Analysis

  • max time kernel
    147s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    23/02/2024, 12:48

General

  • Target

    98de7e503a01c663632a3aef64ba1c0e6700fdb4779832793f03bd38b58f4a89.apk

  • Size

    1.7MB

  • MD5

    a94394190c2338c7f3233b858c1fcba6

  • SHA1

    bbaae5ed07d6515d8da196f895af948977d5da65

  • SHA256

    98de7e503a01c663632a3aef64ba1c0e6700fdb4779832793f03bd38b58f4a89

  • SHA512

    21c40591ce8e3694b70178cd47199eb7890f1d8308a9f160e74c290d79fec4398f905922be1ecb0ba144efcdf3780a24908038ef5a305a1e857c824562d22948

  • SSDEEP

    49152:uxg5p2JqO5c0fB50LGNWiSrPwRqJv90x34vcEjh:uxgH2bn5gWFqpyJscEjh

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.zombieapocalyps.nearme.gamecenter
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4397

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.zombieapocalyps.nearme.gamecenter/databases/com.google.android.datatransport.events-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.zombieapocalyps.nearme.gamecenter/files/28452f4e.dex

          Filesize

          1.1MB

          MD5

          f4f081315cb2558d1a8b8321997b75f2

          SHA1

          669fb7b5d7d440cf6ce12cb78da0382f624bc622

          SHA256

          0ffb19429a4977547f797a1379a6b10aeffd5f7176f8f21668874b2b7dab3bb1

          SHA512

          3e06fbd62f7ac0accfe451e804b7ca7303a613003a7a65a7673e6d6e2f9707518cb30a39153181573ad4cf7b4b6eb29ebaa374db9c467d4a4607caaa405ae706

        • /data/data/com.zombieapocalyps.nearme.gamecenter/files/GiE

          Filesize

          761B

          MD5

          388f5f57f6e76879ad90358547511eb5

          SHA1

          40e3248935e02e064b2ec48cf93f62716b6cdd17

          SHA256

          afeedd17c94929926e924238598ef0a830a542de45b759d866dbee7eb197abcd

          SHA512

          4b3f828c5f20d92562eeb77fe4ba44e79988e8fa7005eb9be1f1fddba6370e965be34d2b86a87714418d8c4776ce5ae01057db5b7c6ad728c01473823283e660

        • /data/data/com.zombieapocalyps.nearme.gamecenter/files/fjA

          Filesize

          231B

          MD5

          837d897aa5e164a8a4992290999fc66e

          SHA1

          5fabb9402b53688f3af6e779d9bcab0c57f4191a

          SHA256

          38cd0d2ce0a9d498b59e731c5efc7a667bf5f4cfac2c605dbe7d28731fae61bd

          SHA512

          5e26a71266339c2ee3880fcf68d6728dc42ff4abcfc2f86d9b04e0588c57b66076ca9dcba904527a733a333434fad2f06ed124295e93a56e3470fc385a026fb3

        • /data/data/com.zombieapocalyps.nearme.gamecenter/files/fjA

          Filesize

          231B

          MD5

          5a74e938c7214a16f6aed37334b9303d

          SHA1

          421bc99469aa39b9b77633dc64b5e7eef5d6c5b1

          SHA256

          741aa124909e5a5aa7f3e022ea8fbd178d11ed2a1a78f6d0f6001834eeb90576

          SHA512

          03f09f016b4d1df9464cc80c4af1d3aeda7450912db14b5a6c01f09d332db7b5520d19f96b551e00ddd0c221a6a6bf8b575abd3000648bfc20486d9732329a7b

        • /data/user/0/com.zombieapocalyps.nearme.gamecenter/files/28452f4e.dex

          Filesize

          2.7MB

          MD5

          b3740a658575dd10b0bcda342cbd3c13

          SHA1

          8b37abbfb6864da0b4df4ac7cbf1e152a9d8f960

          SHA256

          8cffafbb74886b2234f4ee8367eeff82cb4fdc94f745142136a2f0bf8e5621a4

          SHA512

          b7f2ee81a96d2075be679a07b20dd542ae5edd46bf4acd2d38bd662f10e756e6f0e30568db21ddfcf460197279ec564fc26999a48180791bdf2fd26ce83eb257