a7c7430792525572322b505de9a1e2119e85962e8e602feb878a042ab7bd2de9

Analysis

max time kernel
39s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
11/06/2024, 08:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Game+Booster+v2.0.0+(Premium).apk
Size 14.6MB
Sample240611-kkgr8a1flr
SHA256 a7c7430792525572322b505de9a1e2119e85962e8e602feb878a042ab7bd2de9
MD5 bddcc0fe9893f18c1fb661603e6e1b57
SHA1 0818d9c5afa036d051e3024f8f7c80eeec6e52a1
SHA512 afeb536e93274a943c033bc5127a2cfb7b366ad6330e884f177b9afad0d15cae9e9c3a722f96ffae6ca6084e75060c1e8736609158fa2bec8582bb98c6ab2e46
SSDEEP 393216:KNmrAAb551sLKTBDG66S3NQ5IAt57nUM2153Z:Kyb3bTF/9o/7nYJ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery evasion execution persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.g19mobile.gamebooster/[email protected]	4547	com.g19mobile.gamebooster

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.g19mobile.gamebooster

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.g19mobile.gamebooster

com.g19mobile.gamebooster
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4547

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

app-info-db-journal

Path /data/data/com.g19mobile.gamebooster/databases/app-info-db-journal
Size 512B
SHA256 065b80d1b1444e87d8bbe4f40f3bbb25f047450f2978f9e6b6f18d1292ab5e5a
MD5 9e11840510c0de6d71f103589bf547b2
SHA1 2933a7308b354f1dcad96fee7c1d94a11f2793fb
SHA512 683ab0bfa67bc85424bfe6dd77df4398d73a04752ff7d3bb65770037405d224ca3ef02a19d8fa17ad75ff21b2ba89d693ca891832a15b361c715fe277bcb5fb6
MD5 SHA1 SHA512

Submit Download

app-info-db-wal

Path /data/data/com.g19mobile.gamebooster/databases/app-info-db-wal
Size 36KB
SHA256 f886760f68da78bd544a81ee3dc82904ed087037363773c3be0effd4c74e21c8
MD5 745bbf320acfc10cc96a55506bf4688f
SHA1 2b44f61ecd95e642d7b2a8cc30df4e0ce056030e
SHA512 bc531769b2b395c0e42677cee01a09b03106a4a986b2b0a088245bcb8cecc2d7d89b8a7660a6b889caa3d4c190a4c6fd1302143b322e6cc986f19f774f893255
SSDEEP 24:ekL218f66wP/323Vg1Kyg/EGSP/eLDXLV/LWJh:ekL218f66u/3eVPTSP/eLjLBLWJh
MD5 SHA1 SHA512 SSDEEP

Submit Download

app-info-db-wal

Path /data/data/com.g19mobile.gamebooster/databases/app-info-db-wal
Size 44KB
SHA256 5c974e632b3eed75bb9b489d6816f8f4cef0d97b39dd39e10e2bf36250dad683
MD5 ab7d94810d162d75509b4c3c1b164ad4
SHA1 53ebb03291468a620c67cd36baf488fd974f8068
SHA512 d7323649b81c0d46056e5cd5dc7f556a0937eb97b2fd866fb3a96890d3644ae0b40bfae1f0384737f0740767117284f1da6d4b5a8f85f3342bea6a2928e403d7
SSDEEP 3:j5R2LoRn/ji6TapHfSkRdgrKIusIy/l/AnT25pHfSkR3:KLoB1Tapp22IuHyt/Ai5pp3
MD5 SHA1 SHA512 SSDEEP

Submit Download

app-info-db-wal

Path /data/data/com.g19mobile.gamebooster/databases/app-info-db-wal
Size 16KB
SHA256 10c9438d85af86b32ba33f8041a8d961de04d8276e3aff12f1cb5f2c6b5df007
MD5 d4400d28bc88aef8d2af3ca5a2415b95
SHA1 804b8ff890653f273bd5fcbc8a8de3704027c978
SHA512 d395f2b3a680b854f4fb2c1617f62306715b2b90ea09fcce7ff718e88b7349322eb82d98f4102e43aae383fdb85fbe23374372bd6c2b37b3fa7572692d0a3255
SSDEEP 12:KoLTLkLyXzdeWRmBEyPbP/eLJNw2siOw2:KoLfkL8zKGSP/eLJNw252
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events

Path /data/data/com.g19mobile.gamebooster/databases/com.google.android.datatransport.events
Size 56KB
SHA256 c2e5702044d3d3e2ce4db296e74b9a1c0ed3573bbd540fcd3040e3556932ace4
MD5 4c07cd09bc84d4ab623a09586586dfa2
SHA1 6974a4ad03a73544dc5b1d3f3a6708cbaf6e54ba
SHA512 f477b9a4da4b15fa51003c184e823205bc6dbc4d93951b373146eb43d269975ab845a95a401eb75fe62890b1afd73fac4021014932c0b62abc208163227f4956
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS344444444444l/3Fv4FT:rAMEX0wIyNja4M
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.g19mobile.gamebooster/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 01996ab11fbbff39b4d918522a9ef0507170a16e77dbfe929f4d5d4c2cb7c3b3
MD5 694e43e55485e144440e3c35cbe1b83b
SHA1 ff3d022fdeda8e4e4fc14773ad69d40051c7f2d6
SHA512 e29064d32be63518a742bde6458d3f092b24056d7badfa79fadf4a3156a2e06118bb92482d4807b40b1cd9700ce7e2a8d83299321c85cb413a4d99ad056c0536
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.g19mobile.gamebooster/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 355ae2c6e21a1b02561fff2408cacc99d7d2995742e1ecfbeb6ba9b9653466d3
MD5 ea0527adec5e085d41c6d0a8b586bb56
SHA1 a4720f2e473a56aae4744861bd05220f74e7d66c
SHA512 7ea402327949edb0f8c8406210deffda1850c739fb9de6de9f9dfd2329d3a5ac5e6f63eabf8135578fb3a4bb8c4b4140f6eb657198e2a9b1a9fccfa007b49f18
SSDEEP 6:7+/l9sSFn10ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKV3:7+toqLiuWdYRmBEyPb2
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.g19mobile.gamebooster/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 788482c445e8a23e4046bd6655285848f04a55240fcd8cfc1600c1ef5df614e5
MD5 a88235c236304ac5d6f5cafc1d85f585
SHA1 a72f39af97246a24ce5e1c84c450dcc5fb166d58
SHA512 7e3840bd3af25199753cdd199c1f70f4b37d5633ff7a8ff7b4c59fd26b46940a2ae3b6c2cf91696e75240c51302dd08106df19db9e789e404cc14401f2bdffe0
SSDEEP 6:7+/l9qFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKail//V:7+tcBqLJdeWRmBEyPbCXV
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.g19mobile.gamebooster/databases/com.google.android.datatransport.events-journal
Size 24KB
SHA256 6cfb40d0a73643f427cbb2086f66adefdb63abf3bab82dd49561bd399ec99b8f
MD5 65413aa59edd1b6ce4a0e46356bb7a28
SHA1 7b0eb2be1e1ee3693bae44d333af7f418d9865cb
SHA512 7d547a2cb7a81cfe71a284c20abd37f294ec09cb066ea7bec30703712b769ce5dfaf261aeaf15aebf7d7772b95125cabed11a05d6f7c62465fd30a9f398f4399
SSDEEP 48:7Mkxq/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS3n:7Jx0AMEX0wIyNja3n
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.g19mobile.gamebooster/databases/com.google.android.datatransport.events-journal
Size 16KB
SHA256 66974c765753b3f963b2288fd154c8d8a99cb4c17d0659698debf6f6cbbbcace
MD5 8293bf5b533cc9cf87d41fd3cb2d7638
SHA1 d73ae3302ca07398898469ca958f9571743e7848
SHA512 3b5364bbe5641fa9012aa0df74e09fd7cf8e3e1828ce18873d92ca41b6e3d2401c80cc5a13361c2fa17b7fcbf08f61c24aa45b4f97d139d9fb7d0eefaeaff655
SSDEEP 48:7MP/J509YpFmw0v+W6QWb9qP3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSP7:7Ghu95bGpBkAMEX0wIyNjaz
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.g19mobile.gamebooster/databases/com.google.android.datatransport.events-journal
Size 20KB
SHA256 4428182c0a61a66410d1f53a843d0c28af04517c6116cf2a2bb87f92d43d859e
MD5 3773cd72f9b74bd7229dea5350b3cfd7
SHA1 bf423f718fdc77c2e4d8c6af0fbc6cd58eab2bb8
SHA512 4bd1dfb2a4356c922699f12c5eddaee19c437a5ce1fe524e52e214da95ade282f0216c3827a4da454589c72e6b9d2b0909f792bf28e235a254fad5c99eb07041
SSDEEP 48:7MjzxFxWqv3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSlVHqtB3g59MENZBdUk:7cQEAMEX0wIyNjazUAMEX0wIyNjaK
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.g19mobile.gamebooster/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.g19mobile.gamebooster/databases/google_app_measurement_local.db
Size 16KB
SHA256 2940eea4e4cb8d1ae6fa670083bc65f4067ca7aff66e4517df7c9912c2634cec
MD5 db706612fdc22b234c2606ab93626a50
SHA1 e2b5d1d1d82e1e9159390852d635a0f6823a6a88
SHA512 39b9f0de23f7f3867ca1d0cb974c4b434fb38bbd15bcc3cf3878af382c91b486510ce6e3aca915cfcc9e9d0de8a214f088daf84710bab4bdbf5c85117421dabf
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6j:TLiEq9zmzrfRmBEyPbP/P+/0Fl69p7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.g19mobile.gamebooster/databases/google_app_measurement_local.db
Size 16KB
SHA256 1ea96f82746c718059e84a80c6dfcb419806f5cbadb4384b3ef8157ef43ead4e
MD5 91db4a8b0f0cb4a812902638cd49bf31
SHA1 c7d0592a78f83e639a526e3cc7efc6ec1db60fc5
SHA512 9d55b8dad251a307cd5128a948b4518e4804ad11553f1a1cfe56e14c830210071247270005fe4b2ba3f3572764aa3a7e8bdd42c697ed2c1f05f1ef5f1ce3f2fb
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlSS+/0Fl69p7:TLopmzr0GSP/h1499FTlF+p
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.g19mobile.gamebooster/databases/google_app_measurement_local.db
Size 16KB
SHA256 7064dc8369c96ebc2c8e4631c909e84f25b5dc4a669cd61198c3d47c7d84999e
MD5 91d17294975f6c799ab167333f03ac7f
SHA1 17288e4032579a2431f286ce5ed53581fb748d51
SHA512 3d635b4dc924738f63a25c3d6575aecbabce7f8682baa75eb56ea3e02f398a6a07d20ccf7570cab9a7ba078c87b41920dc0e393ce7120a0d07f03eb3763f5c23
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/ZRhOLavnOAU7wU7UyWlrtW49blqYFlSS+/0Fl69p7:TLYpmzr0GSP/nhKamNZ2S499FTlF+p
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.g19mobile.gamebooster/databases/google_app_measurement_local.db
Size 16KB
SHA256 023d3f8589ac14e539790c898415ab29eb08375677592ca53b2437a109375831
MD5 576db35a3b86e8c7a3656d38c40aff5c
SHA1 9c1b4e0d96e9a14f4df5f532a73d944145bff210
SHA512 58e4d99bc56a050d053c52725a02a23cd85d01b8443aea1b2f8ccd9ed72ef3b60b7e33be48bb1f12bf4ba37baaa86e376e7d71cddff5dfa98f8910fc0ef6a5da
SSDEEP 12:TL6uER9zmzrfRmBEyPbP/MDRhOLavnOAU7wU7UyWlrtW49blqYFlSS+/0Fl69pv:TL6vpmzr0GSP/M9hKamNZ2S499FTlF+h
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.g19mobile.gamebooster/databases/google_app_measurement_local.db
Size 16KB
SHA256 8ccf82d05de9790bc7ac92bbbc0fecac509788ddf840c0eb855071874d65bd04
MD5 8ce3ea81daffd1bd00430ef0a0acf4c0
SHA1 5d13006f6e4b33bdcfa6d2a6464994883ca7143a
SHA512 99810c4b5e2552e4ac6bd690ad1b9239ce7e592f0a9a254967e516651879e57d061ca7fdc9d1475277facaea00fd15b798f7fd8d65865b46f349fa4d27639497
SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WG:TLuEe9zmzrfRmBEyPbP/W
MD5 SHA1 SHA512 SSDEEP

Submit Download