Analysis

  • max time kernel
    4246989s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    27-06-2023 13:53

General

  • Target

    91ead948dbb22ecba5f4d912660e013f.apk

  • Size

    2.0MB

  • MD5

    91ead948dbb22ecba5f4d912660e013f

  • SHA1

    96e04fc72d1e2c1cb2bb34c5553c4ea72e2608b5

  • SHA256

    9c05e67dd97a9f6aa83b4bdb6c57362835508523ec603ecadfb8cae125555de4

  • SHA512

    d789056106d098f513a49b4fdab39ca25ca09f6e18ff42d9d15e937ee12bfbd050a4b9629cb69cef377253fb1c3bbc958a1ceb2868dc4d43e53845c9d4dcc6ea

  • SSDEEP

    49152:dH7HNOFtAzk0AOYkvDJU1ssLlzKx4B2BVPQUs4OEjb:dHIFtlnssLTsBN7OEjb

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.realdrift.nearme.gamecenter
    1⤵
    • Loads dropped Dex/Jar
    PID:4431

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.realdrift.nearme.gamecenter/app_webview/Default/Web Data

    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

  • /data/user/0/com.realdrift.nearme.gamecenter/app_webview/Default/Web Data-journal

    Filesize

    2KB

    MD5

    6083ef8d1a1f67482ee23e2948b8f0a5

    SHA1

    30341acd3f74c363075a70427d247f7bebe0e730

    SHA256

    49490b303c4d2000ad556e851ae4575f4d05e6bd842c7f83d882553e210338fd

    SHA512

    bb693827dc357481aac082d734de9e20bd3dc4f6d4cd6a17adf4d6921821a79703a257340fb3752c4ff39eb48960f0ede05b48c38c91cfe99622bba52b4e8a04

  • /data/user/0/com.realdrift.nearme.gamecenter/app_webview/webview_data.lock

    Filesize

    37B

    MD5

    be20ef3cf7023a862c9c6c8b0f856356

    SHA1

    35e6c9d3d11f4bb293b438f456407db0b3f2d0fe

    SHA256

    4ffb3a37ae0ddc936d5412cb5f74d58eeb77d2b8e29d917d15fb16d56a8fc1f9

    SHA512

    12dca9ebc4f108fc59802196e3bf56f6b9c24f0146730bf0222c09cb12e45da293c5f4cbd9a4285e8f0536b7a9cb8bb6b49a03b8ca9fdaf2daf4da2b09436bdc

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    006f89673a252b9009f92aa2fb70e945

    SHA1

    d475a199109e1cf61b417e5b407f502b29938b48

    SHA256

    6af739a8a8808123e6f140a6e5b8a5b77324865d3c2257b48c73074255f741b9

    SHA512

    f47ae40515b13a3022fd5292cf4dafcae88cab853e92684a4e6046f9aa824a95432cfbb923c9c64f4d8660f6e7cd00632ad0e90e01f24a5c5dea70d7b019f7ea

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/WebView/Default/HTTP Cache/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    df942844048055de398c24ee14a43058

    SHA1

    7c2ff484c6ce71a70173aa88a6035d1fbdbb0e51

    SHA256

    64d1d61602627a2e2e9506b768937529b427fdd99065c3ac5add7d55259f70f7

    SHA512

    0b7c131844e2d9dc3fa54fbdf31922b52139c0f82f935f751d92bb73ba51a9adbd5241a4c9f560c408589fe1b14421172376904d1386a133c1de9ec67db5fd95

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

    Filesize

    96B

    MD5

    e30a743597f6812809d9e51dd24e12c0

    SHA1

    016682c61dacec689b69da8538384e362075a9c6

    SHA256

    94bb1244ff4260baa0b874eaf2fc6311035e4bfed6a855bc37cb854d940b4364

    SHA512

    d0a2851a72cba2cb9067fed8bd2497fbe6d65a5b45d1e7daa3d38331195ee9167d1d9269e73201415f91b6b3f7780215db04748afebb4ef2f176bffc2fd8c35d

  • /data/user/0/com.realdrift.nearme.gamecenter/cache/WebView/font_unique_name_table.pb

    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

  • /data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events

    Filesize

    144KB

    MD5

    e28749b0438c36060d56c81200b545eb

    SHA1

    27fb4815c1b4ac80bcb98da8095e1baa2633736b

    SHA256

    cfdffe5f12aa769fd6255c24b8d40203993c5e7aa9d518967dd9f1b1d19824e6

    SHA512

    cc03c0311c5fd0e0a7f2ee3fc0a6b0590e837178bcb24f13c8d9a9bf92473ceb50a037daf38d6cc43a800b46fa726e36b6ff79b14a05aea7b936c81a7389ad0a

  • /data/user/0/com.realdrift.nearme.gamecenter/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    78181b20f48fc48f33c8b416345cfa6b

    SHA1

    ce05405f935f2591a25a1e5df0e8c9c965b87726

    SHA256

    6228b42fa5d5687c05e876ea402d6729faccb3f98986c046e4475a17229c8e88

    SHA512

    6db0c5695e650aa8bf8b2d0431b067a32a2c680d696d0b8d93151b3af6b97d28be732e6eac9f017166716d8db33d5e6affe6790217bb600b7c6d9b4cd76a50b0

  • /data/user/0/com.realdrift.nearme.gamecenter/files/0119815c.dex

    Filesize

    2.8MB

    MD5

    e629bc573f5cfecd31ee8d09c8034065

    SHA1

    ed21bd8f57c9a77c7b801274c4b967433fe9c3c5

    SHA256

    c679b66c420c8cff9a88ce05eed8e84ef09e35559a194ce04a3901092c8458fc

    SHA512

    c3fd47fe3c73fa7420d7a9be99c5c914caa5c989a61361aec6600ba6a92026b413b25d04b9beebda0e63f5b1dd5b9ba3cd10b8266a08692bb92463fc01d6859e

  • /data/user/0/com.realdrift.nearme.gamecenter/files/L

    Filesize

    236B

    MD5

    b6f05e9c9f202028bcd0a444fe13920c

    SHA1

    8131af459a988b8a8f34bd0f40d9854a0298cf8a

    SHA256

    2c1f118bc1e753e183a3da98620610ee7994cdab82ac9b14c2d6d42aea11b3a5

    SHA512

    88f37f1e060f961cabc21e43425eeac03a2ed1879421951f28ddaef8f3efb2d98ae3a130e702951a73b91167f6de5f59a3cfff5f0aca3f81288ee2c4eee33776

  • /data/user/0/com.realdrift.nearme.gamecenter/files/SX

    Filesize

    399B

    MD5

    244264d5d83a167bad72e8a1c1423f03

    SHA1

    55cf84a7a641dd29b05f08a440f606fb134f2537

    SHA256

    4ba8eb6ca4fa6259ee12da8591e26625399b20371ac9c69442bd00cb966c85be

    SHA512

    727b4d300e2aa64325d0abe1166ee6d6fb44a2f60c745ece28d988af54e734964b50aefcc68e2867d0f30f22d2f2ff23cdb987899205c6f2bc8510a7d9add0db

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

    Filesize

    465B

    MD5

    0d5b02fd896e92a1caa48090575ed9a4

    SHA1

    d7a5e03ea9aeca98901a1abfae5e2ceac1507d87

    SHA256

    d9b6ec1890a69db2782a1cd6555bf03d8e25fbc318ba3aa7d864b1b2b1c06968

    SHA512

    8171b2c6c11297801a77a535ef3791f38045594dd1a2e54943ce5a5d4e10471e1252637a62ead43fb70dd41ed73ed9ce6d8d084f09baa8b2656c1b9ad0bddb6a

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

    Filesize

    519B

    MD5

    7220ba67df124bc2b7a2f46fb2967bf9

    SHA1

    257828ca6fe6c2b46b81ee06a66d4946355cf6c3

    SHA256

    257c372773b5668f39273f158dcdabc8c1b2e89019712bab26dbb1b1324207fc

    SHA512

    152cc6a751722e8e2845120b68f6bd65682b4d99900dba9ca9b1742086a0a4034a2de8a99bc2d24c08bfc7e6fd934469e30bfd36ae5e353b83a4dcab8003228f

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTM5ODYyMjI5Mjg6YW5kcm9pZDpiZWJlYTZjZTBkY2YwMWRmMmU5YTU1.xml

    Filesize

    178B

    MD5

    6765250da24f516b85e96b60fcd81a2c

    SHA1

    600583373e740a5365b4682a32e65533458fd05e

    SHA256

    4582af355c1f8b98d6cc3225515dd3d0a3126cd16b88a2f0127583a31b321f63

    SHA512

    a0720416b5a38a2702d42af841ebe585c6d993d85c6b55b2a117938ac1f5d5ca50e6751ad9604775b479296bb8f8c22311781d5b5cef6f3d17b1eadd70882690

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.realdrift.nearme.gamecenter/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    137B

    MD5

    d6b32b6f7842c43a69d96e6bbc0f951e

    SHA1

    f09a77cc001d93e3386c5cd436a79ee29a46da6f

    SHA256

    5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

    SHA512

    e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56