416c6ee99942ddceec7b41a9dfe09bf26a8eb50c3dd2435618e7ef914d0eb652

Analysis

max time kernel
37s
max time network
155s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
30/09/2024, 19:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Plants vs Zombies Fusion Edition_1.0.apk
Size

169.3MB
MD5

dc12c607a88c8c9fb6058d34f3fbecb0
SHA1

048223b9154e7e25f26901675da889374c271876
SHA256

416c6ee99942ddceec7b41a9dfe09bf26a8eb50c3dd2435618e7ef914d0eb652
SHA512

850a9c6569c02eaf23f5f009152001322aac24c1cd6c6d77e05f11c205c2f1724caebf33ca19f6b299e3b4eb689bdaea56ac9ece10ff65b04c11b523a677d9b4
SSDEEP

3145728:XUh6t3Gxw0hBsF077e/Ci7YxTBlOB4ack3Of6n4PK27ydAY:XTgw0oI7e/nYxTBlg+SqlG

Score

8^/10

discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.LanPiaoPiao.PlantsVsZombiesRH

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.hardware	com.LanPiaoPiao.PlantsVsZombiesRH

Checks Qemu related system properties. 1 TTPs 1 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: qemu.hw.mainkeys	com.LanPiaoPiao.PlantsVsZombiesRH

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.LanPiaoPiao.PlantsVsZombiesRH

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.LanPiaoPiao.PlantsVsZombiesRH

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.LanPiaoPiao.PlantsVsZombiesRH

com.LanPiaoPiao.PlantsVsZombiesRH
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4213

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/ArchivedEvents/172772386100000.5562390c/c

Filesize
1B

MD5
c4ca4238a0b923820dcc509a6f75849b

SHA1
356a192b7913b04c54574d18c28d46e6395428ab

SHA256
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

SHA512
4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/ArchivedEvents/172772386100000.5562390c/e

Filesize
581B

MD5
f553b0d135cec1b44c33773cb4655702

SHA1
851931d00451838b7e0fb19623811628e5f5b7da

SHA256
6a0cadf7bad13f03c75ab17fa13aeeee812f2f4b16380d4919730d64cb07e88c

SHA512
e43d0912462472786b6f6ad8627dfd5639af79ada3c078e43d4d7694dc2d2382f68b4b333d9388c7ca9e5997591558f3813cd8bf3d75481dad6b3b367567fc70

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/ArchivedEvents/172772386100000.5562390c/g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/ArchivedEvents/172772386100000.5562390c/s

Filesize
459B

MD5
3ea3b8b5762fff89a4eb8de1856164b8

SHA1
eebdd89cc5f9241b42eb6e83bec64fbe191d4791

SHA256
94f734e541acc982204e3e4a41f0015aade10e42d598b2568a42eb54b4197c06

SHA512
997e86016daefa840ad3d93d70a49803895c5cfaa4e40118a4e5342d73979fc301f7c743c3c73d5a2e0b616f6d2946e317e3f08e322efdd8c5491c602c0c0835

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/ArchivedEvents/172772386100001.5562390c/e

Filesize
604B

MD5
61447a1e94fc1965219c2470b6831885

SHA1
ffbfa18291247def03b4ec5c85a3f1f03bc79489

SHA256
c8bf6a0194f3cfcc7a7c32292d1f70149416d4efa0778594f64473f4020622b0

SHA512
a79584d063f5b3ec45ed354759caa3e4845710656997f68fcb2d3f56066be8503fc5d3f6c3b287d429e67dd2a6b1be18a84101be8e3f3184c1aa6598e0d92cfe

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/ArchivedEvents/172772386100002.5562390c/e

Filesize
2KB

MD5
ab430dd0bbdfab0db667ceef2e3b3954

SHA1
d864c88442d2c5c193c89a8fbe7a0c01c88eb085

SHA256
9d3ec2c238ebfe357d55f0d3f49c0005e34110949e65b77ee6a707144dc0b3b0

SHA512
0a18771647381ff42d6afe9743125df277259b118c6c5777885d8fe858787b3f77563021d4617c1122c71b38682b46bc1ce8b559487bfc7c41aa378af802abd2

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/ArchivedEvents/172772386100002.5562390c/e

Filesize
3KB

MD5
ba88faec3a7bccbb47fd99f2398952fd

SHA1
e799e0cd3a83a619ad60341eb31e5f9784824d52

SHA256
5eeef860f403f9baca099150d61e27c555f6e3e86ccd95596bccbbc3edfda2c4

SHA512
c9593bf839b63051d95fb370247698558e8787fe183c85a4f54405aac52b264da356a820dca5a65786b12027ee9f0e0f8db81b79c6423c6dd670ffd0c7b53ebc

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/config

Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/Unity/local.9930545fac62bb54b88029ee6340031a/Analytics/values

Filesize
133B

MD5
4d9c2dbac987080cb18b9a5f5dc91cb4

SHA1
1fc205da25d569410868cf948b9107ee8cc54c79

SHA256
80ff433cdced07d1641459b89cea1e6486651902f875ada7cc93d3664c7bd42a

SHA512
904fb01c3fa19bf2a53509dbcab0dd9fcf54be66414c08f9d5cac3a1b6731ae83d370c6b7f7c6744e2837a5c72d08416d7fdd0f2ee6bc4ae517d0a14d15b8721

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/il2cpp/Metadata/global-metadata.dat

Filesize
6.7MB

MD5
590c40ca77a9ee07eca4fef8a25860da

SHA1
2d9d2234599650550261600a437500aab7a95a1d

SHA256
54196ef59a2c4483e1726d7fc3521f254eb904368fe9b01382a0465d2bf57299

SHA512
138af5ced484307437c00cb0bf864707ac0c848bdb0272fa05ed49d046b32f2366e921080d8e325e792a167b2a21281f922339ab70aab95cb4c5512d7e20c4f6

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/il2cpp/Resources/mscorlib.dll-resources.dat

Filesize
329KB

MD5
21d06dbc8af6432b2b49536ed30609af

SHA1
11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d

SHA256
c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f

SHA512
2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e

Download Submit
/storage/emulated/0/Android/data/com.LanPiaoPiao.PlantsVsZombiesRH/files/il2cpp/unity.ver

Filesize
36B

MD5
aacbe8fa46f0bce985b7d8a1a1a5e504

SHA1
33de2136fdf9a43490b52b35b20563c45207d8f5

SHA256
339db96c9e4065bc580a8eaf0d8886d474d79dae15c92a958822dcbd0d3eed43

SHA512
4362fe225f3c24afca10c5bf8c7bd9bc8974d59c6053d91c8b11a6c111bc9edd5cfffa354d39c3b79edfb195e1b3650dba7873aaf53347bda38c0d82c463b8bb

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads