eeb46b7f5ac7b3e5ac0141ae21fc15e1fcb40c1141f64c83020f726db7d71275

Analysis

max time kernel
32s
max time network
34s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23/05/2024, 21:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

modern_command_v1.12.7_mod_lenov.ru.apk
Size

59.6MB
MD5

8c0aa5a67d31a1ea667b520b6f8a8add
SHA1

d63ff64945642eaf28d993e58da4ce21ab88e841
SHA256

eeb46b7f5ac7b3e5ac0141ae21fc15e1fcb40c1141f64c83020f726db7d71275
SHA512

e993042e800fc5d2018875f2063437d2ea88189ccc0c291d93c5d48718f12d92ac97e7df7cc1256e98bd64119e686d3664531564f841428f596c6ab2065a93f2
SSDEEP

1572864:EMAchdQXQmEtvk76CtqS5lSgrVBxId/LO6alK:EncfKp6hS1rXqac

Score

8^/10

discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.chillingo.moderncommand.android.rowgplay
/system/xbin/su	com.chillingo.moderncommand.android.rowgplay

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.chillingo.moderncommand.android.rowgplay

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
Anonymous-DexFile@0xd5480000-0xd5482b88	4270	com.chillingo.moderncommand.android.rowgplay
Anonymous-DexFile@0xc3afb000-0xc3b01160	4270	com.chillingo.moderncommand.android.rowgplay

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.chillingo.moderncommand.android.rowgplay

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.chillingo.moderncommand.android.rowgplay

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.chillingo.moderncommand.android.rowgplay

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.chillingo.moderncommand.android.rowgplay

Checks the presence of a debugger
evasion

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.chillingo.moderncommand.android.rowgplay

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.chillingo.moderncommand.android.rowgplay

com.chillingo.moderncommand.android.rowgplay
1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4270

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.chillingo.moderncommand.android.rowgplay/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
86a1669b3436b802480e8c50fdf050ff

SHA1
7387dae7aff4f42b9510f9b453ede1d8154aa3ca

SHA256
21635eae7dc880c0a95efb32c876c6a681fa3a46f30f0c0a748115c6c345651a

SHA512
c4fee413e7abadef575ad68ad6c608c39701e053c148103964e7d703adbf393c7cf52a32091ad3b6492df3e044d72b39d0654cab2ceec5b88ec192227890819a

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/com.google.android.datatransport.events-wal

Filesize
148KB

MD5
5a7f1fc0f94b9d6c126525c533372da0

SHA1
cb3171164e5abee52dc78408b798de7296578896

SHA256
d7ed8db5d3f811d087e407a3163b00d3bb3d7dd0a6bf28b9308b4d69d5755654

SHA512
8da94c0bfd11042ad642bdeb4ecac4811909dca2971a5e75247b1f659792ed789acafb388364309b76a527a4b90491ac3af13e39a70dd78eae0ece5d1720a022

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db

Filesize
16KB

MD5
69d64e4ad1a2f6fef5b2bc15c38b4d8a

SHA1
88efada4f54bc40e651793c3bf1610318bd7238e

SHA256
b14f0dcb2dc8a38dffbcbf09fb42ff8798a44e4af3b384e3a087d2db4b6ee28e

SHA512
072721934ff6e573653a3093f761c5b7c8674a51747adc05fec0472777e0d5edea637f800a3fa120044f8aa01f6cd93db2fa6b328bf5aa8db1d6ff9fc9e5c6f3

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0e33a3a1f8390a5fe6370b4a6b889a45

SHA1
ca7245047c273c3a5c2e9fa30fc691180938470a

SHA256
aa0f35b7263d149ffed47510d1c0deff94efbee70986dcbd955874437fa4db2b

SHA512
103177f25555bcd4bb5e579557bdbf432d5a649e4c8d26d689ff39ddcb3062644ea81f2724a2e00eb45f699693d0e0b49825e4485aed47338ce45ce008ad8abe

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db

Filesize
16KB

MD5
70c1758404cf4ccb65b5fc4eb8abd2db

SHA1
e6a22889f77e8cc8fbf31ddf1dfd34ce43df8fd0

SHA256
9416524a87d10684ed90c8165a0fd52a223be55eeccb5d323705e68b20d2f7a6

SHA512
57d5fb90c25e39b24e6ed4840752c9d9d15b92042853622ae2354597c9cb570c5ebabe5a217fec67112ca2965685e9fc407d88e7b11c07a4a6e58014cbcdcb88

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1a4fcf718772e344d295f9c185d70df3

SHA1
6c1862f0ae2e251e1500f1d584fe7ef16d9a86de

SHA256
f0d7728bee3bdaea0bc0b4b9b61d0015868d38a26037c5b6c5ebf5cc86942434

SHA512
f06184fe2c4af2ca63ab46bb2081b1b596ac482ecbc19dbd65d15813aae403186a11a374f958c3fa6b8eea56fbaaa21145215a7ed4b43543867f63300e6d2c58

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db

Filesize
16KB

MD5
44693692da738db6eb133cf0e4cde91b

SHA1
e6bda56494c325d8d37ad89552263ae85d9b0550

SHA256
8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

SHA512
b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
97a85fed0bfd6215e707524c0bfed8bb

SHA1
93f1e0e26d4dfb048b8c97dadb4066187a047425

SHA256
54367152aef4142476d7abd950a867e3bd92f9d397931c16bcd0fb05690221bf

SHA512
43cfdb26b359c28cde4916964e57baec4c56e8cba7b6aebff75ea6fc12635196e846c255c4f5ca0baed0d251120569f2113b6eee869b0e1a3b59a56539dcd954

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
5283014ca5641d8a938affcc1f293dc9

SHA1
755ca17ba5045875164ef0e5d509bb5afd4b2746

SHA256
dbf6d3bc2555bca9fd82bbb4eddcd2e5e82eb768468d7076392591cb605aaea0

SHA512
171f9cdfaeab132dd1cca0edc93b846a61016afbc975b2f7c1c19cd40422e23a297c2a31bcf9774f56d5448a7dafa5f46da35c6f1641ba98f164ffd4a1c0b90f

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c0b96f245efd02d621a9206671d2ce45

SHA1
099860d83c7d1e5a3c305a2039d8a2f62aafa3f5

SHA256
c4317c3d4f7bd17500d2ab9e47e9a40281ba72c11b96cff19b2d57157489bb4c

SHA512
a97ad78ef5a691d8e3b91f92f056c4aeefe24abe2daed4789f094108a798e4e02916891d65d8c0693c97d53e087c96ea2483ec80040c00af699e3ef7a37333e3

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
000fef8d11852c921a560b3aedff8893

SHA1
4475400fb007c7b7d83b82c345d3bed204c774ff

SHA256
c81cd8da0d47061b6c42283cd97a4e03076474f9e9ac392c7ac907d219b36cb5

SHA512
36c5994f03dd30f28f3f07d8433f834296e6f882606aba3283f0b2cc4598a36dc862feef54c6aaa05ac88a3dbd7997d7189fcf6c298576d2fb47fac4ed92b8d5

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d95843670f9eee47004fd416fb1a05bd

SHA1
721fbb22b3dee9bf6697d4b696eb74ab89e0a7d9

SHA256
2445f5323f5633409d86b3d65e6994b38c6d7f58bc67c176ae4cb18b395b7a6d

SHA512
df7930e06925a6fe685bd6cd71c86fe76ef53c3e5592c359c910dfb37f23c6c79d0b2689104ceadc78d2c375e33cdecaeb39d8570e0d6d74116eeb5b5df2992b

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
50c3d42e0e2c5cbf4378e912921fdb41

SHA1
c737b17e3137e148cd76277e79d96e4f3e206b78

SHA256
c7c022f9ff5b71e27072cf9ed355ec9fd95fed2724b076d82be67916ecffabaa

SHA512
0706d3502a5686ebb5e3c1fefa14301a911eaa5386ab90f65a6645537fa431f66366eafc5ee341db6228fc22c568a6ccb460110ef40f50567f5f345556b1c169

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
cdb2e6f572987bbd14adcd0a5407c6fe

SHA1
4ba9d0681b8958564e2e39a1539006d5808b458d

SHA256
a53e36ae0a956757f7acfe0523af82009fe6fb92cc42d37508611d5836a486a0

SHA512
d7871238ed368e6b222895190201d234dfb1ef78da61f0fa4daba74b7223d0ef333bfba840a1b8f22dcbef319dc670930e4ac6ee4d05a31d8e3bb2bd6f56002e

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/.com.google.firebase.crashlytics.files.v2:com.chillingo.moderncommand.android.rowgplay/open-sessions/664FB533023D000110AE6A4C30819E53/native/app.json

Filesize
246B

MD5
137990444cd28ba922ca35d59810f6c5

SHA1
676c7c8ee180787727529d6f4c6bc1da7e41e1cc

SHA256
daa9203f4f9a38bdfaf9879fcdd8c24eaeffd3823c112476c313991ae8139240

SHA512
185f1f3cc5ad23849766f929976f475a304d10591a6f063be2e4252930aa15797399439279838f5b8b9249ece49f918571d119cb57564f2e1583c3be2e44df5c

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/.com.google.firebase.crashlytics.files.v2:com.chillingo.moderncommand.android.rowgplay/open-sessions/664FB533023D000110AE6A4C30819E53/native/device.json

Filesize
193B

MD5
488b1489ac4d3b89d10d3f873727ee41

SHA1
f65273aa79f9d0205c11dcaaf257457d85a68ed9

SHA256
25189431ccb3f67616108f0cafbb993d864566d63fc9c19b3e1b86f863a7c54e

SHA512
7493d142c751abfea8b4088f8cb72491ff48864cc2ab189d63a38a57ad5babb475c44165775834620a877aec7781f2247f59bd3427c27d2e805797de25522b59

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/.com.google.firebase.crashlytics.files.v2:com.chillingo.moderncommand.android.rowgplay/open-sessions/664FB533023D000110AE6A4C30819E53/native/os.json

Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/.com.google.firebase.crashlytics.files.v2:com.chillingo.moderncommand.android.rowgplay/open-sessions/664FB533023D000110AE6A4C30819E53/native/session.json

Filesize
127B

MD5
b5487c3483639083281678d681f45111

SHA1
f47fbc3c574f9296d4e2951a615af50d581717c1

SHA256
657642c602e890d29bfd678d924c163da7e42ba0210eda3f9c7be7f8fad1d21c

SHA512
82b5ab4ad52e765c79ab73b9d5bcf6bd27cfbe2e14a7107d64c1b97f64b2fe0b1505dd4a70f06b32ed765491eee2a76e2bc8c550fa61c11ced7c7a80ea2d63f4

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/.com.google.firebase.crashlytics.files.v2:com.chillingo.moderncommand.android.rowgplay/open-sessions/664FB533023D000110AE6A4C30819E53/report

Filesize
778B

MD5
3b2f03575154b3e02135b1338e78c71a

SHA1
1408c27399d72b246303e9733ff1a4888ae32ca2

SHA256
c4c480c2e1bb14fd7dc37cdefb4883423db9b60de08c7fa915cf0eb8cc93e1ff

SHA512
599df5e22d47bdee8e82d1f2d7dea7f9b7cd37696bf4c82347facdaf896e20794d74781a8d63faa674c21804ddf0f00dee8f857b52e815bd3dd8e737f897a55a

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/.com.google.firebase.crashlytics.files.v2:com.chillingo.moderncommand.android.rowgplay/open-sessions/664FB533023D000110AE6A4C30819E53/userlog

Filesize
1KB

MD5
6e6c29a44fc212a646046ca53561ba5a

SHA1
fc7c491722e2cfb43f2f745507c56d08dd55ed34

SHA256
4419e22abc31fe86728e04c20b3fcabc4dd15f08169de11b55b980fb5761ebd2

SHA512
4b6702393cc0d1d14da6006540250bfeb6956a24a7139a061ad2d8a843c9a19a356428cb57f51e4d6b8cf6292b064a38f3e69ff0bf18977d27ab375094fd819c

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/.com.google.firebase.crashlytics.files.v2:com.chillingo.moderncommand.android.rowgplay/open-sessions/664FB533023D000110AE6A4C30819E53/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/AFRequestCache/1716499771031

Filesize
3KB

MD5
14631808aeb07aa55170ff0170e85fb3

SHA1
ad819e64b368c8bba6ae88f1e1c4a6ba237e3b65

SHA256
97d50ad460b10c99f26179bd9cd7d446be41fca5513e9728ed633590c59cf014

SHA512
9d95d873dbcc921374605cea3557fffa27f7adeeb360faea743aa4205d2238f16951393e867feb1253ddc57910839f244fdf374c6b25fb852a9b26b1712742e1

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/PersistedInstallation2584586336325607337tmp

Filesize
572B

MD5
8e93a8921ba8e51cef1ea6d3d27edde4

SHA1
e79ef2c73a8443f3d5cce9d87de8271118420d5e

SHA256
9c9f578d2b220b93e70f9f6831a32bf55f02b5a7148456e5b1e20b7467c7187d

SHA512
3051914633f87235b2c0d01ca334c7da45f3da8a8d19a34748eb5772e1cd96d4354b1b79cd57b676984650430568e3baa5bc54501db5abf5097d05292832e893

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/PersistedInstallation6468369747077320467tmp

Filesize
90B

MD5
871598084b86bb255757ae0cd64bd975

SHA1
6b77ad81191e8b0ce41b03aaf388f1f18bf25381

SHA256
d2bdfb4c86d9c75ceda3ece80c68ab497a139818aea13c186660484c62d0412f

SHA512
a46161fc26dd510d81a0b8e0b5be624780c855b55f425fca36b9ae2901be032c7e3afdfc47d52028bfe0c070d9e8e20a5b3fec351d8eb250447dc4d075c034bc

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/al/persistent_postback_cache.json

Filesize
2KB

MD5
d7a28d8c5d31da5c36e4af3e7e4ad6dd

SHA1
c091be37cdf44bf221a474fb6dc24efb188f8baf

SHA256
825290adb040c4051c27c798f6bf349638fbd11f7b370a3615b2adfb01312e1e

SHA512
f6ce327f52d101bffdfce0bf9e3d0ee07b1058e45c3590f2b241a6637f59160d1efc49a03a917ebf708f5eda6dee3bda15be4b6c6ed5415ff3d793b0479a953b

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/chronos

Filesize
1KB

MD5
26c584469deacc14bc7b0df4e58aed91

SHA1
296c4f4fe59f9cc0500d8f3bd3e08e18790168e5

SHA256
69ddbc918b7518e070b7a9a65be2882d7d5d1a4ddf3dfddddef4fa22ad17ace4

SHA512
558baca4b7e92989277d5abf6068470e5e042c6ac4bb45772eaf586c9c25b2008a0911e3418d2620434a6ee04a597e542146ec2d99e47e764dca88dbec06302b

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/frc_1:1027620022156:android:965757efb14f1bc242d8a9_firebase_defaults.json

Filesize
566B

MD5
d6ebcbe0ee74b11966a0a14ea9e63e60

SHA1
249fee08841b25dc7f79cd5348e9568668a5c98f

SHA256
ca8f400a28c1d16ecf2c519598822873193f3ff719399cb5b514c2dc08018a79

SHA512
343cd2b01f51448ff3829ea90a18ea864937a914de60ffa1c1967387acf784cc9d2e8de9c34ccbc24716a5b6ff017e1a97abdf2a03e7e6e1ff30052f12490d00

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/frc_1:1027620022156:android:965757efb14f1bc242d8a9_firebase_fetch.json

Filesize
208B

MD5
817e119382433bf7c827345266681425

SHA1
a5cdfdeb9a89e9689cdbfee9aeaf351615046a30

SHA256
4f2cd0578810fefe922d810f366dc1f4c1e632b13eb4cc464d73e1a8a1b9d962

SHA512
f53d440236b369f100c4ce88c3c6ecec2037c9ed3e7a522e392b6b1c4696acd53d0ca32ec59a52b44fa6d83c2f0481ecd7d2c1df49dd42c7dbcd6e3e05411f1e

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/frc_1:1027620022156:android:965757efb14f1bc242d8a9_fireperf_fetch.json

Filesize
1KB

MD5
2e7b9682605fd99c05fef53aacaf77a3

SHA1
369f72b94f5a93d3c8ddc420a50d27e7a364d12e

SHA256
293f3b1a64ec6b42683a57b3f9d9f5f4dca556834fa07dd9ab002dbf5c879aee

SHA512
ee4b7410bc80c5c99b0fd54260ca26c87b5f8d2396cba62152489de12afa85a67a2d81303664e7d1a9a3f8b570a2786801f158a136d6dfcd91d50af048d7f0d5

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/files/userdefaults.gsd

Filesize
10KB

MD5
34ab1dcbdb64796a9a2e843bba7cec2d

SHA1
7fabd23a69ff0f74584a0db8641690a76f4e2439

SHA256
a901b25b8aee5d2d0d7a4f23998e684b190c96fad9a714603a7abc6377e4d003

SHA512
5e3f718bc223a710e217465866e4a2843998af6c4764d6b0ba1223a675a017a1b804ad6c08b428ea96a44fbd324ffb19e5d0bd3ca324b3bcddac97530bf09744

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
42588a12304dd4fa752b4b4eedbd83bb

SHA1
6ff12ce38e827ec37c20f39ecddd4aee394a9218

SHA256
4f12cd3d2a8ec253c893ab159989a94469a2527f1ab73c1308b5a0a084160013

SHA512
380604903761d014b7bb0bf074c75435f308b897cbb702dd2ec7bb39f9c263c0b917766bbe39c1bc7d35162aa93619d9b60040a928b7808c93bb1243c42aad8e

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
b34da2dc886a30fbce20349e3dbdffd8

SHA1
5becd39965a48f5ad76aceadb39bcccb6b6f9013

SHA256
1105dcf16a4346a813a475ac5aeebe2c49a9c4b4b8515368a60ebb482b1d8009

SHA512
a450ca7b3ad46dfa04996a8dec4de556ce3c10bd2fc66567573e465584e5e5dd2e9f15a7cc5fd3d6059389ed07f13ae4174a0a78da18bc93729607bdf3e78b5f

Download Submit
/data/data/com.chillingo.moderncommand.android.rowgplay/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
4d4a4c0b07dabac4a2b204d3b3057c54

SHA1
fb1c05b0fa13d3c41e4cdda17e5dea92ab70f545

SHA256
0af9bef43af9dcc3e2f814a30a8ff4a0c15cf0b68e8002a63f673349eb8d1e20

SHA512
d0b1dfcd3dbafce0bc8d22c03c5f4898c312aecf46a94ed8c1bd40295af2056ffe85a1279e94a77d9ea1aa28b4928b4dc833fd21ed7caf916ef15c0973e8d65c

Download Submit
Anonymous-DexFile@0xc3afb000-0xc3b01160

Filesize
24KB

MD5
341e14f7654d26d66e0ef0af29f0cc7b

SHA1
2dfb4c0f113bee7e81783183b95c1ca80e2d49d2

SHA256
94f66aa1ae29067590791b57c44943326ff7d0793e5c3b4943c88837d98bf5f2

SHA512
1507fd3211fcb3c9205d893f4a90c079c886a694fc34cad726e77232dee151ae2d79b847eef2610f23011702cc5f35bd3896e3a3510acec8b5a59f4cd4bdc25f

Download Submit
Anonymous-DexFile@0xd5480000-0xd5482b88

Filesize
10KB

MD5
d69df8b4a8321e1df2fc39b931621599

SHA1
af2117182dd922e8391b382e0f08c0e6ab638f8e

SHA256
76b0a168957403694b4067be8d5e0733c8b06b4165a0aaa85363517e8e972b41

SHA512
493e83909a0ac511d4806052ce1ba097adf55249f382bd4a31316c98a0e712bd48c4ea7260072b36354b17e7e6eb4343ab2b875a57fe2e912606633a76584a43

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads