cf540bfabf0520c24e5bb2211dd752df92e2134e7696a6de4d02261f6ffbe58e

Analysis

max time kernel
7s
max time network
165s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
29/08/2024, 12:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GH.apk
Size

1.6MB
MD5

e6647c7982823f7e0c49bf9de9e8ca1c
SHA1

56669c77eb3bbb867a470d623496a555d935aa1b
SHA256

6da698faf823ce4cd97d214609d54291da5e3a18561c9a648cba8bbe47595f02
SHA512

bcfc2924ee57b898475fd5c3fb8c9cb001ad2ebca717e60f384720c05441fef4ec00ad777d144c9d15dad8c2e34e3b8b78e067bd1b72a8dc59c2f20d5002b05b
SSDEEP

24576:ygaJGEBLRACbCG4jh4k3QiDkrsPTVwogNeAranxYfks:ygaJGENRACubjh4k3Q0WmHgNlr0xwks

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.emagsoftware.gamehall

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

cn.emagsoftware.gamehall
1⤵
- Queries information about active data network
PID:4992

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.emagsoftware.gamehall/databases/GameCache

Filesize
72KB

MD5
18c57d7fa53a40b1b6fadef97d7c43ca

SHA1
8e6167b7b7eaf2d596ad3f18f9004c64bfd06891

SHA256
64f46157b8b35229f3636c039a1e9c059e2107af0a107c52fe99ea4bbf4d7109

SHA512
68a2dae3fb34c9578a6ad14e9f5dc6a1228c78536f82bde28fefea59b4a7234984c1e744cd9f2efc758b982e767720b7b37d28af95ae81505da353d8245e9d1b

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
512B

MD5
56e940433324fb15a554ace0c6695ea3

SHA1
99f6989a2780ff89fa495d213e1aede2d61e13c5

SHA256
cf624c7886f4787a256d8b78b4afc7209d19b3494bc34940c576dd369a8d594e

SHA512
bca53fa8e3fdc95dc7a859301f0ab3a3ec0f3701cfbb1e7442c16f74542217fb534514788bb2ab73f02434047d27341f049cbfae6875e1062dd71315947e5690

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
2d5162d3c4d15ba27aeab6b004cc8eac

SHA1
fa310fbb497868789f92f544396cb65a4983a29d

SHA256
d3c19b414587bc7e94cff3231e01a7c2b6ae46ab5cdb820d42df42307ba74aa8

SHA512
87c7384e0a12eee228434b1717104b410dedbc02feb4b2ca598b664b083e35a4880f37e8b8f4a399821d3de5ab3a3675a477cb1060266a40a9713bc8d3233e8b

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
31dd9e54e716521873a838d82186830d

SHA1
2eedcd93c17389743f0a5e86d1db65268d243655

SHA256
4e84337b129bf8d2a416ff768168c7c263d71d29ca4625f7a86cf13450c51fc2

SHA512
514dc131c09af76a6545795e6b3c181f809cd4460a53eebb53f8f9c2a9895b8182a6a7bb52c7128a4a6bac561d0a5f6feb5a5db3a9ac2b6f6c90d4961a43c24b

Download Submit