Analysis

  • max time kernel
    151s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    13/03/2024, 18:03

General

  • Target

    b342707d8cc963f826284d821039ed1766d99c8b8091bd82821d61593d388cb0.apk

  • Size

    1.7MB

  • MD5

    7d18cc489cac4fd6b719de271bbb5465

  • SHA1

    c1f6168943a1cc1be81472abb313e905a8be9226

  • SHA256

    b342707d8cc963f826284d821039ed1766d99c8b8091bd82821d61593d388cb0

  • SHA512

    3ff50b6ee01464dfeaca7fc58b4cb54dbf60a8500401d9071751e63bfbb7bc9cf82635b6b2f1789cbcb290cac2da83684e1f49157c4d54e4d43208ef3b79225e

  • SSDEEP

    49152:gbzv/J91CYa14+es2lDjyfpsRIFYqv3a01Ejek:gHnaTNYDOfOqFYq/j1Ejf

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.candy.heroes.mania.nearme.gamecenter
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:5222

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.candy.heroes.mania.nearme.gamecenter/files/707d1b8d.dex

          Filesize

          1.1MB

          MD5

          4d16faa5f39f09b64ddbea9d375ebfee

          SHA1

          58d8285f82920537b2bc5aff7af4617decc7b5f7

          SHA256

          44dc3366840ae9938b616b16011af41184aa055190c0093a26a42e94e238be24

          SHA512

          9c06343ac092f103d55a484d75a9b405d76ea8cbecce2ab7207f36f810fdec0165961e5d0bab8a94fa2fb939ca67a444f0ba3d78b283110aceba9c7b1ad8464a

        • /data/user/0/com.candy.heroes.mania.nearme.gamecenter/files/707d1b8d.dex

          Filesize

          2.7MB

          MD5

          fd0546e55142ec240677d863529577c6

          SHA1

          6b66184b1c2fbe02b72ad45be32a1f4df07c733d

          SHA256

          482e81debb93a33f6fe636d918c4fd5f29267f9c89d322a4fe9a07cb4be218ae

          SHA512

          3db0f7a070af803d57fe1f147ad7bb4812e4a63a35d940f0a758f1c7627c3f5fe2ac725cba9a3e2f77b11fb87f2df7b7881dcff125f39f8e16e9dd0b63feb209