eedc492c687f6e442af07795e20731c907b57dbcbc98501482089a487f2dba34

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
22/05/2024, 04:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GH.apk
Size

1.6MB
MD5

e6647c7982823f7e0c49bf9de9e8ca1c
SHA1

56669c77eb3bbb867a470d623496a555d935aa1b
SHA256

6da698faf823ce4cd97d214609d54291da5e3a18561c9a648cba8bbe47595f02
SHA512

bcfc2924ee57b898475fd5c3fb8c9cb001ad2ebca717e60f384720c05441fef4ec00ad777d144c9d15dad8c2e34e3b8b78e067bd1b72a8dc59c2f20d5002b05b
SSDEEP

24576:ygaJGEBLRACbCG4jh4k3QiDkrsPTVwogNeAranxYfks:ygaJGENRACubjh4k3Q0WmHgNlr0xwks

Score

6^/10

discovery

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.emagsoftware.gamehall

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

cn.emagsoftware.gamehall
1⤵
- Checks if the internet connection is available
PID:5239

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.emagsoftware.gamehall/databases/GameCache

Filesize
72KB

MD5
18c57d7fa53a40b1b6fadef97d7c43ca

SHA1
8e6167b7b7eaf2d596ad3f18f9004c64bfd06891

SHA256
64f46157b8b35229f3636c039a1e9c059e2107af0a107c52fe99ea4bbf4d7109

SHA512
68a2dae3fb34c9578a6ad14e9f5dc6a1228c78536f82bde28fefea59b4a7234984c1e744cd9f2efc758b982e767720b7b37d28af95ae81505da353d8245e9d1b

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
512B

MD5
97b7eaa45af51003756b1a0113e22071

SHA1
e911845fcc00eb736e8ffd1f856c6ef38f1960b5

SHA256
7c633ff748b6142d0cf337b879e3c880192bd7689d4a3d291859b35c1dc9916d

SHA512
92910e2ba18e7e4000c9930e5d92b69ba0c1d308cf6b1495733f88414acba51dcaea7900c11e8b311df8e956d8db7a3417601b9036037bd31602864593f2ee67

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
5950ab307369ee5d192601ac38b24e0a

SHA1
2938b56f7419286aecd12b89fde5793aa584a9ee

SHA256
a7c09fa27013eb85687c14c2191fc349fad8ea18ba57ce9e3b4d254d9c0c8fce

SHA512
6fd3ca18c3d6d445c2eb4d3c67b656e2b6bc3555e01320120c0c33de1d4c5dc44ed1b6227262203c8ed9e356908392ebb0068684ca2accb803bd88f86f6eff74

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
75b27ee2bc8619df2a44641b67e2f3ac

SHA1
71f0ba022ee3770b7eded977bf7ebf571f7dd429

SHA256
aaf0459469c904b59f06fdc3a765ed6b5ceae2fe0474ae9edf4a41c508ec194a

SHA512
dd425dfffc17b5d285bd5f9f8947b78151a69f3e6622a239ae95f778c9ab9086313a2b81ad8ef3beee316bac4ec5835c919fdf138aa50e62a95425a601f91026

Download Submit