33c93c2660645011679dbbfa26d47a212fa35b5e659eabe5f94b07ec96da6f65

Analysis

max time kernel
225s
max time network
309s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
28/03/2024, 18:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

TFS Community 1.7.apk
Size

78.0MB
MD5

afdf5c2b4e308df76f2c1d9c39eb584f
SHA1

eb4d8d99765b1e2e40fbee1edd067dbf6bfb603d
SHA256

33c93c2660645011679dbbfa26d47a212fa35b5e659eabe5f94b07ec96da6f65
SHA512

07f06ea50d22a35d94eac1b06222e4361dc53e38d1e647554cf723d0e2286fb417b3e6d15cb30ca6668d51146705b4595376f25d60064f2ebad4f87cd18917dc
SSDEEP

1572864:VDFS1Kv2sQHy8EVPv4h8Hhy50EE6jtRi9j1p6JVN6lzMldHDaaOmjRD/d4oWpaiV:VD4Iv2FCH4m16jt0Dy0l+djPjRSouaiV

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.AXgamesoft.COMMTurbopro/cache/1582435991586.jar	4445	com.AXgamesoft.COMMTurbopro

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.AXgamesoft.COMMTurbopro

com.AXgamesoft.COMMTurbopro
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4445

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.AXgamesoft.COMMTurbopro/cache/1582435991586.jar

Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/data/com.AXgamesoft.COMMTurbopro/files/UnityAdsStorage-private-data.json

Filesize
41B

MD5
16d3e6eac0e79222a9b368edac765b34

SHA1
48d5e621fcdd84108f5750d6905180b622715b11

SHA256
3a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7

SHA512
d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747

Download Submit
/data/data/com.AXgamesoft.COMMTurbopro/files/UnityAdsStorage-private-data.json

Filesize
627B

MD5
29fff3bcfe282f19e9b1fd59e50364d0

SHA1
ff51bfed101d9e773c5a7d533a7c55ce9f92d364

SHA256
d22de25134e5ce936f59783ba9e04fa778439c38e743c72098e4f5452b3d028e

SHA512
d9128ffad7ba8be9c9ef26be17f40cbf939f7c66ad2cf8cf367135c723f6bbcbcf8e3d1efd222f80fb71f1830c7035a9efa21d0a91b9b70fdba588fc08b33072

Download Submit
/data/data/com.AXgamesoft.COMMTurbopro/files/UnityAdsStorage-private-data.json

Filesize
860B

MD5
857896e7bfa71c6430acb9ca2dbdbac4

SHA1
03b974fac7aa8188900962993fda3f5a1589c886

SHA256
b9ae62d62369b9e0e9247993ab70d6893abaff52a92eff7132599adfef80ceb1

SHA512
b2c17203644a88bbab5248a697b7c06a6b50aebfaee53a14ef33f91cba2d79a773aac3e67a412b899276cdf360bcb281b9fb1f06ecc37380d0c094ee5921121d

Download Submit
/data/data/com.AXgamesoft.COMMTurbopro/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/com.AXgamesoft.COMMTurbopro/files/UnityAdsStorage-public-data.json

Filesize
112B

MD5
957d2abc76e064425db2cbb700be1883

SHA1
9ea02c9a8df7281a60342ee20a05a22e560510d4

SHA256
ce7632cdcd3b8fbcbee1da4a6c0983c6eac5121f70cbff843f4f0811cabbf3e0

SHA512
3ce2845448d75dc2088844ad792c48304bd712b5f78fac0dc4b545c2aea7748eceafdfcf58f50ced9f394c3461cf8ddbc40e40f0c579362ca03f85842a9189c0

Download Submit
/data/data/com.AXgamesoft.COMMTurbopro/files/UnityAdsStorage-public-data.json

Filesize
220B

MD5
e6b7d2f1b1541e4b17a08cf080e89f33

SHA1
4ab16926ef9c51323259eec699c146fca3c0e42f

SHA256
fdcfb2010282f719123f0b337e90aae2bc2af94b181416288a8f52260fdef000

SHA512
4c3d42eb898a265b6838e1011bd435b1d01bb921d5ee654b632fcdf8cf4fb7fb3e4f42594abad8881d66025272e9b2cd9491eea70ddf7a423109658df509ae75

Download Submit
/data/user/0/com.AXgamesoft.COMMTurbopro/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/storage/emulated/0/Android/data/com.AXgamesoft.COMMTurbopro/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/com.AXgamesoft.COMMTurbopro/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

Filesize
2.1MB

MD5
2347e094a698d360d0b59540f7072b4a

SHA1
bb2429720d5d2e1b1056a1cdc6dfb69a5883bea6

SHA256
cc78ec0e5279e6aa9ad209bc48df4f381ce9e2c5631ce267da20f05567af68ee

SHA512
90e946832f83424026aae6ea23287601a38d7daeba85c21281f0e9d08966964c1b14e7059577b1917d75dd75b1913b86e6f0ac8df567e201e7078451835cc307

Download Submit
socket:[68253]

Filesize
49B

MD5
a19590e98d350e241a8d718aa36a6bc9

SHA1
f2148b012b641e211b20300c85d5b4071e3ffbbf

SHA256
745b3a9c4d97cd7c589ae88bedbb8a1a869cc76da077dcf11f576ce0882f1aa5

SHA512
716b12754002184ce4267edf830daca16ddbf9bed8af47c930c86ee6a26175bf9eb96273bc5b5db0482eb79e56384f6a7810292c0f504856060a9fd3651ef5e6

Download Submit
socket:[70442]

Filesize
56B

MD5
27280941ebb72006e5f7a08c2316ec18

SHA1
bea3d988a46b5e0b8a72b7938ed699e660ea84ff

SHA256
2df84bbf8863fd4688cf3b57fed50dd2c2fef062e31c4266563a40606d9cd703

SHA512
362569d4576d99f6a2db2c20536a07b8a357bb1e5e04a9961f4b6e4a860bcb762fbe18cc0aa3f7647f6e3675047fdbb734beee7b6be2a1e5874f9444ee6d9bfc

Download Submit