA1BD31A903C4B73299966A3707030084D599BEC72C35E9C1DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-configinfrastructure.jar

Path /apex/com.android.configinfrastructure/javalib/framework-configinfrastructure.jar
Size 137KB
SHA256 7bff466a8417cb8690791ac9dffa8d5d23ca57fdb42aa7d22481b87449ba74db
MD5 a31ad083fd47c76a53adf884e2ae7e2a
SHA1 f1a954ff51d5f6878d9337e0324cf2b574ec1423
SHA512 1d8c904c89f5986067bcff8c9bfc79ba2e68312afd313530091c5c95c475e6fc90694cc2156a4876910d18835867ab3c5217ffe9e54f3b36f53888f418fdcfcf
SSDEEP 3072:kOW5ggA7Yi083+T0MgsHJCnJhbOPrQH6dfk9EIF:25gqZ83+T0oJCnJokh
TLSH
T12ED34350BD5A5CA1946BFB3E6C3EC0400739868A38D1AEF517F545790BC6AEC43CBE29
MD5 SHA1 SHA512 SSDEEP TLSH

Download

conscrypt.jar

Path /apex/com.android.conscrypt/javalib/conscrypt.jar
Size 455KB
SHA256 51e9b229e1e536b932558ba7f14a8d6033879acfce32a0a79e93d3c2519203b4
MD5 16c1da3ec5cec2cd8a5401f9f16876d4
SHA1 cde995755c068f6ed7f0a1f97c52fc47874360e2
SHA512 dd57c414c6eecc15ec0494544f6a9157d9d0a84ed875ef3f92729b8621abf0d1e8d60b18cd3ecf6467da9cc50241e3038186d3cad4ee1b50ffafd1522c8c9c1a
SSDEEP 6144:iLXEqq8dv/Q8jEtOlyuHuyxiwUrKACFRQIy/A6E0Bvz:iRdv/Q8jEtOlLGHFT4BWb
TLSH
T1C9A44D07CA924E27E4B9463964F393113738FD98A3438B975504F678BD43BE37A822D9
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-devicelock.jar

Path /apex/com.android.devicelock/javalib/framework-devicelock.jar
Size 26KB
SHA256 94928a87282a5a2375ed472291460af08c7af156497a3e80e7c72a90bf4102c4
MD5 7c151936d903263d1d3bff36799f424f
SHA1 e2540c77abe6752a7667add4753099e5a687c246
SHA512 44e1f0f91d4e0e45437cfa81e1a9679e4b2b082d56a9e8d5239c78588c54cde7f2ff166ca0705ba71b8fd8e40a5d636dd61a2e284476eec5f3840042b714b6ed
SSDEEP 768:YYt8lGmk2W4/xYz2ecvVm6RudJBj6jybbG:ZtWd2KVP2XOjy2
TLSH
T14DC2C903DB204D27DCFFD67A5CAB03104FB1C6691A1B038B1516E9E86DDA3C78E52AC9
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-healthfitness.jar

Path /apex/com.android.healthfitness/javalib/framework-healthfitness.jar
Size 509KB
SHA256 0b43f811dcfb0ebb50d0b481d6d270b96c623e3eb942773a71f67c6f8461765f
MD5 36990390a01187758f08ad3f459b5b01
SHA1 cc58bf2d3d14d55f900f421255ce2569dfa4c4f5
SHA512 a5bfcc36eada47f334a83e3be5a276568b1219568dc22fc048bd7a7652b1204dde97a41bfc828ff5fac95e0bbbc0bd3c3e34a8f9b6349ded17361fdbef75c622
SSDEEP 6144:zQ4vNSHtctnEnQaKHLLf6v91jR529eLKyHeYE6MAICxCI:ZvNitctnEQZ+9BISCI
TLSH
T1E2B4E783E6821772D528823924BF42463B35E254E31B8B97614461F9BD333CF79992EF
MD5 SHA1 SHA512 SSDEEP TLSH

Download

core-icu4j.jar

Path /apex/com.android.i18n/javalib/core-icu4j.jar
Size 2.8MB
SHA256 ca57085a574661788d93d614a2fb4c8193e2a3bd11181fde7739e360cad3005f
MD5 2aa501d10e8553fee07f31cb72d132c5
SHA1 d78f90f122fc461b52085958d3742eabe8da6547
SHA512 55ef7f855f1cebb574f5874acf627d0b575dcc78c55fa0fb29f86647efcc37130c63355f047bab9f1ae96b2038958ceece803a700daa362526191ff1805b84a2
SSDEEP 24576:/v67NhEIqT07mPFRml1cNcwZhWGBqKZRoBaDn5IWVYW2jqkqIjGWwMEX14vl5iRU:/y7mOl1YKLQDmW5ed3jGWwbXSri6F0e
TLSH
T1D5D59D19DA830A22C46E433A54BE4352BB31F6446B878BD36408D1E57FA31D7F7DA28D
MD5 SHA1 SHA512 SSDEEP TLSH

Download

android.net.ipsec.ike.jar

Path /apex/com.android.ipsec/javalib/android.net.ipsec.ike.jar
Size 683KB
SHA256 e53a3fb4bedad85ceedd41eb4500ceda0679a36125ca7091620e08a07ed09481
MD5 2511914a318983573733976067594184
SHA1 d87e1e62977fdcab52275403d22e5d61c23d88c9
SHA512 04cf876de97d267a2de9c876e4dc382f3d147b6f621bbe7722e3590ed415cb84333b5ae8e3d0d0c2c90a4df4c8ecba953ebc62859e43a5aab0c0eee44aac4233
SSDEEP 12288:mOxQoWbA+O2ZSddiszTWt+nWNc+rSC2awegI95RYLftdBmTnXppkHxm1:BQoR+M8fvhaQnXV
TLSH
T150E46C93DB814F13C868417B95FA43713BB1A58927539F870128E6B57F931C39BAA38C
MD5 SHA1 SHA512 SSDEEP TLSH

Download

updatable-media.jar

Path /apex/com.android.media/javalib/updatable-media.jar
Size 747KB
SHA256 3a95a47f87da082da5cd87caac80569853a34988cdc4c2f19565245233af9ec6
MD5 081b79d1a0e1f649f18ac2ce5e8c6687
SHA1 6daaf448fc67f5ed5cf4fd27ab268236e7c82cce
SHA512 d7185fd9f0f4f75168250f9ea18b3372ed64ccf593a9f7e59a2840cfcaaaa5f58caf1fd67528d221da626e8e75c1244414229f5ab0a07069ef16d329fa3271c9
SSDEEP 12288:CP2PKTRtL5rmCR83viT69SXxxyWMk1kpc/aGDJ+GiZ9Iw2l1XEGY:g8qNncRGDJ+GiPIw+t2
TLSH
T17EF44B236E856F23C8EE923494B9073037309A942B979F475124EFBD7C836D366997C8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-mediaprovider.jar

Path /apex/com.android.mediaprovider/javalib/framework-mediaprovider.jar
Size 76KB
SHA256 fb0bc659e1744a0bb75d60e809258ffffc3652e2fd38662aaa32ef514199f660
MD5 c467cacad12af09d262c57cc45423f97
SHA1 85143d2e037dde0fb908ada5611e81b14285cebb
SHA512 5d0c78e80037cbcffe67a03afed18d872af62e6f5b63e73a0406630665915a258d8783291f82f6d1923d5a515d4d7083fc66de107c3f570b7be8d4eedc1f8917
SSDEEP 1536:JFwIXhFHmNT9VnlZuldVhLhsi/yASRpI8k:bRU9VnlZuldVhLhsiWRI
TLSH
T103732922FE934522E97C663438FA4712AB74D6041223F357D60950AE7FBA7C68DC51CB
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-ondevicepersonalization.jar

Path /apex/com.android.ondevicepersonalization/javalib/framework-ondevicepersonalization.jar
Size 178KB
SHA256 61871aa107958d9c2f7cb949c6a1c09198273a265c5cdc83849435c61cf324b2
MD5 222e9040d440df80485c27f1ccc67aac
SHA1 7bd5dfce2322c1e0421d26ead1912ada8ab5db66
SHA512 45d658f5cabf7e08b16e73e6bf0a3f30138ea6bc1a773cb47182af6a2f1e9d1f922f6cbbc9b314c0c0a3a2eb6f03756e4857bd97b97cf2a0f68f52e97ea57fe1
SSDEEP 3072:VGN/7K50POCIx5Ksuk+uG8nhejrKyFhyZU7Z07dzbCvRX8fN3:YN8023U8nh27Fh0dz+5sfB
TLSH
T198040752FF805620C89F937A6CA79B017B32D08E67135797114C89B87C53AE76F8AF84
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-statsd.jar

Path /apex/com.android.os.statsd/javalib/framework-statsd.jar
Size 94KB
SHA256 11193f65a235bb7f03682bbf6cc6e3da73c92d977e0a36f452a95a469cf0484c
MD5 bac53c39e3b05b20c43337c8601fe2cc
SHA1 9e1b311b11664f8b71f3d1f9b352e6ff85c1470d
SHA512 b171187ff4a23cf11112f131003aa556f6516a85d083a7be228ce635d0637cb625c9f4bd1714814c7e56d6000309f67e45a0ff0f8dcbde4c23a73c9f95f809e0
SSDEEP 1536:rz8yizrIsEWkMuZt3bDt4031cdxtBX7dmN+83DsyolEfl/Avx5jbrg:a1EW4Z9D279X7dmECs6OHg
TLSH
T11B93E813FAC01AD2DCA9193975BB07403F70E70A2B3787534A80C9AABE95BCBCDD5585
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-permission-s.jar

Path /apex/com.android.permission/javalib/framework-permission-s.jar
Size 207KB
SHA256 753f557b1e79af71fde3cfa80342642dada1665c8b42f7a340b1ea05210d9dc0
MD5 a9c5171d09972adcbcb2533c1b2fce81
SHA1 3a179c612f2ab7ab0909fdfb2e96811a79e8de77
SHA512 40ab1e049ec6b982c5147eeb817769dcb236e847561723a091f04812c1f50135b5dee19100370a64beeade8c2a71433c48e91b4dcdf2346c114c9a727eaa88ad
SSDEEP 3072:sQb0fb6Dfww+NqJlZMTidGPhN23WrHu3ifS0aSyj9689n9brOUn1bQ5C6/d98Laa:sK0Dkww+kiTidohTdDW
TLSH
T123242817BA915D26C89F833928FB2B009732D14D2BB7D357410DD5FAADC76C69EC2288
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-permission.jar

Path /apex/com.android.permission/javalib/framework-permission.jar
Size 608B
SHA256 34dfd75d140b601d1617346e628d35d0ffe3e9c57e41449001ef3529d2cde4eb
MD5 e4edc50af9e1235448162f3d897fe46d
SHA1 1a252736307b9285566e90fb1229bc8465fdef31
SHA512 fdab00f980d8f6ac216b58f28bc0685048f3a8989a708b7d32f7f393d4810953b1cbd92a8f4b4b6979b8cdf615ea3ef8e3c0e32d376d9ca22713d07020369682
TLSH
T122F0DC85B3948973CF0147FC64AE4341E63EC05621136B078302E0304C813E16D0D959
MD5 SHA1 SHA512 TLSH

Download

framework-scheduling.jar

Path /apex/com.android.scheduling/javalib/framework-scheduling.jar
Size 12KB
SHA256 a5ad3f8db021142a8ba5666e4bc29fd163f553364ae5c30d9e660dd97cb31074
MD5 f08d322fa4870c3c15ad0013656987c0
SHA1 676dca80eed79d4d149de1fba4316072fa8dd427
SHA512 8ca58b26a92c3af58b69ce5a8784a11d1bd0cb0c43fb345322fedbc4d36e101e1f6520d5b5d5a930ff06d566cfbbc5e3a69021ea910b9c31a879e970a7ad14b8
SSDEEP 192:IMoGvoLlhCJY7grz5HynbNEDxxi8J2ONSi/24HZSx5BN2:IZX7Gz5HynEm88Ok4HZh
TLSH
T18F42A54BD3254EB5CBEC82FBD87E070A8B315A498783237B414DE4A2FE872DAD790554
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-sdkextensions.jar

Path /apex/com.android.sdkext/javalib/framework-sdkextensions.jar
Size 6KB
SHA256 e73f45edf54bcf93ffa20f70776cd2ddc9c853766e2e87c0f40dc9d8e05825b2
MD5 82d3511ca8f86f286a6f668983fc3df7
SHA1 a6ae726137e46c062252b7c7b03a33d7a3cb9f1c
SHA512 ab3a01892471037162c04f66689b18a980792e650d8d5c3d1bc858ea038adb83043af5c2a0c78ae9384715ef5d9992660f9c8fc9bc5e86a24e716eb78c4dd1f2
SSDEEP 96:BqEDyfvPXlYQbotwUgrFBS9GzIBDwZxzY3Hd62y1vcInk+Yx3vu8hOD2:BbefXmuUgrFBS9GzIBDIkWrnkvwIOD2
TLSH
T179D1B70BBB40CF32C7ACEA75C46F47866331D691AF4323034BC5A6945BC626B73E2649
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-connectivity-t.jar

Path /apex/com.android.tethering/javalib/framework-connectivity-t.jar
Size 392KB
SHA256 c725432d7e6084c8fc93473dafd3cbf1ad533bd9c67ccec441c767f2944941d5
MD5 f410e9f3c7bd028070040dd4c8cd5d39
SHA1 5d9c7b38a40929c2535cda8c438d4a17de30d622
SHA512 1d4450bf4343fa6f1d29598e0373cedb5321a85f4289a4e6c24dd933597a717371b7e863e91e54ea32ceae92a2d47878fc6312184dd2229cf82ce37eee50c5a7
SSDEEP 3072:mShTwAqtZmshw83sOKCiV2N8vRGycL7nup0hWbpIAZMWIwrI2JiAaMPqY5LUoKYm:meTwPkZUiVsy0LT1WIwM2JeHJGwjCyR
TLSH
T1F4844C17CA815E63D8BC863EA9F743043B3DA5CD2713C7472158C1B4BD6B7C6AAC6289
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-connectivity.jar

Path /apex/com.android.tethering/javalib/framework-connectivity.jar
Size 1.6MB
SHA256 c1cb8d0bfd1177aa7abad79af9e8cb5de7f39005a37bb8b29e23da3f4167acc5
MD5 af96eaa4e04947ad5eb9e1052b2c6665
SHA1 5be9070cd20c54091ab7acad273b1725cf119d3a
SHA512 a20a79866291b231491f43921c34fe9d73118cd7bd2804ddb0a6c412c4e8a287fea8c3ab2b8eebf43454fadc6857677672b8e706613766ed8275513dc1f69dc9
SSDEEP 24576:xbjWpT5pJsZjg932vuTJdBDcEsr+KpaSjy:KuBgsv6JdBDcE0+L
TLSH
T11B758D43A6454D33C5DE4333B47A032277316A8C6F4397E22A29E9B9BD633E726D52C1
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-tethering.jar

Path /apex/com.android.tethering/javalib/framework-tethering.jar
Size 67KB
SHA256 e5af73c493d50ff6de72cf2bf70c2eec42c8642ac990bb043d1ee7f06a287421
MD5 c411e4e46e8fc5d2c14718d26a942215
SHA1 b182ca99830d2b24a7319f9f3c5d0f73d0e6dbc0
SHA512 32f2ae1b84aceb129224bcb14ef8c9439fefc174f71503255b70f9975b3284e3e3ceef8c2addf44b6616c4edec2e1087e13bead69a166f7da786a122a09d0f5e
SSDEEP 768:ce7to9z2hm8oV85UuKkLJiP6Fawlc4ByO6Js5FZ09kQfPvAuN27f03UpEgHgX1:rS2hmrCjnVuqBWKsPvl2AUpEIgF
TLSH
T1DB630703A6002924DA9D477664F6172467F1EE8127278B57C29AC9B7FEC33D3DBA0680
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-uwb.jar

Path /apex/com.android.uwb/javalib/framework-uwb.jar
Size 134KB
SHA256 dede2e234f1d5493522c2f922083ab066843f527160bad9aefff2b8cf42e7592
MD5 d9bd255c170c19c6eee752e8ded323d4
SHA1 a4f83ec43af474cacc3d5faead6b98c96e86baa8
SHA512 5ecf8517bf417aff1e7aec2d4d51dbe25ba02e62de203df9ccb89788ff78079620d6f092ea8e6001c33cab0d35376852b645f9436eb5b0639a21e3fa8199e783
SSDEEP 3072:uNpSJYtYd0wz4vVVMvjcN5gk1idfNGD9Ahu0:OoYSC6gVqJz
TLSH
T123D30712F1849DA2CDED963A11F7030117B1A4082B27CB53559DD5B9BDBB3C3AFE6A80
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-virtualization.jar

Path /apex/com.android.virt/javalib/framework-virtualization.jar
Size 78KB
SHA256 2fbde57fd13dc3c630bf476c4992e98942cf841c8f69f358ad0a8b2a89e8230d
MD5 5c9f56f29221493a2fd3a22e1f8f492c
SHA1 1c255d7112915f38ece3a747da468b2bfe97a742
SHA512 50d0f46e2e76328e5227d0076c0799d1ac7c45aab78fe256dd7c408b817bb81a3c59faa4cf7b6a9dc7b721558e0a5c4fe8c1f1995cbc93a690f878df766c3385
SSDEEP 1536:VlWRrZ9tVTgnzI226ktsZvLpEwe8PjOdYvqRu94P7hcjBBu94PKZQ1HixszjqGV5:vkrZd7XtsZdeg
TLSH
T15173E507BBC00E15DDB99B3B65F643059B35EB449B03A3038276F4B4EE817CEAB91985
MD5 SHA1 SHA512 SSDEEP TLSH

Download

framework-wifi.jar

Path /apex/com.android.wifi/javalib/framework-wifi.jar
Size 1.1MB
SHA256 aa98e93aefe8e988ac6b929b3b59404fca6b62c4724617975aad4bac29dceb7c
MD5 a0203bb796d0ac9c78cc11a9a4ae993d
SHA1 78acad16b8de2690917b920c062a1eee51522f53
SHA512 b7398d75583cdd17fe02e0c43eec2c6817b9e5227130a1c909f1aa28f3f097cb0b5a64b19afaf403f05812892f3590a33dd1f2d30481e746fa8116dbd0afc66f
SSDEEP 12288:um7CpyldY0nIB94g6g+S3SdD37DJH+o97DKM7jJER9BK:ayPKb4gZ+SUdHx7DZjSQ
TLSH
T102356C43EE610FB7C0AE8336A1BA07043772174167374BD79889D5A8BE873C756E8AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Download

FirebaseHeartBeatW0RFRkFVTFRd+MToyODU5ODEwNDAzNDA6YW5kcm9pZDo2NjViODVlY2ZkZWZjYjZiYmRhNTQx.preferences_pb.tmp

Path /data/data/dev.moonlit.quest/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToyODU5ODEwNDAzNDA6YW5kcm9pZDo2NjViODVlY2ZkZWZjYjZiYmRhNTQx.preferences_pb.tmp
Size 291B
SHA256 e016e3f203a2dc4bfd95630ddb84c7469a53a28a582a0af733ce9d3cad0ea07d
MD5 ec3107960575fcc774319c37e09f03a3
SHA1 4352b4a8ec59e4a25bc48ffe8cfceb36caf9f321
SHA512 6ee67e3e090bd32f13577e656cff100d21c3fca141dff4a95a7db1e54286adb3d69a5b4123c503c048e0ac8c2baca08ca19a65dfa356d86947b2e3bd07581c9f
TLSH
T128D0C211D6926CA0683E95493F6811294EAFA3E2A57510AD2AB802C4BD4964454C5F0E
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MToyODU5ODEwNDAzNDA6YW5kcm9pZDo2NjViODVlY2ZkZWZjYjZiYmRhNTQx.preferences_pb.tmp

Path /data/data/dev.moonlit.quest/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToyODU5ODEwNDAzNDA6YW5kcm9pZDo2NjViODVlY2ZkZWZjYjZiYmRhNTQx.preferences_pb.tmp
Size 315B
SHA256 a4b2d2653a0551773cf3e5f1955b8ce47227a045cf4b1506807e0d16183b7c0f
MD5 895ee37612d40f0e08fe54624e4f2e46
SHA1 e9d10a713abd40ce2e0bfb7281396c7e63709e1e
SHA512 e0123ca5dac0e34977b0c9f89533d60bcfde19e7efddf8bcfd5fceca9949133293b878c7192e61017c02a9380a6719c64107cbda07162144811c6a4d6086a6d5
TLSH
T1D2E07D00D6C21C90587E950D3F68112D4E7FA3E26579009D2AB801C0BD4D24044C0F0F
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MToyODU5ODEwNDAzNDA6YW5kcm9pZDo2NjViODVlY2ZkZWZjYjZiYmRhNTQx.preferences_pb.tmp

Path /data/data/dev.moonlit.quest/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToyODU5ODEwNDAzNDA6YW5kcm9pZDo2NjViODVlY2ZkZWZjYjZiYmRhNTQx.preferences_pb.tmp
Size 315B
SHA256 eb94b1f47eae9f2ebdeb1adaef0145212a1cba1385eeff76a0e28d895163b57f
MD5 2320b9d77f755471c2a1d72f4db718a4
SHA1 f5527d6116acd171d2e54ff430329836e995bee2
SHA512 5157b42354c8097c59e0d02a9d0fbad3004a50d817dcb04cc8aa459fc0ca55df7e4895a635d5fa5a2cbfc9ee65153fde3142f335a239dc9c26ab5cf242b57e59
TLSH
T184E07D00D6C21C90587F950E3F68112D4E7FA3E2A179009D2AB801C0BD4D24044C0F0F
MD5 SHA1 SHA512 TLSH

Submit Download

ocular_adb_cert.der

Path /data/data/dev.moonlit.quest/files/ocular_adb_cert.der
Size 682B
SHA256 ff4d73769dea04bb1f4c01d7c2138d7621c27c1a09964efb4d62f14102e28e3b
MD5 998e351c3e1f53c8e0e924b3c0a3cf8a
SHA1 c5e42dff0569618a3a92599e699de4cdc42b4631
SHA512 ad1440dfb734cfb08222e80ae894a2de6239d333ab46ec57d5fd874d786b56955e89011c14ffcec241fc4a65c2344341fcf2559c7cc9a8744456efa2bb52341e
TLSH
T18401445BD4E0AD057EAD1C24601C4F429450F3DA98321D6F273A196CDB786C425384D9
MD5 SHA1 SHA512 TLSH

Submit Download

ocular_adb_private.der

Path /data/data/dev.moonlit.quest/files/ocular_adb_private.der
Size 1KB
SHA256 f38199eba5c5fac90dd4e2810d2a51ca9321c6e987ee5120921110e0c358cce9
MD5 03592d224b8243c1a0877dd8e70b1c1e
SHA1 83a7ecc548b23c8954eeb8499fe827a136e2ac99
SHA512 0b79cbec5df2e96df65597a20c555bc97c0c69511671948c15223fb2833f204d52ea398e7492b3b0179d5a89c975307f301bc23a08928b03114129256b0a92f3
TLSH
T19E21E795F2CF89036FA05FA648208BC9C050C7A683B0F774891C1C8D2F39138A661DC0
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads