Analysis
-
max time kernel
26s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
24-05-2024 11:50
General
-
Target
MoneyMoney-1.0.4-GP-release-1.0.4.apk
-
Size
14.8MB
-
MD5
ef5095fdb7198b4fb9cd3f3c10b0b7a4
-
SHA1
16f6c490c5b15453126a7ecca89f3243562eddf1
-
SHA256
db48da0000a131f2c6d85f2d0277a2e96eb99bf4b3b6652d510d399f55a0e6ee
-
SHA512
80f3b21ea7ee10457a717a6cc758852509dd8f8c3af5e1c2843f5206522ec8468b7b03d6bba28784e55d7b27def4a3f23dbd106f669b0b458c1938eb2437f04f
-
SSDEEP
393216:26pJavzp45obZLLiJjiOiDuRaKy8FipkuCevT5IaK48:CzqsyjifykB8Fiaev4
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries account information for other applications stored on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.money.money.game1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Loads dropped Dex/Jar
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.money.money.game/cache/f12ced99413c6f74bcc8ea4127a68d97.0.tmpFilesize
4KB
MD5f934aa4df815976d0c51565b038b5615
SHA1daf8653caa55508953c1415b8f8610c5b166b3fc
SHA256f1021c461dd5436684568beb0c047daca0242b85a4070897c4944de6585e1742
SHA51207e179401de2f9f6183c852fd8f3131c62038dc0193e4ffebf2cf607df0ef4da69825ce641a7c08190e06f36b42e6b99889d703cb235e8f130f53864cdd5d378
-
/data/data/com.money.money.game/cache/f12ced99413c6f74bcc8ea4127a68d97.1.tmpFilesize
85B
MD5ddbda0d52bbb1c122d8f1518a53c1c96
SHA1d7db03a7732c2383a9a10d0cbdc52da5e6d757ff
SHA25612a1751bc14926efbabfa1d9e16c07443b5144508382f36ac090d16ccd34c375
SHA5128553baf1bb27727024f6f14421a27f51c7d477628598343d41e411717d1c46dcda6ed3eec73ec3b8e6749936922f8ffb9262d73a74b94fba03f4a36a94813025
-
/data/data/com.money.money.game/cache/journal.tmpFilesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
-
/data/data/com.money.money.game/databases/Money Money-dbFilesize
200KB
MD5260beac3550c3aacc0c4bab88f3303e3
SHA1b12c2911c7c277c62f855ace1f2f60ef9e3ce838
SHA256b3325c394179881bd7bdfbd2e782f8225d62a3d5dcf4f33ec9d2eac7262b923f
SHA512d3d9d3d6dbae834457c0771cb0578afb5b507616aa67d94330e5077e24b4dc1b8f323a745f8e06dd56f0d9a8b8b935286867d70e430eb07609712a586411cdc1
-
/data/data/com.money.money.game/databases/Money Money-dbFilesize
104KB
MD573f3d9473e6cbbfe5d0e8cd06d94c9fd
SHA1a638cfd65761fb0bf72dda324663a3ff5bc39792
SHA256bdd8ccdcca4de23e57bcc78a8c5f7a16cb0a016a363bad1f76d436479e6ee781
SHA512645be9b078ad9878ab5741e5ef9909295c3080d782220dcd87f8f5bd30391116f62c27370796369489601dc19a020bfd9e0c239913a8d35ca1fddebdfe7ed2be
-
/data/data/com.money.money.game/databases/Money Money-db-journalFilesize
512B
MD56dc47ec5430d82ce6ab293895bc4afcc
SHA154de0693e192522df66b87fd71a2fd9ac7abadbe
SHA25653669a646512ec54a7dd5586e7d31c41088984eff0ca2df8c16568fc65cf2621
SHA512193ab49634f59f6b7bab2e8c1aaddd0804be4c29260c9d6b0d54451ab79662032ff44f8a8d8834f757a2c304aac34512e561f9ec4e7079695f9a712c05896a6f
-
/data/data/com.money.money.game/databases/Money Money-db-walFilesize
213KB
MD57567f703b92cf22db0797b8fcbb37506
SHA1aed6eb0c9f371d94adf89079ef0b0ba70c72fa76
SHA2566f42239d44655af22bb0f54f1820823fe1c6c713c3dd7b025f99e8def185f3b8
SHA512c256f8494ff772e1789e0a22b79b54daa5e6b1991a4f0e41e72b50a4d718f92722a8237a9d7e8ba5d0bab106400d84e3a5c83875f8ff2d4cdbebe1c94c38593e
-
/data/data/com.money.money.game/databases/Money Money-db-walFilesize
406KB
MD5159b39b282a0146ce8391048b6e9e5d1
SHA1d86703bc5a1f571808b6705b361a9c4fef52658d
SHA2560e217807a69ad66eb514ed83af0afd989ce0913501c0b0a8bc44223bdb57c62d
SHA5127918cb6c86616bef62b563f48f1c2db5c8e67168694e77f268aed0960627549d86103753433b321b1af7a63f6f98c6d9082dd005bc3735e3bcdab22e28348f06
-
/data/data/com.money.money.game/databases/anythink.db-journalFilesize
512B
MD53056e182ab7ccc6c4d62b917c1cbc206
SHA105f467dafc82e8a69f39a412c4e0af24aa908e73
SHA25669213690f035fceeb8d47fca05453eed2fc21157bfcca3345e65311949feac32
SHA512613e17253991432663cf522dce25c9693b39399c96e8ad338e10e62713dea442ec6cae501bf2566a0b3c26b1da1dac9ed6ca0d2d913077abff4455334fa8545f
-
/data/data/com.money.money.game/databases/com.google.android.datatransport.eventsFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.money.money.game/databases/com.google.android.datatransport.events-journalFilesize
512B
MD5cdb5f8cff871be2127690a6d169bc861
SHA1cf2461ed723a4b59dffed60dd4eaba7d7a876c4c
SHA25643728d4fcd9f809555c70528fea8830804f9e8fbc1eae9c73f706b87554f82fa
SHA512b85384aec57cd461105b74b53a7a7c36be3fe271e5f18a5eb753719a4d9b27be2154573a2204174fd240271a8f49287cd542c170be70e51c96da4caf17750eb3
-
/data/data/com.money.money.game/databases/com.google.android.datatransport.events-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.money.money.game/databases/com.google.android.datatransport.events-walFilesize
68KB
MD58bf8cb350b0766881ab10eb9564737d4
SHA1e78f5f3874724cf7420074d8ee4c1914fa5958f7
SHA2567887e3c12a25f18a04d1c233bd80ad1b1fb9272bd7ee6327a0e60ff495bb9712
SHA512370ee7e2c3e5ab40c0ad0be2ef427ae45571233f8a8e17c5b292db1785ad973493e228a2b5152c7ef1a5b6f6b49ea57f84925c9fe50a4eb5de20e12ac864873f
-
/data/data/com.money.money.game/databases/google_app_measurement_local.dbFilesize
16KB
MD5712b3e8fb17503b06a11a25dea47d11c
SHA12b617e2f5e11c4e1229713f6bcfb3100a7a15ff3
SHA256a5e2572d33c28cd4cbb6c154c56bea729618cf2db1a1e23a65bd99cf3ff5c541
SHA5122bf7425e3839cf5b304055c9bfce9d8fa9d360fbf719e472b73384256094ba9c4a310e361de93a38194de49f5d6a7f874aa630a701f2c1700cb95c3fe6765c12
-
/data/data/com.money.money.game/databases/google_app_measurement_local.dbFilesize
16KB
MD51d2e7bb340b7e120782b4c5709f239b1
SHA122ca06bfc9ea8e86c26a4b0ae4ea11ddfc8e6b22
SHA2567a2348ddccf52e01775d4dcae0f6eca052a81f8453c7b78fe9e9d00ff025a6ef
SHA51264f34fdc95dfc3f6b38e4b3a78eefa38c9a809e6a53f50c05992db2d7668d794e0d3220d6fa7eed0d017c11a85aa8365c1afb1bd276dbaf6817f5b9a0b60a778
-
/data/data/com.money.money.game/databases/google_app_measurement_local.dbFilesize
16KB
MD5dc5173ab9c8b533b06c923097502b504
SHA1e354fe99ff0826c997581f8a4de8e11039f4e672
SHA2565efd422f1c03bab402447b3bd317bcb9eb372f2a8ea10e005f1c75cdd240201d
SHA512951acc80772d2b021993eda5cc265a38efb3edf6ed9ac5732d3c7a628da74c803d7f98dd1787e770fc450f8fac6a0fd23e198fe2bc34dd6c350b50754904bd94
-
/data/data/com.money.money.game/databases/google_app_measurement_local.dbFilesize
16KB
MD50539ab32c8bc36c24649a2077415fabc
SHA1e4b518b6bc842eea4b08e206de7ab8dba26cd6fc
SHA25643cfa1399dd408a22232f089123e03d0603cc729cabeaea946ad550d0883b159
SHA5122530459e997edf06af33032dd338dab62916fa9dc3f3ce4d7c85ba6271afe69039ea5c9760509d95fd9ed00ad739a911d35469b168f70eca58b82986ee2f4ca1
-
/data/data/com.money.money.game/databases/google_app_measurement_local.dbFilesize
16KB
MD59314c0c1a302b84ece919c467e41feda
SHA1c6e44e2c124d1a76df5ec52c23b482fd0a747cd1
SHA2561829d9283a48f944dc461a887c1ac0a2171de05674ca1a3a034403cecb22326d
SHA51256418a4b1e6a5586729cf53900163d8f6ae8adb33d8365d1b0692e9ba19034c63f2b04133c111ad9d5438e573a1e31d9a0f76ff663c785460ac93c0f79fbc840
-
/data/data/com.money.money.game/databases/google_app_measurement_local.dbFilesize
16KB
MD590f15b67b815dff62370a606ab9c8f90
SHA1d70dcb87ee306bfe504b3f1102e76d6329b596e8
SHA256e6bd7b73c6c86fccf85689e65ecde2f5dad03747353c2c54b343e8db38002b05
SHA512304fc1adc5eefed7cd9f0dc6deed81d174d881cb44f5bc320054dc345fcb23a4a0476216ccdf2cabe3505907dd72739eafb26a50c1ad9814dd134999e1e0ed72
-
/data/data/com.money.money.game/databases/google_app_measurement_local.db-journalFilesize
512B
MD5f0958e2d46f1225e7a827bc3b64b032d
SHA17756a1cb73733cc326f88e2c5e3e2ad349ed269d
SHA256c94d97ae69aa5a4aa30b31ff5c9bddea871dee2ee3f215c7affdf3b5b35693da
SHA5123580314b058967d58efab1b6a03f1c9e805c122a9346e6a7b63ba15fa72ab3d47ea6280f61374cf17ad7bf434a2cb48008d774ba81de52a00b8cc59091469647
-
/data/data/com.money.money.game/databases/google_app_measurement_local.db-walFilesize
36KB
MD5ca2562dcfaa695f541e47a0e279efa75
SHA159f38117c2be212f14707153a984cbdb9675b7f8
SHA256cc29a22d75a3518c01738dcad01267d7e5298842da15abc82a3b73ae163a317a
SHA512a9ff37f9804ac197692facc1b95dfd30efdb0de03de80b30728196b77a7b7c15039c454c88405e92c5552c5959a1baafcff29bf81015ab5910c0a50ba74cfc12
-
/data/data/com.money.money.game/databases/google_app_measurement_local.db-walFilesize
4KB
MD516254400abc5f5c78050138c3a0c8b35
SHA1664d436e8b87eedcbd8d6741b8fd51eaea33ea4d
SHA256084e25847c05541f067298ccd050e426d8652f91f0595156d3da6fb49fcb9b0d
SHA5126e8300985426dd6df62732be3f297357d08f39443c32dcf1ea92529580146eaf2cc5c0de649872502f365c71d000893ee22d39de41cf5924aafafdb67e925a2b
-
/data/data/com.money.money.game/databases/google_app_measurement_local.db-walFilesize
4KB
MD5d017811856e0f21dda36ee61b0536319
SHA1d6aa8cf8e1e0ba7f6c8d5de9309d41b36bc0365c
SHA256e9ca3dd63d4ec0db7de1a44f4e1c84a1e2654b96b059c12d660cd54258d5b249
SHA512bf708333122fc1cd640228d7ff5d7c48b5847b850e08aeca35d4e5dc6d830c10ac0a73f1ce21c1e995c87fc4ae6e17059a2d2331bfa7dbfec0ad068142e6d2d8
-
/data/data/com.money.money.game/databases/google_app_measurement_local.db-walFilesize
4KB
MD512d617974d5a6f7843fb89725748e935
SHA1742dac8b52e572ab44a16a09962dc8aadb4f3527
SHA256fcb76715e944c9f0af7ce96b086a3587a4f7b6e991269895265eab5dbd8a0310
SHA51282a7c5a13eccba4c17c87ebe69c9e5e51c893b3845eaca912fe21339fdc113c9c0b03530187ff7df107a5b571448b4b7380d0204fb0d3645887c85dad9e8b6fb
-
/data/data/com.money.money.game/databases/google_app_measurement_local.db-walFilesize
4KB
MD5792849f3815726703628155ed788f101
SHA143e51c5320361b3820dfc914bd5193dfd327fe27
SHA256d6a9d5c925de8c919d86cc3c1a833bee8c14a5b14f68955e9c136701f1e10ef1
SHA5127383423e0315673160f7fb484231482167b84b3a66b9a00419be012eca54edd34bb77083bff1107d7ef522589c3ba34794a75a7b782754891d94dc81fcffba48
-
/data/data/com.money.money.game/databases/google_app_measurement_local.db-walFilesize
4KB
MD5cc175c2e2f783ed23bb59b5a0754b44d
SHA1f26d588c472af1addf73c4bdf9281671835fbcf8
SHA256a24a0173cccdfa3d5deaeac80cee282d311a94155361c14c3d14d87b977fb034
SHA512253c6866180b7d2afad7391f9846d6ac8ac86280fe3088f302e4ac82209bdd14fd21f2fbb67d89697ed1ca1aff7b40f445a694e561c0a8a2d5b29923eb1764be
-
/data/data/com.money.money.game/files/.com.google.firebase.crashlytics.files.v2:com.money.money.game/com.crashlytics.settings.jsonFilesize
716B
MD5a767cdab4d828ad5bcac5fe5b2cbe2d1
SHA1fff283e0727a2cbbd8af16ea5386b613b3b6b113
SHA2567698ff8fbb9449b4fe87a708c6dcb587c3ad1be712faea72fb9a266683788976
SHA5129593f94ce5731edad3a631176a515021366bf99d990d3fbc633cd2e71f8ac9f2c4bb05780381d20a9433bcacb305ddf23027c4cc07cd66f597a2c2284f9c5e41
-
/data/data/com.money.money.game/files/.com.google.firebase.crashlytics.files.v2:com.money.money.game/open-sessions/665080AB00D0000110D7560CC42873A1/reportFilesize
747B
MD55613ccdb9897e9909073486ae650500b
SHA1bf511dd10e31c2b704b89f60cacca8ced60b761f
SHA25674ef0bd583686c4290e5e60d738b6004068297e3c2e6b6e718acfa6730b4b518
SHA5129d26857b24bc5e08785039d4cd7bcd731c439763d8c0a8c3136ee4517202b16b710365cf3f42f21d635db0404eb4002700493e9648317a5b4458595c54edd074
-
/data/data/com.money.money.game/files/.com.google.firebase.crashlytics.files.v2:com.money.money.game/open-sessions/665080AB00D0000110D7560CC42873A1/userlogFilesize
267B
MD5519da941333e75039614a479004bf9dd
SHA19e1f5d1782a2c3e08e5756b873affe8511df63bb
SHA256f255142bcb5817070c81adba02f11521b430e790b2f5c4a5b7af8b03e8402876
SHA5126f1467a5afdd4f260dd3b298bbc3482b79fdd20643de259efb9f577233a6ce88b3a3299226f941f3994afb093d49c97daa2dd02730cebaa9c2caddce538d8015
-
/data/data/com.money.money.game/files/.com.google.firebase.crashlytics.files.v2:com.money.money.game/open-sessions/665080AB00D0000110D7560CC42873A1/userlog.tmpFilesize
16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.money.money.game/files/AFRequestCache/1716551872558Filesize
3KB
MD5be2f090dac7303e88880bac487131bab
SHA145197202e43ab88c4926120addc1dd7ec38db819
SHA2562a5d65933ad80f7bdd6b9f8fc661f3bd8db1db630cec93fdf8c93e627be06f7f
SHA5125aad6eed9290bfb66c1d5432b32d1581842154a72cd2ee55c96c7eba6421d589750ddbe568cef5bfd8833f5330efdddefafad119886b2249881e0609b5e72153
-
/data/data/com.money.money.game/files/PersistedInstallation3379068911008476834tmpFilesize
569B
MD5392d0630ad7847107fcd827a3854ba72
SHA11b98b3def2a61b5c044a955849d11cf23fddf677
SHA256e262c96a832d7bce10bf4607b4f84d1d07660bc7ef23c812ede97b275e26fe20
SHA512f3bb3356082ec39161caffd66f46880910931229cdb50fe19d460679a559b61e1cb1d71aeac6b567820fe463c963c840537d6127e154b38fc04053010f0ba956
-
/data/data/com.money.money.game/files/PersistedInstallation5717853074471142924tmpFilesize
90B
MD5b4b743838b978173a884ca54a3f98fc3
SHA16563ebc4c5c81bf665a01afc5916bdac725523dc
SHA25642072120d82cd32b2a02dd17334ffa93747a2eb5fc4b47ec4a8097f508073073
SHA51287484b9e7332c3c712c1d5e99631c26dd338affb05e91d402fbd960f1733b7c0c2cb22a28da80e26c3bcb4bbe138f9c301b9a1a3ea036f359f25501db0f6d01b
-
/data/data/com.money.money.game/no_backup/androidx.work.workdb-journalFilesize
512B
MD5649c0a2004305f63ced33b183238ba2b
SHA1ee6fb41432e7a7b8e917bc40499153655104c2c5
SHA256cc90167990c294af281bcbd3bc3798e58670cd9089ac53688fa694ef45c445fc
SHA512866fd5b9c7945a182c8a9935206736b72fe81df1249f36c72b2679db13fa549d9e3c12d2abe2143443481b71177ac4c7a1b3e82fb92ffd6b78946c3f650d48e8
-
/data/data/com.money.money.game/no_backup/androidx.work.workdb-walFilesize
16KB
MD5cce2ff2015a4a17458f23c5af78ac1ec
SHA1b88245b2736110a6d24a725c8d6f54dcbaf8ecec
SHA256264ae0ec070cb9ddbfd383cfae6259c58e7bf21333f14007aa147e0b36dc37ff
SHA5127d48206df2fea2e2048352d5d63d41fc14b98b6c5f4a96e351ff0a2e07784ad97aadda4e12656a6da65f32231ae7b0006cc8b3be7b48a116e6f6e7f8241ed7cc
-
/data/data/com.money.money.game/no_backup/androidx.work.workdb-walFilesize
108KB
MD5b0c6d6d513c80dd457cd761fc1f46404
SHA1a42270ca6373712a0da712fa517163388efc55ef
SHA25620d2c91f25e6cc3774ea1a1d0d2f69811defdcd08dfa346640b11dc4f36533bf
SHA512d24e671714b7af61c524095727996f27602fb35b74b9d74ba60f0d39f5f5d23f81c48490b1fee55d7816421170e39461863de4418d83955d3a030972590f42c1
-
Anonymous-DexFile@0xcf3b8000-0xcf3be160Filesize
24KB
MD5341e14f7654d26d66e0ef0af29f0cc7b
SHA12dfb4c0f113bee7e81783183b95c1ca80e2d49d2
SHA25694f66aa1ae29067590791b57c44943326ff7d0793e5c3b4943c88837d98bf5f2
SHA5121507fd3211fcb3c9205d893f4a90c079c886a694fc34cad726e77232dee151ae2d79b847eef2610f23011702cc5f35bd3896e3a3510acec8b5a59f4cd4bdc25f
-
Anonymous-DexFile@0xde267000-0xde269b88Filesize
10KB
MD5d69df8b4a8321e1df2fc39b931621599
SHA1af2117182dd922e8391b382e0f08c0e6ab638f8e
SHA25676b0a168957403694b4067be8d5e0733c8b06b4165a0aaa85363517e8e972b41
SHA512493e83909a0ac511d4806052ce1ba097adf55249f382bd4a31316c98a0e712bd48c4ea7260072b36354b17e7e6eb4343ab2b875a57fe2e912606633a76584a43