e556823762202a182765291b1352604731d7cf98926150d18cfc8cb715ea4221

Analysis

max time kernel
580999s
max time network
91s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
05/02/2023, 18:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

com.DMKM.ZombiesVsPlants.apk
Size

64.4MB
MD5

c9878a7b2fdaec491c45c9d9fd59a05d
SHA1

52b08948c844d9cabdff1223004fcf1613bc8347
SHA256

e556823762202a182765291b1352604731d7cf98926150d18cfc8cb715ea4221
SHA512

4b8a605220a1689bccbc7e5fcc0a1541f7fa16f8c366905d31a2a722062368cfcb14761f5307ce8eb756bf3c1b73393400ebc2b4879260bef41411c468d46802
SSDEEP

1572864:yFotlGr9edIart49e3emkW1ZDbSPcUToc5BnYgxxhNHVpj:ttFt4getgGHokBJxvRzj

Score

7^/10

Malware Config

Signatures

Checks Android system properties for emulator presence. 6 IoCs

description	ioc	Process
Accessed system property	key: ro.hardware	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.product.name	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.product.model	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.product.device	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.bootmode	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.bootloader	com.DMKM.ZombiesVsPlants

Checks Qemu related system properties. 10 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

description	ioc	Process
Accessed system property	key: ro.kernel.android.qemud	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.kernel.qemu	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.kernel.qemu.gles	com.DMKM.ZombiesVsPlants
Accessed system property	key: ro.kernel.qemu.vsync	com.DMKM.ZombiesVsPlants
Accessed system property	key: vendor.qemu.dev.bootcomplete	com.DMKM.ZombiesVsPlants
Accessed system property	key: init.svc.qemu-props	com.DMKM.ZombiesVsPlants
Accessed system property	key: qemu.hw.mainkeys	com.DMKM.ZombiesVsPlants
Accessed system property	key: qemu.sf.fake_camera	com.DMKM.ZombiesVsPlants
Accessed system property	key: qemu.gles	com.DMKM.ZombiesVsPlants
Accessed system property	key: qemu.logcat	com.DMKM.ZombiesVsPlants

Reads information about phone network operator.

com.DMKM.ZombiesVsPlants
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
PID:4017

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.DMKM.ZombiesVsPlants/shared_prefs/game_detail.xml

Filesize
471B

MD5
f9c0dbf760762e178da1f771f87f3fb9

SHA1
7f1600268a2dd0e84d758e869ff7d99bafd39446

SHA256
9fe22bb061b14b8605b21a2b3ed1ef2a68756372dc58eb67e9e7f8d0d3ede92d

SHA512
3a2d22b98f533961499e64461108adcbe5d4b2b1f73c4ff6a3e3ab0490ebedd836e6481f4b582887ae75b622f51acc6c7ee7e9852b654dae367207d151453816

Download Submit
/storage/emulated/0/Android/data/com.DMKM.ZombiesVsPlants/files/il2cpp/Metadata/global-metadata.dat

Filesize
3.0MB

MD5
cecad726a71396bc7c054e1d66f626b8

SHA1
65d883bbe857634d78603befad2223b92f42060c

SHA256
5881209680c1ba87852ed4f1b0c65024da1da04f4f7874d36fe427d6aa0807f2

SHA512
76760ae7e21c63558ba76b703a1a1212bc17be74a258c28da95c9bab038c576ca0d5979a5d3445e4ea197824b9b8c9f6c662e9aa58fd83d6afe1eb906b0ff5ce

Download Submit
/storage/emulated/0/Android/data/com.DMKM.ZombiesVsPlants/files/il2cpp/Resources/mscorlib.dll-resources.dat

Filesize
329KB

MD5
21d06dbc8af6432b2b49536ed30609af

SHA1
11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d

SHA256
c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f

SHA512
2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e

Download Submit
/storage/emulated/0/Android/data/com.DMKM.ZombiesVsPlants/files/il2cpp/unity.ver

Filesize
36B

MD5
339d0a7af68a13c53f450ad710f29f98

SHA1
db1b9420aeddc33672f69687a7cbd5fc28971af2

SHA256
7a0942fcbe9009b665c74f81cc8dd369849e84a537da851002c1a368f5c11463

SHA512
1f52a991f2ad04ab2eac88155873cd7e511d1f5115e992a6797dc0453a5188501b77903460cb179dc7a7f9f1b0c8fdd5588c4e0a2a257e2e7e5726d7be90a6b9

Download Submit