Analysis

  • max time kernel
    2453796s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 08:42

General

  • Target

    97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd.apk

  • Size

    1.7MB

  • MD5

    02d4b2588d3d2e4ad03562ec0955d88e

  • SHA1

    dea93eb4c74040690f9cd403b2c2826e30b03a1b

  • SHA256

    97149a87239eb0aa5e42b25cfd3ffbd5399791d37f51621ce52b6a21aa7869bd

  • SHA512

    debfce813e2e461cca3d281b068a98b1fd918ec57c439de2a855d3b2da29d30f761a3208cdd2b8c31c837d2383bf2412f99127636ba40ed5ac3efa922485e6b5

  • SSDEEP

    24576:ffFbuKEuZtzs7WZFIvMstvniClTGW0cWHrXek5DEhpMjKaOFpiW773tmX9NO:ffHEuZpsOIvzniYKcWHrXn2u4LvtmzO

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.herocraft.game.lite.st_ussr_usa
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events

    Filesize

    12KB

    MD5

    3cd9e0f51794ba56c6b658620c4a776e

    SHA1

    1a4c8b4baebf348297d3ffad7dc164208c50243d

    SHA256

    501b7371cfad19d926f53de991d54259fa0674618efcf344ccb0f2787d9a21b7

    SHA512

    36191d3e6b6a1cc90a5bb8cb49eb4269a563fad34c1f523ebb3eecdc98b4783e067296beee01959b46188621c2ba5732ead240c70daecc52fb3bf577e6e4d6fd

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    dca514ae87fe2bb9974d8fbc236b0a5d

    SHA1

    f3118453415121ce45c8b616aaba8870f20387d0

    SHA256

    5ea475358165c4a8ac83eab9cf45e21cfccfbb7ab168905e0f237e8012df64d4

    SHA512

    95733918ae720a3ccb3c6fb2ddc74e9d417d21ded606f1d67acf6488f0c0a6e816aef36f58af5e7e4285d5e48408bd951e43a6db7f333a4a7ca2b736c724a8f8

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    a1e48f9d0fad7f264851097f313aa7ea

    SHA1

    1d98211e2077f543a34e1b7639a5ee23f82f3487

    SHA256

    bab78d031a47648623d2d6021634bfcfa994bd0ff588574a876fe2b9ad2d5b56

    SHA512

    c0e207b3f29ec76bf231838d6fc711774699749516f01f8c136add1ad68b90f901a1a6eb9d90873c9def923fd32d75fecfc4d400cedac68d53cbe9d811b1d970

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/04f9786e.dex

    Filesize

    262KB

    MD5

    1001c5f7faeb180f386908d4ecb0bac4

    SHA1

    dd588f7c7afec9d66d964346106a21fc49ced7cc

    SHA256

    609b1b84bdfde433d00d4b5ea376bffddc59ff3a66f982b8b7dc6fdec4e17781

    SHA512

    6652c992b637e66ae761ea1567e2dba53b8b5e3bbe017d8eca7de44dffef28fa97813dce0c91287990ce2dbc35417d5792d2c3f21938f611a3e21c8f9a9df5fa

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/04f9786e.dex

    Filesize

    614KB

    MD5

    b28b668926d59c1ed00e0643327a5735

    SHA1

    18afbb75569fc70c9f789a3c2bab3d70f016e172

    SHA256

    6859effa324baf7b333005f3d205aa6ece5a19c4d74698769d75c62af031ee55

    SHA512

    477002c55c173f7e11bbc4d64c831748d82a5edc3cd803b5989995d2b28847aeb6c0b612cad3c59d8e879d669323769e408d2f0096624c00747a69f704e33d3f

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/BGEaUZrY

    Filesize

    504B

    MD5

    2416497af418b6aa2de9516148c8a80e

    SHA1

    d63b4df4d14a4db9ecba91ea97c7f4d3be0c85fd

    SHA256

    10dac127b164ec5f32a5b8e9fcb30296117fabe0995eeda688e0337fbce3bfd9

    SHA512

    dcfda7271be7d540b6be77368aeccbbb82e37ad1d201b6c20dfcffb642bdefff2bcf07c87ed29a9008253e37d256e58b3ca2c559728e1eb29dc2a56a9cf720c3

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/BGEaUZrY

    Filesize

    740B

    MD5

    9c8ab429a1b6f1dedb181ce6f592b6fb

    SHA1

    4ef873829cc0c3c6ac82442eca7f781e2ab124f4

    SHA256

    b82c104827e1b735f364606e69efcb8a97988d3001e4b94f9ac6ca503bf80f4e

    SHA512

    8815bc157df8ea9bef5e3eeb16c98f1f81c9d8316aaa3647e3ca8d4829a51bc6ff6232a646b95644c0de7f704505c299f23f887dc735c12cfbdb237c37389300

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/PersistedInstallation1001696407665055289tmp

    Filesize

    569B

    MD5

    0edab236dc83bf519950abde02e7c629

    SHA1

    a3f86c998e222b2c9cae52ee6736263de721c855

    SHA256

    8a85c4527aed03a5294e34d7c219d38fa8beb00cea212b0f32d9cdea7fc516cf

    SHA512

    cd650991db53834f86f37d89c76c7f59e70bb92c5697a7d91f2a82eb9a4e9c31d7ddebb254e8e85c7015a8a6f4972e805297471f891fa477fbb18033153012fd

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/TrPJFdsN

    Filesize

    336B

    MD5

    7d83f42aecf265017b06a348a6a2e1d9

    SHA1

    3dee8d2e93c3dacbac5455ca3cd8aed137a036fb

    SHA256

    db061fc9bb1dc4a4cd7f81f350c71967f41d81ca812ea71513c409f7f73e9560

    SHA512

    11e946bb3cf51525fdc0d250445d29b40010900382d68efc908e247cbc8902d440763c3902a4d55b3a11ecb3dabe8a3c1c59c53b4dfbf9e148f753f926434f0d

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/TrPJFdsN

    Filesize

    336B

    MD5

    41d5a04a25e6e819b95a520be49f23f8

    SHA1

    6a3448e72a4882a0177da1e0d6280bcdec59d76b

    SHA256

    5e98a17a741546b27780eaea9f9b1fbf0d4eb8d7a90aa94f2a81a19f33f83ebd

    SHA512

    b276ed355c406560829c605abb75be18e6c81f7a15186d719713c7892dae5b835d668d285e31659f803b7e50ddc6ca2ff33132e19da69569604ab97fd80e5ebb

  • /data/user/0/com.herocraft.game.lite.st_ussr_usa/files/TrPJFdsN

    Filesize

    336B

    MD5

    cfee5c240ef2b2de73d3c0724da3f0be

    SHA1

    ff47eb28b57a435882ec890b2823a6fa92dc369d

    SHA256

    19905235d67a54d10b995858ef8410df5f92393fc10ce23a29a18fd1c9ada2c3

    SHA512

    0ba5bd43f05ec70a0c59b63cd9b0ff75bfcaa354b279b14badff77715707ce67091ec3bc2097dea9c53d8e585d87a9246d5a31602ad154b730061808b7c6d41d