Analysis
-
max time kernel
147s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
23/02/2024, 12:48
Static task
static1
Behavioral task
behavioral1
Sample
98de7e503a01c663632a3aef64ba1c0e6700fdb4779832793f03bd38b58f4a89.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
98de7e503a01c663632a3aef64ba1c0e6700fdb4779832793f03bd38b58f4a89.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
98de7e503a01c663632a3aef64ba1c0e6700fdb4779832793f03bd38b58f4a89.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
98de7e503a01c663632a3aef64ba1c0e6700fdb4779832793f03bd38b58f4a89.apk
-
Size
1.7MB
-
MD5
a94394190c2338c7f3233b858c1fcba6
-
SHA1
bbaae5ed07d6515d8da196f895af948977d5da65
-
SHA256
98de7e503a01c663632a3aef64ba1c0e6700fdb4779832793f03bd38b58f4a89
-
SHA512
21c40591ce8e3694b70178cd47199eb7890f1d8308a9f160e74c290d79fec4398f905922be1ecb0ba144efcdf3780a24908038ef5a305a1e857c824562d22948
-
SSDEEP
49152:uxg5p2JqO5c0fB50LGNWiSrPwRqJv90x34vcEjh:uxgH2bn5gWFqpyJscEjh
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.zombieapocalyps.nearme.gamecenter/files/28452f4e.dex 4397 com.zombieapocalyps.nearme.gamecenter -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.zombieapocalyps.nearme.gamecenter -
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.zombieapocalyps.nearme.gamecenter/databases/com.google.android.datatransport.events-shm
Filesize28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
1.1MB
MD5f4f081315cb2558d1a8b8321997b75f2
SHA1669fb7b5d7d440cf6ce12cb78da0382f624bc622
SHA2560ffb19429a4977547f797a1379a6b10aeffd5f7176f8f21668874b2b7dab3bb1
SHA5123e06fbd62f7ac0accfe451e804b7ca7303a613003a7a65a7673e6d6e2f9707518cb30a39153181573ad4cf7b4b6eb29ebaa374db9c467d4a4607caaa405ae706
-
Filesize
761B
MD5388f5f57f6e76879ad90358547511eb5
SHA140e3248935e02e064b2ec48cf93f62716b6cdd17
SHA256afeedd17c94929926e924238598ef0a830a542de45b759d866dbee7eb197abcd
SHA5124b3f828c5f20d92562eeb77fe4ba44e79988e8fa7005eb9be1f1fddba6370e965be34d2b86a87714418d8c4776ce5ae01057db5b7c6ad728c01473823283e660
-
Filesize
231B
MD5837d897aa5e164a8a4992290999fc66e
SHA15fabb9402b53688f3af6e779d9bcab0c57f4191a
SHA25638cd0d2ce0a9d498b59e731c5efc7a667bf5f4cfac2c605dbe7d28731fae61bd
SHA5125e26a71266339c2ee3880fcf68d6728dc42ff4abcfc2f86d9b04e0588c57b66076ca9dcba904527a733a333434fad2f06ed124295e93a56e3470fc385a026fb3
-
Filesize
231B
MD55a74e938c7214a16f6aed37334b9303d
SHA1421bc99469aa39b9b77633dc64b5e7eef5d6c5b1
SHA256741aa124909e5a5aa7f3e022ea8fbd178d11ed2a1a78f6d0f6001834eeb90576
SHA51203f09f016b4d1df9464cc80c4af1d3aeda7450912db14b5a6c01f09d332db7b5520d19f96b551e00ddd0c221a6a6bf8b575abd3000648bfc20486d9732329a7b
-
Filesize
2.7MB
MD5b3740a658575dd10b0bcda342cbd3c13
SHA18b37abbfb6864da0b4df4ac7cbf1e152a9d8f960
SHA2568cffafbb74886b2234f4ee8367eeff82cb4fdc94f745142136a2f0bf8e5621a4
SHA512b7f2ee81a96d2075be679a07b20dd542ae5edd46bf4acd2d38bd662f10e756e6f0e30568db21ddfcf460197279ec564fc26999a48180791bdf2fd26ce83eb257