ea76df44c36a2cdd75a3b22beb6f8d317974ab7d8c25fb292fcc2e8912ad6220

Analysis

max time kernel
149s
max time network
148s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
31-01-2025 17:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Stardew-Valley-v1-6-14-0-patched.apk
Size

390.0MB
MD5

6d79fd90fee338f066b8cd52b94d53cc
SHA1

4d8056079edb0fb7861dff7ccf1e8db42063a6b3
SHA256

ea76df44c36a2cdd75a3b22beb6f8d317974ab7d8c25fb292fcc2e8912ad6220
SHA512

eb214a47921b087f67616e29f104044c35b9406897012b734cf2818535a16c09863b268f6337029f0edfe6795c25f2d57f190b529aedad0adb003b4b88742ae1
SSDEEP

3145728:IpczR3+4TPYNF13hIrcVDe9Oao6sVbrNuNl:qcN+g6Xqkad0o

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.chucklefish.stardewvalley/files/PDALIFE.conf	4503	com.chucklefish.stardewvalley
/data/user/0/com.chucklefish.stardewvalley/files/PDALIFE.conf	4503	com.chucklefish.stardewvalley

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.chucklefish.stardewvalley

com.chucklefish.stardewvalley
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4503

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact