07b731cf364b2b19c8932591ef64aebd948110569295382041448ab70f491a0a

Analysis

max time kernel
7s
max time network
144s
platform
android_x64
resource
android-x64-20240506-en
resource tags

androidarch:x64arch:x86image:android-x64-20240506-enlocale:en-usos:android-10-x64system
submitted
09-05-2024 04:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GH.apk
Size

1.6MB
MD5

e6647c7982823f7e0c49bf9de9e8ca1c
SHA1

56669c77eb3bbb867a470d623496a555d935aa1b
SHA256

6da698faf823ce4cd97d214609d54291da5e3a18561c9a648cba8bbe47595f02
SHA512

bcfc2924ee57b898475fd5c3fb8c9cb001ad2ebca717e60f384720c05441fef4ec00ad777d144c9d15dad8c2e34e3b8b78e067bd1b72a8dc59c2f20d5002b05b
SSDEEP

24576:ygaJGEBLRACbCG4jh4k3QiDkrsPTVwogNeAranxYfks:ygaJGENRACubjh4k3Q0WmHgNlr0xwks

Score

6^/10

discovery

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.emagsoftware.gamehall

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

cn.emagsoftware.gamehall
1⤵
- Checks if the internet connection is available
PID:5090

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.emagsoftware.gamehall/databases/GameCache

Filesize
72KB

MD5
18c57d7fa53a40b1b6fadef97d7c43ca

SHA1
8e6167b7b7eaf2d596ad3f18f9004c64bfd06891

SHA256
64f46157b8b35229f3636c039a1e9c059e2107af0a107c52fe99ea4bbf4d7109

SHA512
68a2dae3fb34c9578a6ad14e9f5dc6a1228c78536f82bde28fefea59b4a7234984c1e744cd9f2efc758b982e767720b7b37d28af95ae81505da353d8245e9d1b

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
512B

MD5
4b430d0c204aaeaafc3b1fc76fa5e2fd

SHA1
c4388164a2db24d64c6d92772b42bf1f8428256e

SHA256
e5d9075c2a903acd3f4225c25408c3a71327aa18b49ffa036fefc5223c64600d

SHA512
b0ed80ce34c43281e5c2dc878f5133d85865a2dce5a8fafc7e52c11aa1d52f4a507e11ae781940b6fc49874817a10e5cf372fb665e3a8c58f252cc231d23492e

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
45926f3297a15b998537d4a50ca8247e

SHA1
519fefcabdbf7441692a1875e79abaa63a252505

SHA256
97ffe3d8b2f2760bde90a0a2b6d1e20d3b6588e77747369ec1ebd7af8a83305c

SHA512
054e72a969a791f4d7227d7b7e0f67695d888b0a1781e75ed72af3333befbcdb31d27d119d70e13df572deba83ad875839e0c84383eda751594c8c378f6ed522

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
8b48a6ce7ba5b03d01c2d3a3ce806049

SHA1
a10db5d434adb32c71b90e5ad6c6dfe75d0ffd05

SHA256
b5c351ed7d88c00b7f56a3510763031e892f7a854ddf106dcfc908d6785420c9

SHA512
309017fb5aae2f3708425b1a7acdfe5982bd1492bb6c6eae39aa6f5b8688d89ac2078aa13a0e177cfc25222212e86efdea6eb8a5d32f2d7c1d7d469db02def4b

Download Submit