Analysis
-
max time kernel
47s -
max time network
1162s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system -
submitted
07/05/2024, 04:09
Static task
static1
Behavioral task
behavioral1
Sample
wr-grimvalor-grimvalor-unlocked-125-androeed.store-0-1711309925.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
wr-grimvalor-grimvalor-unlocked-125-androeed.store-0-1711309925.apk
Resource
android-33-x64-arm64-20240506-en
Behavioral task
behavioral3
Sample
install.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral4
Sample
install_mod.apk
Resource
android-x86-arm-20240506-en
General
-
Target
install.apk
-
Size
47.7MB
-
MD5
b07c141fa5b5a386ef541d229d3878c0
-
SHA1
c2acfeb52f31e097cde118f2b63d3fb4ffca9aea
-
SHA256
b23d3d3f233e8588ab7c287e120f58f60781669e55e70270dcd6f2be08fa5a5e
-
SHA512
c4ebc16e02766d877bb404df2d0a30b2ed010ae54259bc5cd5bb1d5a03fd10d57d5203a4308deabdec29ccaf329500920bf090ce763141d5ddeab1799fc2f3dc
-
SSDEEP
786432:LdmY25cF5u2DPog1a3Q9M3UHZAFRLjgy8U/eS6r/8vEHIfU0TJ6DH4QLv2uy+h1r:5mYocFMBJ3Q9qUHGYNU/eS64ModJ5Glt
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.direlight.grimvalor -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.direlight.grimvalor -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.direlight.grimvalor -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.direlight.grimvalor
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD5cfb9c041edf6eb56570c8f49bd7fa1ca
SHA1ffe57850ad11b680d8ed28293030698d202c05d0
SHA25636cd5e476813c4785ed4f900cfa38d40a4dd187c2b3e6b9aec6edb6b1f50d34a
SHA5125b0bbd0140a4cb147406e09893687f26e78575b500e93c2b890c2e9e33d291465f34f79071c46cf113f4ca664824d71f98446648ef89f17172d91c37a1a809df
-
Filesize
40KB
MD54aadb07e1c7143eee1268689036d671c
SHA1365e67ebb3d687a024ba077df700671a47981b39
SHA256926144d3f62cfc8ae7158fa34a0831dd91c0ba7837649de8da7df8d46daaf3b2
SHA51256fa80de68437f350cd28ddb53f063c508be40fad72a6aaa31e3e61c41a2f7b892b91dfc18b7709e7741d496f4663d5a6bded9d3900ec83510cec6e3259679f6
-
Filesize
16KB
MD5058a8f66bfd8b05502c896f5290a772d
SHA162f3cd79ce8a36cb74abd4c222b999c55a527ab4
SHA2566e4030524ebfd9a6c974da36c93428847d73865c439d37b31f21a132e28b0460
SHA51298834a7892980e399f8fb4479af58b76ed633633446b85c63d39ea832e92e9771e395d5372aaa50f0947da83ae0e89c111b28a031b1885b48f2f13e653f13045
-
Filesize
16KB
MD5d2e5fb16abf4304b364d2da57ebf1770
SHA16d7d99f580465a2bb709a61d28f14989fd1f3f64
SHA2568e63f5c643865c6d214477d8ff7d6c93bb3ed14162e52598b87220153b9eb6c0
SHA512f7be114ae75ddd422f5cbfdb62159d58171f888497733a267a2271cf1799abb177ea3d9915922f0401c110e5e3420a98cb08d424de002c64187888aec67f524d
-
Filesize
16KB
MD5abecbe49e02387cd2d733f17b3b3d432
SHA1272c67146a41e1114aae7c6f019a5a3722c8b698
SHA2562b2386ab94d085180788c431569688ae5eff332afbadc1a3facde8c6750d160d
SHA512d8c883a15049efb7b264e32cae9482cadc5918f893bd21033360abbb23bd5c452b3ffdab6aaea4b1745ef5d6a0bde5054014231256004bedff7449800de83e74
-
Filesize
16KB
MD55d3f719de48412216eff935077368de5
SHA1069ab282ef4faff3177e5792af02615f8256495a
SHA2563c1447cead8b4b124b2ead372b39c3d7dca60afa76c5f7f94a16f702f3d2ac3a
SHA512e63828324ee937237bf6d0e8db55e5494974d0ad04c5a72710b374b92825f427d2ad3f690dff5667b7f4af90ace97940379198c73f9582ab3b502395c2725ef0
-
Filesize
16KB
MD5cf8c0eada5bd241c19f459eb7a0ea8bb
SHA13767494968f7b3ca577a70470e53eda212be178d
SHA256f4d8e1c52ebd7fef08154a01411ec597fe159ab1bc440aa1257a63df7e34fb8c
SHA512c34856afbc75b49069cd35e78044e7cb6381d8a2fef82109ddce0fb715b0e7bf0a810905e3ab0979c8f48ab770c3364e715d27b8e3aaee65e1d52bf4d23148ac
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
512B
MD5f55840249f487e8db0f71d27f94101be
SHA10b5848b0e537f18072049a45aaf61d4a40b6c0fb
SHA2562d65c8b114e3772553c675a9230a0d1ae09ae8aad1621f90f48cacd9509784f8
SHA5122dd9ebc72fe56c4c3b40f986ab76a91273036d93cb22b183cb78d41bc5bb0977a85513de47550d12dcf889c3b2d0539d721dd346c46bc61f076a49729748d5db
-
Filesize
36KB
MD5fde821c6bfbd9eb0fcf904d964f82b0c
SHA107966e74f3b102049071eb0c117bd6032df7a294
SHA256e5202080a07c7bab6c4020ec17baf9d4364a055d9a946ab131500396bec0ae11
SHA5122b52b1e3d96d10561943dc0bf414f5fafe868bff959ef5a3e0cdbfdd569081bc4cce34a5481143cd26f02b0826c0ba3e1133eef8b9627d6cbdc81bc468d094cc
-
Filesize
4KB
MD50ba931b718c7846989de40377ad96cdb
SHA1f64376036645b268dd026f3ca6db74e71473f48a
SHA256761f38f22b47b97b48d0490c6257fba098c5b6c89203c29b07f2ae94017ca301
SHA51248831490f22491c115204eea0e7a92f6a64d3b726732c813fe9085013d0382252d8c3f97669dd6814d292c6a75975217b0e6a7a55620949a5f653c9f051fa87e
-
Filesize
4KB
MD596ecaca2853783a8f476147819c05714
SHA1528011eefa75dc879784595c7f89e46eb93c5302
SHA256ef4abd73390b64a4c1adb519e771f76ddbb29031028f2696d33cb4dd4089ea90
SHA512ab73adeee932cd121e7e96de5d8f3e85253c51919826ec62722ee8f7ae89ec3facddc6c9685d60d80d2771f95f7129fff8ad17a312a689e83a47219d02f667cd
-
Filesize
4KB
MD5d6f6309a17c6913025ade02cce023ea0
SHA141a064f613ada2a383c6374b666473fe5cde0c70
SHA256737fdb9d57d3bbf616cdf55bbe9b432955201590352d60afbe61918127a495d5
SHA51239928fbb13a880c11dd0280e5a5d93d2739a8260078c89d6a4c687c306c7c16b6cb875696e5716e4bc26e5ef244c675f387bc07239d77accc4026dc081d2eee9
-
Filesize
4KB
MD5d0ec41f9ec6af63d038305191622b4b4
SHA178bf75239b6876e298a1967cf51c64055ff960bd
SHA25699401bd971bca534901148dce06150c3b25544feb328439eb432363f72c6cc19
SHA5120cf0a3530c07d9e207075840c54ee7d9b8eb8eae48fcb58a0be545abde3b46e20628c0a8a9e41d9dd4b25d0436f763cd8ab21a2d691703b0a0a1ee211e64d023
-
Filesize
4KB
MD54e9892cf7a4d0f507236db5eb659f441
SHA10d4e3fdb1fa73c084ffd87e429f2fef606c067f1
SHA256d2bf0fe7013c9edca2b1cf222dbbfe3a0aae851be61e48566659138331aa92f0
SHA51206564639673956e9b1acf7b0ef4d1f083033c8ca1dde34c410854b2a0aafe484c9d463addb95ae40004f8fd37b29a1ef4c74b4f72359a362c71000f0a84194ea
-
Filesize
566B
MD59a4a4a2dcbc273a829713352514ba5f1
SHA156fd79af81ffc2fecb88e481dd97d7e56f7c0916
SHA256cdb7615a14c9989238d812dcf7654b6f012d5dca7ca4cbd7cadf0863735d4761
SHA51219a0063b024f34169ea9866345de298b0dacf6fcbb265871ecd8c5851a0babef9b869c6f37b04911f55737932b611291debc7aedb8f4fc737042258b07945025
-
Filesize
90B
MD5125e2748376b43bd445bd88fdb5e032f
SHA1f9343fc1682ec21760069225007b8090289bda5d
SHA25680ff04daab58898f3b32a0f93931715bc0d5c69a51f6bc74ca5f83c1b2e51015
SHA51278028bc502f93cf7bfd76b13df883c706a793b6c53961c44e34673afeeb6a39196fde542ecf594615dde68765789da84bbcbc16a7e8bf0f1302d4de36de152eb
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5669a47cee9a2cb82c830c06d3e239c84
SHA1ecd5137034adca2ea34275c14b3af6e4f67b8833
SHA2565c2ae26cea5a2e652b401cba5962158be613208822b39992fc95b33ba71713f5
SHA5128b69c92b678d2c402a246b978ca504ba13beb1e66072f20026154aab18deb0056ad6a3d4ffc2175c34c4956483bc5d0cc2050815503038b351b42e3d8a6771a4
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD56513610d4f249c0d3aa6c18ce483174d
SHA177c3882827e6d9e42f80c6482e308bc0af2c8e99
SHA25699456786cb6bb5c65a346387dc163089acdfae656d5182577f7f797235d1495f
SHA512b3412b4ee329120ff1b20e41b652391c91e6d312478f5bb7d6a8cfbe81a429fbbcaa075e832c02e96d9f8f46f56f7ecf6927cbfcca43929ca0edf8fd43229a72
-
Filesize
108KB
MD500397b261657b52e07784ba97c8886f7
SHA1746946d9f7e5ad21bf62093b13f5d9b84621d936
SHA256cdac61df305dc4c042cc16e1f60fc31c4a43065a47be2c1cd30cae1604dca92b
SHA512d3995d7ca898b5746320e465b7842e5c4cdcb7a4842a64f0950893734ce4b4d99468cc1129e192d944ddd702bb935a6261b87e4161787ad0acc4377317555381
-
Filesize
7.2MB
MD514a62c7c067b9846c447de5b3889ad34
SHA17cb140d4c1f80af788a09c03f094838cebca2310
SHA256eff5aba6b84602a2f28169fdc55b21f51eec54a1f6bb9a04bbc7b8d0cb8ea596
SHA512c8fe89ad697d50db2d9812e6aa29832ab675a050eade7d41c2c4cc77e50e97ef40ff161e2972958d25aaf8c0e784d8c31007fc1cc728e5d8796618446b808012
-
/storage/emulated/0/Android/data/com.direlight.grimvalor/files/il2cpp/Resources/mscorlib.dll-resources.dat
Filesize329KB
MD521d06dbc8af6432b2b49536ed30609af
SHA111a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA256c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
SHA5122971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
-
/storage/emulated/0/Android/data/com.direlight.grimvalor/files/il2cpp/etc/mono/2.0/Browsers/Compat.browser
Filesize1KB
MD50d831c1264b5b32a39fa347de368fe48
SHA1187dff516f9448e63ea5078190b3347922c4b3eb
SHA2568a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
SHA5124b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
-
/storage/emulated/0/Android/data/com.direlight.grimvalor/files/il2cpp/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
Filesize59KB
MD5f7be9f1841ff92f9d4040aed832e0c79
SHA1b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA256751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
SHA512380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
-
Filesize
28KB
MD5cad24142abba464dd90777c3d347ef88
SHA1d8db7111fce5a08d8b7c9a6e1e0ad2fbf34cfe12
SHA256edc5bcf685d930a607bc097927260a3f9ac7f52dd809db68158298bfd934b7ce
SHA5125d3ee2ee7921c95cc30790ae670fcadcf091d4fa1b9b5e1b9c7500c67230abe25467236ed160c51aa662e764ccea10e4955887359a65b09432b727abf27f8454
-
Filesize
2KB
MD522c818a23169e12bd3c8587b6394c731
SHA1dd2be2dbccd34736719301aee92429d4258ea5a0
SHA25649c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2
SHA512c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7
-
Filesize
11KB
MD5dc6dd6d8d1fc74e76c84b0b38dc6b1e3
SHA1574e4b24015852d45ac80dfce8af3c6fd4a4f09a
SHA256cf2b54339e069b9e42f7d6795eecbf562c50c1011f4ca8f65f578fe52d97ff92
SHA512c835136bf7c203f7ae19c4aae5fb456b1d25b32e3664494be74b11cd9addf647cc256d47e1e5ba99a59638d714e9d43c6be732c2b6d6de60e77977e99bf5ec7b
-
Filesize
32KB
MD524c866ce8037fcdca2287234eddff637
SHA19245befcd116458e9619694f1a785c50fa61b58e
SHA2566919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664
SHA512f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2
-
Filesize
2KB
MD5ba17ade8a8e3ee221377534c8136f617
SHA18e17e2aec423a8e6fb43e8cbe6215040217bb8a3
SHA256ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
SHA512c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
-
Filesize
18KB
MD5d081581e16b06480a5aaef8cdfb305ab
SHA1771648fadc7ed9a422b4bc26e38d854d066742d7
SHA256e38bb8cc68fe5b4edecdfd288d094b9e8ced7629039b2a347682aba0d8bd7492
SHA5126312269cfd726a991e574b1da0c3b8a2978b248118c1610d4e8791e83f3aa6d42bdd1f4f81850eaa94c026d51e73c515971a58580cd9dfbbcadf9ba0584749c4
-
Filesize
33KB
MD50869544722561f5aff0eefc83fc7b001
SHA11e118f4b5c1c6a7b1858e3fccb1b1d1095561976
SHA256ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
SHA512ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2
-
Filesize
18KB
MD55075af18fe1d2b5f9555d5cc68029814
SHA156c4c47501664bc3bcd54be505cc3d9f7d0761f5
SHA256c4cbddd4fd9347b58cc5a72b36dc4ba1ad2bb699e65869d05cd3fb9865f0d824
SHA512dfe8ed72b013e67c3cf0622cfe7d14ffde97a4d7132ca6690db5cf2d347f3535b475119b01984923ff6c3f39b8865f857c67ed465c3b0358e2fd06bb0dae0909
-
Filesize
304KB
MD5378be809df7d15aac75a175693e25fbb
SHA12d5454e161de8a5b65910f27bd70d9d0ad8fa476
SHA2564ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e
SHA512d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363
-
Filesize
2KB
MD500dd0ea7a708a9cb30545160e6474fdd
SHA148741b77d235e9159474b316eb244ec395a2de72
SHA25640ccccec6366e788ae757e88ce39c0fa0484b1f8a4836da7c860b54a15ebb1d7
SHA512a6d752a6efbb9f531ba662f94d2181c0e5679e595f226e894ebb75f5a0e666f027beb329ba47f0ea20958a8be196ecaf702b51cca3a427e8f8ce7e29447b0e89
-
Filesize
25KB
MD5f34b330f20dce1bdcce9058fca287099
SHA1936520d5bb5c00a1985d7a4c4f0ef763a9031862
SHA2560c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d
SHA512d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd
-
Filesize
8B
MD51c662370c8330365f5d8b1183fbb0386
SHA183b065f0271bd1ad98b8438d78d4be33f8bac118
SHA256e0b857904892b50afb7103791b6e70f8c39cd39502639ab4162aff8b1d5d4326
SHA5126c5d51dbc80e769066f4e9494b57bf4cc71377d3f3c66899ca8f654245790a9169869ef458a725bd623bf90253d16417daa11b8fec4440bcaa9c2cbcc3cc19f1