a7a76116c9bf55fbe8a3498cbc11093ee46f524d33efa126767c8ad571b65d02

Analysis

max time kernel
179s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
30-05-2024 14:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

846bf746ca7aee1a56b3b3da22ef639d_JaffaCakes118.apk
Size

31.4MB
MD5

846bf746ca7aee1a56b3b3da22ef639d
SHA1

4b3a76068103ab6573f35f69a1625c96d032dc01
SHA256

a7a76116c9bf55fbe8a3498cbc11093ee46f524d33efa126767c8ad571b65d02
SHA512

bddc6fc033d01d8f7203643d68003919d3bc598e3161115d99e9226d5dabe2bcb8bd890ad16f010180bd5e2f22a0f87e2e487d75ca6fb6507015065f5525a514
SSDEEP

786432:zz7JqhGfJYrtHT43npLRUazxb17gx0zP0UTiDeP0YpFuS2vUXLJbEWs:n7GGfEknpnBELDPYpcSMUm

Score

8^/10

collection discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.hkey.ballonhero

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.hkey.ballonhero

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.hkey.ballonhero

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.hkey.ballonhero

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.hkey.ballonhero/.jiagu/classes.dex	4288	com.hkey.ballonhero
/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar	4366	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=81 --oat-fd=82 --oat-location=/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar	4288	com.hkey.ballonhero

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.hkey.ballonhero

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.hkey.ballonhero

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.hkey.ballonhero

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.hkey.ballonhero

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hkey.ballonhero

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.hkey.ballonhero

com.hkey.ballonhero
1⤵
- Checks if the Android device is rooted.
- Requests cell location
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:4288
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar --output-vdex-fd=81 --oat-fd=82 --oat-location=/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/oat/x86/gdt_plugin.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4366

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Execution Guardrails

T1627

Geofencing

T1627.001

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.hkey.ballonhero/.jiagu/classes.dex

Filesize
2.1MB

MD5
b3585cfc146442f030e364aa8ad1420c

SHA1
c3ca29656d49832655e933637bac73184f1ff567

SHA256
b50e6ebaff3e07ea60a8af49f4a161818b9e978870ee711ca06a59a03eef8899

SHA512
1f1995c594c68a4df786e2d0e9e0582353e44c00ddd6225485cf0e749fbb30d47d378cae0ea614d4fa814d29b6c5ec88eb4b3a15782da4369f151687a5ce7649

Download Submit
/data/data/com.hkey.ballonhero/.jiagu/libjiagu.so

Filesize
487KB

MD5
610a895c4a71bbeeaea16eddb1422bbf

SHA1
9f919de42ed1e80bfadfef48f8202b202166f869

SHA256
baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217

SHA512
ef4173ba32309ef1257b75bcff28fd44ab14398577b4fb3b6b95323035c964201ed39546cda3b7115ba5025781f3b9c018443e7932edd50a25b1be60359f80f2

Download Submit
/data/data/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
622KB

MD5
925c89def267b4f087278431a2ea1ba2

SHA1
f512786fbd277978de2ddbd3855db0aa730e4305

SHA256
7dedfed3255e64dea6cbe43789a32583c9e3a9214d527c8125071be4ad7c1d1d

SHA512
f2b414ad33fa2f176162ec0e4e9fd1fa53233cd40395e616c52a60e5fcfb820be0d464520cb8c568c7090a3fbed4be2eb1d9999b6fa487e3de5851d6aed65dc9

Download Submit
/data/data/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
180B

MD5
15c0b64e04e5f9ba644efe726b058559

SHA1
e8e6e3d1b9e5fb8c4e0b8032775786ef7c0284a8

SHA256
f21b8c4f81c98fef1adcffbd90a66995f8627b56cb2989fcd69eb66d9d0e59b0

SHA512
50d5af4638d4574722f84922a7dde418ef44398f612248b9a772ac8befb5036b8bb444222ce06a3f72496c2e200c6db3b7fd9f4d3da14de5fd89e990a87b0c5e

Download Submit
/data/data/com.hkey.ballonhero/app_e_qq_com_plugin/update_lc

Filesize
4B

MD5
dce7c4174ce9323904a934a486c41288

SHA1
e117797422d35ce52f036963c7e9603e9955b5c7

SHA256
0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

SHA512
d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

Download Submit
/data/data/com.hkey.ballonhero/app_e_qq_com_plugin/update_lc

Filesize
1B

MD5
0bcef9c45bd8a48eda1b26eb0c61c869

SHA1
4345cb1fa27885a8fbfe7c0c830a592cc76a552b

SHA256
bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec

SHA512
91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.ac

Filesize
40B

MD5
34eb1dd81fb0202f090a1adff93163bf

SHA1
312fdc1662eec67909207421c78a0e7b62e7c13e

SHA256
1a1ce945c1f06176da22516debfab72c83c77bfddb4e206dcc81db3a36c6293b

SHA512
9744fb2b6c1bfe866cf479e2da8e356a17768565efdb8465030f8b403855d3205eeb08daa9b4df60b4474b7087d6c3ab7f7d36d415e975acf13bedfd51f71e22

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.ic

Filesize
32B

MD5
964ae14a615cd827d4ca34f357474459

SHA1
2c6022b4bccf1bf0b99743cb2c541b085b14a60b

SHA256
5b3cf6ef9ca9023c5143bcb65a5525b2daf190088c5f6ce8ddd743f43b50ced0

SHA512
774423693d62478ea4e9da5ebf726d5bf0c71d0b2d9028274946f8a66124b6ba5b5aa7b0436b9b63decf048867eb31cd8e63851efab0589b9369bea489c423dc

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.pk

Filesize
32B

MD5
e5cb63be732d2eccf7772e4068a954db

SHA1
a6e7c35bfae42e9d80e10e9a911d2395a4702515

SHA256
120e9ddc1dd1de858905445f5d26f101bd7bebc1d33a885dd8edd064cbb2aa42

SHA512
0ca78cc516fc0b12afc910d7a32d19b655141d374b3f9cfeba1d9c58bc4e3e19af000e4fe7ede416088b7d7c3259514b326887f9e218e89612dd3e4f4edfabad

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.pk.h

Filesize
64B

MD5
317dd174067a6aee2991c9b8fbdd7313

SHA1
5a8662f257c6d448782706052b1012082e8b091a

SHA256
172248e4788d4794422dd4505fb27dd38c972c450bad7847cd290e259745a05e

SHA512
0ed6c1758d44f35ce20359a19318e2188efe85dcd002949b445cb5f1c6a26d014e63d9912337482bc65ce200d3e2fcd8f4450260f63931ef02c8d50ce2904acb

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.rd

Filesize
73B

MD5
f9ebd15ac8a94d74e6b22cac75068583

SHA1
1bbc60063f65919119b28fbcb48b4bb8eae24439

SHA256
524a9d7e88c675adf74aa07762c0d243b9dee5291e6715a4ba5232b7272c1893

SHA512
f4b2009e6c91a5b30d283fcadec0d811a041f09f72ca47c4331cd0e996a86a199718c4e68bd5a5b695d366a3a830e026548218b3b356e18fe1d6e0673e830446

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.ri

Filesize
307B

MD5
3559fc212a0d7238f327a6b71934beb1

SHA1
3810e4b078afbfa5a777067c8d32104a3bca4dbf

SHA256
f38ca631005aff3b47ab839c69fb20bff540304833433fb7942cf9c4965ab3c9

SHA512
780911a1ccfde8a0962ed4c928eef657d27fbdca14ec2d05c929da105d3152704b48b37e125cf8a77d05075881788c998b9688eae166ca030791687242e4a560

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.ri

Filesize
314B

MD5
92e9e84146081b950dd127ef82bd20c1

SHA1
968e6b4f68284778ca041d4fd3064fa20a403529

SHA256
63cd6b9a3d96ecd0509d7550cebb0e7ca16fc222c451fd70104ab1b4522c3550

SHA512
07b6774b3854265da41997db7e713fc3472ceca435923c750973dc2dbbcb8e39e3a1cf0ae48954a1fc314cb3d0954be5f854cb2987d653857ae0c74f32b109c5

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.store.report_cf

Filesize
32B

MD5
11f88c04dfada358f985b20748449fe6

SHA1
14a7955bbb7ea6c044bf4021840a419811285bad

SHA256
64be082234a44b072738a68d4424294cf20e26d8863f7ead27b79046eb15b1b9

SHA512
f6a7039a8aaa21e7dc1388bb8ded3517af4d39d5d457cfe35446ead261bed006d483521eea2258cad722fcb9ef5ad65f4cb5252a2a0719b96536446677dcbc2b

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.store.report_cf

Filesize
54B

MD5
09ae31e3c8848ff121f1e039bdc14fdd

SHA1
6134083475186b01232d16a828bcdfa42cb0b5db

SHA256
09715d7d2e65fbd26d91cd1f2ed3cf58379a2402d5c0cf38341d1902e2584273

SHA512
b41d4ce5e284ab0e803f96f1cb60d8b16ac42d839fb16c0319eac3eb694f1ee6830ffdcbeeb2bf96be909596a02259e352535ff062c242cc6e53b8242353017a

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.store.report_pid

Filesize
32B

MD5
e7a4c0259912381381d38b9df7b977a6

SHA1
b9057f2c8385d2c9eb9b8430d404de5569a08fcc

SHA256
9eb7d3c557a00de6d0561b51b25088b412a349c68b6a39eb68446eb10b1c7aac

SHA512
d602d5b5160186211a47d133ec2d47c9edae2f053cf54a75a7278ee6356013970c32713254defe35d6e72dd25b131ee39b6229e476e28d62d3eb54b9947142a0

Download Submit
/data/data/com.hkey.ballonhero/files/.jglogs/.jg.store.report_pid

Filesize
54B

MD5
01e5a6d1ec4a12f4907d55471758dc1c

SHA1
36530c3508be63c6ca14ecff9b1291189c746927

SHA256
848faff549ddc205c399ef88b6ca48242de1a00d92fd4d1e42e639ed4e354108

SHA512
348611b0de0447b620135af45279f0f901d4249abf0a9c0c03b5db4ac61ee29a75e4799713a79923bc9ba9a6e56cd32c4dc0b8df428df150360b078b5e08d8d3

Download Submit
/data/data/com.hkey.ballonhero/files/.jiagu.lock

Filesize
27B

MD5
4ba10ad32767736cf1462654792d4e4b

SHA1
6f303a1a8497515b8ce5b0e5c909457bcffcafa5

SHA256
bc21101d0c231973e2d5161c2d429f245bb9e6cf7f7468dd71076e80854d6c99

SHA512
001776d98efecdffb7409d65d3086c2d1a2f6e8e6a832da385dab5c5c89c5710f08e8b3dbc6ac39c29bd12d1b3c1f51c2176b652954baec8fbe330ccfdaa1ff2

Download Submit
/data/data/com.hkey.ballonhero/files/UnityAdsStorage-private-data.json

Filesize
41B

MD5
16d3e6eac0e79222a9b368edac765b34

SHA1
48d5e621fcdd84108f5750d6905180b622715b11

SHA256
3a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7

SHA512
d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747

Download Submit
/data/data/com.hkey.ballonhero/files/UnityAdsStorage-private-data.json

Filesize
603B

MD5
a39c4551f391ee9c1e171a964d5468fe

SHA1
7168ce6486ebd5967dbff3dc30ad19e917e1e57c

SHA256
d1babcdf114f9d4af58a6df171aa21dd167d80453d68e4d7cd5d70dee5a9c962

SHA512
3287c6a5b6e6f1c9bf9a6956d7f0a492a83bdbbb46204b1f177111bfad4aed835872bd120381a3faa78379c4fd334b5f4a8f6cd426cda79407685de2a0ead19d

Download Submit
/data/data/com.hkey.ballonhero/files/UnityAdsStorage-private-data.json

Filesize
2KB

MD5
7102dc945b8c5970d79b528ea5eec80d

SHA1
08ca2b558f9695a8892ad7554e646f8f1ada18a0

SHA256
ccc4ace551554dc52632af57b30432c5706168989357ee02c07ed72268cbb323

SHA512
f87e66a340b92894ce8eac7cd56111673e97da0e34bd8bff0e6d8ad06bd974c3d446c3d954f266183d7c826323e85e0ca474e0acf515fc2a4aa106e58fa3a175

Download Submit
/data/data/com.hkey.ballonhero/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/com.hkey.ballonhero/files/UnityAdsStorage-public-data.json

Filesize
111B

MD5
06ff60eb0a25c578fd3b5f23ad8e22e8

SHA1
6736fc9320a2285e73b03544396dbb3e62d75d34

SHA256
207d125d3156911bba04adc74cc39998f0eb71c24dc11a690bf34e4d74341fac

SHA512
db577db32274d313dc4fb06d8fd1486be8da43740084c93f6184ebc2b1a928e65a2f4142e770084bcf4287529cb5148a475028dead21912368851913a136cac5

Download Submit
/data/data/com.hkey.ballonhero/files/UnityAdsStorage-public-data.json

Filesize
219B

MD5
5c0a194fbba518adf1238db5ae5dfee6

SHA1
bba2d89136bdb6318baa01100ebaf60f17e62abf

SHA256
73c8dd06128170a48d3b864679e20e58478e3ea0c22802d870ecbe560e4a140a

SHA512
0f919b628ea70b0ee099282e1a676c583adf3fbf6deb1ee47a33126439bf4231ee4cdd0b0a09dc86d99d50c880b1577315de91a04b838c91d1ec227cac0d2e37

Download Submit
/data/data/com.hkey.ballonhero/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE3MDc4MjY4Njg1

Filesize
1KB

MD5
552476cb93279479e29767e64318fd1e

SHA1
361753cdb2edca77b1bdd055f966d7d28a7446dd

SHA256
2bbfa6af568f05d1d51e5a783a7228f95276b24451471b0629dff4a9822519ae

SHA512
caff42f0bff23b5a58a90c84368ff4bd0eb3addbfab20438faa7c1053c005663480ee034de69249caf41916e05593eaa79c208afdb17dcca2c47568991815ebf

Download Submit
/data/data/com.hkey.ballonhero/files/umeng_it.cache

Filesize
415B

MD5
425cbb41e52613429d8653fb4ce8f778

SHA1
66413cb4347c7304ac7f49954e7559b408157716

SHA256
3f4096985433c3d89c64a94c65558c39baecaebb5c044ab8e804eb99bcf7c0a5

SHA512
f7ae632de9d58f2258321960557bc9472ace79394bb0852492473eb43ccc097e20d92fa89bf7fedfe0de2b4a5ae9dbda5399ccfcd8a2d40a5b0582417ff0b21b

Download Submit
/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
951KB

MD5
ddf5d9e4c80364b8197e05cc78c73265

SHA1
6922663fb7e5fbb8565d640236613a88010832e7

SHA256
eb75005eb952f3ad1cfd4bd2e1bb30a037b2c708032f52acab2d3d10889fdc00

SHA512
5ea106617fd6b19052176c00731009101d2b042a74bafff74b65424f2770975911582a03d7b0f3ae14f41b8ab1e929c68d43179f742d3d3fce4060a8199b18b7

Download Submit
/data/user/0/com.hkey.ballonhero/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
951KB

MD5
39694be9ff6293c8c6095d7ca0d6b537

SHA1
6ca2047fbc37093c91c1ec7baf38b9cd85e47b71

SHA256
d819863cca9f506102af00965cb9ea52bc81a3ae2b58f07fdd603bec528dc8f0

SHA512
94a022b3935594625c1acc198a57bb600d9e9a8bcdde37628e66c47a829a932f064a1ac7932ecfc8b42d5d384e363d13df66f52c7648203bea09644deecca186

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsCache-031d07015572574a821bb91f95d9eb28f5a0e17e5a10005e4342519d435246a1.png

Filesize
813KB

MD5
20ca2015a709fd499a15c082f9e724ad

SHA1
872125336f5cbb0ccf36509b274242476c97fd06

SHA256
da5790b24562987bb9d9d1dc274e07379f2afc423c78a5c4291090c08ef08cf5

SHA512
dcc58f9336937416a37f6aa631b20656758da44d605b210bded4cbf5672d5c8ce4277554301c4370217f92722de6777d6fc15c2ce67a4ea6a3691bcb713a1a8d

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsCache-0324ebb7372a030ad910a3d922faf279ebd928547db51e58fbc57b604b6bc23b.png

Filesize
830KB

MD5
f378b5f96d66f3e1b34be70744d2aa03

SHA1
20dc35db40c4b0d82913648840c651dec7e16775

SHA256
8fda6aa8b6989f86bba8d6182969a7c85bec8dc2e25c413a8afe3e9be0d404e9

SHA512
11beeeb75eb07d5c8135a6a6ff141013dacc9a506404dcb7c049bc9876a05c71c4eb969c72b8c95e9880485c88c9b548adf1f5a499c7a41094ba7f0531340d3d

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsCache-11ae8fe922c566cff4d8c3eb71585ea2bd60e1fe6c841d8f0e27978eec0b83f9.webm

Filesize
1.2MB

MD5
e48ff716e568a0590d08a0c5aad9a966

SHA1
b906906ad48c88cb4aa9b5ba432136b67d4a54c6

SHA256
26540f1d464b38d10e4e20095b4681b28115132b9d8ceb358856dcff446857e1

SHA512
88d51b243ecda44d483e926c069e778d8c6c6197de1f912f3d0a9fb9206b09c22d35f3b05391a2b9fd46a4842bbeb1a00ea3ad55fd884c063074e3fa546caf87

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsCache-1d97a6f2ba2ae63681a7c1a45d112248feeaaa7b73d96e471334ae931d32d5a2.webm

Filesize
2.4MB

MD5
0c66185767c4867d6280f3eb4865a47c

SHA1
5aa9464b1407907443d5f6ec8387d8f42bea13a2

SHA256
5cc73c0f82e3aa73ef0dd431e2366a8541d6ab5ccd92dd1b03bb3c6c200b700b

SHA512
cf91ba992664ae35aaeb09da3f7b6b0f57a60d31229cf02658160f33680a2b0aba722411a7a63d029a481dde8517857908b8606172b5b61c9207648a9f02bdac

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsCache-27f3f320eae48019458fb18160316846da2495d6e4bb690c225ae4f773b97646.png

Filesize
65KB

MD5
60c72f57af405251c42044544b299d27

SHA1
0180842642714eedfbf41dc079d5864a01b4f62b

SHA256
9ae306dafaa07da609bb9bdacc79c13b20a21fd3716b7859bf727833de76d426

SHA512
cc6c8b1768954fdbece4378c45f47c8c1b563ad2ba38aa9ceb487e072e736854bcd62793a91fc3670efb3e2e8a3e0c2b3ab3cb7bc20f999a5705d059373ceeea

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsCache-4363c3c571a96eceeb4fb3d5847329d3ac2207a41e1ce7a8682d6641bdfcc734.png

Filesize
857KB

MD5
a5848c6b9f11aa37b0510d453174fd67

SHA1
91e4444c989d9334c19ef43a950d98eebce7586f

SHA256
18c72f2f827d2bc7c8f03da483f44dd4b0e21d44d8d8ae6959044ba9852e9c66

SHA512
a2246cec42724d59a3ed09480246ad91c64b5fec674a2e1c06c2c0fd12c66dca7d81586496563c0adb88c0537fc100563c3fd19a5cc519401045828848a9b430

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsCache-44fac1dd55b351f1995e6195c96cb8bba396727791e493aea875ac8c462d3535.png

Filesize
780KB

MD5
d5b7a4739dc99d879ea59fa1fd327587

SHA1
233f43bfee2459192cf879539f23f9e6e29d4e0d

SHA256
894debf93640f0ab613f95be6f69c722d6b49bba7733bf1cd6929ab45cab0c45

SHA512
bc631c273c31e9dee8e6c713e475a2f784411d1105314a2995ef8c0f66edf08cf8946a280c0ce3973ba4aec3c089a13cea2090921a7a9a3f673fcf37d13b5332

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsTest.txt

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/cache/UnityAdsCache/UnityAdsWebApp.html

Filesize
2.0MB

MD5
a9e3c6999fb35912b07bd7adf4082029

SHA1
ae05c54c95790a702bfbdec8634afa2a12a7b064

SHA256
987926148cb0d94891c8e24f4489475db185b598fc942657cf1386bcd8c5c604

SHA512
9cb796a7bcf840227c923b9081479cde038fbb09f72c95e7b27465d712bb6116f226f84546a41f513d7fd23b67826c69a79394eac2a3be1cbfa6048982db4b39

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/ArchivedEvents/171707827500000.b0dbff13/e

Filesize
63B

MD5
5e5f87d915597021545d0eb6938e1c15

SHA1
3f33febac74cc44348c72b5d533392116f4c5e58

SHA256
6c8a1e8b8ce4ba57520c567b7c1734a8d72e4356f774ed0fbc26ecce74599595

SHA512
03dafccb6b766b3349bf36f49eb7d7227de620204f4c28096ecaf879408b39493831b37acf7e59ec5ee1de5253bbf202398fefa9b9506a8421aa15661df6fb67

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/ArchivedEvents/171707827500000.b0dbff13/g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/ArchivedEvents/171707827500000.b0dbff13/s

Filesize
337B

MD5
d04c57c26ab64acfce78516e502cfc00

SHA1
d88c3e285113c519827317c35d053da8ee33cc79

SHA256
6c7693f1ab8970223bc64ccab05ec2d79c39f7bac3bb7a8ef9e3f607148a74da

SHA512
1b1747ecb85f9ab1b596095af2b5c0a75cb879fdd3cb364a928584f27617272d0e5bd4480bf687b86225b3f206b75938654743aef5ec5ab19fddd517b4f2c3fd

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/ArchivedEvents/171707827500001.b0dbff13/e

Filesize
106B

MD5
9cc302d0efbbc42adc570314060acc55

SHA1
ff0fcb78fcf7cc11858541d543b6c5e56d641de3

SHA256
0bd50c4e0092efefac07c1680bcfde7f8798047d9b4976cdff6fd7c81d5c0594

SHA512
8136e64ec9a2dd2fab82df118eedcdb3c460a946e0f969da711aada0b965625c470a7577b53bf25d6851eaa556b1c2fe398f9a08b3cc82aa3c2be817489a49ba

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/ArchivedEvents/171707827500002.b0dbff13/e

Filesize
995B

MD5
526a65d84fe3b42e85a39bab67574714

SHA1
95808de8d0738a72bb29c8e4f3fa7a1d0dbac215

SHA256
6ee1e6cdda3ce24b3ee95727388722b1e244baef419edbb62fd929e33b9e5a55

SHA512
41fe9a142e2e4551a544dc03b1e6f72225092e75f41ab03f94bc6ee9ca909ae8f041fd1b5e3247bdcf924ed96f2150d8939f0adf8d135c02bcae6d27ec665f54

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/ArchivedEvents/171707827500002.b0dbff13/e

Filesize
1KB

MD5
8fdea72c2576815b8eb03224e0567c82

SHA1
814ef91afb513b96215358b48852768bc003583d

SHA256
0ca0a5ff1f5af8ec2b60dd6219ed472acb33fddaeb5b0857ba53c149faa5c404

SHA512
384069072210cae05bc7aba164a6de1e71207549d9bf7c23e611e140399967a3f857d62ea11845a5aac2576184623ffb1e60eb7e96c47ceca27e05bc368ad1c9

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/ArchivedEvents/171707827500002.b0dbff13/e

Filesize
1KB

MD5
1513f2fb0632b46c285b90d900afc658

SHA1
808483fadd521c2e453b09691925e262fcc23e9f

SHA256
3a44c0ab4176f93acc2697916ef0d6eabba11bb5cf754f147e81685901bc173f

SHA512
60bda4320a8147fbcf423eaaf473aaefaa8b589363509ebe5c68158eed697771a835cd7fcd38e4734af59a20684a916349707a4ea01ffd46fa5549fdb9ed3814

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/config

Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.hkey.ballonhero/files/Unity/75db45ae-78f8-4f6d-93f0-c7849cf747a7/Analytics/values

Filesize
152B

MD5
7e55b6178d894db3890301539b6627b3

SHA1
08a73ba7b4c449ba99c84b4f14acabeb58176957

SHA256
8dc77ad0ae39dfd4e113a9b7f36f5681df648d66050183b40c394f6eedd73af3

SHA512
831725a6fa881c469fd1ef0f8716ff602ec33d22f1d146461d2d3a696f242197b211fe0532bca4fdf89b2ae7345c0e2bd1d23a6826f13c96f9edd478b9b608f5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads