com.cmcm.arrowio.AppActivity
android.intent.action.MAIN
android.intent.action.VIEW
com.tencent.tauth.AuthActivity
android.intent.action.VIEW
Overview
overview
7Static
static
7910f355b1f...2d.apk
android-9-x86
7Assembly-C...ss.dll
windows7-x64
1Assembly-C...ss.dll
windows10-2004-x64
1Assembly-CSharp.dll
windows7-x64
1Assembly-CSharp.dll
windows10-2004-x64
1Assembly-U...pt.dll
windows7-x64
1Assembly-U...pt.dll
windows10-2004-x64
1HOTween.dll
windows7-x64
1HOTween.dll
windows10-2004-x64
1Mono.Posix.dll
windows7-x64
1Mono.Posix.dll
windows10-2004-x64
1Mono.Security.dll
windows7-x64
1Mono.Security.dll
windows10-2004-x64
1System.Con...on.dll
windows7-x64
1System.Con...on.dll
windows10-2004-x64
1System.Core.dll
windows7-x64
1System.Core.dll
windows10-2004-x64
1System.Security.dll
windows7-x64
1System.Security.dll
windows10-2004-x64
1System.Xml.dll
windows7-x64
1System.Xml.dll
windows10-2004-x64
1System.dll
windows7-x64
1System.dll
windows10-2004-x64
1UnityEngin...ng.dll
windows7-x64
1UnityEngin...ng.dll
windows10-2004-x64
1UnityEngine.UI.dll
windows7-x64
1UnityEngine.UI.dll
windows10-2004-x64
1UnityEngine.dll
windows7-x64
1UnityEngine.dll
windows10-2004-x64
1dedfdbf894...67.ps1
windows7-x64
1dedfdbf894...67.ps1
windows10-2004-x64
1libwbsafeedit
debian-9-armhf
1Static task
static1
Behavioral task
behavioral1
Sample
910f355b1f75e5209d1f4153de078fa001fd9733330b7ade1873bb2448e7a42d.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
Assembly-CSharp-firstpass.dll
Resource
win7-20230831-en
Behavioral task
behavioral3
Sample
Assembly-CSharp-firstpass.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral4
Sample
Assembly-CSharp.dll
Resource
win7-20230831-en
Behavioral task
behavioral5
Sample
Assembly-CSharp.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral6
Sample
Assembly-UnityScript.dll
Resource
win7-20230831-en
Behavioral task
behavioral7
Sample
Assembly-UnityScript.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral8
Sample
HOTween.dll
Resource
win7-20230831-en
Behavioral task
behavioral9
Sample
HOTween.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral10
Sample
Mono.Posix.dll
Resource
win7-20230831-en
Behavioral task
behavioral11
Sample
Mono.Posix.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral12
Sample
Mono.Security.dll
Resource
win7-20230831-en
Behavioral task
behavioral13
Sample
Mono.Security.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral14
Sample
System.Configuration.dll
Resource
win7-20230831-en
Behavioral task
behavioral15
Sample
System.Configuration.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral16
Sample
System.Core.dll
Resource
win7-20230831-en
Behavioral task
behavioral17
Sample
System.Core.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral18
Sample
System.Security.dll
Resource
win7-20230831-en
Behavioral task
behavioral19
Sample
System.Security.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral20
Sample
System.Xml.dll
Resource
win7-20230831-en
Behavioral task
behavioral21
Sample
System.Xml.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral22
Sample
System.dll
Resource
win7-20230831-en
Behavioral task
behavioral23
Sample
System.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral24
Sample
UnityEngine.Networking.dll
Resource
win7-20230831-en
Behavioral task
behavioral25
Sample
UnityEngine.Networking.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral26
Sample
UnityEngine.UI.dll
Resource
win7-20230831-en
Behavioral task
behavioral27
Sample
UnityEngine.UI.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral28
Sample
UnityEngine.dll
Resource
win7-20230831-en
Behavioral task
behavioral29
Sample
UnityEngine.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral30
Sample
dedfdbf894e736445856712b064fef67.ps1
Resource
win7-20230831-en
Behavioral task
behavioral31
Sample
dedfdbf894e736445856712b064fef67.ps1
Resource
win10v2004-20230915-en
Behavioral task
behavioral32
Sample
libwbsafeedit
Resource
debian9-armhf-20230831-en
Target
910f355b1f75e5209d1f4153de078fa001fd9733330b7ade1873bb2448e7a42d.apk.zip
Size
46.7MB
MD5
2bd98348ffae1f0ba217974ca561a61f
SHA1
ee78635e0652807cc159bf1a4fd3181d800bcb11
SHA256
10aa01e6acc8c86625168daa361c5516b24ca66b3435817ab589446b330850e2
SHA512
c712e8a1f2c8770994b2f12a6747ca3c6425177964663062b16fe124f5c37f66fcc5cf7ad04adedc3bc852ad23a5bed42b2f371e2826a6ceed59a2064aabe1d1
SSDEEP
786432:H0uz8LmhgX31tQLqInJ8y0/TNz5MT4eE8z5imMCQpxvgS0PF:HTiXlInJ87hzu3E8P+iF
description | ioc |
---|---|
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
Checks for missing Authenticode signature.
resource |
---|
unpack002/Assembly-CSharp-firstpass.dll |
unpack002/Assembly-CSharp.dll |
unpack002/Assembly-UnityScript.dll |
unpack002/HOTween.dll |
unpack002/Mono.Posix.dll |
unpack002/Mono.Security.dll |
unpack002/System.Configuration.dll |
unpack002/System.Core.dll |
unpack002/System.Security.dll |
unpack002/System.Xml.dll |
unpack002/System.dll |
unpack002/UnityEngine.Networking.dll |
unpack002/UnityEngine.UI.dll |
unpack002/UnityEngine.dll |
unpack002/mscorlib.dll |
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_LOGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_TASKS
com.android.vending.BILLING
com.google.android.c2dm.permission.RECEIVE
com.android.vending.INSTALL_REFERRER
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.cmcm.arrowio.webview.broadcast.gamebroadcast
com.arrow.ARROW_TIMER
android.net.conn.CONNECTIVITY_CHANGE
com.cmplay.base.util.webview.broadcast.gamebroadcast
start_service
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ