Analysis
- user interaction
yes - max time kernel
61s - max time network
150s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
06/05/2026, 21:31
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Geometry.Dash.ver.1.90.build.23 (1).apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Geometry.Dash.ver.1.90.build.23 (1).apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Geometry.Dash.ver.1.90.build.23 (1).apk
- Size 46.9MB
- Sample260506-1dgrmsfs3n
- SHA256 95cbab2cc6c481bd4d575baba3903a1c1253ecf461d44c417012d87a4d2bfcbf
- MD5 a1d402296ded942e7881655b110ac47f
- SHA1 90984c0e329796e53abbd30ef62ab131a595e01a
- SHA512 c22728708882388aa6e0da0adc8aa14ffc00aad1279c4aa54a165bf259b147244b744dba9991153a404097730ef4c90ebd60cde9f432ed2ba0976e4775945002
- SSDEEP 786432:tfmGIKQ3BRNrGiFYiyvwXZ+7iHf9GbJdZu5svp1XXu6ModuVpM2PxY:lmGmRyW3AiHlsdA5sx1XXu6MvM2PG
- TLSH T1DBB733429308ED93F07E91308A876B91E6615E254912FFEE78C5F79B22F7D847B02781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.robtopx.geometryjump - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.robtopx.geometryjump - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.robtopx.geometryjump - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.robtopx.geometryjump - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.robtopx.geometryjump
Processes
-
com.robtopx.geometryjump1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4295
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.robtopx.geometryjump/cache/__chartboost/CBRequestManager/167724213750
- Size 330B
- SHA256 98783451598db7d7436ffc537bc3fd1ff5c410f8d8086efb76c81af755dba03a
- MD5 86d758b700c49d994d6288a2e9b61ffa
- SHA1 30100be15c2e804dce25073e6ed7652536219eb5
- SHA512 a269c199fd37e17c4b3e1a284129e8461e38ad27b46b8ec7ef710605c78db3020f7a51570fec3ce7f6ee924b9be97fe9f480e09b56dc2f88028eca23da447059
- TLSH T136E026A9EA9169B8D66F12D7D84FEF0452050E5719002A62FC85D15D808304C01365FF
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.robtopx.geometryjump/cache/__chartboost/CBSessionDirectory/cb_previous_session_info
- Size 189B
- SHA256 5547854ce740dfc351bee3719d374184113a4bb5e502896f75885447494952f1
- MD5 83440df99f11252fad72c3e7123c5d73
- SHA1 866400f282b22f964713de82f36e5b262ceb9a2e
- SHA512 69bdb26689b16ecdaa00a7c8903dfa134b90b36371736b945580a994b301feff9048a84add68be4ac73caf7a38d171e0abbcf961d047a2e6d330138cd70db4dd
- TLSH T1D4C012D15281D05066D231A89745244256163B8966AE4C4944BD7AC50699E81A65D117
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/.EveryplayCache/cache.json
- Size 55B
- SHA256 837ff259927717696611e903c2d44a2592cccdd1f5d6811a21f6ccd637b20ff8
- MD5 e352b536f26444f672725f9d13690c50
- SHA1 4de9665729fd515c4e418d150f3730cb7f68755c
- SHA512 cc4e6678e5527a1375267bd8e7275477f29ed4474e7a84e7b310d94a5e5519392fcfe4128c9d4e071795f3e5f44b340212f1d40fb1db4b2b9b781706b20454ad
- TLSH T1E09002A4D6558BB5184652444448608E45222490DF6F9D3E1DF905D91CE81F04558488
- MD5 SHA1 SHA512 TLSH