a1289f796c98b0c16ef4fee76c00d4d3feffa93bf6972cd9844ac3d3a6745dc3

Analysis

max time kernel
6s
max time network
150s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
06/09/2024, 07:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GH.apk
Size

1.6MB
MD5

e6647c7982823f7e0c49bf9de9e8ca1c
SHA1

56669c77eb3bbb867a470d623496a555d935aa1b
SHA256

6da698faf823ce4cd97d214609d54291da5e3a18561c9a648cba8bbe47595f02
SHA512

bcfc2924ee57b898475fd5c3fb8c9cb001ad2ebca717e60f384720c05441fef4ec00ad777d144c9d15dad8c2e34e3b8b78e067bd1b72a8dc59c2f20d5002b05b
SSDEEP

24576:ygaJGEBLRACbCG4jh4k3QiDkrsPTVwogNeAranxYfks:ygaJGENRACubjh4k3Q0WmHgNlr0xwks

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.emagsoftware.gamehall

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

cn.emagsoftware.gamehall
1⤵
- Queries information about active data network
PID:5198

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.emagsoftware.gamehall/databases/GameCache

Filesize
72KB

MD5
18c57d7fa53a40b1b6fadef97d7c43ca

SHA1
8e6167b7b7eaf2d596ad3f18f9004c64bfd06891

SHA256
64f46157b8b35229f3636c039a1e9c059e2107af0a107c52fe99ea4bbf4d7109

SHA512
68a2dae3fb34c9578a6ad14e9f5dc6a1228c78536f82bde28fefea59b4a7234984c1e744cd9f2efc758b982e767720b7b37d28af95ae81505da353d8245e9d1b

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
512B

MD5
a845fb6b9e2a0ad3add9359994411918

SHA1
1dd3bebcb2e3076905949096fe75ec5658a82ce9

SHA256
29c1dfcfed6b253a55c47368a5952f027f507080be18fff81315d0eda8bd1016

SHA512
4a1d0902dd96885e4f02a1b8e14c103c06b3d56a10067b362ecfbc30aed3a32d64e4da852f31ba5ac4140f658fda2d3d4a6e97d3d2160eff8edd380f1681f267

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
8e651c8fe4578adcf33b9b737f4770f1

SHA1
10e642e4d1db5c8a476b286bc5ea9f3f14a8e7dc

SHA256
6f0e8e8f3fddbf013ce9718a46baa35d97d862863bfdbedd369819fa80665f36

SHA512
ed7a06d263fb8929e9a15b34bc9345466045cc58b8a8ad6cc7e726dfa7efa7f69b970f8d366203f4a531d13d123fd7768f7ca43f9c69a490a4057915f98fcf37

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
c12b1ac10f48d45c799d026eb5c0de47

SHA1
ca0fbb48caa5c665d6223742a1ace4c62b2c9e48

SHA256
90638d55d1ce735c16912d3b37faa765b92ea16401b8270dae9b417134281d2b

SHA512
bc91aba02a37d4ba9100086ba7d2ff78458f13c66a4a7a8c53d6a992071b1cbdd5d37cc3760f401ab59aa72c4d247e41d5f662b244e65f04cb36faf1d873c8fb

Download Submit