Overview

overview

7

Static

static

7

PojavLaunc...re.apk

android-9-x86

1

PojavLaunc...re.apk

android-13-x64

7

ResConfHack.jar

windows7-x64

1

ResConfHack.jar

windows10-2004-x64

7

arc_dns_injector.jar

windows7-x64

1

arc_dns_injector.jar

windows10-2004-x64

7

bin/java

debian-9-armhf

bin/jfr

debian-9-armhf

bin/keytool

debian-9-armhf

lib/jexec

debian-9-armhf

lib/libawt...ess.so

debian-9-armhf

1

lib/libextnet.so

debian-9-armhf

1

lib/libfreetype.so

debian-9-armhf

1

lib/libj2gss.so

debian-9-armhf

1

lib/libjaas.so

debian-9-armhf

1

lib/libjavajpeg.so

debian-9-armhf

1

lib/libjdwp.so

debian-9-armhf

1

lib/libjli.so

debian-9-armhf

1

lib/liblcms.so

debian-9-armhf

1

lib/libman...ent.so

debian-9-armhf

1

lib/libmlib_image.so

debian-9-armhf

1

lib/libnio.so

debian-9-armhf

1

lib/librmi.so

debian-9-armhf

1

lib/libverify.so

debian-9-armhf

1

lib/server/libjsig.so

debian-9-armhf

1

bin/java

ubuntu-18.04-amd64

bin/java

debian-9-armhf

bin/java

debian-9-mips

bin/java

debian-9-mipsel

bin/jfr

ubuntu-18.04-amd64

bin/jfr

debian-9-armhf

bin/jfr

debian-9-mips

Sharing

Copy URL Twitter E-mail

General

  • Target

    PojavLauncher_edelweiss-20230928-9484d0c-v3_openjdk_Apkpure.apk

  • Size

    105.4MB

  • MD5

    3b597539770d4c09503205695acddf26

  • SHA1

    cdb8375e6048e36ffb3522c8c990b29c2ae3288f

  • SHA256

    3c378ca415387c86444c5010df7208914e8479be682b70f1757554d92a8a3843

  • SHA512

    574c9cec3462360b2cb3fc70e606296b6acb443045aeda032f76f770e1d8d81db3dddc5d61280c15cbee4cec24218e45a67e2bae71c0d56a0fde777e0d8398dd

  • SSDEEP

    3145728:I6s+TuTk+xm2xUh2BESVA86LdMBKM2+W3Vz:XsKUs2+VVlMsQW3Vz

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 4 IoCs

Files

  • PojavLauncher_edelweiss-20230928-9484d0c-v3_openjdk_Apkpure.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    net.kdt.pojavlaunch

    net.kdt.pojavlaunch.TestStorageActivity


  • LICENSE_OFL.txt
  • ResConfHack.jar
    .jar
  • about_en.txt
  • arc_dns_injector.jar
    .jar
  • bin-arm.tar.xz
    .xz
  • bin-arm.tar
    .tar
  • bin/java
    .elf linux arm
  • bin/jfr
    .elf linux arm
  • bin/jrunscript
    .elf linux arm
  • bin/keytool
    .elf linux arm
  • bin/rmiregistry
    .elf linux arm
  • lib/jexec
    .elf linux arm
  • lib/libawt.so
    .elf linux arm
  • lib/libawt_headless.so
    .elf linux arm
  • lib/libdt_socket.so
    .elf linux arm
  • lib/libextnet.so
    .elf linux arm
  • lib/libfontmanager.so
    .elf linux arm
  • lib/libfreetype.so
    .elf linux arm
  • lib/libinstrument.so
    .elf linux arm
  • lib/libj2gss.so
    .elf linux arm
  • lib/libj2pkcs11.so
    .elf linux arm
  • lib/libjaas.so
    .elf linux arm
  • lib/libjava.so
    .elf linux arm
  • lib/libjavajpeg.so
    .elf linux arm
  • lib/libjawt.so
    .elf linux arm
  • lib/libjdwp.so
    .elf linux arm
  • lib/libjimage.so
    .elf linux arm
  • lib/libjli.so
    .elf linux arm
  • lib/libjsig.so
    .elf linux arm
  • lib/liblcms.so
    .elf linux arm
  • lib/libmanagement.so
    .elf linux arm
  • lib/libmanagement_agent.so
    .elf linux arm
  • lib/libmanagement_ext.so
    .elf linux arm
  • lib/libmlib_image.so
    .elf linux arm
  • lib/libnet.so
    .elf linux arm
  • lib/libnio.so
    .elf linux arm
  • lib/libprefs.so
    .elf linux arm
  • lib/librmi.so
    .elf linux arm
  • lib/libsctp.so
    .elf linux arm
  • lib/libverify.so
    .elf linux arm
  • lib/libzip.so
    .elf linux arm
  • lib/server/libjsig.so
    .elf linux arm
  • lib/server/libjvm.so
    .elf linux arm
  • release
  • bin-arm64.tar.xz
    .xz
  • bin-arm64.tar
    .tar
  • bin/java
    .elf linux aarch64
  • bin/jfr
    .elf linux aarch64
  • bin/jrunscript
    .elf linux aarch64
  • bin/keytool
    .elf linux aarch64
  • bin/rmiregistry
    .elf linux aarch64
  • lib/jexec
    .elf linux aarch64
  • lib/libawt.so
    .elf linux aarch64
  • lib/libawt_headless.so
    .elf linux aarch64
  • lib/libdt_socket.so
    .elf linux aarch64
  • lib/libextnet.so
    .elf linux aarch64
  • lib/libfontmanager.so
    .elf linux aarch64
  • lib/libfreetype.so
    .elf linux aarch64
  • lib/libinstrument.so
    .elf linux aarch64
  • lib/libj2gss.so
    .elf linux aarch64
  • lib/libj2pkcs11.so
    .elf linux aarch64
  • lib/libjaas.so
    .elf linux aarch64
  • lib/libjava.so
    .elf linux aarch64
  • lib/libjavajpeg.so
    .elf linux aarch64
  • lib/libjawt.so
    .elf linux aarch64
  • lib/libjdwp.so
    .elf linux aarch64
  • lib/libjimage.so
    .elf linux aarch64
  • lib/libjli.so
    .elf linux aarch64
  • lib/libjsig.so
    .elf linux aarch64
  • lib/liblcms.so
    .elf linux aarch64
  • lib/libmanagement.so
    .elf linux aarch64
  • lib/libmanagement_agent.so
    .elf linux aarch64
  • lib/libmanagement_ext.so
    .elf linux aarch64
  • lib/libmlib_image.so
    .elf linux aarch64
  • lib/libnet.so
    .elf linux aarch64
  • lib/libnio.so
    .elf linux aarch64
  • lib/libprefs.so
    .elf linux aarch64
  • lib/librmi.so
    .elf linux aarch64
  • lib/libsctp.so
    .elf linux aarch64
  • lib/libverify.so
    .elf linux aarch64
  • lib/libzip.so
    .elf linux aarch64
  • lib/server/libjsig.so
    .elf linux aarch64
  • lib/server/libjvm.so
    .elf linux aarch64
  • release
  • bin-x86.tar.xz
    .xz
  • bin-x86.tar
    .tar
  • bin/java
    .elf linux x86
  • bin/jfr
    .elf linux x86
  • bin/jrunscript
    .elf linux x86
  • bin/keytool
    .elf linux x86
  • bin/rmiregistry
    .elf linux x86
  • lib/jexec
    .elf linux x86
  • lib/libawt.so
    .elf linux x86
  • lib/libawt_headless.so
    .elf linux x86
  • lib/libdt_socket.so
    .elf linux x86
  • lib/libextnet.so
    .elf linux x86
  • lib/libfontmanager.so
    .elf linux x86
  • lib/libfreetype.so
    .elf linux x86
  • lib/libinstrument.so
    .elf linux x86
  • lib/libj2gss.so
    .elf linux x86
  • lib/libj2pkcs11.so
    .elf linux x86
  • lib/libjaas.so
    .elf linux x86
  • lib/libjava.so
    .elf linux x86
  • lib/libjavajpeg.so
    .elf linux x86
  • lib/libjawt.so
    .elf linux x86
  • lib/libjdwp.so
    .elf linux x86
  • lib/libjimage.so
    .elf linux x86
  • lib/libjli.so
    .elf linux x86
  • lib/libjsig.so
    .elf linux x86
  • lib/liblcms.so
    .elf linux x86
  • lib/libmanagement.so
    .elf linux x86
  • lib/libmanagement_agent.so
    .elf linux x86
  • lib/libmanagement_ext.so
    .elf linux x86
  • lib/libmlib_image.so
    .elf linux x86
  • lib/libnet.so
    .elf linux x86
  • lib/libnio.so
    .elf linux x86
  • lib/libprefs.so
    .elf linux x86
  • lib/librmi.so
    .elf linux x86
  • lib/libsctp.so
    .elf linux x86
  • lib/libverify.so
    .elf linux x86
  • lib/libzip.so
    .elf linux x86
  • lib/server/libjsig.so
    .elf linux x86
  • lib/server/libjvm.so
    .elf linux x86
  • release
  • bin-x86_64.tar.xz
    .xz
  • bin-x86_64.tar
    .tar
  • bin/java
    .elf linux x64
  • bin/jfr
    .elf linux x64
  • bin/jrunscript
    .elf linux x64
  • bin/keytool
    .elf linux x64
  • bin/rmiregistry
    .elf linux x64
  • lib/jexec
    .elf linux x64
  • lib/libawt.so
    .elf linux x64
  • lib/libawt_headless.so
    .elf linux x64
  • lib/libdt_socket.so
    .elf linux x64
  • lib/libextnet.so
    .elf linux x64
  • lib/libfontmanager.so
    .elf linux x64
  • lib/libfreetype.so
    .elf linux x64
  • lib/libinstrument.so
    .elf linux x64
  • lib/libj2gss.so
    .elf linux x64
  • lib/libj2pkcs11.so
    .elf linux x64
  • lib/libjaas.so
    .elf linux x64
  • lib/libjava.so
    .elf linux x64
  • lib/libjavajpeg.so
    .elf linux x64
  • lib/libjawt.so
    .elf linux x64
  • lib/libjdwp.so
    .elf linux x64
  • lib/libjimage.so
    .elf linux x64
  • lib/libjli.so
    .elf linux x64
  • lib/libjsig.so
    .elf linux x64
  • lib/liblcms.so
    .elf linux x64
  • lib/libmanagement.so
    .elf linux x64
  • lib/libmanagement_agent.so
    .elf linux x64
  • lib/libmanagement_ext.so
    .elf linux x64
  • lib/libmlib_image.so
    .elf linux x64
  • lib/libnet.so
    .elf linux x64
  • lib/libnio.so
    .elf linux x64
  • lib/libprefs.so
    .elf linux x64
  • lib/librmi.so
    .elf linux x64
  • lib/libsctp.so
    .elf linux x64
  • lib/libverify.so
    .elf linux x64
  • lib/libzip.so
    .elf linux x64
  • lib/server/libjsig.so
    .elf linux x64
  • lib/server/libjvm.so
    .elf linux x64
  • release
  • cacio-androidnw-1.10-SNAPSHOT.jar
    .jar
  • cacio-shared-1.10-SNAPSHOT.jar
    .jar
  • cacio-shared-1.18-SNAPSHOT.jar
    .jar
  • cacio-tta-1.18-SNAPSHOT.jar
    .jar
  • default.json
  • forge_installer.jar
    .jar
  • java_sandbox.policy
  • language_list.txt
  • launcher_profiles.json
  • log4j-rce-patch-1.12.xml
    .xml
  • log4j-rce-patch-1.7.xml
    .xml
  • lwjgl-glfw-classes.jar
    .jar
  • options.txt
  • pojavlauncher.png
    .png
  • pojavtext.png
    .png
  • pro-grade.jar
    .jar
  • resolv.conf
  • universal.tar.xz
    .xz
  • version

Android Permissions

PojavLauncher_edelweiss-20230928-9484d0c-v3_openjdk_Apkpure.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.FOREGROUND_SERVICE