Analysis
-
max time kernel
3715474s -
max time network
14s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
02-05-2023 17:14
Static task
static1
Behavioral task
behavioral1
Sample
Warriors of the Universe Online_v1.7.7_mod_apkdone.com.apk
Resource
android-x86-arm-20220823-en
General
-
Target
Warriors of the Universe Online_v1.7.7_mod_apkdone.com.apk
-
Size
75.9MB
-
MD5
009dc138c8d87e60ddf98287cf6e8a6a
-
SHA1
51f3823230cc9a9597bd2d31fdeeadd0e7cb686a
-
SHA256
05b90d5cde7727b4e7eee1a6a5d516cbb1f03f13d88e7ec927186612925ea139
-
SHA512
f20b6bbfe84dd4768387a695d8d74488db8332667e7a49cb3bc4a874c2ae1c6ee9d28e1003a05b5bb0cd8fcb1d79158c0fe2e8779c2d052494c3fef1bfd5c975
-
SSDEEP
1572864:0QwtRG6lKs0Ku5SF2S5FBfrdrYfxTyXz0AysPcNdIckBq1BPZBSYwr8rgV48P:lwtRG6wsRXFlvr0WgAt0NKc5XworM48P
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.GamerMind.Warriors_of_the_Universe_Online/files/77E1148E/77E1148E.dex 4077 com.GamerMind.Warriors_of_the_Universe_Online /data/data/com.GamerMind.Warriors_of_the_Universe_Online/files/77E1148E/77E1148E.dex 4147 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.GamerMind.Warriors_of_the_Universe_Online/files/77E1148E/77E1148E.dex --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/data/com.GamerMind.Warriors_of_the_Universe_Online/files/77E1148E/oat/x86/77E1148E.odex --compiler-filter=quicken --class-loader-context=& /data/data/com.GamerMind.Warriors_of_the_Universe_Online/files/77E1148E/77E1148E.dex 4077 com.GamerMind.Warriors_of_the_Universe_Online
Processes
-
com.GamerMind.Warriors_of_the_Universe_Online1⤵
- Loads dropped Dex/Jar
PID:4077 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.GamerMind.Warriors_of_the_Universe_Online/files/77E1148E/77E1148E.dex --output-vdex-fd=44 --oat-fd=45 --oat-location=/data/data/com.GamerMind.Warriors_of_the_Universe_Online/files/77E1148E/oat/x86/77E1148E.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4147
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
194KB
MD53021a615584f98f617e76a6d1c7e107e
SHA13d987df4609f5c7a58ce3367ff031fcce56cb279
SHA2562e658ecb640efc5a3786a4337595c2b62341fcda9820bd2847ba9b455eded609
SHA512e06dc21ded4b79bdc3c55180590d992b88f5f52450d32a9802ece525f2ce63e295a0832e1b4a33482af0b893dbbf17e91c75d08421027a6f76be0bb315560eaf
-
Filesize
194KB
MD53021a615584f98f617e76a6d1c7e107e
SHA13d987df4609f5c7a58ce3367ff031fcce56cb279
SHA2562e658ecb640efc5a3786a4337595c2b62341fcda9820bd2847ba9b455eded609
SHA512e06dc21ded4b79bdc3c55180590d992b88f5f52450d32a9802ece525f2ce63e295a0832e1b4a33482af0b893dbbf17e91c75d08421027a6f76be0bb315560eaf
-
Filesize
194KB
MD50e913135387ec19ce7c32ab7eb704105
SHA1518e4318bf3b943f5fc142fd73015afcd8f0aa3c
SHA256e34e009f17ee8a07fdfda65b02b265c1bfba9bd67c11bdec3f792b57e05aba08
SHA512d35dd18400a0d0f86ff63bd2441325a6b8fcbbc7482f6372eea93e00a7b0e773646a89ff2d4e69432edeb698d02efe542fca6182ead1b2cb670b3197116d39ed
-
Filesize
194KB
MD53021a615584f98f617e76a6d1c7e107e
SHA13d987df4609f5c7a58ce3367ff031fcce56cb279
SHA2562e658ecb640efc5a3786a4337595c2b62341fcda9820bd2847ba9b455eded609
SHA512e06dc21ded4b79bdc3c55180590d992b88f5f52450d32a9802ece525f2ce63e295a0832e1b4a33482af0b893dbbf17e91c75d08421027a6f76be0bb315560eaf