Analysis

  • max time kernel
    2453587s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 08:42

General

  • Target

    97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd.apk

  • Size

    1.7MB

  • MD5

    02d4b2588d3d2e4ad03562ec0955d88e

  • SHA1

    dea93eb4c74040690f9cd403b2c2826e30b03a1b

  • SHA256

    97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd

  • SHA512

    debfce813e2e461cca3d281b068a98b1fd918ec57c439de2a855d3b2da29d30f761a3208cdd2b8c31c837d2383bf2412f99127636ba40ed5ac3efa922485e6b5

  • SSDEEP

    24576:ffFbuKEuZtzs7WZFIvMstvniClTGW0cWHrXek5DEhpMjKaOFpiW773tmX9NO:ffHEuZpsOIvzniYKcWHrXn2u4LvtmzO

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.herocraft.game.lite.st_ussr_usa
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:5173

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    15d5b92dcbda7ef7f9ca327a903e46e4

    SHA1

    ca153b66028a58d90346ff8abadbdf01b95c37b1

    SHA256

    e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

    SHA512

    2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

  • /data/data/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    d1737ecdbb4768e5343b483b5034f488

    SHA1

    2589173f3cc85b4f035eeb9cec9b12317480e03d

    SHA256

    6615ba3b0bbae0c4da6147d29373b66c9e031b863be25e5099807d32d6b68849

    SHA512

    af454c0752c8a4fc67a74c6d5c2619e01be49e0886bdb6bbde97e9aa2fa85025599fa799e8d5518c5c2ae5806b3d05eba117db70ccc718878f0edb996411da80

  • /data/data/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    bccc9edbf31b2103e16e87b2483331d4

    SHA1

    56fa40203c6b8a7d25b5cdd40922ad13af0b184c

    SHA256

    6442a7d3d5cdc959b680aa8d820081047ed8191da2b9b78782795971bab528ab

    SHA512

    d7cfa9b0774f0eec0e7718aa7df51e23561d620ef38aa7e051f74cd7023e52e323a50aba783643d2a0be67d9483b60e04f374314e377fed4a61e411dcf695d94

  • /data/data/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    24ee4231dd38231fb6ebb267611db095

    SHA1

    c80a6171e917ed2a7354ded23d13d1e4da266bfc

    SHA256

    37899936c3b5b32ad2888e25e4deb3e20f75852d60ffb74a6d6b80414512bcc8

    SHA512

    da76c3cd9ee3d3623eaa6328978ad0b1b69b1f6a270586df96db774506f3d9d339f0208062c24b375aa045e5747a4382b61d072ea0c2a77e29b1fb663e41fb04

  • /data/data/com.herocraft.game.lite.st_ussr_usa/files/04f9786e.dex

    Filesize

    262KB

    MD5

    1001c5f7faeb180f386908d4ecb0bac4

    SHA1

    dd588f7c7afec9d66d964346106a21fc49ced7cc

    SHA256

    609b1b84bdfde433d00d4b5ea376bffddc59ff3a66f982b8b7dc6fdec4e17781

    SHA512

    6652c992b637e66ae761ea1567e2dba53b8b5e3bbe017d8eca7de44dffef28fa97813dce0c91287990ce2dbc35417d5792d2c3f21938f611a3e21c8f9a9df5fa

  • /data/data/com.herocraft.game.lite.st_ussr_usa/files/BGEaUZrY

    Filesize

    504B

    MD5

    0155b65c463fe329965f0ff7f00004ad

    SHA1

    a38ce5ff08463e1888af624eae7735b54db4296e

    SHA256

    342588ebb3bafe114875668a246d74a9fb87fd8841b45bf68c5be77a9fd1a791

    SHA512

    0a47b9fbba6c9427902a446859e90e0c88dcaae7af88a3c274ad455d9197801d51a97ca3b79f23707e277461d7f0e9629d2e69f80acc7c03ecc98afcf0e5af3e

  • /data/data/com.herocraft.game.lite.st_ussr_usa/files/BGEaUZrY

    Filesize

    740B

    MD5

    1688493878e52d9e04cc9d08af659066

    SHA1

    8485e45d616025947701b683d4011692f239ebd8

    SHA256

    1e4cbc81eded72619c6c46b860ecf3145f86594f378de2b314221e947d1cd590

    SHA512

    5925b7100fbf8101d1e481b469717e2419020ec738c572e04d60642632af215ebb1af5a1c0255dd768b22766f128dd0f135924bdc56b7babc5cf7e239b3f82de

  • /data/data/com.herocraft.game.lite.st_ussr_usa/files/PersistedInstallation8059561645658915370tmp

    Filesize

    90B

    MD5

    b676bf00a933a576e9dc9b4f3b383c4e

    SHA1

    4e14d06bbf08a8b889439af9892bb82ec7de6185

    SHA256

    df6d7420eb0ef533d6818a7702fdde79697e7acc6b61e33d821dd1300348127c

    SHA512

    8f2075081c9f95b22726181544dd21dd7257832d924c5379dd7d060c4987cf17eb0c58ea7ce8e6c8e8e04f172f3658765260bc2cd10f553fd47b6c27819d08f9

  • /data/data/com.herocraft.game.lite.st_ussr_usa/files/TrPJFdsN

    Filesize

    336B

    MD5

    bd28638b7e8a91d771ccb6ec784be3a8

    SHA1

    a01631aab6b6106f4e913eb968e5301fd9dd7303

    SHA256

    a4b6dbcb655a1fdc59ee8f9e0719513cf4a9b61b4f2fa644ae8be40236dd363a

    SHA512

    4250cfe1be8f643d1a4f4e6ee45f3c838598b79a4f5fc3987b513edb8ddbcc88b35e5a13153059e845cefe7c2ebba7d053863cbbc0713c1f0ac1ac1d9b4caf6f

  • /data/data/com.herocraft.game.lite.st_ussr_usa/files/TrPJFdsN

    Filesize

    336B

    MD5

    17452545cbcb5c1dba101ddf7750c68b

    SHA1

    084776ce476ed82b90318647979df2266143eb81

    SHA256

    382a66012ccdabc9d3e2d3c17559293974d1053833201fcf6a8fd116a9930d8a

    SHA512

    042854f5da3e69c248dfe272179b1a005ad0060298eac67e69d1020172e972cfcdad01cfcc397a3b1ae8982daa1d35224b9e3852ef5be8e76a2e090e5bc1027a

  • /data/data/com.herocraft.game.lite.st_ussr_usa/files/TrPJFdsN

    Filesize

    336B

    MD5

    342fc5b7ad5e026c586abbb5d70e7dac

    SHA1

    6fadf7d6b48c54169aabe02bc0fc2f908a67270c

    SHA256

    57328e3e82876378d0a9c480002aa04eed2da45d067bce3894712941c689a41f

    SHA512

    4e0ac984b7f6e0b9f5dc04a5b29691c1dd85bf5fb7ee8d7c7c0362a4c3fa74d9ddf64ea375ba1c7df13b645ac84de355c884bf547394c4155801a19c64ce134a

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/04f9786e.dex

    Filesize

    614KB

    MD5

    b28b668926d59c1ed00e0643327a5735

    SHA1

    18afbb75569fc70c9f789a3c2bab3d70f016e172

    SHA256

    6859effa324baf7b333005f3d205aa6ece5a19c4d74698769d75c62af031ee55

    SHA512

    477002c55c173f7e11bbc4d64c831748d82a5edc3cd803b5989995d2b28847aeb6c0b612cad3c59d8e879d669323769e408d2f0096624c00747a69f704e33d3f