Analysis
-
max time kernel
179s -
max time network
145s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
25/05/2024, 21:08
Static task
static1
Behavioral task
behavioral1
Sample
Android/obb/com.firsttouchgames.dls3/main.111.com.firsttouchgames.dls3.obb
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Android/obb/com.firsttouchgames.dls3/main.111.com.firsttouchgames.dls3.obb
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
com.firsttouchgames.dls3.apk
Resource
android-x86-arm-20240514-en
General
-
Target
com.firsttouchgames.dls3.apk
-
Size
72.2MB
-
MD5
b0f79908d7ebb371a6aab963d64f72bf
-
SHA1
2d3162608ef380ba7cdff2b2712cf8cd64b67162
-
SHA256
236070f4ddc02931f739edcec9191c6d0f94886289beea29d433efdbc8f66210
-
SHA512
8bed0df43b2b2e0ce4fec86dd72dcf9200a98bc4a486f5855ae5cae786891836940afc3758a4649e39ff008743810c5f7276ab9b1d2c96b1f5912ab9dc597c35
-
SSDEEP
1572864:xhjiRDRykUXeysmnpa2c0XSAyUBVGa4Y2xOVqRGWF:+9AkUXie9TCA/aa4YlYRRF
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /sbin/su com.firsttouchgames.dls3 /system/app/Superuser.apk com.firsttouchgames.dls3 -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.firsttouchgames.dls3 -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.firsttouchgames.dls3 -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.firsttouchgames.dls3 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.firsttouchgames.dls3 -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.firsttouchgames.dls3 -
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5891969f8bcdd83e96fe215ca4eb5ca48
SHA1038f3a0bc9d46fced1b2e794237f14d557a3192a
SHA256afeb99c795b7d769ed3fef6defad194f00fa25dfc8722afa399550786ffbfbb2
SHA5121fbb409155c60936f7c3ff424d8a562cca70687a6f248e8781315378995c369b8e03f54affcd5a3ca83a8330a123fee8f91fb6cea1272ccbc78ef5f4815bfccf
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5bf0bad83151527e5696455032b5405b3
SHA18518ba104fe38cf457ddd6646283f12457a75473
SHA2564d9e9e123dda798f1396a334c3ba397c55e5fff06e21b2c57bf7e5d73bb2aa90
SHA5127ec39c4270f2cbfc3e99d58a20c47ab695a1366e37fe9c0da533eb513d007dfa96fb8c8fdb58b89584f298db6439f2eebd2cfaa62eded2097b2ff3a7cc73d537
-
Filesize
88KB
MD517acbe7753c8d4195acace78924301f6
SHA1ffe781c8c4bc1f1aeb3bce8f5e7073e4faa039bc
SHA2567d52d6496f2c607ef45d839b7438dbd169e79e3ef0ae618a62ca8b4c7e94a576
SHA512bfe2186d491139d278024947cc8861e1d68c3b6edf24c2abe6ce40a4734dc649b40089539a88cdd1fe6e9525c23013fc0267cbb3da66bcac345d0f5776a939a1
-
Filesize
512B
MD5fcc520787882eb8528bd6d5e9118be30
SHA196f9ea6c60affdfae99e96ac31d8df38a0f3c867
SHA256487c5e59b22de28220848a6f41ca32c8c2de16aa5e0bbe79281fbdf53e45ff75
SHA51259499b02e99ec0d4cf81db49d80618277e190dc2002b67c00c452da349d389849b9abe2db6ef4bb3aa1a901b1ccd954126013d77190a231d797f44e7cc42b850
-
Filesize
52KB
MD5278b8ff4a2bfa07b02e3e72b533de00b
SHA1e9e0832e94972091b3018f39e342ed8a43acaf91
SHA2565f2624d8bf237d42f1f393b6ce7f0e817f7cae4c64dfb320591bbd0b7dd4ec1d
SHA51290490e81e781cc1ded7b75f16420adcde14b55bd2c94052fcfc8dd5c9e1e91ab971cd8840295080353dd3b67cb2f6095c6f391eb61d0ff9c15b09b4b94a331ca
-
Filesize
269B
MD54d93e58b732151b0f5e05554b37fbbda
SHA1dabd53d1abea97f2aa65c57a6e268e51edec766e
SHA2562fa0084d6b0229ba872634ecbc9966a97f6f94fc1a339b4266d4581594ef0a51
SHA51293d2af7c5295c90018e5b31b301a9ca01981fda890146176612ae311096dc990f933eb67fb828909665906a6b473d3f627bef00b768daa8aea9de0ca58a7d993
-
Filesize
469B
MD53f804296c45497dcd65b206909dfb60b
SHA1f88840d6aaf99c041ee18bddc151795764544183
SHA25647752c9d3f05c14e1818749bb77c92e63ac2c451041f539dfdf2c6f85587507e
SHA512ba9d50c4876b3d8cb45f4f49a5df93264afad1bdb50af59c23a6db38ab23137d300baec2eae7e77000fa514f3fd6de811b53a99ca33bebc8fae8f36d8119fbf7
-
Filesize
469B
MD59c17443bd14e09e8dd9d7d5737c67f0d
SHA197f6443b2428637c5167abd7b88da56e31f5ae39
SHA25608f09744b5217079c5d19b98b7f2c8711b8e73f855275fbef7c7abf05d345882
SHA51206c68a65f27c3d0d30ed6b47878b1cddb14b2140bd8004e89c4585ffae865ebc28a97989bed5a114b8be3f9d3f7c0c2ab87b8cba0dd0c065ceeca439cde99f7d
-
Filesize
503B
MD58cb9cb54671b815eb4d8c94b96346954
SHA151f7c1d76f49a6aae15f89d471324c9edbe900da
SHA256a0f3e89cf793216c4a36eddbbb6785d677af54490ddeb14a41e77edb0b6ce88c
SHA5126d735dd2166ff2e8cb2fd6c9bfc65061954258185dd073a69754a8031e151e1ef2a254cc20738676c4ec53da2112b4ec3909e06e57ac239a9b64cb1fe31710b4
-
Filesize
503B
MD56293cadf93b46ec49efeb624f456ec74
SHA1633e9d79812e9836d0ef59000e527548548700bb
SHA25664256f255dc3b00ba8d270148991de217dd3327ff16f4aea2f5c68712c318877
SHA512ba4fd9909dc029f3afb5b1676501070f2cc4de394cda2537f176fd3b9210d77622aa2d4db6cc53a58b433ea91d89d04db19c27c18b49bf677fa403d13b8b6fca
-
Filesize
503B
MD54ed2f30919b357555787bcd6500aeed0
SHA1b5517d43f4d18b57f33b101352dc43669f48e119
SHA2561c0113257f08a79343d48b1adb33b0234fc332c6454bae297602d54fd7741bdf
SHA5128bcb700badeee6766f843965207fd8af5a08cd103f5b0fcd1bcff36ef2ab3ed5d47019eb0c770a0cbfccfa7c455f7d51b36dcef3cdb94b06fc0ead78c3ec949f
-
Filesize
503B
MD52d9224a2a5be05a545fc74648601163b
SHA18379e1c6cbd6cffe72b5fb77e38f0f5a3ccef4d4
SHA256e19af787a0700722dfc70bf88a6ef3242de4294cb728a4f1daf7204b58f531a4
SHA512129d4228670ab55344c52d088119dd75d214b9894257dfe6589339961036905450121db138d0a5aed3eca86c7aa47369dabda21919fb8fd60190ee4aa938faac
-
Filesize
1KB
MD5dedda0e9c55f36b8a0c36af4e1d6b3a5
SHA12ba04715cfbf5609f0cc3f4d1e3f27f9ce066be9
SHA256821ce2c70e99b5a78ed48231d9d62bc30b8b3da9b10754798662d80e94d65e60
SHA512a5834b9c9944e34f071c666564b753251d6bb72e16b3ac1d287c111b7b422630f5e1fd007faa05c04a3cd6aa606eb0e9b8542b4c4e30cd3ed584f7fa82ad2bd7
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
180B
MD598ceb9d0516541db444d0a10e250ef4c
SHA1c78783cd75ca3df3ec235332034c3cfe078513b1
SHA256b559909eb115864556163a391a7a4329a6e35d893bcb61ba7c175afdae63b1ce
SHA51219ac8330f8b953a7fbb980f4721be6e2c039bcb16af008e60f115293d75dc698c6f81b64159ce1e4aabf90db62b0fda7d3e53611018735b012848dc8a48ee901
-
Filesize
1B
MD5cfcd208495d565ef66e7dff9f98764da
SHA1b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA2565feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA51231bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
-
Filesize
54B
MD55d301059f10752319cc44db3b229b179
SHA17204ffb255fc6d85f1e915d0e9a8ba31fcd72d8f
SHA256c03866d694e96997f9e833087adcb3bc116cf0e2388e9a27971ea3c55d83d55c
SHA512783e79dcf41ce11473cbb6db295dc279a97b88f9c19710623ae08ed9852fc26cae795cef73abad17eff28ad7f9d4a5009bed51c2c135059beaa9067422d62212
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
41B
MD58b388dcb8571bf72a14675a350bc74ed
SHA1a4422dd63277554777c4a5cabb55eb4d3063f481
SHA2561f4721a1844088b557a12848ad5d17de507418eaa324715648208c6f698b0adb
SHA512914590d64b7f644423ed8f763881bf3225b178681cbcd929366af066c3a007ece32eebd828cf85e16de4f4b643534bb4e3dbcaa2e2a486c442e8c53626ae6876
-
Filesize
91B
MD5ace99972473d7b3ed15814bd0ab7587c
SHA1cc0146c92a63c58330fd51322de05ebe037871c5
SHA25605f45018f90bf4c2bda433d6f0969b48931069071cfea5d1135e0246e8d7a16b
SHA51274a105c9be03f2afd68aab753ab17197326d9a414a46d7a44da3f678bb2abc83e732f99ea36aef3b3863082a8fc24c1ea38974fab8cee457f418ad5e802f72d8
-
Filesize
26B
MD50fdee1cbe08676ea237fcb3c912774e6
SHA162d6f18d4e6895a15a8b178c6554aa74bbecbe23
SHA256a0f5c5283e1824377bf5fc7674cecdd612c31922346012709f45d988f515786b
SHA512d83de340f49f6156579845b79e929aaae087224399b2d334e9fd4401330bc0f7aa4a9002e96326bf115d4fb7edf557e455348f257c9111f2fe7c646f6bc452c6
-
Filesize
36B
MD545b1cc30589d2590e6e4b8c499bb55e4
SHA131511f736dfddb5335584ec0faf6a858b7f76787
SHA2564cefb2675f5d73ce9da318e2180f2d5bfed6f9a760f723dbff82d01f04929e46
SHA51284455690ebe8471615c5486e4784b4f5222f1ea8fe840403dea2a4440b5cc307da976d44a39c1cb15d80dbc4c35c8d806a079e6dd2e77efff1e55d6b14a92a05
-
Filesize
2KB
MD5e51b419f23ed1c1cb280885260794f7b
SHA1dc71a00117a8d85534e76ce1dbe7ddcf101e0909
SHA256be0b3288803ff3e937a90c411a4e2119d341bb5abd6671024f8b6dafad734c70
SHA512dc46c1c905ca7570d5fe1c67a8b79326478d439350d90b95f3a4e7b1819beea99332cf09c385ac0ca16b8a83ad06019352ca6faf7fda22cc610e3a58d7cd32f7
-
Filesize
332KB
MD5581ca5c20b01e0996f1119ea552efbb2
SHA1907e4b90bf8105120cfa65b81eeb7e8aa180f409
SHA256f499486b880db89928b176a683e0e1456f2987fd8c890db10b63787c4ea2c5a2
SHA51229dcbce67b55a90112ef5e91f281911d04b5e8c147732a4685f7a3335a4e30bd9e074b5209760578edb4542eabe208f2f320788e7d101049bccff34e60c926cf
-
Filesize
332KB
MD56dd6edfb6ac2cde95eb339355f948b4d
SHA155c1e410b67ebbf59ca952a7cce6c6f45b3b61ee
SHA2568d21206ede855143ea48a7bff32977885a63d6c2d6aafa7d2c25f71c789dc71e
SHA5121c487dfc9199d3e43c5b85cce5e6b9b35ee5d238fa3a0f5f378c8c4e963b745b999c1a1887c4dc243078018fa1c857fffb3a1ea051658fd793cef95d7257aef2
-
Filesize
578KB
MD5e099ab8eb228a40046bc75d03690b2bc
SHA1ef4b60dc9584e0918bedd55e7a8904bf4f1ddb67
SHA2567ea30c1fd2adb23b28f9d67bc5d2d2719d7c1c85b304f76f5ca035d16fc0dc05
SHA512255573a8ee31bf1812499cf518f053e515db302ab387bf18b8b6b27b83676757861fb9a4396ac3dea87d18bc1ae228a385d08b21bf32bac42be5000f2b252104
-
Filesize
578KB
MD5c74ef0866ce09daf2c38244087c13818
SHA1e2d5dd7923920f6e2777981ad0ad59fad12bf5f7
SHA256e8692826a7891f1cad1ae974b4c16611cde80b5cda23f5b1fb748de0c5414bc8
SHA51298e249141d84e1d506200d136d12232e32f8de7cc914555429711f0f4a3ca2e0d1d9f76da873b8dcc1fa058bc951614e7d615c03c974dd0ce50e75154b2ff293
-
Filesize
4B
MD5f1d3ff8443297732862df21dc4e57262
SHA19069ca78e7450a285173431b3e52c5c25299e473
SHA256df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
SHA512ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
-
Filesize
16KB
MD5c7af5babd32d509a80cc9ea361270dcd
SHA1516db7c07dc24706d55da44b083f1273a2aadf13
SHA2563a506c8a8cb7ba424162bfc766b17470c405ea8a228606f69f7144b9e8118a8f
SHA512e7eb42069cee9adab7e69c0eba6440c2c3a2d2edd20872a0e74846838fa8feb8b8803207e2796310f49fbb6f8d1afb6b2d9183b7522892f1712b1b35ab871171