Overview
overview
7Static
static
7Zelda Ocar...me.apk
android-9-x86
6Zelda Ocar...me.apk
android-10-x64
6Zelda Ocar...me.apk
android-11-x64
6index.html
windows7-x64
1index.html
windows10-2004-x64
1n64.apk
android-9-x86
1legal.html
windows7-x64
1legal.html
windows10-2004-x64
1license.html
windows7-x64
1license.html
windows10-2004-x64
1Analysis
-
max time kernel
2788416s -
max time network
157s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
10-06-2023 16:45
Static task
static1
Behavioral task
behavioral1
Sample
Zelda Ocarina of Time.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Zelda Ocarina of Time.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
Zelda Ocarina of Time.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral4
Sample
index.html
Resource
win7-20230220-en
Behavioral task
behavioral5
Sample
index.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
n64.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral7
Sample
legal.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
legal.html
Resource
win10v2004-20230221-en
Behavioral task
behavioral9
Sample
license.html
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
license.html
Resource
win10v2004-20230220-en
General
-
Target
Zelda Ocarina of Time.apk
-
Size
26.7MB
-
MD5
cb5057700a4c13108c14ba4389bbbf6a
-
SHA1
6996c1f455593330bdc9f77603624ef27364c407
-
SHA256
d09617517bbb2c6aebec4f6ae8448c467652e6986e9c04d5e02d0a29808f06cf
-
SHA512
942bfb1f8cbdedef43008f65ac86006b46f18d63b6fe64fcea081727fd8e200f19720abe83d8366accb15aadfd134b73f254f6903b82414465238363d09cb677
-
SSDEEP
786432:memNDBXrxpY2N10oOQ4zODgJOtFvDgD773GjLQE:5mzXrnOtC0WF0v73GjEE
Malware Config
Signatures
-
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
Processes:
ir.zeldaocarinaoftimedescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag ir.zeldaocarinaoftime
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/CookiesFilesize
64KB
MD5cb7543c4df600f2af58097cce0e334ba
SHA183cc92f38c27fdb4fa519b1ce2f37912f24af1f0
SHA25664c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233
SHA512ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/Cookies-journalFilesize
1KB
MD563ef8fdc7a40f35dd6235846ed76d0c5
SHA16e3a40ef5e3f60757d9743269633f893dd2c70b7
SHA2560f984295ab4270f6df15c468bd92edd3e34a6457dd837d2cb502b4d0c2dfc192
SHA512336f3cf9ff16043493ccb4c7db539a5711a6b7ec3f9b1fdd15dc2ae1491543efa4221d441158f7d2b2f5a47b58895594100efba8168583cc77d077a012b7dbbc
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/GPUCache/indexFilesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/GPUCache/index-dir/temp-indexFilesize
48B
MD5918fb5e2cdeaec7fd22c8b5f2ad2f59e
SHA1174726f610ccbca706b22f237777fb2a4eee53b3
SHA2568395618f5543513b9d7614d913637e5ca13884bcda340eb5b4ee98fc83ff4c0e
SHA5120dde7a713f20a39602e5882a05047425727f83bfc7a421b56fe0afcba75f86a4c426d5686e8f710d8d6a4172d6e28b5b4dba529cbb21eff37e545e5f6297930f
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/Web DataFilesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/Web Data-journalFilesize
1KB
MD5535594a26867147cbb0fe0b7638eedb1
SHA1526b7d154eb5c2c52f1b4b723d6d57f1ef59bfb5
SHA256811ae811ac9468d4d3de8ef30fc033c30d586f11b37c6c6d908f02a47d854a96
SHA5126e7fe2c9fcedfeb99c1f01f3949a55257191d4a911d4a035aa7231f0e771b5543e1553adf3c4256863d9708b4ce108a3b231cd069ba7ef2fec31815886ca259f
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/metrics_guidMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/metrics_guidFilesize
36B
MD59143b356437a5820d59a6334b50f2d06
SHA1da98d5c60ea1b55faf52483004f4d2ddda91bb00
SHA2568918f316d6a58b18d85fc95a9b2ead96a84ab1370a26343f56bb598fab7b2b37
SHA5124becf2a9f323f89a0f4c281e791c6f4af496f8f478b7bf689f445ec4e134ba6d109607e6261d4f72bc737321846d891ed9fb1e0ebff32b27dff0021451ebf586
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.zeldaocarinaoftime/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.zeldaocarinaoftime/cache/org.chromium.android_webview/7f35c386f1838743_0Filesize
454B
MD529c6e91d582ba42e188be1fa38d2e07c
SHA17b798ebbf7e167da51f8fc537add1f7bd6a03189
SHA2564ef62ed5d0571904b000a1bb11723930514c17c798fae878f308d37af24822b9
SHA51208e22a4447198470286fc1b0243e148e80eaa073a6683998a411f2287963b49f975fa3eaf41ec84b089a001382cbc676a7acbb4e91f53484f55c5661278e8ecd
-
/data/user/0/ir.zeldaocarinaoftime/cache/org.chromium.android_webview/indexFilesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
/data/user/0/ir.zeldaocarinaoftime/cache/org.chromium.android_webview/index-dir/temp-indexFilesize
72B
MD591910230ea4e8de7f0a2d8327cc6b7bb
SHA1fb8aef56073a4932e058e6be717c078327f05ba8
SHA256720ae825c82a7a110113ae316c9533499dc5b61944d643074a287a180a87e348
SHA512d34a291f940d906991498089873d15e1f5e7f4baa1515352fa8648808164a1949702e722b6ec953354152e8991ed77995a197a095d6ca691cfa0266e23c88078
-
/data/user/0/ir.zeldaocarinaoftime/cache/org.chromium.android_webview/index-dir/temp-indexFilesize
48B
MD526f91288e1a3038dae66c2f6866cacc1
SHA1f43f699b0b72d761bc094f7af53b0d9e5139e46a
SHA256b5a047da648746625d622f8e9a6d7c7888c2db6a5e1eb829604df2a0166ff16b
SHA512600410efe63a6aeb46735bbba8f18cb92c2fde6b3cfa4ff898e378ad63ce48063313d5c0692343e6c31d163d85f72980c7b7dde346786a50ea9833a60515e3ae
-
/data/user/0/ir.zeldaocarinaoftime/shared_prefs/WebViewChromiumPrefs.xmlFilesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
/storage/emulated/0/Android/data/n64box/bin/zeldaocarina.zipFilesize
25.3MB
MD58b20603595b06229b5bb0992c087bf75
SHA1742b1f5b3aae88c316eea36e2095ddf0cf42ad5b
SHA25644d16272b818b90aa486abc242676531224ddd453d57c1dac48983465a532a69
SHA512c82784253e7180aa97891e38bcac739d48a751bb39330c411b038fd81670433a56f841c09dda5a2ce80d03cc0ec86b8a22087ed533580afc19c7a4a5e4d5c639