3598d53e4b8596f4d6c99ece2e10fa506ae32268063590e0962208076a1004d2

Analysis

max time kernel
153s
max time network
155s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
24-02-2024 10:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3598d53e4b8596f4d6c99ece2e10fa506ae32268063590e0962208076a1004d2.apk
Size

1.7MB
MD5

0697147de4e0981b4088e43e85f92892
SHA1

e7cd69986fc41a1be5fcd899d541e54ee25104cb
SHA256

3598d53e4b8596f4d6c99ece2e10fa506ae32268063590e0962208076a1004d2
SHA512

0471243f806ebfb8759779b91e2ce2c65ad76a8e7d67c3b93be1f70cf7a004c912818d06265ea10e2565261da1c491ad68f529d422bf2cf233cf0222bc8522a1
SSDEEP

24576:jdMYVRcsDRsFtWq2x4uNCn49Z9T9eXLO5zT+5u1dBcs4cXMgDx/GQc3Hecmu4Ejc:jd/RYFtkk49Z9TEOnzBc0Dxev3dmnEjc

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.ballhop.nearme.gamecenter/files/5e3152b0.dex	5106	com.ballhop.nearme.gamecenter

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.ballhop.nearme.gamecenter

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.ballhop.nearme.gamecenter
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
PID:5106

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ballhop.nearme.gamecenter/databases/com.google.android.datatransport.events

Filesize
12KB

MD5
ea628e04765adaf4238a5dcdff4bbd51

SHA1
a801947619ea8c368efe9c006a324dc6339ac60b

SHA256
885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

SHA512
c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

Download Submit
/data/data/com.ballhop.nearme.gamecenter/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
450c99ca0c486b3da1bfc532e1371678

SHA1
5fafe1f905baa86d5a0c999c6d441fd2442c3f49

SHA256
09dc0dd98c494cb6544fb754a7e0307cbbc8ef897667864afba4aac4db283be7

SHA512
2771cff6548e5a64e42817c8e1eec4116c0ead53600ed8bbf166347603203ccf5ae27348e44cd405ea20866a7fa9c7ce3fe421c59b9b33ff83a1f17ea7a2a593

Download Submit
/data/data/com.ballhop.nearme.gamecenter/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
42587758046d4ae1299d6509205a1177

SHA1
4683da93bfb131f63e108027c304d0c9fd2dad31

SHA256
3d965c245915ccaeaaec7c4541cfb5f89735f7e1b230cb8f0b8186687b7e82d3

SHA512
6bd978f0daa1ef0c08adad68c7fe62bba1c337f9248f459d99220228f9a00adb507d3513a4b808d0d3e8a5cfb3e4d37cbe296d252ca1a6998e84c0328c295781

Download Submit
/data/data/com.ballhop.nearme.gamecenter/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
7cdeb3e313defe8f49e2033e4a382631

SHA1
f9015c7c7aed05d54e9040f5df121e0b3500e9d0

SHA256
f0cd227a739e7e4ba1bacc22d848d48a51ba85fab9452a65bba090c815c47f12

SHA512
8e6e2933a0f91908ff9ecff98c53ea5f36f085919b2686ee7548c2657ce204630de5f1a0f3906a6de3ff2c247d0d1d80fa5e463aa3f058e1bc866b340ad33daf

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/5e3152b0.dex

Filesize
1.1MB

MD5
17cae2f821fb945efe23385548ca568e

SHA1
466038ff2e5f8420709941c7d031d0af77661881

SHA256
dd46fdcbaf588efcd380e6e317b0bca3b85b2893d130e0ff58ec5fb5f46672c9

SHA512
997fa3f1c3ffc6ba93f4c5da825da447d30c9d994f477c3d91409d83f183c34385d1c5ea3d5b90225ab9d817b0f13186b14577d7832106f0dc5086847fbef43c

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/PersistedInstallation2969401187064323696tmp

Filesize
568B

MD5
23e718fd83b7eb2e7986b82e4df928b1

SHA1
5dfb95b186678bf612766ecc5feac5ba1a437f75

SHA256
75481bff193d198da2824185ea0c44caee36ee97e9047c47a5709ab29b563062

SHA512
b51a01914a8012dbe2fca2b34726e044a3e3d4994e71acb99a922d6a66a4d4a8618dda3f5c6c78d5d0be745bc808d66dfd6bf8965c933343ea57ef416803e430

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/PersistedInstallation6890694527076936231tmp

Filesize
90B

MD5
98d0e240f27540ced484a8e7a1d8dde8

SHA1
2ca08584870906bed42bfcdf0e094ea7a7e20cd9

SHA256
e0621d02a082ebd44da666b3fe96fb4f1041d0cc1fac7c2b1c73d046c6180420

SHA512
1e1bdd25f7fa8d4c67186cf31c420ff68259f687fee08c26974499649b2ab20a82e82ab62801465d057902140c5cb3ae9a515cb7293901df905f7ffa7b09650f

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/UwwVI

Filesize
469B

MD5
c0162abea58e5bba30ac3e62c8b5ceb2

SHA1
6385bb290da129acb228443f6865cd587613547b

SHA256
aa33660b0926c42c7c5ccd83b54c4c394f9a5281833c7d6d860a350fe1b245fc

SHA512
642801c60b320c8dc303d60c03ae4d325c11c22d16877cf6994ab852c5d19fbdb06773ac7fe9e39d5aec43983c29e722450715cf9b8fb41d46b1da1dfa778fb2

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/UwwVI

Filesize
763B

MD5
eb2a63d3fff74703206be054a97f52ee

SHA1
7bd7e60852e9534c02cc7d6d5890f52001b9fe2f

SHA256
4b5422ac04eb20c52a3b2dbd7094034ac2310b5051f9276bf334771f2a73fd95

SHA512
53c954317e969c3f0e1bf66c16788266ad8b61c2cd5e98352fda9f4660cc22294f12030527d863042e1546593f00b8840f05f5dfdbd1c0a7b8aef68785a49993

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/tBLH

Filesize
251B

MD5
d0a8a77ce806a08742613b4291678fe3

SHA1
ef859a31de524e704f91a1984aab05c2a20679df

SHA256
46f1b4012c07bf76bab766ce0dcf1c7dec47d4b013ec318560f718cf06dcfb69

SHA512
33cf3454acb5e0dcaf8ee2ae3edc33b7aeb502a612c1215bc050a7de2d82313d0aa1ac73724b29e6fa0fe004f47cce22135600dc596fa5073029638edb5b125a

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/tBLH

Filesize
251B

MD5
183a44b163295270e6555233d4f1bdd5

SHA1
21f9042ea9b4131040e3b9e84b38ad7ae74aff80

SHA256
f3e6f1158f5a2e96f7ebee14447ab5492d6b6ca163161e62ce92869ebef0cc92

SHA512
ba27d1ce843811344cf835de156b92fdf4ba9e89b77bbfbb398dfc9aecde52439a45d8bca585727fbfb47a9a9069ffcc80c5d4402a105349cfef04d64f867522

Download Submit
/data/data/com.ballhop.nearme.gamecenter/files/tBLH

Filesize
251B

MD5
ae2595eb387d52779f3857dd93f3880e

SHA1
e7e84c54931cc0797391e912b9ca10a1643d7918

SHA256
53eb2b7e4cae61a5858e03f22f942058546672a43298f2bda164eae92a9e0b2b

SHA512
3b99db9bde370430a86eede4f50cbdab035b424cd8efcd7cf04651375034b638943aa4f84461414fbcb23d0c2d92677b52ba3775f483a086d315e75e0bcee756

Download Submit
/data/user/0/com.ballhop.nearme.gamecenter/files/5e3152b0.dex

Filesize
2.7MB

MD5
f33396c4568c86eb4899349f91183012

SHA1
63a6b820483c1bbf8ef8b4eb2ba56745f3e8cca7

SHA256
2555b8c8821ddf763a05387a6053810cb6d0fbd5da65bdefcab8e34e2420a01d

SHA512
46014a9a8c3ae0bb2c13ade7e699b9ee44cd271323a3259ea920ca8852ff2769bd2f231e5e3658d6b2eb0124dbfb04e9d0ea9bc60fa99fb24618156e758df388

Download Submit