9c05e67dd97a9f6aa83b4bdb6c57362835508523ec603ecadfb8cae125555de4

Analysis

max time kernel
4246846s
max time network
17s
platform
android_x86
resource
android-x86-arm-20230621-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
submitted
27/06/2023, 13:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

91ead948dbb22ecba5f4d912660e013f.apk
Size

2.0MB
MD5

91ead948dbb22ecba5f4d912660e013f
SHA1

96e04fc72d1e2c1cb2bb34c5553c4ea72e2608b5
SHA256

9c05e67dd97a9f6aa83b4bdb6c57362835508523ec603ecadfb8cae125555de4
SHA512

d789056106d098f513a49b4fdab39ca25ca09f6e18ff42d9d15e937ee12bfbd050a4b9629cb69cef377253fb1c3bbc958a1ceb2868dc4d43e53845c9d4dcc6ea
SSDEEP

49152:dH7HNOFtAzk0AOYkvDJU1ssLlzKx4B2BVPQUs4OEjb:dHIFtlnssLTsBN7OEjb

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex	4104	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.realdrift.nearme.gamecenter/files/oat/x86/0119815c.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex	4023	com.realdrift.nearme.gamecenter

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.realdrift.nearme.gamecenter

com.realdrift.nearme.gamecenter
1⤵
- Loads dropped Dex/Jar
- Removes a system notification.
PID:4023
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.realdrift.nearme.gamecenter/files/oat/x86/0119815c.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.realdrift.nearme.gamecenter/app_webview/Web Data

Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/app_webview/Web Data-journal

Filesize
1KB

MD5
a20b49ac503454b2fcbc77b54645507c

SHA1
f8d1e78a9bfcad5a3a7004c4ed8cb34e362ba6a3

SHA256
064943a517aaf5f09e99210dcee3ecb2c57b00f76c1c37b8f4db2a6f6d584d06

SHA512
d953e2c6f755280e415adcba034b427339336ce815678acb96e38c9c8fc722fc5a8f33fdd710e7e3296dd7b162f26340fe58efd0b87b1c1bd91efae66a7f8cb4

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/app_webview/metrics_guid

Filesize
36B

MD5
89816bd11936679d4f9c2ddb0a1037b1

SHA1
2f90ff03dab2aad1c83b7403743853d23f4d8408

SHA256
b9fb5060c6660b3d7f7d9255234b72b443407599a486705f14ea1a69af623e13

SHA512
b86e8e6391698547d3091fc36257a600e081116473618394dbb2f2b7ab7939375f31ced99a93db513ee393b92115856a9928c77ffc704735303d84ce66cc15ab

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events-journal

Filesize
524B

MD5
28943690212893ef433da3a0775fc814

SHA1
660c5d1dc5afc817c7f55fed6fbec8e45b3d671e

SHA256
1e7889b9e4b56abc21ebdd6e2c0b2460a56ba946a3fe441634c29755d5417519

SHA512
00d3c7e0431cbb1f7876ed675e81b50724e29fabcf831cb7850569a2700f12790acdddc4c55eaa3150ce26d53d1b24ac4caa9e922095fed024f1bfd7c0576693

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
15218a78d0a357b9f6146efd6cea39ba

SHA1
c95e4cf05091413dfce9da601f13e3c71c36b973

SHA256
017333c90285697e1c48decce3f8b6796b8e4e933edb248eea2fbf84d0ed7c36

SHA512
742f7285d1a2ae53b2042984e308892303fd169b37ac676d3a8a8157aa308878350d572f9f07e7c9ca995bfd2b2ca9b7efdb7595b1537fc8fe0a917d329e40a9

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex

Filesize
2.8MB

MD5
e629bc573f5cfecd31ee8d09c8034065

SHA1
ed21bd8f57c9a77c7b801274c4b967433fe9c3c5

SHA256
c679b66c420c8cff9a88ce05eed8e84ef09e35559a194ce04a3901092c8458fc

SHA512
c3fd47fe3c73fa7420d7a9be99c5c914caa5c989a61361aec6600ba6a92026b413b25d04b9beebda0e63f5b1dd5b9ba3cd10b8266a08692bb92463fc01d6859e

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex

Filesize
2.8MB

MD5
e629bc573f5cfecd31ee8d09c8034065

SHA1
ed21bd8f57c9a77c7b801274c4b967433fe9c3c5

SHA256
c679b66c420c8cff9a88ce05eed8e84ef09e35559a194ce04a3901092c8458fc

SHA512
c3fd47fe3c73fa7420d7a9be99c5c914caa5c989a61361aec6600ba6a92026b413b25d04b9beebda0e63f5b1dd5b9ba3cd10b8266a08692bb92463fc01d6859e

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/files/L

Filesize
236B

MD5
fa9ab6c594e7f70ef5c634e3ba667817

SHA1
a045fc3b64394800ccc44d868872a6b1b52c9184

SHA256
abfaa11f6a47990079a23c2dfbb683814343aa1c1640876b3bf190b241880e70

SHA512
5cca9b5e624c1f0931fd26c5b634bbe91f1053d94dd49d8186e1cebb59138081df731c558d6feab8fa41be83d5678ddf29f3801424ebd00dd59c0abede137164

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/files/SX

Filesize
398B

MD5
1b8962ad2f5a77e6b40ec41e3c79842e

SHA1
33287f33f7ae8e38276455a205794e1f33627127

SHA256
9b419ae739b3c7eb3633b972002509614cda7154122dbd284892410e177a837b

SHA512
25a1dd92798761787ef4f14cc68375c9e14a201b66844b340d29ddd8fc8c093e0c932852e68fada7402a8a9ed09809f2aa5190251f4d63b8d834d93521be198f

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

Filesize
519B

MD5
73c3ad7079e6757f3099e2830c3953a7

SHA1
58ac30326ef75f567975912e8162a9c3bbffad7b

SHA256
908c0f14152ee3d9d36a077d3a47e04da4a6f63984f60aaf417815740b528310

SHA512
76b44f56123659286e7e37a8b019fb2d2ffc855e87b82759c9aff6680dfb9f6ebf4eeed1f8cf35796f7db4304c490218ad6413152cbda12598639d2682716993

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

Filesize
178B

MD5
a0abeaf160c692967bacd06ce01d8bc9

SHA1
7d8c231bae9ec7103e4ae53582cf907ebde477d1

SHA256
c87e3a6a929def44f9a972f4a119d5362d8663f3dde83ab956421ce8a06f5bf0

SHA512
3d14ccbd8f1381ab9acb565819e76ede289ff025cc2dce2a942a76ba1788a28206f0c6263db49dc1f068c782a5d2db6c306dce6527528345465bfc4c84f3c878

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

Filesize
465B

MD5
11deb25eec778d59313e941a62c49428

SHA1
25dd04750a15be68a3e9fb8d1606f6ed82a6c3b7

SHA256
f464d962eff6609b85a5bf7a8ab47eb041747bc48dfc20822c559285a0a4af6b

SHA512
d7b124e301913f6e0bc6cf079e1adf24cfa6fb5ba81a01f1f5477bf45a595f84c3d0472a8ffb2f4fee6ed1bca1868a04ba5a62ae5c971a26163b9dec73af4420

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/com.google.android.gms.appid.xml

Filesize
387B

MD5
26e4e38c050cf9b5a01e09aa8b80d714

SHA1
6a45ace69ff55737810a700d4e87032b90ccb798

SHA256
6352527ac15d32207c0765d55395f5d3934a4af9d5e5ea114c667f13ce5bbd96

SHA512
0b710c9b6ceae3dda8c3bd6577da23f631bf9fe1613964d997d93dfe3cf6486c0745478ec96ba565482b42881b9fd011d92da5009468ed2b99de33d17dff004d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads