Analysis

  • max time kernel
    7s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    13-02-2024 03:18

General

  • Target

    8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be.apk

  • Size

    1.7MB

  • MD5

    4877d7b6903450a897dc3226ae97c3db

  • SHA1

    2b4f8b7ff433a849e97fb74559a698d6fc6c6f11

  • SHA256

    8d9a48a2f604b1ecad1feb7afdacce1c9ed29f6d52299c478cb29b097af642be

  • SHA512

    e0e719a1f75bb08fca2410c0527b451c9efa6179bc7a44e497c2563259fa9b0ccca836f24dc3043722cb74fcf799dcb78c1b6519a56c358040a47a88c02578fd

  • SSDEEP

    49152:Q/oWyPEjuHg4nOijiJ6/dH50JThfv3MXCEj0:a+ESA4nRf50jf/eCEj0

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.ballhop.nearme.gamecenter
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.ballhop.nearme.gamecenter/databases/com.google.android.datatransport.events-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.ballhop.nearme.gamecenter/files/923bb6a1.dex

    Filesize

    1.1MB

    MD5

    1a85bf10002e7a7ebe7a580fc19bf933

    SHA1

    fe158a7c77ba9b0ca114f0e486a71f9ac772c43c

    SHA256

    3262f7d4ff707a137f80d04269099d4a14e87e2683364dde119884d128144852

    SHA512

    3707e195e85ebb9d86fc970acc234a0074c03a7003bb2977aeb645fc29df1866d9597bd98ebf1d260a87c19927f9f3bfb284de99d9c19f72dc62984875ac196c

  • /data/data/com.ballhop.nearme.gamecenter/files/PersistedInstallation377009866780303755tmp

    Filesize

    568B

    MD5

    3dbbfb8e515aab02d762550c358c148b

    SHA1

    24d11572d72fdd4c59978cbf43702fffa95a72a5

    SHA256

    0293ff394b66828b3ece1d22e6017934d001222ac48bee8e489bd2622398c794

    SHA512

    f86456810cb9d30f884b8e8d2cdc6f96191d7aa465852942e303f9d443031ab0d82e3a063ff9042c0b99ec4df5cdfc111e32ce12117f7bebc9f9eb38d23640d7

  • /data/data/com.ballhop.nearme.gamecenter/files/PersistedInstallation3803469263139803723tmp

    Filesize

    90B

    MD5

    9c8da1d634526dea4da4abf19c074b54

    SHA1

    c311703c54282cbb04b0c1ae4cc79b02448608e6

    SHA256

    8abccaf1a3a4465a18dfb7d98eff27966d248affe76473ab07317914d09fdebe

    SHA512

    1545dddac92cd65e6337bbd9f9c9d8b1c40deaa6e8382749adde7a39b33c2d5659f3fcba461f9411b85cc10222a9c2f0f7c5b39c5150233e4e24fc457fd51511

  • /data/data/com.ballhop.nearme.gamecenter/files/ncftr

    Filesize

    419B

    MD5

    a17c1c578487dceefdfb4e24dbaaeed6

    SHA1

    df9840d5764d7797670193d23a884a7fd13d997a

    SHA256

    4e2faddd89b01e40ff81db5a313ac26628dcbfca37f1d900efbdae9d7187fe9c

    SHA512

    3274b637a3117bd445140009d1685e1cdb6a90b3156ff4510c26bf01e754b6a2392dde7bcdc4c733bafa4858dca3559d785366639a90b740719e4335b08fbebc

  • /data/data/com.ballhop.nearme.gamecenter/files/uMPmi

    Filesize

    246B

    MD5

    f5d3028b86b88f25e45b636e3be8a7f0

    SHA1

    e0678a9535ff7637bfc2d1fdb9d8ff7f1cc03aec

    SHA256

    15829722c4b71477489e5f30b13d559764d7479ac325f737de1804946275980a

    SHA512

    99c865f1934f35f74eb2b19a1ea8b8e69bd95173ce9080d46a134b0413177ed286296f4947276a9fb769eabb10d90f2fa0cb7ec58e1260d7b7633880c27b912f

  • /data/user/0/com.ballhop.nearme.gamecenter/files/923bb6a1.dex

    Filesize

    2.7MB

    MD5

    949a370f2b874ac7489b9e70aa73d1f0

    SHA1

    9cfd5520d95b497c0c24067a1678d204fab852be

    SHA256

    6d20f4d0eabb0850cb8116a150ba1110dc121caff631797f3f39c2c787a4fb56

    SHA512

    4cc637139bb3a312469b19dc04ee30ed4f5cf009e6ff460ddd133243e57bb5d69ae2ac6156b35a883a4000dec60efa5fa4e88ae66ad6080f485c32f0704a945a