Overview

overview

7

Static

static

7

base.apk

android-9-x86

1

base.apk

android-10-x64

1

base.apk

android-11-x64

7

ResConfHack.jar

windows7-x64

1

ResConfHack.jar

windows10-2004-x64

1

arc_dns_injector.jar

windows7-x64

1

arc_dns_injector.jar

windows10-2004-x64

1

bin/java

debian-9-armhf

bin/jfr

debian-9-armhf

bin/keytool

debian-9-armhf

lib/jexec

debian-9-armhf

lib/libawt...ess.so

debian-9-armhf

1

lib/libextnet.so

debian-9-armhf

1

lib/libfreetype.so

debian-9-armhf

1

lib/libj2gss.so

debian-9-armhf

1

lib/libjaas.so

debian-9-armhf

1

lib/libjavajpeg.so

debian-9-armhf

1

lib/libjdwp.so

debian-9-armhf

1

lib/libjli.so

debian-9-armhf

1

lib/liblcms.so

debian-9-armhf

1

lib/libman...ent.so

debian-9-armhf

1

lib/libmlib_image.so

debian-9-armhf

1

lib/libnio.so

debian-9-armhf

1

lib/librmi.so

debian-9-armhf

1

lib/libverify.so

debian-9-armhf

1

lib/server/libjsig.so

debian-9-armhf

1

bin/java

ubuntu-18.04-amd64

bin/java

debian-9-armhf

bin/java

debian-9-mips

bin/java

debian-9-mipsel

bin/jfr

ubuntu-18.04-amd64

bin/jfr

debian-9-armhf

Sharing

Copy URL Twitter E-mail

General

  • Target

    base.apk

  • Size

    71.0MB

  • MD5

    c2ca2c0d025f9be5b9dcd97c3e5f1767

  • SHA1

    26c5f0c325527145a0d3688c21cebc39c91b3cd1

  • SHA256

    328926066c1d50ee0e3655b77a5df60a4967037ad0c5acd68c06e9f9939ebd34

  • SHA512

    8efc07a2d6c4c8752f091c894ea8ce2427e9f55024ea04584023653a88ec34de2b3bf73f87efe402ecda8f96812ff8743a56767143ef591ef70968bf43edba91

  • SSDEEP

    1572864:/n6rgNNloTuTIj+VnEVnNgtkefUh0816VG29:/6s+TuTk+xm2xUh2B9

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • base.apk
    .apk android

    net.kdt.pojavlaunch

    net.kdt.pojavlaunch.TestStorageActivity


  • LICENSE_OFL.txt
  • ResConfHack.jar
    .jar
  • about_en.txt
  • arc_dns_injector.jar
    .jar
  • bin-arm.tar.xz
    .xz
  • bin-arm.tar
    .tar
  • bin/java
    .elf linux arm
  • bin/jfr
    .elf linux arm
  • bin/jrunscript
    .elf linux arm
  • bin/keytool
    .elf linux arm
  • bin/rmiregistry
    .elf linux arm
  • lib/jexec
    .elf linux arm
  • lib/libawt.so
    .elf linux arm
  • lib/libawt_headless.so
    .elf linux arm
  • lib/libdt_socket.so
    .elf linux arm
  • lib/libextnet.so
    .elf linux arm
  • lib/libfontmanager.so
    .elf linux arm
  • lib/libfreetype.so
    .elf linux arm
  • lib/libinstrument.so
    .elf linux arm
  • lib/libj2gss.so
    .elf linux arm
  • lib/libj2pkcs11.so
    .elf linux arm
  • lib/libjaas.so
    .elf linux arm
  • lib/libjava.so
    .elf linux arm
  • lib/libjavajpeg.so
    .elf linux arm
  • lib/libjawt.so
    .elf linux arm
  • lib/libjdwp.so
    .elf linux arm
  • lib/libjimage.so
    .elf linux arm
  • lib/libjli.so
    .elf linux arm
  • lib/libjsig.so
    .elf linux arm
  • lib/liblcms.so
    .elf linux arm
  • lib/libmanagement.so
    .elf linux arm
  • lib/libmanagement_agent.so
    .elf linux arm
  • lib/libmanagement_ext.so
    .elf linux arm
  • lib/libmlib_image.so
    .elf linux arm
  • lib/libnet.so
    .elf linux arm
  • lib/libnio.so
    .elf linux arm
  • lib/libprefs.so
    .elf linux arm
  • lib/librmi.so
    .elf linux arm
  • lib/libsctp.so
    .elf linux arm
  • lib/libverify.so
    .elf linux arm
  • lib/libzip.so
    .elf linux arm
  • lib/server/libjsig.so
    .elf linux arm
  • lib/server/libjvm.so
    .elf linux arm
  • release
  • bin-arm64.tar.xz
    .xz
  • bin-arm64.tar
    .tar
  • bin/java
    .elf linux aarch64
  • bin/jfr
    .elf linux aarch64
  • bin/jrunscript
    .elf linux aarch64
  • bin/keytool
    .elf linux aarch64
  • bin/rmiregistry
    .elf linux aarch64
  • lib/jexec
    .elf linux aarch64
  • lib/libawt.so
    .elf linux aarch64
  • lib/libawt_headless.so
    .elf linux aarch64
  • lib/libdt_socket.so
    .elf linux aarch64
  • lib/libextnet.so
    .elf linux aarch64
  • lib/libfontmanager.so
    .elf linux aarch64
  • lib/libfreetype.so
    .elf linux aarch64
  • lib/libinstrument.so
    .elf linux aarch64
  • lib/libj2gss.so
    .elf linux aarch64
  • lib/libj2pkcs11.so
    .elf linux aarch64
  • lib/libjaas.so
    .elf linux aarch64
  • lib/libjava.so
    .elf linux aarch64
  • lib/libjavajpeg.so
    .elf linux aarch64
  • lib/libjawt.so
    .elf linux aarch64
  • lib/libjdwp.so
    .elf linux aarch64
  • lib/libjimage.so
    .elf linux aarch64
  • lib/libjli.so
    .elf linux aarch64
  • lib/libjsig.so
    .elf linux aarch64
  • lib/liblcms.so
    .elf linux aarch64
  • lib/libmanagement.so
    .elf linux aarch64
  • lib/libmanagement_agent.so
    .elf linux aarch64
  • lib/libmanagement_ext.so
    .elf linux aarch64
  • lib/libmlib_image.so
    .elf linux aarch64
  • lib/libnet.so
    .elf linux aarch64
  • lib/libnio.so
    .elf linux aarch64
  • lib/libprefs.so
    .elf linux aarch64
  • lib/librmi.so
    .elf linux aarch64
  • lib/libsctp.so
    .elf linux aarch64
  • lib/libverify.so
    .elf linux aarch64
  • lib/libzip.so
    .elf linux aarch64
  • lib/server/libjsig.so
    .elf linux aarch64
  • lib/server/libjvm.so
    .elf linux aarch64
  • release
  • bin-x86.tar.xz
    .xz
  • bin-x86.tar
    .tar
  • bin/java
    .elf linux x86
  • bin/jfr
    .elf linux x86
  • bin/jrunscript
    .elf linux x86
  • bin/keytool
    .elf linux x86
  • bin/rmiregistry
    .elf linux x86
  • lib/jexec
    .elf linux x86
  • lib/libawt.so
    .elf linux x86
  • lib/libawt_headless.so
    .elf linux x86
  • lib/libdt_socket.so
    .elf linux x86
  • lib/libextnet.so
    .elf linux x86
  • lib/libfontmanager.so
    .elf linux x86
  • lib/libfreetype.so
    .elf linux x86
  • lib/libinstrument.so
    .elf linux x86
  • lib/libj2gss.so
    .elf linux x86
  • lib/libj2pkcs11.so
    .elf linux x86
  • lib/libjaas.so
    .elf linux x86
  • lib/libjava.so
    .elf linux x86
  • lib/libjavajpeg.so
    .elf linux x86
  • lib/libjawt.so
    .elf linux x86
  • lib/libjdwp.so
    .elf linux x86
  • lib/libjimage.so
    .elf linux x86
  • lib/libjli.so
    .elf linux x86
  • lib/libjsig.so
    .elf linux x86
  • lib/liblcms.so
    .elf linux x86
  • lib/libmanagement.so
    .elf linux x86
  • lib/libmanagement_agent.so
    .elf linux x86
  • lib/libmanagement_ext.so
    .elf linux x86
  • lib/libmlib_image.so
    .elf linux x86
  • lib/libnet.so
    .elf linux x86
  • lib/libnio.so
    .elf linux x86
  • lib/libprefs.so
    .elf linux x86
  • lib/librmi.so
    .elf linux x86
  • lib/libsctp.so
    .elf linux x86
  • lib/libverify.so
    .elf linux x86
  • lib/libzip.so
    .elf linux x86
  • lib/server/libjsig.so
    .elf linux x86
  • lib/server/libjvm.so
    .elf linux x86
  • release
  • bin-x86_64.tar.xz
    .xz
  • bin-x86_64.tar
    .tar
  • bin/java
    .elf linux x64
  • bin/jfr
    .elf linux x64
  • bin/jrunscript
    .elf linux x64
  • bin/keytool
    .elf linux x64
  • bin/rmiregistry
    .elf linux x64
  • lib/jexec
    .elf linux x64
  • lib/libawt.so
    .elf linux x64
  • lib/libawt_headless.so
    .elf linux x64
  • lib/libdt_socket.so
    .elf linux x64
  • lib/libextnet.so
    .elf linux x64
  • lib/libfontmanager.so
    .elf linux x64
  • lib/libfreetype.so
    .elf linux x64
  • lib/libinstrument.so
    .elf linux x64
  • lib/libj2gss.so
    .elf linux x64
  • lib/libj2pkcs11.so
    .elf linux x64
  • lib/libjaas.so
    .elf linux x64
  • lib/libjava.so
    .elf linux x64
  • lib/libjavajpeg.so
    .elf linux x64
  • lib/libjawt.so
    .elf linux x64
  • lib/libjdwp.so
    .elf linux x64
  • lib/libjimage.so
    .elf linux x64
  • lib/libjli.so
    .elf linux x64
  • lib/libjsig.so
    .elf linux x64
  • lib/liblcms.so
    .elf linux x64
  • lib/libmanagement.so
    .elf linux x64
  • lib/libmanagement_agent.so
    .elf linux x64
  • lib/libmanagement_ext.so
    .elf linux x64
  • lib/libmlib_image.so
    .elf linux x64
  • lib/libnet.so
    .elf linux x64
  • lib/libnio.so
    .elf linux x64
  • lib/libprefs.so
    .elf linux x64
  • lib/librmi.so
    .elf linux x64
  • lib/libsctp.so
    .elf linux x64
  • lib/libverify.so
    .elf linux x64
  • lib/libzip.so
    .elf linux x64
  • lib/server/libjsig.so
    .elf linux x64
  • lib/server/libjvm.so
    .elf linux x64
  • release
  • cacio-androidnw-1.10-SNAPSHOT.jar
    .jar
  • cacio-shared-1.10-SNAPSHOT.jar
    .jar
  • cacio-shared-1.18-SNAPSHOT.jar
    .jar
  • cacio-tta-1.18-SNAPSHOT.jar
    .jar
  • default.json
  • forge_installer.jar
    .jar
  • java_sandbox.policy
  • language_list.txt
  • launcher_profiles.json
  • log4j-rce-patch-1.12.xml
    .xml
  • log4j-rce-patch-1.7.xml
    .xml
  • lwjgl-glfw-classes.jar
    .jar
  • options.txt
  • pojavlauncher.png
    .png
  • pojavtext.png
    .png
  • pro-grade.jar
    .jar
  • resolv.conf
  • universal.tar.xz
    .xz
  • version

Android Permissions

base.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.FOREGROUND_SERVICE