Overview

overview

10

Static

static

10

1777a2ba85...b0.apk

android-9-x86

10

5251a35642...3e.apk

android-9-x86

1

5251a35642...3e.apk

android-10-x64

1

5251a35642...3e.apk

android-11-x64

1

7c44519e51...57.apk

android-9-x86

10

FE_Invisib...pt.apk

android-9-x86

7

FE_Invisib...pt.apk

android-10-x64

7

FE_Invisib...pt.apk

android-11-x64

7

HellBoy.apk

android-9-x86

6

HellBoy.apk

android-10-x64

1

HellBoy.apk

android-11-x64

6

Roblox Key...V3.apk

android-9-x86

7

Roblox Key...V3.apk

android-10-x64

1

Roblox Key...V3.apk

android-11-x64

7

Stick War_ Legacy.apk

android-9-x86

1

Stick War_ Legacy.apk

android-10-x64

7

Stick War_ Legacy.apk

android-11-x64

7

Undead_Def...pt.apk

android-9-x86

7

Undead_Def...pt.apk

android-10-x64

7

Undead_Def...pt.apk

android-11-x64

7

antivirus.apk

android-9-x86

7

antivirus.apk

android-10-x64

7

antivirus.apk

android-11-x64

7

b3f23bdd3d...c0.apk

android-9-x86

10

e8947bc9fb...10.apk

android-9-x86

7

insta_followers.apk

android-9-x86

7

insta_followers.apk

android-10-x64

7

insta_followers.apk

android-11-x64

7

xxx.apk

android-9-x86

1

Analysis

  • max time kernel
    177s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    05-08-2024 01:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Roblox Keyless Bloxfruits Script HoHo Hub V3.apk

  • Size

    3.2MB

  • MD5

    35b6944128c7cb11594bfc93e4ad0d7c

  • SHA1

    1dd7c14f0d05c7560764a5bd2e9693cddc049a21

  • SHA256

    1879320e3bc42bcec7ee18e7e36e8cd579b8711f313d561ab502bcf1d1a559ae

  • SHA512

    5a53b65492cc7756c5a014c812cc620458462b7fcde15251068f964adebd98d61756fd340fc51a68392f8ef58d2debbb8b53fb34ccea3b68cf65cfd34dff42ba

  • SSDEEP

    98304:fU5DjBYQQ/2Kp7d5QDJCqVuc6TjEj/K8h+5:iDjel/jp7d5+kqN6TY+L5

Score
7/10
collectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.herocraft.game.treasuresofthedeep
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Checks memory information
    PID:4624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.herocraft.game.treasuresofthedeep/files/7f8f78df.dex
    Filesize

    2.3MB

    MD5

    767ef40815362c541a89c4c50650c022

    SHA1

    46079e6da37683dce34f1d965f68b56deeeccff0

    SHA256

    045e58a267b61428e9b68a2b7f84eccb9335617ed119227acd35c9be5b2f48e1

    SHA512

    d1406c8299796a0c0d10ab6fe36c85c543bf91333e6bd6a8675e79b740e7325d45c66222b74737de320eedfce4ff1ba0f79517076e2ccb176aeae5c244be406f

    Download Submit
  • /data/data/com.herocraft.game.treasuresofthedeep/files/GZCo
    Filesize

    227B

    MD5

    ef3dc26f08548b3cb5df835f0d692e94

    SHA1

    4be2f105dabcbf77afe43e489f9d4fb34703b382

    SHA256

    f50f04bc4b545dae30675238f2fbfe5f1039124d5fe5498290e4486b49765b52

    SHA512

    5dd65c233900d9f7179dce3e5a313ed1ceee2786334c083bbecef0e080b5be5931694bef577ce3cb1ec87b5d0a580ec478d136959d600d14abcba817376b8c4e

    Download Submit
  • /data/data/com.herocraft.game.treasuresofthedeep/files/GZCo
    Filesize

    227B

    MD5

    4831e35c6785220a27b53fe2b32428b3

    SHA1

    29d0d4760e87a66b49f08b4ee9c36116644fe04d

    SHA256

    dacc6eec344a74db588d9429b3bf7c7f17d107312cb200c5306107df952c00cb

    SHA512

    66699da4afde7145184c42264e95bf6fa8ded7e0a04cb7b0369e797e68183469517b9e866016de830143e7836e65dcddac3c88958ff0a3b3302d0236a4a00be7

    Download Submit
  • /data/data/com.herocraft.game.treasuresofthedeep/files/WmJ
    Filesize

    695B

    MD5

    0971afaacfaf0a7359780e36be2f75ab

    SHA1

    dff7ceeddcb40314eb61bce1602fd71a4ded91a7

    SHA256

    840edeb78261b86463c3085e922eec851ebe93155dda4973c98326bbed1f59c0

    SHA512

    9f5cacdda779f1e8152baf881ab17ab548730c28b5a3707002862d4edadca2602d060085b0488209798bb4a1a7cb06fc01ebd5753e301799b21f6a301a3b3afb

    Download Submit
  • /data/user/0/com.herocraft.game.treasuresofthedeep/files/7f8f78df.dex
    Filesize

    6.4MB

    MD5

    38c2fd6b3426f301739dd658c91c462b

    SHA1

    98464a62414b23440ebecacdcf3097c8e9f1eff4

    SHA256

    51e662b019aea637e0be77e0bfd8d06eab2ebc3b4d2b07a3b81595ee63f8eefe

    SHA512

    ca7acf337f0069ce63a91da6aa36c4529b7968cc38cd6ffd9559ee37498075eab13331b68866f617a338279df6955ff32d8f7dea2941664da654fa855f4bfa1a

    Download Submit