Analysis
-
max time kernel
175s -
max time network
138s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
-
submitted
05-08-2024 01:22
General
-
Target
Stick War_ Legacy.apk
-
Size
3.2MB
-
MD5
ae5770ecb741649cd470d645dd611843
-
SHA1
d6d29b4466c5139b9ea5b63d2b85150d6604abc5
-
SHA256
ba39a4b76ab656532003e560476b9a295df488f50195c6b9d7ac523b6d07aab4
-
SHA512
dda845e67dedf51508205f6aa7ffd8d19fcad0f0077178c71b8f65a96cb4096d3f326f52c081ea003f78703fdbbbff79f77b3618fd06717be67987627d0f524f
-
SSDEEP
98304:mO76p/xfKx1ppTyRwkrB0z+X0iXN9ALEjTRVShd:mi6FxfKxjdy66B0z+EiZnKT
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.herocraft.game.treasuresofthedeep1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Checks memory information
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.herocraft.game.treasuresofthedeep/files/NiFilesize
692B
MD500ac23358ddc59b18579b65a96321e8b
SHA1004524ed704abb03410f843347b77e1a595a4795
SHA25645c3ab537e0e2bfb5fe898e283e677664cdf6acc0735760b8276cc43d6d601c7
SHA5121ac825dba7d718ab1e0cec5ae3365f8ce80b04dde1b860aa8130e323766db735eb6ab9afb865cc3b05bcb1346a3e0b096f3a6b8f7879149e344eb26593a3d7fa
-
/data/data/com.herocraft.game.treasuresofthedeep/files/SFilesize
224B
MD570f4ac9bac4337e8439b68ed921202bf
SHA1c30dd2fc7d9db6c2c9c1cf63b9e87d7dcbabc58e
SHA256076cb83b9dd1a3ca14fba616d430db52c908da3a5999bd04810fc363d1cb1d9e
SHA5124da3fc6f7297d5a717f27e4b1800ade82bc9749c17927224b46826ad464ec709a604f2512312f7c2a1485b7a2d46ef9924e05498c2abf3cccf55beac964bb23a
-
/data/data/com.herocraft.game.treasuresofthedeep/files/SFilesize
224B
MD5d5dd8aa002853d41d54179c46dc4c703
SHA164ee055ffbf7e5074c7d4dcd4c5a3811a87d389f
SHA2564a77c73e4440f2675a23593caa688e0d4488789b9eb174b9df7a117988a91ced
SHA512851a1f8917bbc8cff856e881d30dcda8b33d7afefbac88b12a7a25b8d62ab6204079e5eac27a4fdfd68928fb619f5820660a1e19087e5e59dd5d6aa6af9f6079
-
/data/data/com.herocraft.game.treasuresofthedeep/files/ac2b308d.dexFilesize
2.3MB
MD548aab9b1635e8a510b4a1126c1f95bc5
SHA17ce5597408c9a42d93e882ed904dd0f3551ab81b
SHA2561653275e4d68124e6af999b4311ac471f0a8adbcdffe4f64c678e1e84f367725
SHA512e5a224994ed1332b87c33b3d0784b69be8733cde478650888e889af3d20c9d33b9c20720ac4104f15aecb8a94bc4101f5d826cc7161797f66b416be939d0bd3b
-
/data/user/0/com.herocraft.game.treasuresofthedeep/files/ac2b308d.dexFilesize
6.4MB
MD5121d33b2c1295d49f9fba521016f45fe
SHA169e49d75e0a5e37cbc1f3f29fe5dccc656db27dc
SHA2566f86990c8865f5cacbe7c38d934947aebae0a7f891043c714f012806a8e4467c
SHA512561d57fc6e5c20b8c94949cc461d7e0e6595d041c1f8fe07c4b6815df92f71eede53bb1d333e58e494dec0e9db9a740c3917ba5519bdb3f51da7a3e3f744ac4b