Analysis
-
max time kernel
9s -
max time network
11s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system -
submitted
23/03/2025, 15:51
Behavioral task
behavioral1
Sample
adcc3a2f7cef4a20d5985f7d6c2290a0.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
adcc3a2f7cef4a20d5985f7d6c2290a0.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
adcc3a2f7cef4a20d5985f7d6c2290a0.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
adcc3a2f7cef4a20d5985f7d6c2290a0.apk
-
Size
6.7MB
-
MD5
adcc3a2f7cef4a20d5985f7d6c2290a0
-
SHA1
49cc48340ee2397c09f0484805e49e223e92b3e4
-
SHA256
3d1e6b84b50e9dbcfdc6b609aa57d28fa06f78e1f3cd9285e07ba8e39f419bfb
-
SHA512
52720c88b187718e7b3a4e557782a4794f2e98cbd15a14de04d80921ff8d3c9eb0cd5b8bc0c4705c867f81347f941e8fff9d14b1b850e432307e9da4c81369a7
-
SSDEEP
98304:1TOGZpDDsRB06CE3BFEi0c0Sll0pkQt8w1PGDdfnVBwvnBFWGm6pMn5fm+PSpKJ:1TvDDsRB0TE3BD70Cw1ODdWRcxqKJ
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
ioc Process /system/bin/failsafe/su amoungus.among.us.free.online.game /system/sd/xbin/su amoungus.among.us.free.online.game /data/local/xbin/su amoungus.among.us.free.online.game /sbin/su amoungus.among.us.free.online.game /system/xbin/su amoungus.among.us.free.online.game /data/local/su amoungus.among.us.free.online.game /data/local/bin/su amoungus.among.us.free.online.game /system/bin/su amoungus.among.us.free.online.game -
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.hardware amoungus.among.us.free.online.game -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud amoungus.among.us.free.online.game /dev/qemu_pipe amoungus.among.us.free.online.game -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses amoungus.among.us.free.online.game -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock amoungus.among.us.free.online.game -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo amoungus.among.us.free.online.game -
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo amoungus.among.us.free.online.game -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver amoungus.among.us.free.online.game -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule amoungus.among.us.free.online.game -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo amoungus.among.us.free.online.game
Processes
-
amoungus.among.us.free.online.game1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Requests cell location
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
PID:4331
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD50e937e5ca188ec05d8ee7e0c024b394a
SHA13dc2bc3bf35b577c904b27861a779288e76f0118
SHA256a65f45a04e15d3ecf17c86a39e6fadd6d873a9c22a718615a304854537b140f7
SHA512e9e260b3027406b334c87eec6aa732d8d94237cf1f683d56224f26a8c446e5744f0b07c850ef50e5ed1f07c0cf466a58676ac90554f7ea6b2b4913e56db55fae
-
Filesize
16KB
MD51d677f58f43b5b0785d3ad7ac039a00e
SHA1f6bdf10634514e8edb454969fe4c323485ac431a
SHA25682579b1667d0397d9c0b958aadc700d64a58058f5cc30bec75d3321560eca897
SHA5124d6051258dbbbfe745838b7ce07da77865a10da642b1f8201c69165f1088a01ccc65c73c19edc97f1accb763aea1b2deb0acf5d3d5733aa977ceb8a671b57cba
-
Filesize
16KB
MD57db70c0e2d870c7658a2d813f53bfc93
SHA1c546adb053ac671f628dc5081d2fa7cda6d3b711
SHA25601088a5709a9a480f46d37d7881aa5be635116b0a22b40737fc2a6c3ce65c282
SHA5126ade9108883b7d588dac30518d6df10d84ab28d5a0ccb6aab0651482852639cce38cb05319fef8a68ea8de8d5358f6a0eee730e1909357074527d3e33c2d9400
-
Filesize
16KB
MD5e73f3e3b3f8a9323a056e331e7e9441a
SHA16a37614bcf2f815a681d6bba81357a91a1bb7d02
SHA256baf8dac4f0ae2bdd9d475d1964f567b799a67e257b9ca900a1a95fcd48b4d4a6
SHA512bc25ad0f7e581e30d8e4b5454544e7f545a518f99f9b6efd7e446a669bf251a0f849accab42c82bd726da4241a1833297b60057ac9d6741d5b2b55f0e90e3ee5
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5c908c7def501a8a3e33d74683b9a1763
SHA179de2ff0ff42521af0361f446e26a3a9ee502ffd
SHA2568a92583c5db83f4e0927aa279d7e5facaced7b4e425fa4c0db6cbf206d562466
SHA512756d4ede9e87ee5804307b0efe5891b7b13d66942a048c7276564ee3a64a3b3689a0597f033cd70c2cd220fbf805ab9929500838d2a2be4a653a3044026fbb2e
-
Filesize
512B
MD5b999774bd46317c687213a1b3bf50836
SHA1d3f3811c3e72e6fb017120b2463a964d4921b1b6
SHA25613af9fe2bccf16dc17278c9d87814fd0f6a2334a410003ed88182e0cd62bb52f
SHA5123e4e5950d2bde93df834ef93e85141a17453ac9b2e109af058b8ca12d41a57bbd590af329b22b9c46c3cff2d773f4c373a602a0aa4aed0952e81620f289570c1
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
4KB
MD5447fcf9ab61dec2e73c75d2f22ed09e4
SHA136251f028ac4eff6c8ce3a164269d31b3c23cedd
SHA2561a2eda935afa32226994b577d8be9f46f7d79915282927f6b509835fd7286b43
SHA512756f17c15b65a7aa7e1af77a87c439d15985e30e01f26e5ccf69ab05278149829084652d0a2120d9098c8432ba58636ee3afb402543a35259e24bb9bdfd95193
-
Filesize
4KB
MD53381f42f271bed93efd15b679b47cb79
SHA10b391f90c974819ce6a9a656e995ea49d2dbd1e1
SHA2569918fba837b08a0c001c5fb056b5abd427f52fc1491ae695a2be47c5a532fbde
SHA512bca046eaf7798912f6013b1f4d542ccef93a804e1a850cd74cb74f08ae249febc3bd62ec0e3c87f4995f9c308cd1947b7e37ffb3af8437adb65bcde73f24398e
-
Filesize
4KB
MD508c771e95cb93ced6e071b8e0fd9ceee
SHA1ce70334dd1470faed29596dec1bca8e05fc74bb9
SHA256ee3834297f2cb7ac55ef7ccc3a3be1dcc8c7c443b8f58aab580cfdc6c1b9754b
SHA5128243b923a8dfed43761e9d481ed080288e260d21a65e646056f9d29f6230c197e938bc387f3f101e48ea30330926a4d313ede94d278c363eaa6833158ab0483a
-
Filesize
4KB
MD5130cb5df1a9694faf9bfad46d79a5c46
SHA14c5c3865b80a06927e1792e2b361a8ce433ea439
SHA2562fcdd5d6e729313746596796fc4a8be9b8bfede5d47f0f4636bddaa709c2112d
SHA512b68c39dc353b041b3b965c57e5b8307c8ddfd6d86d06a7b61b9d1d23d9ee3400d8631669ea6e740603dc8094d8281a7a96fbde12674bb0dc45ce59fde5805efc
-
Filesize
36KB
MD5fbfb54743a63efafaed32d89989231e7
SHA16e48e2047fab98d93196da6896158ad6dc52ea32
SHA256594f793653212feaac6c226d31c5d25568a1d571758929448cb1a188490e6bbe
SHA512d61587069c2085cf8db8d54cdb7d395536f1d08cdec5fe3172b97806b34c7a428d2f09787f908ca05db751264fff93b60e22c9c4abb6dba4f43c57a4639691d9
-
Filesize
4KB
MD5b1db4454e4f079bf6206a2835cd6f9b2
SHA193b709d0cfb13573a4430b27aecec28c184d04a1
SHA256684a8e8eefbb8591a756387c7ca1bf47fbcd8f44add2b99809f2c65f2661085d
SHA512130119c45bddc8dd893d92b6c6e84f691314002bad1131ac476686d9573abc9e7ee194619f67d235ee47642d62c98bc3962b6819d4747806f4c441b491891ecb
-
Filesize
1KB
MD5a3528250d9b7453f785da6d0dd75a630
SHA19f290cecb41edba2029be68bb1d5d07fb34a59ec
SHA25608d2adc89124ff0d74d00611e7a2864ce593f7b5dfcb0231d9742a32a4ceef7c
SHA51298e8375b31a262368dcdab88b493359cade4b09d22356df6e57926d9fa1c7bdbca0041ba2ab75319f64725d6dd12d5170501ed1a4f507305c87ca563dce96517
-
Filesize
2KB
MD5128503719bfdef6b09d4c8feb1a096d4
SHA18ca4eba243150f61a8660ed41c42510e16f36cb1
SHA256db1874b1c410bf8b36c2715ddd5b274e67146a1b75c6393be20abb9dafd6c20b
SHA512038e1cc07930281bbc2e6395baf41f9d463530496933a0f26bc1a37de4f3a1d75536ee1425a6f1580f8f32cda1e2e2fa4db754288d09351d81af5aafaa4aed61
-
Filesize
719B
MD564837ec60a5def703db0471648bdabff
SHA1f1eb4a00833351d6dd8040d9658faca109c0859f
SHA25604e4c66980a46478b18296ce2620239907d7406143d003fd7ba7bb6382440ae3
SHA512e856f892b0a8b4c645fb87d841e4faba64e2398589dbf25ee36f20e7df7a63e2e9464276232a625be4063659c924a005d8598fe03aa967c9d2a8d97b4ab68f34
-
Filesize
785B
MD5e9a968e4938a9bb9632799e2f10bbbbb
SHA18c9e1e04c6784d0f9d182081e6329897c957d166
SHA2568afd711f027fad53c5c96bc0d79574983b6d661af90aebaddf0f1dd858d03f2d
SHA512cf76a0a9051cade548200101d5e0837b1d1eacc441fed901641e7e9fa87ffa3304a98ba674c8d20ea30ff682076f45b60cdbf260e3dd2770b8f19ff2d393f133
-
Filesize
7KB
MD5105581fd6827b96a3e97553bb288c1d4
SHA1582712027ebfc69435a1699976cb68c40cf7388e
SHA256e2e35f221b52c0bd85232f5b755a6e8afdc8dea61a9e993dd57c25dda7da4cd4
SHA5122c2d8f1dcad9ab2503e56d0599e728390d4da5fa128c381d11ae2b4a87f706033758ee15019f5443b3aceb7076070c203ee536153fcd4578ad7c51699acff816
-
Filesize
1KB
MD56233062b4d55ee5b9699036884f470ca
SHA1e415abe9bed25b0ac15bd0a6e012ef5e277c7871
SHA256a0bb7e4b8fd937390af946710621e0a283076d264487eacdb19cb503f2dd3522
SHA5121dc094dddf9ad6230ed2bc2b55274f6b51736d72f7f16591dd52151b69be15e77edf109f5ca82fb4e951dfcf998b3b8af33116810c093836101cea5e1eebdd5a
-
Filesize
1KB
MD5527385c9a7dadd870919fb95ce4ff227
SHA1a83ddb0ba89e4f83a07d6e0524d6ea900e800c2c
SHA2563df2ccce7702c69051afd3fe66cf99e3f07e86d354956eba3888ddbaf545e717
SHA5123b2f1781552f701331e91eb46fd38a982b2a9de8eb7259e912a710c63399fbe86fcdbe4c41fd8b8f34b99773a94cb02024e9ec64c38aeea68ef378de4f842355
-
Filesize
1KB
MD574860bc33c04b72a4848a5d7b97bec5f
SHA1336856eed4d49ebd0d429877822ac5781b4a18eb
SHA256fb479f88bc809d106fc15c465079b19f6027a01ecbd0d79267147c0529adea69
SHA5129b6993ba917c3a687b0df03deaf9e5e6ac41d3606ef148e259eb32de8c41203249063059a11bd598b860f2e3d795c73cd339c5325f80a2623745e7003f6586aa
-
Filesize
1KB
MD5c954c504c75c8ba2b112deb64869f78d
SHA15b594778f7a5bdac4e41de2d6c81225d5e329e0f
SHA25637ee870f153d26b3956abcead4c45160b264fde6ca016bc2d330e9e36060ee46
SHA512af1705681c3a2ef83427c853d310bc2dd6159f5db1c1b5a5740431a5a928b4c6541dcd5e3fcffd6c06697b87ca740a0ce2473e2cf141f21ee13730f325d4403b
-
Filesize
2KB
MD54d332a5c731fb506bb4644c91c38f5fc
SHA156fdadb5d38b29161910b3c89ce57b1aae67733a
SHA25643e7ff284e786cced9a54218970d357ff06374836bc1791eb63d9bf26c6a3784
SHA512c791b70329e32559d99f0259b38a832bc849768cab37973567a04fe8f66e9f5477136014ac17d16d1a0df0ca0f4fdad86d6a5f29581c85068b7979fb9e73b7c6
-
Filesize
882B
MD5136e73ffc6805e043bf61a12b3755b1a
SHA1b7bd8ee6bd46f7bf3a2f21879e71ff4684e56361
SHA256ecf9d2a4448842086066d82fecd6ec372497298bfef3c8e3fd17a97187a3e7bc
SHA51262a12a8070955026e27e6c146d46bc44a345b0b4752e1c45487f06224e11c42490344b259ee6fe51fb6e9847cf4146abd7d4fbd0274d0f2c532868bc4be5d527
-
Filesize
740B
MD54ef85932c17e863921c9bbdf1394fe92
SHA1f3811986d3648be1ca89162a079aff4644fe26d7
SHA2560d6e7d7a915944adfb498a45a6db96efc77d0112ba1f374461868e257315dfa3
SHA5121ba7939efbd515f81333a155064e248de27b2c70cc71004136ab9d3c61ad34baab7f1d00529e1c78d4cdf11deddbad2376d27d5ab1af699a9d29c5b5da7f4db1
-
Filesize
1KB
MD5795fe2fffc9505398b787eb2f15f440e
SHA1c124812df2fbd8e4a65fb104aaab352ba300a57a
SHA256976cb8c0c715b0b0e8b4769b51af1a08f06a4823d69b1f5284fec4531da21fb7
SHA512c698c060692567afea47446d58d32e92b0bc922088c99e175f5125b264c20d425fe7dddc4b0d70fe9f53d41cfb87ef52965cd40934f21c9f5e2b9281dee72389
-
Filesize
1KB
MD5ae1702688d33694b08e2f990527fd179
SHA1fccea348af9e98608b152c1e35307d04a1cddeb1
SHA25687916bc88b54b8602b2f43695d34b196b5cc8948ccb6576b24cced2feacb245f
SHA512aa0aa7306867900ec765e0645e2666ae1a913fb1bc67ba205b3b80d1b37089bd8692c2b34fca233ed3bcfe89a42f095a375df787d5c29ced86bd040981110d2c
-
Filesize
881B
MD5ba75be02cd7e410fa660a1783b0fff3c
SHA1b5b60389112f5c6179878423c6c97eb5ab1680b4
SHA25677a060cb9e3f9a5eb52654135d00106d36208f3d38878ca3b752ca1af85cf42d
SHA5129985e466e1652eed843a9dd97832b8ee9bad05cd591a4b17548e876ac65c6cfa4da4f46e83dddf89f9fb1924d92dbf21ce13e66059d5cc7dbe0500cf0c0e7b0c
-
Filesize
2KB
MD55f93b7b61e5bcf973fd93c049061023e
SHA17c154666967abc13d9d38c9b79eb6933db64566f
SHA2564e537f889054c9f1dfb4b1a30c34ea180310dbc9b9bcc9123605f0f802a24557
SHA512d96bb4c9daab3b2a72a3d82682a8f66ee85a0eb525a87afd13f46de949ee8a02d9a560da6584ecd658681c93a13df03d9a0f57382fdc40f56b2541a51e858a67
-
Filesize
153B
MD565026ee778e1372d9f4aed742772e893
SHA15a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
SHA25615070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
SHA512589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616
-
Filesize
663B
MD52e42562e9d02dafe67ac6404f58289b7
SHA1c37072894b2169be2643dd5e541ff8dfccecebe2
SHA2562f70939006596d2496c26284508e70ef260968eae1385c220e91e74b58e0d13a
SHA512a65a9fff0c6e17c322d0f0d6e0233fcca6d701a331a0fbc7da7eb21474c11875bd0e3edafc6c1df248ba85f22fc47b403d5668316405adcd8f6e4907a893d3bf
-
Filesize
63B
MD58acc2a26f2b5879c7f0c181e0ada7fde
SHA1c5d4f2df3ad4be6588b848ffecd9da19cf424592
SHA2563db3ef0320b4b30365e4c6452c22910a1b0660a13b6f51a1c6c9a7941c9ecba5
SHA512cf292ae6e47a7f82aa526ecea1e2fd3aee1bdbab600136db4d0883a1a2781f1d878271f3203e4a68eb9e927290adf0026abe391a86f2bead8dd63afd006a74cc