Analysis

  • max time kernel
    152s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    06-08-2024 08:40

General

  • Target

    Pokemod_Public_v7_1_4r714-ITtpKxIwTJ2g.apk

  • Size

    47.1MB

  • MD5

    4c0c48e81db8a6d04b0a2f68b2a45726

  • SHA1

    623ce25033a0dbedc713541000b7f9a270984abe

  • SHA256

    f65bc95d577560ba71f654849ada703217b430f5e8f72a98766a5150d01c1b9f

  • SHA512

    4f56fb4de87a2d1af0bb93d3c330ad36bdccaa2d1584ed782a1801c246ef6ddf089131a82a12d649cc0fe9d60ba57fbbd4a511cb3c6b1d264dda04b1e12701b1

  • SSDEEP

    786432:HHUUXXPJ1I7mcxAYiWwfNvOQ3Vhu0TIJHOerY4bd3NEC8p9IGs+mYTVP6+Vr3PHO:UUXXPmmi4DfN93O08dlr1bgPp9DsWToF

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.pokemod.app.public
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4261

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    3f5bfacfe89dd69265f254a8ddcb0cdb

    SHA1

    6e42636f7159b1ed1b0f309c7242fbe87720ff28

    SHA256

    5e42f5900330c019d6dc3323b546e7677a54e78c0a2e42f543e934874cb8693e

    SHA512

    8cd25f0d0b7c08846783da80c102da65b1010ff3aa9210b42e87e3768aa454caff2e4b1f9d39342d88541d8766ca863c8544414fece46670d50216224b8b06f8

  • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events-wal

    Filesize

    52KB

    MD5

    38e176972aecc63119532252002e83ce

    SHA1

    c25ba769c8c9bf7494c9158bf124905568378d32

    SHA256

    d21d321309a8f97ba4a263cdebc5730ec0df5790733a5c3011ec1783d7311282

    SHA512

    cc00f82394e71cdec567411325202a63876f3b5d3d10d57d48397d5222888960250ab4800aad64ed75d6877bc828f57aa378b5c1728cc2e937d4384f92e91461

  • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    77655be812f9226bd6865a0cc493e99d

    SHA1

    7be52528adfd0330749499a798b69c22a70cf803

    SHA256

    e12fbd2d09faeb711eb95d32c240f93e0894a2f54f3a43c253b1d01afdcf2112

    SHA512

    7addae6abd4859a6c1cef69de73b1ccd5ef7620d40caf9ad3d65c466f6191a2934f32092acfaef29725c71f904848ba8efb090f4d7345aa26de31b2c08494b0e

  • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c2d4ae8fe56077e8c5ba2ea1c9ffc15b

    SHA1

    fbdd6c54a1d5819055641d7b992ef69769fd5e48

    SHA256

    2f64c80d6311e2eb91019ff685a0070207d55e8f8c047da4cc1bfa5eff81d73b

    SHA512

    8abb083e54fd51c14df608d4b80624760fbbd044e71de8f3fe7532a11bb34081350a10151b094b95788d146e9e28784ac7e80275e2d3be16729bd44b5e5039ee

  • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    0f703f695ed6fb42620ce6d9f15f2f9f

    SHA1

    6b46c49806c421a79850d194f504470361682682

    SHA256

    cec6db073b361605413ae1cfb1e8e071ba33213f2035b63d589dbe79e56aa953

    SHA512

    0e173f68ee8b0cd71f43ee9595afe613a610ddac9aed5b773611db8d5b4516e3f2445396b52c79224bd3d641b909a8ecbca84bfc2f0fa0f32d62549714df3140

  • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    199a31a4a76549a733ef7f5f34930d1f

    SHA1

    97050df4bcd5be82e961f0cc123ef121666c386b

    SHA256

    c0df95e748d01aec92b5d2173d0cd94776060317abf04b7fb0e4e60b3c228f10

    SHA512

    5234914c52b87198223401da51c690d2cd2c44a39779407954ecfb10ede5e7460c597388df01dde1c19659725fe57cadea47c321afc8388de1ca2ec4daa9ac62

  • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    39f1a72bd65d82fd30464de5c7b2d800

    SHA1

    f3de1df922e7d637a1715f4c10cbb9fa85828c3f

    SHA256

    a738dbbb8543b7d192b09135cb3c5073824dc06de1f41c75a615d8eb31ed99f2

    SHA512

    925b67026f55bcbf1c33e21153f7e1956cb3cf8ab87da9c75a38e40977a430844e322d85b38ed8a4700df0755edfe5f8ccb98ba83419fd8c4ebb9c9690b11646

  • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    dcaa4d353a776e146ed44f55ce9301f7

    SHA1

    6fd73d61fca57149731c06951751af5754cf778a

    SHA256

    2367c2ec338dcece6c44cf207a759382009154744989c63cfb0dc1a24d8ab9d2

    SHA512

    3817ff338087a9d4d9649e4e7c1e9f6628145dcdabeaf929da4f67ba92a8139a9d8c738e80809d489a3fb469504ccf9794a63dde0432f9cdac4b49378307a96a

  • /data/data/com.pokemod.app.public/files/PersistedInstallation1355791359371666172tmp

    Filesize

    90B

    MD5

    ece69798d9e63eef347a5408455208e3

    SHA1

    845a18cce5b13f5c645eea14051397c6d8cd9a3b

    SHA256

    137d50010d36fbde52aee727255201eb52924e405b01104f1dbc0796d3627af0

    SHA512

    946a0d39ef19425f84fab2f619f47a36d52b79698adfcc2c475e1ad66395317c20bc99edb1d14075ea8108bd535be6ad4688cb75bdea9e617fce0c1a1deeb548

  • /data/data/com.pokemod.app.public/files/PersistedInstallation8035714462210024362tmp

    Filesize

    570B

    MD5

    8f4a38580d417d54004c22b2593cc1b5

    SHA1

    0fc492288c94d4a6f2ca0ed9b39b5893782a26e1

    SHA256

    6b0b826a2328e729700012986873739a5a67dd25a5ae144d5a35fc903baf9e55

    SHA512

    f9ab12c23ddf8fa2aa095de1e7e17c49aa9f6d89af2cf5e54d18a09b2c871ae66e25640e286f64fd1e4e636e2eca6a95c3f2255e0dd1d67335b054eabc8d1e8b