453c506378fa71efc871a8f4442b49b6d59a513def153bfec9813856d6d93a1b

Analysis

max time kernel
67s
max time network
70s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
23/03/2025, 15:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

adcc3a2f7cef4a20d5985f7d6c2290a0.apk
Size

6.7MB
MD5

adcc3a2f7cef4a20d5985f7d6c2290a0
SHA1

49cc48340ee2397c09f0484805e49e223e92b3e4
SHA256

3d1e6b84b50e9dbcfdc6b609aa57d28fa06f78e1f3cd9285e07ba8e39f419bfb
SHA512

52720c88b187718e7b3a4e557782a4794f2e98cbd15a14de04d80921ff8d3c9eb0cd5b8bc0c4705c867f81347f941e8fff9d14b1b850e432307e9da4c81369a7
SSDEEP

98304:1TOGZpDDsRB06CE3BFEi0c0Sll0pkQt8w1PGDdfnVBwvnBFWGm6pMn5fm+PSpKJ:1TvDDsRB0TE3BD70Cw1ODdWRcxqKJ

Score

8^/10

collection defense_evasion discovery persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/su	amoungus.among.us.free.online.game
/data/local/bin/su	amoungus.among.us.free.online.game
/data/local/xbin/su	amoungus.among.us.free.online.game
/system/bin/su	amoungus.among.us.free.online.game
/system/bin/failsafe/su	amoungus.among.us.free.online.game
/system/sd/xbin/su	amoungus.among.us.free.online.game
/system/xbin/su	amoungus.among.us.free.online.game
/sbin/su	amoungus.among.us.free.online.game

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	amoungus.among.us.free.online.game
/dev/qemu_pipe	amoungus.among.us.free.online.game

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	amoungus.among.us.free.online.game

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	amoungus.among.us.free.online.game

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	amoungus.among.us.free.online.game

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	amoungus.among.us.free.online.game

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests cell location 1 TTPs 1 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	amoungus.among.us.free.online.game

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	amoungus.among.us.free.online.game

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	amoungus.among.us.free.online.game

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	amoungus.among.us.free.online.game

amoungus.among.us.free.online.game
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Requests cell location
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4329

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/amoungus.among.us.free.online.game/cache/startapp_ads/interstitials/_1699254415

Filesize
149B

MD5
6f04fc01db0074110ca94411a2e22b5c

SHA1
1b4002615274350ebfa43c053e2f9dc555afb1b1

SHA256
38f4d3baf10b0e052f0420b657c74e2de6b24a05cfb9c718d01f15f7d83ca4e3

SHA512
c7fe60a32d6e1e599314bfec27ff703353645e8fa42f29be646a0970de04d7f8bf74b6a3d7b24c6d2315219f1977f976c4244d77673bd3c54fbf47ae1d039983

Download Submit
/data/data/amoungus.among.us.free.online.game/cache/startapp_ads/keys/_1152562523

Filesize
989B

MD5
a47cfd7758f7fba40b5d0e9ff6ee0928

SHA1
a5e80f6e43dea8123f2a30cbf981ccafa81cd3b9

SHA256
83e9884930b4367344eaf06d4e8550a7c97ef59471e23bca96f1ddb1112fe796

SHA512
a547bedb13a3c6f715848c3f91ed5cff6aada2acc733eed7eaf2eef637e0527ad24abcd2907a02112872e0e822e7710cece51991b8821e5506311f3ec537f6d2

Download Submit
/data/data/amoungus.among.us.free.online.game/cache/startapp_ads/keys/_1699254415

Filesize
990B

MD5
c5b1cf78db279cb4eb3359920a79e1bc

SHA1
be61583e9789f801d998983de01e01fe5eb0c8ce

SHA256
5f583b20454aab50a82da324db699c96f79c2383211709b46623bab1a28b7432

SHA512
9593a4ef1ecd031aa22d60584d35e77a64f43e29ced68e153c487d95aa07232a2d38cb4a560fea81be69ae9452b8f60d61e18fe11533d65f1620ab50773da2d6

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b56faec7758d4f0820726469257bd6d6

SHA1
3a80f04ff84f5911c6e73cafbd0f9d061974b7fe

SHA256
88c29e2c3b5a475a6873a3da7dd33de5f681b134dcca5246986bda541c890808

SHA512
8cd4c38b8a785ac2da95d5b341344c3b9a6285d7883b5d6a7b4918d6cf6d5b4e661066b266bf630a3a75baaff4bba822db0ee88a72c851ad6e1ae0c297faffe0

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b32dcd4e5619fcf6e30990cac17ba069

SHA1
a2840a30a8719cf10abc4c5d4dc9346a98e3e37a

SHA256
f506629d6c16ab075bc6228b1363ab7b71861e0b6afedcaca9f4d7bdebca9329

SHA512
7aede66e105b0575e8c0675a15eca532098d46b4f8b94dbaca793d71363db5bbd00bce9d7e3bde9f5b55c686f8b6dcdff97b106deb820989d7d8bbdb411bafaa

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8265f862ccc0a1d7aa48acea3ab23562

SHA1
d1472480aa11d117348e4b9a7df659dd44d247be

SHA256
dd22efae01126566cc15b514d9e0394498a1997927f14e0f5d80e609a2e159d0

SHA512
1798966a7f2e12c4feee6ec9214de55ea20a5411fd2f4078e5f55461e3ecb2fa3074bde25c0687ac31bfcf00c62b2cbb9069217f3f808962b4e4f7e57ed0d78f

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f727bdc4a4330cd456365accc01ec35a

SHA1
7b32cbe71c512d2ce772f61a7b1c01e6a57b18f4

SHA256
8cb12321cd8476d6695494a47409cc1b19c100fbba5c319ccf1a90fd4de6c17e

SHA512
361c111cf8ef63a03a8ee39417e94bc6d2bfc00eb2fa19b6f7aff8cdfeeebb0113d2d38f369c367b6af367b6568a351e32be0b79a63b648f0632cf0a77a61c8e

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2c21d0bb9cb652a3dba3fb75c3bce944

SHA1
74a2b51d903dd0461afd6755416f75951cc4e3a2

SHA256
686c875475e53cfdfb93cb764c1daeda8dab9a2acbae05bbff72a8a41ae1c529

SHA512
692f808504457346e7b73ba5eb6500e534f33315b9903516ac256b6436ae7530c13e21600ab51faafe97f621fb8b1642ae688901b3aa8405033eeacf4f75d0b9

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
967303aa2f7328698314cd3898471244

SHA1
f0f072e5043e8ff867c95f9b1c4025127803d252

SHA256
3fea85ea187e67d152ddd0b30dc09bfdfea682bb9bfc399256174c418d328e04

SHA512
4f5d16e6cd39ecab3efe22517c4c164f40ed040da9230b2ba97028242e77071ea88166248d9614952f89a9ec48552d6421d48d0e722be462777e9cd921877c19

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
82fb61265cd7e8abb7248406bc29d5d8

SHA1
69661a608c94e4ee9308dd8a8dc2d27ec3934c27

SHA256
90b6d4eae399124745e4e51689d8302c7d738e87613eef803315fb23221502c4

SHA512
18f7d0af70aa8c7fb6caca608d797ecc4fae225d4e18925b058a6b974f2fbb2c2447545a557459ba93dca9c10dd27f8827c2148690846ab46e04178be1446638

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e33dea4e783f5194725e4274c7cde25a

SHA1
ee35cad96d3d7e5a0272556bf9b746a720b62400

SHA256
93c58dd4ad369f1c1478aaf21c43c70520b1ff232195f398f8004f6e4e719eee

SHA512
abb8d069f6156294af095fe3fe44b9f3efb86b6e7057ff290ac3216713805764e7dcc271b7a459fd2707cf9c737637cb2cf1d0d076e99e4787e3dd60b0705d43

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c554f3de010ba9fe5edaa9bdf3aba6c0

SHA1
096b76cccd2b518bb6f7fd14a8084d9f959157d0

SHA256
807aad31f7922c74f8d8558f86d66714821016cd278c783b8106080043339bc8

SHA512
a218c61d40d80b3216950b60230c22d6736506d0157c8824cb049a93151334c52ea611718ea5056d1004f1fcdb4d3615d348cad1ae2f9cb559513401184c1801

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a5cc4b5039bfd98607c8cb7a857fc27c

SHA1
a647aae99daf19377e11090dc391a70fc9bf65f8

SHA256
0dc0e88a304f0a7fc6726bb3f9c357a30f3d737a41d8dd80b9e9db8d83bed7a1

SHA512
15eda0b353e0a39de33b0825a3c7299993e0e6f0bffe06c24eec0cdfacdcc6c2ad541e3c62c65ca287ce1173c5e02e1c9c8dab8f7d7b187252b03d298859548f

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
423c017dc0238878b0c7d78a9429352e

SHA1
7aba9dbab4b0a90e30e934af2bdc7f9b842f0170

SHA256
2e50f8fdcda0571774c52003440b821bc8efd3bda721a7d9bddee8a5d451e2ff

SHA512
be7f8ea8dbb7ae617d9e591a18d27f5d4d89b6300ebcbdf697a1ac73be5f3c45f045b6b0b5d3bafcaddc8efc5df62444b26e86a3bc4701cb6bfda2703a273ee5

Download Submit
/data/data/amoungus.among.us.free.online.game/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1e8bf2e27fb0f0cb1776ed2be78ed34c

SHA1
be78afbcee3d4db994a95d1ab1572713508ab7ca

SHA256
ac9268e0bce80fb0e6a5bb5c82078e644e978f7815847d1766886ccf98713d99

SHA512
c01ff1ad360d52c68fcf316e874b47ce4077ab34fabab05ec668db8341e99b56a3bedd98bf6ab968e7269fcc9bef3f8a04208d4b9bc35921aadba4d18ea05912

Download Submit
/data/data/amoungus.among.us.free.online.game/files/shared_prefs_sdk_ad_prefs

Filesize
153B

MD5
65026ee778e1372d9f4aed742772e893

SHA1
5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

SHA256
15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

SHA512
589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

Download Submit
/data/data/amoungus.among.us.free.online.game/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
9f82aa5767256a04fcda66ae932663d3

SHA1
a437e9c70d96d74c11bb549849c16ccc3b32dd54

SHA256
f92a572a40d32d25d09e16e6f49a67f4951db475c83472cd309e410a3e6c6fef

SHA512
fca5cc05f230be390f71886a9438970bc2c93dee2f585c98c0c396d1a9d3429aa73ff5f3ab5ea899e02d828ea9dd93b7129468046d430616617740a33f456df8

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads