Analysis
-
max time kernel
7s -
max time network
141s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
13-02-2024 03:18
Static task
static1
Behavioral task
behavioral1
Sample
8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be.apk
-
Size
1.7MB
-
MD5
4877d7b6903450a897dc3226ae97c3db
-
SHA1
2b4f8b7ff433a849e97fb74559a698d6fc6c6f11
-
SHA256
8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be
-
SHA512
e0e719a1f75bb08fca2410c0527b451c9efa6179bc7a44e497c2563259fa9b0ccca836f24dc3043722cb74fcf799dcb78c1b6519a56c358040a47a88c02578fd
-
SSDEEP
49152:Q/oWyPEjuHg4nOijiJ6/dH50JThfv3MXCEj0:a+ESA4nRf50jf/eCEj0
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.ballhop.nearme.gamecenter/files/923bb6a1.dex 4228 com.ballhop.nearme.gamecenter -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ballhop.nearme.gamecenter
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
1.1MB
MD51a85bf10002e7a7ebe7a580fc19bf933
SHA1fe158a7c77ba9b0ca114f0e486a71f9ac772c43c
SHA2563262f7d4ff707a137f80d04269099d4a14e87e2683364dde119884d128144852
SHA5123707e195e85ebb9d86fc970acc234a0074c03a7003bb2977aeb645fc29df1866d9597bd98ebf1d260a87c19927f9f3bfb284de99d9c19f72dc62984875ac196c
-
Filesize
568B
MD53dbbfb8e515aab02d762550c358c148b
SHA124d11572d72fdd4c59978cbf43702fffa95a72a5
SHA2560293ff394b66828b3ece1d22e6017934d001222ac48bee8e489bd2622398c794
SHA512f86456810cb9d30f884b8e8d2cdc6f96191d7aa465852942e303f9d443031ab0d82e3a063ff9042c0b99ec4df5cdfc111e32ce12117f7bebc9f9eb38d23640d7
-
Filesize
90B
MD59c8da1d634526dea4da4abf19c074b54
SHA1c311703c54282cbb04b0c1ae4cc79b02448608e6
SHA2568abccaf1a3a4465a18dfb7d98eff27966d248affe76473ab07317914d09fdebe
SHA5121545dddac92cd65e6337bbd9f9c9d8b1c40deaa6e8382749adde7a39b33c2d5659f3fcba461f9411b85cc10222a9c2f0f7c5b39c5150233e4e24fc457fd51511
-
Filesize
419B
MD5a17c1c578487dceefdfb4e24dbaaeed6
SHA1df9840d5764d7797670193d23a884a7fd13d997a
SHA2564e2faddd89b01e40ff81db5a313ac26628dcbfca37f1d900efbdae9d7187fe9c
SHA5123274b637a3117bd445140009d1685e1cdb6a90b3156ff4510c26bf01e754b6a2392dde7bcdc4c733bafa4858dca3559d785366639a90b740719e4335b08fbebc
-
Filesize
246B
MD5f5d3028b86b88f25e45b636e3be8a7f0
SHA1e0678a9535ff7637bfc2d1fdb9d8ff7f1cc03aec
SHA25615829722c4b71477489e5f30b13d559764d7479ac325f737de1804946275980a
SHA51299c865f1934f35f74eb2b19a1ea8b8e69bd95173ce9080d46a134b0413177ed286296f4947276a9fb769eabb10d90f2fa0cb7ec58e1260d7b7633880c27b912f
-
Filesize
2.7MB
MD5949a370f2b874ac7489b9e70aa73d1f0
SHA19cfd5520d95b497c0c24067a1678d204fab852be
SHA2566d20f4d0eabb0850cb8116a150ba1110dc121caff631797f3f39c2c787a4fb56
SHA5124cc637139bb3a312469b19dc04ee30ed4f5cf009e6ff460ddd133243e57bb5d69ae2ac6156b35a883a4000dec60efa5fa4e88ae66ad6080f485c32f0704a945a