Analysis
-
max time kernel
23s -
max time network
36s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
05/08/2024, 12:38
General
-
Target
free-fire-max-2.105.1-apkmodget.com.apk
-
Size
80.3MB
-
MD5
11cf936bab7d0becfa73e0de1b206b3c
-
SHA1
bf4922df25e5465fdfe0a599746104731ccd97d3
-
SHA256
3aa5b7aec80f1b52e2444c048103198c9ec5da3da90c798dad26a22aa850efc6
-
SHA512
edceec49d83c7693a02b17ab7d33ab636a5b31c0478290c3569407148317b33d6ba6721c27b6731484d96cc48565bbd650688af1b7f610001877ff763897920d
-
SSDEEP
1572864:bcBtC1ENU4gnfmmH7ZVGCzKMrYvUJwI+P5pjK2SFIUTWMVeWc8:bcBEv4g+gdVPJrRJxo5kvFIaVeWp
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 3 IoCs
-
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.dts.freefiremax1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Reads the content of photos stored on the user's device.
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD51f34446a0de9012c20aff4d978cb6865
SHA1d8889cfc59d22c53c46dc3ce67f786a199d1d5f2
SHA256c94d9f4dc59542ad4d49d36fd0eff927af6242f3c1d2ef91144317fc4977ce49
SHA512ccffc188303d574ced908a0320712679f5353a1a11edf552e8458e8ec71212c49f00138691d3964810c5a3b95c64307361d17d3a765133f7be6f236bf9a7bbe1
-
Filesize
40KB
MD58f6abbbe25e7236a5d973d1f85763af1
SHA1b19bb8767b687b983b3796669f773ec77cbd7f9d
SHA256f57d83ffb6a737bc9e4b03d833773b1b5315ee0c528588b3f38f83f93fcd273c
SHA512584f3c991fa38a1acf2c0f9b3d6591c3d9d9a5216c937dab3ef1fbb55a67225d3dd4a14d2f9b6e15032b18adebf27120562b39f46a8343d778a76980a1ee5fcf
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5bc95243d57997fb2dac8371c286e8781
SHA13736d9536703b3e38dfd485c762bf0956a0fc65e
SHA256fbc8870a11e59cd368a6d2a645580245a876159b05fc404498269e2a380c4d46
SHA512fa2cfeebb86c4c1f71b52dee0ca393e0586541be5b606517b4c18d42dad7c6bf7da91ad9a5c510aec9ffcfe661520c773689bc24596b6128b11d592d3ae3e712
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD5bc5ee8bd48a9d6dae8a4f1cfeedfe624
SHA170bbb85779f6afb04cfca6502e0206f5b89cb94e
SHA256ba42b95e19ed50a9830cbad196afa1e9bcbf88eef093bf13adf828c6d692d818
SHA512ddadd0f39f7312175b46a029fff202a601cfa21210147d18e16bd69cd9e270c4e5a3a94cf556830987599ec1317016e25e72b4eac7eef2bc54ef7900306e32f3
-
Filesize
831B
MD520cac3bec9d01f5e2bc498599c1f9d09
SHA120c3693e18979551e87c2584a86da4cea3be4173
SHA2564e87f421ad58cc2c54c26de65de3e5199b2c89b299f8ba21da9500ec8a611452
SHA512a3ab89cdf2369f4b9ec671a001af533dfded6a70fb19f3adb50709e5f8673d736eacb6efd0b062396aaec08e82b2fad86431b74907b2f04cb8431f72b67f4039
-
Filesize
3KB
MD52878523fef3d122e0a39e6faaf3a5e7d
SHA14d71733f5b4861a2a51f6d1e2b7cc7fb526b294a
SHA2562c3316e6794d4ff9edc40c244bdc39a7acbc18058b93133bd8176a9ae01c18b2
SHA5127c83105fd1c9cadab5f06866888024047526f7e79c2c9293ceea3bd822f19ab7afc2e8363fd39ee17acb86dd8ebdda753ad9f1c88e635b73110713f74e2a017e
-
Filesize
2KB
MD5b1809efaa1918b15539dfb5cc3f34b74
SHA1974f780e84802653460ca68886e468328198380e
SHA2560d1cb7e2b8673bbfb02269f5651c585fbadb7d34a6e1f4237528d2127aed0634
SHA512664fe1c364d9eccf3613efe489c69cb333ac406cac440949db0d3d6d14e40388a15561d9f827080c7ce6224c7ddf600524df91ab422f3c706f45bf217385715e
-
Filesize
3KB
MD5191e60fc8ca7bf34c0932dc42a02fbfc
SHA10b902d3e3a8f710cf8ca0c8a5432cd83a6a6b42b
SHA256a7e8e09def619fd38aec8dbf4695607ea10800e954cda306c3bbd9ec5f342489
SHA5121541e203e4809d8e64d9e8fd3eb512e2d778ef865e222dfa10a843cd1158f9b33174d1aed83bc15c7403052eea4bc6d0b649323fde6bf2795c0aadd5d15bc18d
-
Filesize
2KB
MD50958d8930f3a7166507650bfb25c2cdc
SHA1943b5143f4a216c65b9569d449c36d472e6478f0
SHA256b1bfe1f65044dc0829414681dacfcd2eab88cba142e42bd4d00623dcacf851ec
SHA5121a86d94699b0445a95903ea3ca30139a90ffced21e77df8e5795572cce21fbb2f2ea08b0a83787dc697b1be93e0c530b8f1bb3dd778fa7fbeb04092eed52dc7d
-
Filesize
3KB
MD59c3663eb68d4756b56bca2b582e5c1da
SHA14698b6b5acb4bd5aeca2490b5e14e9d302641535
SHA256de5fa22ece0b145ce718d6b1400337ced6ec36c4b2133935bc6cf561e8ca84f7
SHA512b83c9461d7d76b49d2c77b2bd21c4ff32e0dbc5a6f929273a5afeca34857c93fe3e795ab6ec39acabd88e1d3e80fd17d8e5dde0461ec033eda69171c568fe9b4
-
Filesize
263B
MD519b083527ee344abfec810d0ad72df4f
SHA13e4d6d4772b66f4b290571bf9f6153c17fb7da36
SHA256f4a3b1420194038f4841a864a0ec04c81ef1efdab32ee8ba0404f4337750105a
SHA512e6dd860032aafa65361f123dda6ede8bc9f53ff5776c13d5b59c6dd3c0ff3ca26644a9b2e22bbe8c2ca64230b12faeffe37436ce3270b8a787dcf10c74d69f3f
-
Filesize
3.2MB
MD561ddc3fbfb29eb7c72f90f2386e78434
SHA12005cf5ca68d65db827a203ca6fbd08d84f5fa13
SHA2564a5dc4012a86859604e275455c8b09de8b580b74873e64278ef138de04b51717
SHA512d1d34fcd6a416b0cedc22f82f28a9cdde976728d06b18afe6fb0ab3cca1d591078332d16e1a60e6f8f340535713a3876687f7496ddea7792bb878f4000080a51
-
Filesize
4.1MB
MD5310a7ed50958522b46fe204bc4a9df0e
SHA13ba5790d88bbc16f487fef69fe927f6a5b57bc1c
SHA2565c8a1eb76c94f78bbbb012c7dd83e028578084a2cfa9e25c645f9eff7951fc8c
SHA5129472dc5abb605caa89670095eb94609e2b9168fcf7ff43f880a54b577b6bb87225ca8684d10c43a826d0978253d98eca1578ade55744d29279c24f5737aaca15
-
Filesize
24B
MD596ace67ee57604318bb6440d700a5f30
SHA17d7467befc391ee3bace40de87d49eb7e52c142c
SHA256d692e051376ef711d5105f41e83b1d8dd8b528d3a02bfd996308bef6a3b62554
SHA512d9f1f150979de04efd0b46ed6e11cf0e83444c9fe8f95df4203aa47ace5bf5b66eedcefa1bbe3f8207983bcfd05e12bfd147040e976669ce783f659500c8ff8a
-
Filesize
43B
MD5ee340a2f8588d6bcbc3b77269a750c67
SHA16db119366d3a9afe66b0560e28a985f2a27a1947
SHA2564966487a95cc720f3f360483512c15707713b6e01f6135cf94d9ffc4e19cdf92
SHA51201b4bc911706cd07539dcdd0a3b6661ee5f681d00f0ea2ffbf3afb0ac1434b8c6f4c94609ff83bf1bd96ae021bec150395d78a1aef6734353b410c63fd20fe18
-
Filesize
7.1MB
MD5f25035367b98737ce7e8c12ae01eca70
SHA1a154c9457204481f7100cefdd662668ea698bca4
SHA2566d1063342543a7ffe5686e96ad60b055a6e159244b4ecbe9b6b75fc91ad6098f
SHA51231fb009316a0680e0459f9505fa3384807cabc0f406b21a915479323ff52cbd3c7d3a4aece3aed465645298dde114b3a238fe90b776f13f08c08e7ecee9dd9b8
-
Filesize
28B
MD55fcd1db58b4bde8ed9a6339a6e0fd8b4
SHA16ba1a97a3d582e40290fe89be3cdf17e744c5e4d
SHA256b7eaa84a884706831b1d78538222b6911055084e9410c413b24509b0f264077a
SHA512e4dc2755c260de75c0a6b29c9959dc7b27e49181d15c5a97d3ef8ebfa5c45094a35565ead3fefba09f33943cb6554ca3273a862074068785aa44ddd918bf22a7
-
Filesize
32B
MD5950b183532af71e533b8628f6103b36c
SHA1ab281c47e08ff00ede51d69995ef02a7dd6b1d43
SHA256512607bee910bc7f5cc0407189de0b28ccf51c26db4db8659081bd48bec7f24e
SHA512c391118135a214ccff5b067808975828fb8ff09c3ad082c0e06ca10888e0d5f9fd56ee9c9f9d34722b4dfaca3c98a8a4be04efa2820e66e26f2c6c746b29eb27
-
Filesize
60B
MD5d2d0de827e715cd317e2a0e8dd1c9caf
SHA10a2425ed3972dfb2401979271abbe6248a5c90dc
SHA256112e4f885802f87757cfdb2d14d571a17a1cc6595f543c67a53e7dd33048555a
SHA512a137c93ad4ae6b33655c1b71be1b4552e5431c431a7bdd2a89f1849f76840d2df2cadebc89bff69b32f8cf05345410f1eebdf6ed2dce815a13f67d23fa05db8c
-
Filesize
12B
MD5ff64991c7c19157cbf9742395e751042
SHA1e645bf229b382e617b88d8f78e5b868da8433a7a
SHA2567f6e9ee88675adbea3506be9d707465003d3cd37989cba19f009f9bdb490b111
SHA51255e98f66e46fd04578df39501031248dc30917af8712a8f874f3d8bf17e448c87b032b4d9a4f0b5c0f19a02a62678d30be25ac0b7ace268a02c19a8373b9ee09
-
Filesize
4B
MD53b27ad3a0ed8a5dc9562d3ce35a48ce4
SHA1f4be5950171fce0869792520bba55f171675851b
SHA256d0a3c71ed94cc9c450c134bd89e54c95f6ee801b146d557d1bab436908b862e1
SHA51212c9477144bc0974bc861d593bb17a6d1cd97f8892e666091aabac749b4c62e1de76b5007728f93b24cffe00c000c823e2be93f850a1dda0a62ada468eba7a58
-
Filesize
32B
MD570bc8f4b72a86921468bf8e8441dce51
SHA1de8a847bff8c343d69b853a215e6ee775ef2ef96
SHA25666687aadf862bd776c8fc18b8e9f8e20089714856ee233b3902a591d0d5f2925
SHA5125046adc1dba838867b2bbbfdd0c3423e58b57970b5267a90f57960924a87f1960a6a85eaa642dac835424b5d7c8d637c00408c7a73da672b7f498521420b6dd3
-
Filesize
34.8MB
MD5497f37f122242cea3eff82e7bd4b634c
SHA1c4bc5b691bc3588fca109aa59deb0d72d29fb57d
SHA256524ebfd1b75e744e5f1a2e7281aa4ea1d008bbbad85ea6f6d35f83c880da636d
SHA5125823f568e0d28a558f5abbe952ad5462c139b4b66f425f751d8a5bb898cb720a191063b7e3b3b403ec6fa186633b4660762f486834d76bd2d29d1f4613c7ede2
-
Filesize
329KB
MD521d06dbc8af6432b2b49536ed30609af
SHA111a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA256c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
SHA5122971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
-
Filesize
58KB
MD55f05cffc86a6401d0441aeda6fd1706b
SHA1f3b197c706f6c147df6f4564776d195260dff72a
SHA256fefc3b909fc80286ae54d71dc67bff15acd9a3a38d91f79133056bac352c86b8
SHA5124eafa387c0d6e4a64316ad8c15bfc6919b8b3fb485a7f4811d4b57625396edf7ac30124d4c3288d221419b614cbbae14d47939b6014f109b4438a21f3da88c35
-
Filesize
17KB
MD5aac6d2ce4d64d2ca9a1e7b953e3414c7
SHA1022510cf8def98e8d19678a3535b650f6abcf2b9
SHA2562115920755189829be20a81083735aebd217f216e02450e7f65187003142850c
SHA512feb13a2f56b8d7d08bfa4e1c8e57a1d9944a20a973c3a56527a5d74e5eccde7a36ee56a288541d3d3d5ffb7a2da814c5dc7e53fe7d4d1b616893d115ec0316ca
-
Filesize
1KB
MD53201df8753c86b4be9cc69c046883d3c
SHA104bb09e087efe7d13751ed0b7d9ba0d6e32e93a7
SHA256bf4ae2fe630714eee3d7b0a28285a3aa49a6589a3660e58cf7868aca3321a7b1
SHA512ab5590bb8173e277bb7bbcb252a6d65fe5ddc8df02f1be1f772b3dc2a1350f9a17f93e020f27350ad5ef940604ab52e38230d3cfcc3f1f014a4e492104c917b0
-
Filesize
60KB
MD5ce0f7bdf7344da4ddbe9372a0000f70f
SHA14d59c8b5335107c1be0be64c130dde3fb1ac6c84
SHA2567daa0c6a2bdd90c41278ae60eae82cf3976256b9832f4445d626fbda35c90a1b
SHA5128874c02a6535fef726ed864f82ad193f54ac64dba1f035da307caa05518d7954927356c333dfd6d1d0624d658405b978d38b220bd3c5a14d90b4d4fc73124bcb
-
Filesize
27KB
MD5ecb736a47b2a18f6d1829c140766164e
SHA1ba466f417bb27e3d8d6b4cf98d2e9be184bd02e2
SHA2561173db3dab5192fc7087626053d3ab33cb597d2b2e69c3bc849157cf319fe721
SHA512cca1600bbb052cc6e892ff5599cb97081747f1c1b7c5b7599df33faca19016400481451dbf9848cb7dd17c1e514776ba11eb63dcac66439cad7ac69c92987087
-
Filesize
2KB
MD5ac24f77bfedc2fb05ea51ec6c7225ae0
SHA1d77676d27f59885f3ec83fa7497ee25257a59fe3
SHA256205285250b2f5482698e8a58181cdd711bf87f182083ff03db41aef0fa073361
SHA512d893e5f04481dbe876e7c3dc03971af85b2803d159bce48f6ab6f957feffce8917552f8f4eacf828b3128cf1700299e11d302d77312ae1fd04bb53a51fe260b5
-
Filesize
11KB
MD5f56fcf1b58ad450f85effd827f4d6acd
SHA1bd85d36d737dca1bbe59a8f4795356e820a44b54
SHA256d72ff8c60ca58fd3bc106365d753c5bfad9f85d33757aeb2ffdf745d61cec1b1
SHA512da7561788fbba1b0665ad2714be50af10ca0c587b1b488dc45fab8d515319dbf3012c7a9bd8574c8083e0aed2d4eb9806277d3867e463c79aab8142e98fa7882
-
Filesize
321KB
MD53eba8a4048e7d197b14cc3eaca87c92b
SHA13032d831a309ac97343d87b48e4ffd6e9d0a9359
SHA256a0380d7baac874d8c1401da882b4bf06b037fd91ba19aae63f7d76c8f0e8f7e6
SHA512b7fb46fb5dc132e05d71f683cd9702994be0aa1ff7e7bc5ff230ce78ab1462a50f6cfaee9a5d25c6ecbb94187e880ed84087bbc14393bfbf3a8ca0f203ecd431
-
Filesize
1KB
MD555a2b628fce21505424a2fa0a35f29a9
SHA15f47cfd81c382b3c5cd4adf5d20fe60444cb993d
SHA256c8ecdbb063c481da5e18f76b0dd60c8dccbdaf73c19d930e579c9794cc21d562
SHA512b42bd2848b667a3dd71ecff39e53a6c3ed8564e731dfa88c3d7759d3a647e3131ded2f5ecd4459174dae32920250ba627e4bd9acaca28e4e297fa3676ef4937a
-
Filesize
25KB
MD5096bb534f21d5adfed1aaf8c011a1204
SHA19ad10801601db8eae86f550a0a51d94ed18bcbcc
SHA256a1809f956176325c3ab236854789da917e8fd445d863b400272850e1f2336d64
SHA512d3a91f16d6bc8db4d8cbb4a568c16d58aeacabb11b6e1132a4acc66062b8bb160c16be7ea331532a95fe18dcf7e7477e1a8fea3baf0174841199580bf815983e
-
Filesize
23KB
MD537f6bf3425bcc3d4627486d4aa86cdff
SHA12a03b1ea623b7a4b50e98065ec826aa95594f209
SHA25671b73f6da028eb3f830b417272cf1f2bb9e00b76ae088fc4a4a1130b26ae87e8
SHA512dd6c5e15350ec002b42559666c2496a0aad30682aafc9f49dd68ec48de63b4bf7fd5f362f3deb1223d15afd1d0d433025bf4cd6dc2949217d4720da5f9314c5a
-
Filesize
11KB
MD5398eea9d7c692445253d84f7aaf71d46
SHA115a5b59d2e50b1e6a2077fe50bbdaff07b71177f
SHA256b5ddd91296430681f34b34154b553adce8f896a9ae330af761eaff62c16e67c5
SHA51219d82ff3d4dca420ce1ed9f555180fe71e9a8f1ef0f58395b36f51d2f1606a8c3f56bfb4ef0efe02d5d3dd1548de19ef58c2c0f81e6ce6b0de6fb53df588b2aa