1a43930b938939c6e646fc9e690e150338192987e0d71387174f6662f3324143

Resubmissions

28/03/2025, 02:08

250328-ck1aka1sd1 8

28/03/2025, 02:05

250328-ch39faspz9 8

Analysis

max time kernel
2s
max time network
33s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
28/03/2025, 02:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Minecraft_v1.21.70.03.apk
Size

730.4MB
MD5

7bac768c12f3a4d471ea2222677d4081
SHA1

e80c25de7e863da2a675362dca8bcdca8b52841b
SHA256

1a43930b938939c6e646fc9e690e150338192987e0d71387174f6662f3324143
SHA512

9b7ca169fbbbdf8892a56a0a3405feaa31f9740a0369a770dc12fa48344af6362a425b96b9844b3279a395dd88214dee387fa13a4bd0ea040b681cba6d86c30d
SSDEEP

12582912:ExkXOmC0aWz8i/rIBiCWaKDvEq7lrnIkDyF9xaLtHPA6aY2bWL:kkXOm9aWz8i/r+iCWLDsqukeF9xap2bU

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.mojang.minecraftpe
/system/bin/su	com.mojang.minecraftpe

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mojang.minecraftpe

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mojang.minecraftpe

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mojang.minecraftpe

com.mojang.minecraftpe
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
PID:4479

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
6d8fac83532d1a2eab2e5c84754c5810

SHA1
33934c1bbe203197e86d292e582c96d84429b25d

SHA256
af098f8a9905b9a0bf36b6a9cc19d26cf9098f1fd0685960c7748c84ed593b4e

SHA512
54fa74d2e8751ff1a57a0317a090c4e087f948c7f9ffff87ec04dd14c5e8bad145d48798f01e4ecc993264094615af8e20089187308c9ba2fbccf8d8d3d396c1

Download Submit
/data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
61d4072016db8f02f7c9859598816615

SHA1
d23ba658796215e25dff7fe4447ad09f42e9044d

SHA256
2c48dc5c4d4cce6d387f15d74ad1ce2ecb5becfa131545774814d943432b57ac

SHA512
5dfda46b70c3b70bbe91c112b073c9a0975ad1f599066e8f3f9fbb2489225cc4acaeccc7ecb7172365bc3e6d6c5a0b5b338c5b081107eae62e05b5ae6242de4b

Download Submit
/data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
aae93f96f4c322a0e6d73b44e37ebb23

SHA1
dff5e0785ba38b3f843853afdb684e80adfe857b

SHA256
c48d2c9bbc0d01b66596dcbfa809c33a6f61e7b5bce20492bfeb197926bc6460

SHA512
e95b61668b0186be8ea41e38ebf12a26afe99dbc634b2f2b6f51b2dec417537661d465b8993965495a88513506dca61771e05c6b3f0e29fe01d195fe163dcd7a

Download Submit
/data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
969eef00a811232d7efd04d60a97022f

SHA1
4c86723ff95eda7b810f43d447e4263628d26978

SHA256
558207b1463a780094c2c7632deae8e75943d916bd1651beb7a45e5b697177ba

SHA512
f7bd16f7123ccb8f59ff0167d0bdb5cde69524cf1c2e801340e9fbd9074289fcbab431ff919e541374123cf21a544ecf14ea94db375766fbb2762c7a437aa24f

Download Submit
/data/data/com.mojang.minecraftpe/files/PersistedInstallation3130896267643721814tmp

Filesize
90B

MD5
e9322724695caad902ed1c9be8d064f8

SHA1
dcc361ecbffda961e1481920867ec89580c12816

SHA256
af30221d5cdfefde133bfc05dac927040468efac1c6508872c9057dae7ad4da9

SHA512
fc54cb844a4f238c66ca81579f6928e3b7a5569d93a2b7a8119f8d1675ec05583e54f328c9109884eb33cf802141c6a9220da6b88d510a57aa27ff97bd4bb8af

Download Submit
/data/data/com.mojang.minecraftpe/files/PersistedInstallation4740289106284186808tmp

Filesize
569B

MD5
ebf8ceb20bf5c9492dd8bb2c6aed3651

SHA1
599c2048217f5ff0ad4995f686e0b3f71913595c

SHA256
8cbd5d7c5b0a0c8c1c704178e1ad96cb131c053e29bb7d673f14ef98a8eba2ff

SHA512
5f4c815e5653d0e3eb6d45fbe496ee7b833d2ae4224f09decf8d3207d2c7c77efe63f6c0f78d1970ede7dfd3af513f5fe87c61871711ede4abf4cca9029c8572

Download Submit
/storage/emulated/0/Android/data/com.mojang.minecraftpe/files/games/com.mojang/resource_packs/VietnameseLanguage/manifest.json (deleted)

Filesize
680B

MD5
6a75b9f5370443e09039e46d742331b0

SHA1
6f35b4b3b2eba094a5217171ee37bedd2153521e

SHA256
ddbb4438f5269d3c8f5ed7244a69df72528ff6d838faa10b65a046ea7aec0e55

SHA512
d2fd5f2cc39f2681f2788298f6ff665f031e28e0f491d37d5bd58cf5b253493377d5690221306a534d7f0f55337ae4639a0aa8879f2cd4ba3b779497977e3831

Download Submit
/storage/emulated/0/Android/data/com.mojang.minecraftpe/files/games/com.mojang/resource_packs/VietnameseLanguage/pack_icon.png (deleted)

Filesize
2KB

MD5
d56f51c4204b944d2e3c52d24a5a31ce

SHA1
800260cc8f013dffd47549516076c198922793e3

SHA256
90463377f2d3d4e309bd8b7e8d09f1088491c4ba6c396cce48dc2181c6e07a57

SHA512
1f5fc1560463afa1f88b0f0f9cfa21fecb6037eac31da9d24f48972ae157ce16d856f64800ee5b52a1c6213b4d797a21ce5323a6e151b6f5027d97080a720209

Download Submit
/storage/emulated/0/Android/data/com.mojang.minecraftpe/files/games/com.mojang/resource_packs/VietnameseLanguage/texts/language_names.json (deleted)

Filesize
58B

MD5
fba6d05dc80a16852e5601eeb2b8bff0

SHA1
e14ac0b7fd06ca9e7a76c5b4f93c81310e0f22ab

SHA256
6bfc38547ce3374c6e2d6c43ae6aadfac596373201ccb61511f322cd915e15a7

SHA512
72e0808668dc8f88b5a96b1bac48738e49f150ffc7607d381e8711c5511d94e4065bbd06b9422875dbeccd70618084d1aa228d84ff2d9e00dd72ca4cd7318c30

Download Submit
/storage/emulated/0/Android/data/com.mojang.minecraftpe/files/games/com.mojang/resource_packs/VietnameseLanguage/texts/languages.json (deleted)

Filesize
13B

MD5
77f6a5602eb7db7e01a17cf49c3f7012

SHA1
f92f69a87002af54db54adc3ec5fa098704c5352

SHA256
861111c3dc893aba71f7ac0a3585464ab78755f3e5c59f12cb08713cfbbac134

SHA512
40de043526f4f180322682efc87d4e68259c284c4a45c3616001489666bdd4a2c3c75f267159dcbf23ffa4b2f88606f571a0882dc01a957859afa1c96c2c6731

Download Submit
/storage/emulated/0/Android/data/com.mojang.minecraftpe/files/games/com.mojang/resource_packs/VietnameseLanguage/texts/vi_VN.lang (deleted)

Filesize
314KB

MD5
796c722801febe436299506647069ac2

SHA1
77a38822a6d5e7a622bb4b6132411c2452e8f041

SHA256
a37650ac99046a65bdc578706d8833712dfe85402dcb00107934d033191950db

SHA512
f7c87bc7a0b34fb824f9f2a948b7f25a2f014c4662eeb6371eea589fe351a7c29a7983c68798cff074bdf12700bf2775a5685b038a8c24de14215de51aa06004

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads