Analysis
- max time kernel
146s - max time network
156s - platform
android_x64 - resource
android-x64-20240221-en - resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system - submitted
04/04/2024, 12:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2c22c45f32e2e8d084c80e8788b390b0f0e3a3fe505a401c576689b892ef40f7.apk
Resource
android-x86-arm-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2c22c45f32e2e8d084c80e8788b390b0f0e3a3fe505a401c576689b892ef40f7.apk
Resource
android-x64-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
2c22c45f32e2e8d084c80e8788b390b0f0e3a3fe505a401c576689b892ef40f7.apk
Resource
android-x64-arm64-20240221-en
0 signatures
150 seconds
General
- Target 2c22c45f32e2e8d084c80e8788b390b0f0e3a3fe505a401c576689b892ef40f7.apk
- Size 1.7MB
- Sample240404-ppjjtsfc6y
- SHA256 2c22c45f32e2e8d084c80e8788b390b0f0e3a3fe505a401c576689b892ef40f7
- MD5 273fc3facd48d93367d6016fab15a954
- SHA1 7727d67989783ff0e531d629169ba8c9cd2a379a
- SHA512 0baddb4b1a360bf97f735e86883549db401b967a6510d97b23a640b059e41c989c31a93c0484cef6866cb6e6bceb6ebd7064568b18586fbe175479eab96a3298
- SSDEEP 49152:1HjR1PXLl9gIVUHktVpUykESYvvtMlEja:BHPbIsWktV2ykESYXilEja
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.herocraft.game.treasuresofthedeep/files/80be251c.dex 5157 com.herocraft.game.treasuresofthedeep - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.herocraft.game.treasuresofthedeep - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.herocraft.game.treasuresofthedeep - Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.herocraft.game.treasuresofthedeep/files/80be251c.dex
- Size 1.1MB
- SHA256 332640f7ff5d3e3e030f092748e84d7345e03ba2b226bf8b9abe8b8abf7e4497
- MD5 0ac24a9a3f768f9f190093ca385888c8
- SHA1 354e29d11150a8324a10c720a628ac84a36af351
- SHA512 2b835933265664aa4bf638a8eabc879b0129e7d2354d65162ba6c233cc863886575571c5afe3d3de5efe17fba37bb0cf6e907a0d1f78bfc519f12b84a8d622dc
- SSDEEP 24576:OLJYSRhpbGRrsRpxetszlV6tOOGeTQUHfOvGQWQP9HDjAPnr7:OGSRXbGRsxGspV6tOOGWHfOv1j1Hmn3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.herocraft.game.treasuresofthedeep/files/I
- Size 222B
- SHA256 042bc01bdd5c8872f00ae5194c140553753273b9c4155d79d42429dde1a8f2ad
- MD5 102f6f922deffdedd94c794ccb462c51
- SHA1 da90ba7f56f4b0a4d46e6b4678e30308e2085081
- SHA512 9ce8396cf2efd91e756abc65a9ea8a4d284a72e3adb0388228fd8aebc979834e28f822f6a4b4aa84337383118be8844bc7120401e962f63763314aae64d79f93
- MD5 SHA1 SHA512
- Path /data/data/com.herocraft.game.treasuresofthedeep/files/I
- Size 222B
- SHA256 238fcdc739fcf957cec86ede9f2b51a45fdbfc2eed76694cef63060934bcb9cd
- MD5 ccd28fa39322ef038a76570653915346
- SHA1 b73efe9fc00ac806a18c58863f2079334c09e71c
- SHA512 390bf43a759eef609dfcfcf3edc00ab875d6c1f121cab75689d971e418a2850220d4df39b6d3ed2cd6b85c81c93b9ce5eaa3aed2d91044f51e1518afa0d49f87
- MD5 SHA1 SHA512
- Path /data/data/com.herocraft.game.treasuresofthedeep/files/OmFA
- Size 731B
- SHA256 884107d3d767a6baf2097cf1ce5c3ff5ae91a533dc1bed7573f6c1ffa8e3cedc
- MD5 f7781ec53a4811e5b9d251819016aa5b
- SHA1 f035cf89c920fbac95dddf3319238520ef89c6f7
- SHA512 6a498c38048da699189e784fd13dbc5d0b00bf51c2924bf755dc3b234a3affb52e5cf0f4f2b40550f0024315d31db5f9a7c277b1545fc80faaa473eeac8cc179
- MD5 SHA1 SHA512
- Path /data/user/0/com.herocraft.game.treasuresofthedeep/files/80be251c.dex
- Size 2.8MB
- SHA256 7f4af6fa8221ddb8eb0181904314973ed291046c84eb891b9a5d87435c2cde56
- MD5 0df025930e228bca2da549a1ba0289de
- SHA1 7caf6a6061f3228a16942fc69c0860221c944ae3
- SHA512 2b17b4a6b8f829bf3f534c74df424911a7421e611dfcb95874a2fb21150af1ef5bb4699a0bdb0267aa8a2eabde0e61e4aa3d0d0ae1e54bf651e13050df25d3cc
- SSDEEP 24576:BNIytU2XVxeHWdZm9Iq36IEOXAXQXUX9N7zGmG/JJVVqyWyJBB2sSNT7gIvSFWVO:D5chpK629NXGmG/JJVVJ2HRVzurKfxk
- MD5 SHA1 SHA512 SSDEEP