Overview

overview

10

Static

static

10

1777a2ba85...b0.apk

android-9-x86

10

5251a35642...3e.apk

android-9-x86

1

5251a35642...3e.apk

android-10-x64

1

5251a35642...3e.apk

android-11-x64

1

7c44519e51...57.apk

android-9-x86

10

FE_Invisib...pt.apk

android-9-x86

1

FE_Invisib...pt.apk

android-10-x64

7

FE_Invisib...pt.apk

android-11-x64

7

HellBoy.apk

android-9-x86

6

HellBoy.apk

android-10-x64

1

HellBoy.apk

android-11-x64

6

Roblox Key...V3.apk

android-9-x86

1

Roblox Key...V3.apk

android-10-x64

7

Roblox Key...V3.apk

android-11-x64

7

Stick War_ Legacy.apk

android-9-x86

1

Stick War_ Legacy.apk

android-10-x64

7

Stick War_ Legacy.apk

android-11-x64

7

Undead_Def...pt.apk

android-9-x86

7

Undead_Def...pt.apk

android-10-x64

7

Undead_Def...pt.apk

android-11-x64

7

antivirus.apk

android-9-x86

7

antivirus.apk

android-10-x64

7

antivirus.apk

android-11-x64

7

b3f23bdd3d...c0.apk

android-9-x86

10

e8947bc9fb...10.apk

android-9-x86

7

insta_followers.apk

android-9-x86

7

insta_followers.apk

android-10-x64

7

insta_followers.apk

android-11-x64

7

xxx.apk

android-9-x86

1

Resubmissions

04-08-2024 12:30

240804-ppf4psvfkq 10

Analysis

  • max time kernel
    179s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    04-08-2024 12:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Stick War_ Legacy.apk

  • Size

    3.2MB

  • MD5

    ae5770ecb741649cd470d645dd611843

  • SHA1

    d6d29b4466c5139b9ea5b63d2b85150d6604abc5

  • SHA256

    ba39a4b76ab656532003e560476b9a295df488f50195c6b9d7ac523b6d07aab4

  • SHA512

    dda845e67dedf51508205f6aa7ffd8d19fcad0f0077178c71b8f65a96cb4096d3f326f52c081ea003f78703fdbbbff79f77b3618fd06717be67987627d0f524f

  • SSDEEP

    98304:mO76p/xfKx1ppTyRwkrB0z+X0iXN9ALEjTRVShd:mi6FxfKxjdy66B0z+EiZnKT

Score
7/10
collectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.herocraft.game.treasuresofthedeep
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Checks memory information
    PID:4614

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.herocraft.game.treasuresofthedeep/files/Ni
    Filesize

    692B

    MD5

    00ac23358ddc59b18579b65a96321e8b

    SHA1

    004524ed704abb03410f843347b77e1a595a4795

    SHA256

    45c3ab537e0e2bfb5fe898e283e677664cdf6acc0735760b8276cc43d6d601c7

    SHA512

    1ac825dba7d718ab1e0cec5ae3365f8ce80b04dde1b860aa8130e323766db735eb6ab9afb865cc3b05bcb1346a3e0b096f3a6b8f7879149e344eb26593a3d7fa

    Download Submit
  • /data/data/com.herocraft.game.treasuresofthedeep/files/S
    Filesize

    224B

    MD5

    2a3951fd6eeebc64eafa481dab946cfc

    SHA1

    d040e5d24dd38e62c98d60913964cc673129e2ab

    SHA256

    27f2b8e665e2e3190c5491ebe7ab81e0547d99d9934354fa021f4b2cca230f6b

    SHA512

    fbd06fb98b2ddc98db391afe266103846f79e62f3c0205ab14e266f94d32c04d4e655aa4210fd1326754aac5c89bea996089312dfdc692d9c0588ccb21b40c78

    Download Submit
  • /data/data/com.herocraft.game.treasuresofthedeep/files/S
    Filesize

    224B

    MD5

    a78a9b62c0765043a08d18d25df9d3b9

    SHA1

    070459c91aef2c639e3f20e860b79ecf48ed318f

    SHA256

    4114222ac36bb33c753d98ca4914addfc40d16d51a8cd88f42cf98697b1eab01

    SHA512

    968a6996f99fc7bc827426e98f445aa2b5e30a499dbbeef967412bb99522c41a9f19ca4930610c59d858f04199bf16a4f6ac35757aba7829a9bfd9a814679963

    Download Submit
  • /data/data/com.herocraft.game.treasuresofthedeep/files/ac2b308d.dex
    Filesize

    2.3MB

    MD5

    48aab9b1635e8a510b4a1126c1f95bc5

    SHA1

    7ce5597408c9a42d93e882ed904dd0f3551ab81b

    SHA256

    1653275e4d68124e6af999b4311ac471f0a8adbcdffe4f64c678e1e84f367725

    SHA512

    e5a224994ed1332b87c33b3d0784b69be8733cde478650888e889af3d20c9d33b9c20720ac4104f15aecb8a94bc4101f5d826cc7161797f66b416be939d0bd3b

    Download Submit
  • /data/user/0/com.herocraft.game.treasuresofthedeep/files/ac2b308d.dex
    Filesize

    6.4MB

    MD5

    121d33b2c1295d49f9fba521016f45fe

    SHA1

    69e49d75e0a5e37cbc1f3f29fe5dccc656db27dc

    SHA256

    6f86990c8865f5cacbe7c38d934947aebae0a7f891043c714f012806a8e4467c

    SHA512

    561d57fc6e5c20b8c94949cc461d7e0e6595d041c1f8fe07c4b6815df92f71eede53bb1d333e58e494dec0e9db9a740c3917ba5519bdb3f51da7a3e3f744ac4b

    Download Submit