Overview
overview
10Static
static
10AlSalah.apk
android-9-x86
1AlSalah.apk
android-10-x64
1AlSalah.apk
android-11-x64
1Android Defender.apk
android-9-x86
8Android Defender.apk
android-13-x64
App2Card 2.8.2.apk
android-9-x86
8App2Card 2.8.2.apk
android-10-x64
8App2Card 2.8.2.apk
android-11-x64
8Applicatio...er.exe
windows10-2004-x64
10Applicatio...er.exe
windows11-21h2-x64
10BaDoink.apk
android-9-x86
6BaDoink.apk
android-10-x64
7BaDoink.apk
android-11-x64
7Barsik.apk
android-9-x86
8Barsik.apk
android-10-x64
8Barsik.apk
android-11-x64
8Battery Doctor.apk
android-9-x86
6Battery Doctor.apk
android-10-x64
7Battery Doctor.apk
android-11-x64
7BotWhatsAp...nt.apk
android-9-x86
8BotWhatsAp...nt.apk
android-10-x64
8BotWhatsAp...nt.apk
android-11-x64
8Bowling Time (1).apk
android-9-x86
6sqlite.apk
android-9-x86
1sqlite.apk
android-10-x64
1sqlite.apk
android-11-x64
1Bowling Time.apk
android-9-x86
6sqlite.apk
android-9-x86
1sqlite.apk
android-10-x64
1sqlite.apk
android-11-x64
1CMAccessIndex.apk
android-9-x86
8CMAccessIndex.apk
android-10-x64
8Resubmissions
05/03/2026, 19:15
260305-xyamaaax3z05/03/2026, 19:10
260305-xvr26aax2v1003/03/2026, 14:05
260303-rd357sat3x10Analysis
- max time kernel
125s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260129-en - resource tags
arch:armarch:x86image:android-x86-arm-20260129-enlocale:en-usos:android-9-x86system - submitted
03/03/2026, 14:05
Behavioral task
behavioral1
Sample
AlSalah.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral2
Sample
AlSalah.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral3
Sample
AlSalah.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral4
Sample
Android Defender.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral5
Sample
Android Defender.apk
Resource
android-33-x64-arm64-20260129-en
Behavioral task
behavioral6
Sample
App2Card 2.8.2.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral7
Sample
App2Card 2.8.2.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral8
Sample
App2Card 2.8.2.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral9
Sample
Application Petya screen locker.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Application Petya screen locker.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
BaDoink.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral12
Sample
BaDoink.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral13
Sample
BaDoink.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral14
Sample
Barsik.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral15
Sample
Barsik.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral16
Sample
Barsik.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral17
Sample
Battery Doctor.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral18
Sample
Battery Doctor.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral19
Sample
Battery Doctor.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral20
Sample
BotWhatsAppAssistant.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral21
Sample
BotWhatsAppAssistant.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral22
Sample
BotWhatsAppAssistant.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral23
Sample
Bowling Time (1).apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral24
Sample
sqlite.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral25
Sample
sqlite.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral26
Sample
sqlite.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral27
Sample
Bowling Time.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral28
Sample
sqlite.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral29
Sample
sqlite.apk
Resource
android-x64-20260129-en
Behavioral task
behavioral30
Sample
sqlite.apk
Resource
android-x64-arm64-20260129-en
Behavioral task
behavioral31
Sample
CMAccessIndex.apk
Resource
android-x86-arm-20260129-en
Behavioral task
behavioral32
Sample
CMAccessIndex.apk
Resource
android-x64-20260129-en
General
- Target Bowling Time (1).apk
- Size 829KB
- Sample260303-rd357sat3x
- SHA256 f49410d96e93822e44dfa1a45b55e250abca233a43f4afb0237a1a0f76b62e67
- MD5 d4fa864eedcf47fb7119e6b5317a4ac8
- SHA1 72adcf43e5f945ca9f72064b81dc0062007f0fbf
- SHA512 a06b8621bcc29912058d253afe2a33755f2c8d9a36c2ead3e17c6a22a6892a4a5a210cff7337928cdeb81fb03cab9ed96d2db035f8f72cba33a9d8a6d229581e
- SSDEEP 24576:pdXyP/6n/qKDRfAvryuPoQvjjOp7NIigwM67R:pdXyP/iq4ojyuPoQjip7NwMR
- TLSH T164051267BB89F866E8518C75DA1180617332F4892A16D25F30CA7F3DBD1FE412C56B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.droiddream.bowlingtime - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.droiddream.bowlingtime - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.droiddream.bowlingtime - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.droiddream.bowlingtime
Processes
-
com.droiddream.bowlingtime1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4262
-
com.droiddream.bowlingtime:remote1⤵PID:4293
-
com.droiddream.bowlingtime:remote1⤵PID:4473
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.droiddream.bowlingtime/cache/data/www/main.js
- Size 66KB
- SHA256 9bc91bc906f4ad316d7d57b709de8ce840fadf1cc3997406ad6d38682772154e
- MD5 fa4e233bf41ab84e2e6c858dbb34e017
- SHA1 ffb258a235a7f1f917d3f1f208b9520e0a3e7627
- SHA512 41ae1b33beb962544eec9db9244ac691eff183a3560445526c0e6d322a3ad398a742aa25352e28b8a640137534b101f4f48b526e4ccceb426a2c02902645a1ee
- SSDEEP 1536:1n0a5BYHysmMDDLuW7ZPPFbUpNCBgCTDxmDG9ri1uuSEEaCYHMhZXIDa9E0mszFD:xwC0msl
- TLSH T135637BEE17C7C17F6B9C1E83BD14EEC92471897A9BC93247876C7F8C0AE4942C492865
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.droiddream.bowlingtime/cache/data/www/phonegap.js
- Size 29KB
- SHA256 4ca8d02eb69fa39cd747eda3e05667508acce174b556406db1cc40a35ecf6747
- MD5 2ff0ae2e05ae3eb43fe2249ea113300b
- SHA1 7189e8bac8a817895c6d25eab7c363ffa8f2bed3
- SHA512 6120f0d0d27eed9691e6ee64b3e3b65a30a53e4cd3b78f5a4b01953170ab2d1838daf65af975786e215f408cc24d515f2598bcb16eb0fb9fab5a704bbe896c37
- SSDEEP 768:nzHXIbQqihzWosQaX8cEzGTun7RQ9RA5DsjHFdhrHPJ3a63j1:zV4YDsb9PJ3ao1
- TLSH T132D2BA5A7759333285B3B2A69BAF1744E636C01E7E174198349CC2D02FB9538839BEDC
- MD5 SHA1 SHA512 SSDEEP TLSH