00207fe7b7b9f08d6db522de16d3389b5e62947849572fc7341359c879fc1c7b

Analysis

max time kernel
7s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
21-09-2024 18:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GH.apk
Size

1.6MB
MD5

e6647c7982823f7e0c49bf9de9e8ca1c
SHA1

56669c77eb3bbb867a470d623496a555d935aa1b
SHA256

6da698faf823ce4cd97d214609d54291da5e3a18561c9a648cba8bbe47595f02
SHA512

bcfc2924ee57b898475fd5c3fb8c9cb001ad2ebca717e60f384720c05441fef4ec00ad777d144c9d15dad8c2e34e3b8b78e067bd1b72a8dc59c2f20d5002b05b
SSDEEP

24576:ygaJGEBLRACbCG4jh4k3QiDkrsPTVwogNeAranxYfks:ygaJGENRACubjh4k3Q0WmHgNlr0xwks

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cn.emagsoftware.gamehall

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

cn.emagsoftware.gamehall
1⤵
- Queries information about active data network
PID:4958

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cn.emagsoftware.gamehall/databases/GameCache

Filesize
72KB

MD5
18c57d7fa53a40b1b6fadef97d7c43ca

SHA1
8e6167b7b7eaf2d596ad3f18f9004c64bfd06891

SHA256
64f46157b8b35229f3636c039a1e9c059e2107af0a107c52fe99ea4bbf4d7109

SHA512
68a2dae3fb34c9578a6ad14e9f5dc6a1228c78536f82bde28fefea59b4a7234984c1e744cd9f2efc758b982e767720b7b37d28af95ae81505da353d8245e9d1b

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
512B

MD5
5c8de5f71eeb18cf10d8f0f5ffa54899

SHA1
799eb12fbd95b6a0307df6d8583ec0aaca0ca2f9

SHA256
3d89a5f216072c65ca078d4d1f1c10874905e445acfa93e11713abd0a14370f6

SHA512
e8607da71cc9ce4034ee1be7c897df86723a7b3d4ce2c0a683f63478e54b5b472be509873cd213b69476c28ce6f7f255f450f9e02624a8fcc95d040c292ebc72

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
602e0bb3dd5101637164d4ed7cf27bf4

SHA1
974c1c84676e1711dc1d5c72e88c51567bca4603

SHA256
a2f32e90019c9aa7ff24c8644856e372023b8863143a90eae1fe957bbb01923a

SHA512
0a72167051f47264fc367d77ff20cb7aff552b8275a034361d85c96bd7c52116b31ec9f0e30f4032730fc537fb66ba176d8a4d199c6fef30f333557845ad1357

Download Submit
/data/data/cn.emagsoftware.gamehall/databases/GameCache-journal

Filesize
8KB

MD5
52462a3ec67f9b710903c554978337ff

SHA1
611b73693f4ddd02fcc769d3eb49c129c82fa974

SHA256
207f4a8fdd8bad36122dbb2e54050ba2ef0dc6d30162781919a5b34d4006e5fe

SHA512
b375014ae830e3db75e8eef175c361ac5729c049213f6884546d4a822fbf483b8224b087f16a23e43a1d84b13671150fcb0104d290774a31864f9d6b4d832ea1

Download Submit