Analysis

  • max time kernel
    151s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    13/02/2024, 03:18

General

  • Target

    8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be.apk

  • Size

    1.7MB

  • MD5

    4877d7b6903450a897dc3226ae97c3db

  • SHA1

    2b4f8b7ff433a849e97fb74559a698d6fc6c6f11

  • SHA256

    8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be

  • SHA512

    e0e719a1f75bb08fca2410c0527b451c9efa6179bc7a44e497c2563259fa9b0ccca836f24dc3043722cb74fcf799dcb78c1b6519a56c358040a47a88c02578fd

  • SSDEEP

    49152:Q/oWyPEjuHg4nOijiJ6/dH50JThfv3MXCEj0:a+ESA4nRf50jf/eCEj0

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.ballhop.nearme.gamecenter
    1⤵
    • Loads dropped Dex/Jar
    PID:4717

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.ballhop.nearme.gamecenter/files/923bb6a1.dex

          Filesize

          1.1MB

          MD5

          1a85bf10002e7a7ebe7a580fc19bf933

          SHA1

          fe158a7c77ba9b0ca114f0e486a71f9ac772c43c

          SHA256

          3262f7d4ff707a137f80d04269099d4a14e87e2683364dde119884d128144852

          SHA512

          3707e195e85ebb9d86fc970acc234a0074c03a7003bb2977aeb645fc29df1866d9597bd98ebf1d260a87c19927f9f3bfb284de99d9c19f72dc62984875ac196c

        • /data/user/0/com.ballhop.nearme.gamecenter/files/923bb6a1.dex

          Filesize

          2.7MB

          MD5

          949a370f2b874ac7489b9e70aa73d1f0

          SHA1

          9cfd5520d95b497c0c24067a1678d204fab852be

          SHA256

          6d20f4d0eabb0850cb8116a150ba1110dc121caff631797f3f39c2c787a4fb56

          SHA512

          4cc637139bb3a312469b19dc04ee30ed4f5cf009e6ff460ddd133243e57bb5d69ae2ac6156b35a883a4000dec60efa5fa4e88ae66ad6080f485c32f0704a945a

        • /data/user/0/com.ballhop.nearme.gamecenter/files/ncftr

          Filesize

          722B

          MD5

          b61a182fa2dbe4323d6cbe4a3d98f6c4

          SHA1

          fef2b79a857d5812aee7b2c80eb7495079b56605

          SHA256

          7df48e4d3bc08220e069ea964e8406b58080053f82301c86b6e770331010d064

          SHA512

          1aa1a098ef50e06306bc699b60aa5acd698febbeb4c3869ddebc4526721d509b802afa67d36168ace545747aab1ef08cc823cffbb7526efd3ffd19df9517d85b

        • /data/user/0/com.ballhop.nearme.gamecenter/files/uMPmi

          Filesize

          246B

          MD5

          b591185e146e76d0c7d619775c2c6f1b

          SHA1

          b078ac9cbc9ae9ba27f20776d775970fcba98f0b

          SHA256

          2bcb6bf4d2fb99382456f960c075463b952c6040c2e65d017851ff66cc958773

          SHA512

          a406fbcb18b8acff67114a83f87743c7d31b095c3980793d33cbfea4a7e9ec6273d39a7a969ecd22d8fa153fe42cbb83c7ac9eab6b1d842cb7a80aa8c22521e7