Resubmissions

16/04/2026, 09:37

260416-ll1gdsbz9j6

16/04/2026, 09:35

260416-lkj31sbz5p6

16/04/2026, 09:30

260416-lgthaae16v7

16/04/2026, 09:27

260416-le3ceae14w6

Analysis

  • max time kernel
    11s
  • max time network
    24s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    16/04/2026, 09:27

General

  • Target
    fallout-shelter-mod_2.3.2-v8_RBMODS.apk
  • Size 427.6MB
  • Sample260416-le3ceae14w
  • SHA256 87b54d2f98f6b5afc100977987fe49ebd0a53b03bae8ce8272d3b3cba094981f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.bethsoft.falloutshelter
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:3351

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.3351.tmp

        • Path /data/data/com.bethsoft.falloutshelter/cache/oat_primary/x86_64/base.3351.tmp
        • Size 327KB
        • SHA256 d4375df995e9d7e629e5f588fbfbc638e83f30d5156398d36add06bed51d1931
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.bethsoft.falloutshelter/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 0090f856679dae73731564fb96a40c8a3bc6ab651ec91940b79841347910f415
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bethsoft.falloutshelter/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 3bdd97b0dea1daa82983f19e92230720e6ab169cd152acb051802af48a45aee0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bethsoft.falloutshelter/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 13bfa9ee7e62a246358455f4038a41d1e52b45e95bb02fbbfa88b77a2f977764
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bethsoft.falloutshelter/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 76222b456ca10ffc910cc1701ab370bf37798612ff885420f95f300bcd1bd299
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.bethsoft.falloutshelter/files/profileInstalled
        • Size 24B
        • SHA256 2e4e994339fea630d4be558ff7371f6d62284cb8090f11dae0bfd8078f6925c5
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.bethsoft.falloutshelter/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.bethsoft.falloutshelter/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 8edefb147180d947f686e6c2143d74bcc95755c0e7c85943361ca4583d176b87
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.bethsoft.falloutshelter/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.bethsoft.falloutshelter/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 5205af15099ebd58281ed32d2bb31ca50bcd435b52acfb0bcce147e250ae207f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.bethsoft.falloutshelter/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 9d59de7fc996e1ff958459ff83c3ca65fe2a7ee3074b6f466f357da7a5fc6f66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/com.bethsoft.falloutshelter/oat/x86_64/[email protected]
        • Size 67KB
        • SHA256 7ce560dbd28844d202747fa7d14cc55f046392f27777b7606ed51a7f7fda9302
        • MD5 SHA1 SHA512 SSDEEP TLSH

        main.217.com.bethsoft.falloutshelter.obb

        • Path /storage/emulated/0/Android/obb/com.bethsoft.falloutshelter/main.217.com.bethsoft.falloutshelter.obb
        • Size 2.1MB
        • SHA256 d0784e7fccc26b12623c6139f913a423bc449caba4583a85323cb428aea2e579
        • MD5 SHA1 SHA512 SSDEEP TLSH