Analysis

  • max time kernel
    146s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    04/04/2024, 12:30

General

  • Target
    2c22c45f32e2e8d084c80e8788b390b0f0e3a3fe505a401c576689b892ef40f7.apk
  • Size 1.7MB
  • Sample240404-ppjjtsfc6y
  • SHA256 2c22c45f32e2e8d084c80e8788b390b0f0e3a3fe505a401c576689b892ef40f7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.herocraft.game.treasuresofthedeep
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Acquires the wake lock
    PID:5157

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        80be251c.dex

        • Path /data/data/com.herocraft.game.treasuresofthedeep/files/80be251c.dex
        • Size 1.1MB
        • SHA256 332640f7ff5d3e3e030f092748e84d7345e03ba2b226bf8b9abe8b8abf7e4497
        • MD5 SHA1 SHA512 SSDEEP

        I

        • Path /data/data/com.herocraft.game.treasuresofthedeep/files/I
        • Size 222B
        • SHA256 042bc01bdd5c8872f00ae5194c140553753273b9c4155d79d42429dde1a8f2ad
        • MD5 SHA1 SHA512

        I

        • Path /data/data/com.herocraft.game.treasuresofthedeep/files/I
        • Size 222B
        • SHA256 238fcdc739fcf957cec86ede9f2b51a45fdbfc2eed76694cef63060934bcb9cd
        • MD5 SHA1 SHA512

        OmFA

        • Path /data/data/com.herocraft.game.treasuresofthedeep/files/OmFA
        • Size 731B
        • SHA256 884107d3d767a6baf2097cf1ce5c3ff5ae91a533dc1bed7573f6c1ffa8e3cedc
        • MD5 SHA1 SHA512

        80be251c.dex

        • Path /data/user/0/com.herocraft.game.treasuresofthedeep/files/80be251c.dex
        • Size 2.8MB
        • SHA256 7f4af6fa8221ddb8eb0181904314973ed291046c84eb891b9a5d87435c2cde56
        • MD5 SHA1 SHA512 SSDEEP