Analysis
-
max time kernel
51s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
19-02-2024 19:28
Static task
static1
Behavioral task
behavioral1
Sample
uptodown-com.activision.callofduty.warzone.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
uptodown-com.activision.callofduty.warzone.apk
Resource
android-x64-20231215-en
General
-
Target
uptodown-com.activision.callofduty.warzone.apk
-
Size
6.2MB
-
MD5
3b918bcf21219ce96b3cd598259d58ec
-
SHA1
ab852bb514cba45c4311af83d2b51627e87649b0
-
SHA256
bd40c5bde39838fc593aee6560706c38178bc6765408cc88e676e942ba78df6c
-
SHA512
3dc5aa1b20aa529be64c3d5715b1dbdecde400265a509ab9c34f4eded51491c5acacfb06e5c7b52077e67546a46111d9e1ab7e05e82526290bd83887de29b4db
-
SSDEEP
98304:xzrMdaF3kRVY0rPGcnvTllA3GzfakGjOgCciqTnrXr/lPi:xzq/3GOTllAHE0/lPi
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
description ioc Process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.uptodown -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.uptodown -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
MD503f4ced02bfdce94d9a61b34d0b5c531
SHA16f7c3d09e2ce0690bfb035019e0bf7df299da196
SHA256ea9da9e54a3afef9c192b802959705b36168e51a20da3a58827afa12f703d68a
SHA512be9bd7c260168d092f0534e4eee79f03c482d9474933f85e17d333b67f2738f02ded347d7a1b18a4c1403033ffeb739830d58474816eb2980b31c20ecc03b2e1
-
Filesize
512B
MD55fec1a1a73424daa7d8178bf28c70e1a
SHA101bedfff18b0f3d64de3eb7f2ff3365e7f82816b
SHA256136e4d03a972a09cb11dbb17cf37e5a1318eba26db83704d958a8dbf7e324e8d
SHA512cf577486f48979d7bc1137255f4c744106077080109802554e4ee9a3470a830d923067775dea3170d856f38d277d7ce15d87f9a20cc9b92d59a1390f257f104f
-
Filesize
16KB
MD5a897ad5d84fd7bd8676c37e254f432fe
SHA1ba247fc0bd7aea14b0405373ae35f85119eace23
SHA256db034a36b9f2a5103987746ad4e4089ec860dcbfdd02a7c56ffd50b7c640bd12
SHA51279995d212b8352f7772ce1be036fa731f36136e776d6e639528a745f82d07c73f1b771b7640857aee8ae3306eefcdb559cec991e4f3fc9a4a75fd3ae15118951
-
Filesize
8KB
MD59e9ddac94f33724b0fa9de3bde98ae3e
SHA152d1682387829c5bc5a8be239a32674a42bd4530
SHA25613e924a886670595e774989bb354f1d87945ad688389ec5343a54e59c8ccc665
SHA5126ae0799ba348884fde50b79ae54294d6317d62ddf371e30a92ace00dba0aab846a04b920686292c809dbc0f92db3a1296ebfd0e982bef349b12e67d2574d5794
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD53e8ff43832557d552c6ba8527cb48dc9
SHA10988d7f8eab43906d71d5e7a89e4ad4f312f890c
SHA2560ee793d8c2caf4bbb95d7f1fe9cd55b5053cc880f3f87692ba12be2f2adb9dfc
SHA512df7c5086519a4a389706707ea1db62b90b47567be17099132fa90264875ec63e3d784f3c821dbff8bb3d3caa0c15b1b8f9df5828e6b77cb58fdfeb62a051cc33
-
Filesize
16KB
MD51348afd3d2786cde112f9f0c9c1ab94e
SHA1a55b8cdf4c11e755567cb0e303b1ec440e52c1b6
SHA256092bc2e6b19162d27d4be6eaaa0c60e4ede4a5fe1bb3c695be53a9b00aedb1c9
SHA512529462a6610e6428e6a6aa13708e0e9c9e3d06cf1759d43cf91708303f27f448c84b67043c3be530f9df9205ba464098fa00800b2646f8e41dc896c70b36da89
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5fdd5c44085c13c038019ba7d574001f8
SHA141a8729d333d1f6ccdce4f5eaba6d585d0dcffe5
SHA2568380dae9344f8e8e01efaaba326fe649133f155ab92ca7f045c8655ca0a2521d
SHA51270b9ccfbb2c75980ac39c2d86d5dc42927c444ba4e2f6eb30a1bfe5b8fa4919c1767f3bcce4ea3b1e15561ed85e2e8dfc7673e2c012896f21721a5923656f8f7
-
Filesize
16KB
MD56598a90cffdde2e01d0a08c3803e47af
SHA12f954f317c9222945b8af128b84c76dd8cfbf816
SHA256305bf69eb340151afe7f504f076bd1e3df4c8125ee0a5416a54249df3b28959b
SHA51242b2f145063842b7b7eac4da710b48d73c57959c987954fd0a08de75158da3394d985b066428024809d2db25377d7fc1c1b3c085da6f8206505b3a72ee6bf938
-
Filesize
512B
MD5650158a803f5b8c456ab66dfb76bc0df
SHA148df38b7a5e596f56ff72351a55bf94a46db6426
SHA25601e445f17e8e88503088c1a52d59dae59adde55ef252acdb4fcc15a0bb6b108f
SHA512a9f487b336a7e2ad60c527cd13f48d9402dc6da4421a587fa00494d6b70c7400e0083e9839c57c38bad39bc483630be701e44597d676bc709fe059f3f74db109
-
Filesize
36KB
MD59b1b550fb53d58d35741fde0fab66b7c
SHA19e8ab2fa61ed19f0b5361fb3157b0795c7d01137
SHA2569be658ab90f126c5ae63bf89895d72678827608c4a4900b32b270eebed19a680
SHA51227239c6f1402192ef85bfd749c72d6380600c98940a8f5a23201cc9b6b94398821d325476b0fdd5d505a18fd75a9ec7a2d26cd8162a7a48091492800c96e549e
-
Filesize
4KB
MD59867291fd02c9cd4202af9c17a5dd156
SHA1136f65f544a1937ee14e0a8923cf5e137a5284dd
SHA2568ab9414d443695cd3b02bcdff36456af898466b3caa7a1a4f594ca10be3171ff
SHA512caf5bfff3ad387d6840ac1b3dc36dadbbc74a32f70216c1eca6174988b84a0a04f4508b012b60ce883c959e5ddc5119adb24cea2f524f304e55c69c348507337
-
Filesize
8KB
MD5cd4952ac65ac7a5806c549e42b3dbcef
SHA15dab5e0aacecd0399e3f00c0a08168f2dd184f43
SHA256c37a928b28d64c8f104fd16ddebaeeb063585cca191a8b9d3b808bdf51db6ff0
SHA512437860384a4de93f1448ff1bd28588abf813f4e42babae62649f0f4c5c022852abb20d8ad1280e7469dfae34e48e765c1097714408c7d6b7eccb5ba253ed2aaa
-
/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/com.crashlytics.settings.json
Filesize708B
MD52772d9e156ba7e6c6d3ce20d01ea4771
SHA159eb8515909eab58b200d004d0d7f77e362063cc
SHA25651dbdc6161d00c52712c738024bc827e857e11577c6f912a23a9f63d412f5f7a
SHA512d459d8e578f45caf4f4ade6a14e817b652e5f744a216343bcde1a0bf084515e7669d8832ef5c7a2abba0adb3998448e6740f2e4a3d9c1bd6372f6deb28aa95aa
-
/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC2100900001107425AF4C194CE3/report
Filesize785B
MD5a331d83d4a1be37e2481d29a35a102db
SHA11dd7358bdfcedf17ad02196d9c73faf1d48e9820
SHA256bf424abcedda1795114603c7994b144152508b26b69bec4457d058c7b9bd0812
SHA5124f648803992cc62cafb5c70f95b543da6b819956c9158de39d8c70c7907e032be542bbb271be0e7ca1771629bd9fa8bec9b8e386bddb39a3ac4052b9cd162d44
-
/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC2100900001107425AF4C194CE3/userlog
Filesize89B
MD5b6b0b7cf258584d1303c7b73d06ecf31
SHA1e1e4cf736a8fa863549f0a44169ec23d17892168
SHA25669210b3ca74ceb62ea7aed252ef6a605c354e0bb8a037d2fbac000201360e42a
SHA512d85a7d7694f931a734e99d9faf20d1b072e5a47793c7137948bbe27568a5960db1a4fc3a8ac866e0c97632bd7e414d8b13f6188825fb8fc8e64dedbea5d65558
-
/data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC2100900001107425AF4C194CE3/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
90B
MD5a61e5a137c04367d3478c609554b28ea
SHA1b14413093b3f51ae60dee99a595b632eb3b5e53d
SHA2569c94666db02c331a84164bdc6a896b54956198b8c3efea4d6aaebe0ea7409bcd
SHA512aba369ec32efaaf25ff53a2a8d0a751dd651f4f2ea20bfca83d35e13f77d571580a30f2fad7df8fd52b7928bab3fb18abbbae2918381e2647bcf04575107c8b9
-
Filesize
567B
MD5e4a6a30a1350af4afec086a3ced201a3
SHA131e19b78df4260bfe424abb17b72f1c3a0bd06f5
SHA256ba573d4ac9ff0898a219251f135467f06a66245929cf8f2347380c9b9bc8c5cc
SHA5127f6f71dfdd9275ef7bd84b52f8f35c44b349669d80ef21999b94a622cb2d62faea36788a33be1fefb047c97b6668f21dd6b4f733ef47fc6fe46f6d21d0c90de6
-
Filesize
33B
MD535b51faac8b5af3886e70bb5a885dab1
SHA1e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA5126ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa
-
Filesize
75B
MD5944e6a5a08cb971370c65c06061f0ab4
SHA184d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783
-
Filesize
121B
MD5ffcbf87665a36fc21782400bd0537e79
SHA13dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA5127f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57
-
Filesize
163B
MD5dcf7d6c1cfd5e7b56074e3001577c78b
SHA1b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA51242d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d
-
Filesize
212B
MD583df24ed31d62e7cd75fde377f6607b6
SHA183b814a1d20a50c4c9084a571a16e04d45b6e6bd
SHA2569663629b9057124f6f4c2675dbcfb778b05477773d4900d4b83a7583a5f4abf7
SHA5126173900ca197cfd86dc762efc9a5e7648d4f2ff0bd20cbc3c0144f4f0d43b931f179e78e553aff54ab0b206900bd53c268034f1f3682dfa5244856b00520e2d5
-
Filesize
512B
MD50d59f14612052c46682d93bae34088bb
SHA1fba82fe67fe33e53d204fcc511c391aca6a06335
SHA25613759a76b4746fec2ff07cfb7cd4237bf5633f1b44080d71f346e7646f191d7e
SHA51228a6d43d1c74d9d6208a2811cb0626ca498588d499c47023b56560985acec8be09784cd8ddaff0b0dfd7eef24e032ebd318a66d9d1bd62349861532cb556ce94
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD5667bc2702bb41ff1dc79e39b05ff9822
SHA13a9e678da9068123fb0fdd947beed635a90ea157
SHA256644a4fe7f38c6c775f4ae2dbe634187ffd9b66ab81cc975ee3878632e131783e
SHA5128304170b9dbd9b759eddbcc05096f08f3510f52c505faa38c14c6aa4c6503e58537a7c5aacd21d8bb94132b1a45bad4de32882455182b01d5dec41bb8ac8ba78
-
Filesize
177KB
MD570dd7d7670f1563c4426c13c476aa9f1
SHA1ebe626e976aeb47bf3332b0266a5103ac2d5c5fd
SHA256fd026db8b8af4e94ed87440d5959027e4948add05e1b31814be0713b493489da
SHA51232ad4f39f7c136934cb0b7f87ae8cc481722e764b38fb44270c6957c5799f5523854cc6e40f2c6622e5db6204acedb1ec7b7d4ef0686073b8b850762cb9acd37