Analysis

  • max time kernel
    178s
  • max time network
    184s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 08:52

General

  • Target

    GameBox.apk

  • Size

    2.9MB

  • MD5

    f56814a880accf06829ad074b9584195

  • SHA1

    b94071dcb7526e240f92d39913ea5c28977aac75

  • SHA256

    9c0424fd2e81bc8661d2ded8c15f6f346b729e0d203b9df879299704fad31e2e

  • SHA512

    51c6484fda6111306df1b73c86efd01b309a9683ac343eeaa83d7ca5d99a2441b9fcb268a14e8354f09ea773b9f929a29009145f3a9b80a475e43141554a2ff9

  • SSDEEP

    49152:PEHwm+BJCRFrKkSmB7KwG3hxmgTlAG6YiAhQKK504KFuK3DeI:PEH/+6XrKkSq7PyxmgTlAG6YVQKx4KpV

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.meiriq.supergame
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.meiriq.supergame/databases/rep.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.meiriq.supergame/databases/rep.db-journal
    Filesize

    512B

    MD5

    31face657ca3dc6f97a343debc353bd8

    SHA1

    691c2208ced8d3062322c92282d84885fe697f4d

    SHA256

    62ffe5705acf03cedeff1f3c50e1420bab7dbe3b76fd929209e94bdc52687727

    SHA512

    0838d72cc54639d7df5ac3e385b394d989f2a71fdfdc0644384a6fc12bcc5c3f413a071318388ac09e0b2b8e421f3da91c807edae14dc955e24f5ea53828e016

  • /data/data/com.meiriq.supergame/databases/rep.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.meiriq.supergame/databases/rep.db-wal
    Filesize

    36KB

    MD5

    f5f9b0f1b514c51edd3e078dac69a002

    SHA1

    e8dc358ad66d5a4295c988de3226fc142943959e

    SHA256

    e304673c5efc4739cfa35fddb19278a6b33ad4678faf0e05732cb2688f27ec8e

    SHA512

    8508079aed04f39b1bcd5022c32dcd49df55d203da2a6f4bf055b66c4c28a6aeeb0255c5969389e2294de0593fb492aced8bd0daaad74c2c2cc1f21d90c2dbdf

  • /data/data/com.meiriq.supergame/files/mobclick_agent_sealed_com.meiriq.supergame
    Filesize

    590B

    MD5

    a0a5bb0add21936c8f5abb3cd4a81368

    SHA1

    50d25e7b6573441c88444df683dd159162233fc2

    SHA256

    03df40f717bae1825f6af0b6ccd219e9f028463ea1b97bed6f3390b00c9f10c3

    SHA512

    377e229431d0d67ae6d3190f9b2d8a8eacc16e6d51333591c2b9815f8c921e276a960e692fc114db196826c5ac2ba9a6449095a6ab8cd4b62e1fc48a1bf9b91b

  • /data/data/com.meiriq.supergame/files/umeng_it.cache
    Filesize

    211B

    MD5

    12f0062ee66c9d4758e3d6caa60d1423

    SHA1

    d15eb539b8ec281c068d9e34076cbf1e55dbf4fd

    SHA256

    fec50e6e5b1947d99f42df31f579603d67f8b0f6f8fbbc67675ee40c65f385c2

    SHA512

    2ef4dbb39a22a26cdd36b131a23f01583e1909ccd91a6abfa914f28c5349356d4bc0675675178b1512e95fb797e1f8aba38c9438b8d9ffab731cfebaf458a8a8