0.apks
- SHA256 153bdcb843f2fd914c1db82f7482e356b8eb54af4836a6f897a7836bf0bc129b
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
0.zip
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0.zip
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
0.zip
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
General
- Target 0.apks
- Size 145.2MB
- Sample260506-evy7cset9m
- SHA256 153bdcb843f2fd914c1db82f7482e356b8eb54af4836a6f897a7836bf0bc129b
- MD5 5b5a0983060a098e65f9a5c492655501
- SHA1 ee04a81f7976801c3d72818c0bdb3a1c2442deab
- SHA512 d8e8b67329a8b366cfff860741e576baec424c88efbf1e7b6f2260009434575be3d3a7b9a4921c83fd7baf02c139e06ebb93acee82871137908978d0f22c52ea
- SSDEEP 3145728:cIg6uHyt5Mm2CmLR5zxZxTnENr0hr9mfdyBF6OinxNdUeKjjPSsfs6eOq3:cIgDHyHyLR5x34NQhr9mfdy0nhXKvKsS
- TLSH T173783325D5ED1A27E96A38744C1BEB2CB1FE0053B73834678B6BB2E19BE97074C48315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 2 IoCs
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE - Insecure Codesign Algorithm 2 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/split_config.arm64_v8a.apk unpack001/split_config.xxhdpi.apk - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/split_config.arm64_v8a.apk unpack001/split_config.xxhdpi.apk
File Explorer
-
0.apks.zip 145.2MB
-
base.apk.apk 141.4MB
-
split_config.arm64_v8a.apk.jar 19.1MB
-
split_config.xxhdpi.apk.jar 28KB
base.apk
- SHA256 c1724e05735ad74e5d43ca984489452101ba4683856a741e9434e4499d3e219f
- MD5 fd1b29f9b85f5d93c0b3981dc438528c
- SHA1 bcf6eeb178453870220a51d91425bf94d98f7feb
- SHA512 5e7abfa0b201056bb31e12ae3bd9f3aa45a6f52063bcd8cb5333a4f0bf98ff5e02e0eb7f78806bb451acfbf4fbeb8c66c4e134e06fe1fca10ff6b0e76d359c49
- SSDEEP 3145728:UmS3jd1n0oS/1+g/8xIVfzu0nlI31h2KCxoLaT/+in2eFvIc5eufa:kjXnJU1a2dy0lKP2KCxo+dhkufa
- TLSH T13D683393E234887BF81D31B0052615A2D5661E309B51EFDF74AE736B2BBB6905F103E2
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
47fe268cca8724e9357e4fa5740ef76490f27b93b2b24780f87249b02bda97d0
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Subject
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Serial Number
50:6d:b4:22
Issuer
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Timespan
Oct 4, 2012 - Feb 20, 2040
com.robtopx.geometryjump
com.robtopx.geometryjump.GeometryJump
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.robtopx.geometryjump.GeometryJump
android.intent.action.MAIN
split_config.arm64_v8a.apk
- SHA256 ee28c06c539d77c9b7fa7c1f0c12e4c8f918079b1eee074424ba3eb69f7b042a
- MD5 9ff502c60abfd24b4607189851ddcb3e
- SHA1 8f64b93ff9a5ac6941aa11091a2d6e620fbe163d
- SHA512 14c654da55764e7f13a11cd1dd7d23f6497a75baea2a494c33528a7b88930b4588b37c43e4539d731838c6ca6fc7e3d97a4f658e07a5062cd317ab693f48af1d
- SSDEEP 393216:1v3uHpECPsELSpoZeBytBBFJhenzA9WD0:/fpolF7eaW0
- TLSH T182176B4CE58DEC05FE8EE13CADCA575773636D5A8269D3566C620248BED32F8C3B6084
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
c6c2e12a7ad565be518940246ce0c9847a36465e
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Chains
Jan 1, 0001
Subject
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Serial Number
50:6d:b4:22
Issuer
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Timespan
Oct 4, 2012 - Feb 20, 2040
split_config.xxhdpi.apk
- SHA256 73e2f25f0ef7b4f8376971e74e61038f3c4df6037f84d296a9a71524b5bb9a75
- MD5 ef8e2712894d17411e25d0bf14a62756
- SHA1 1eaa6d86cffb5841b1a99364af3f93ed6652dc92
- SHA512 8f4309699b747f033a54a0a78a495d8da73d203fbb50b8a04313373d47d1f4ed00130b9607fd7b473c4d11780a38883a597a652ff40729775aad7a676852eded
- SSDEEP 384:4ykw7A1AphfZlMCXHTe78/GXlb+nsSvwTpYVrJFDUtaCwAYouWkvsgqhtu5VvIRS:zP51lMCXzeweEh4Tcrsn1YoufyM
- TLSH T115D2C026CF9C6C52F67787B486E5E46FDD7900640D2137B6B108FCA1BA94BA00A723DD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
cc540ccd756c57947fe5efd9af62dfc064f54747
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Chains
Jan 1, 0001
Subject
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Serial Number
50:6d:b4:22
Issuer
CN=Robert Topala,OU=RobTop Games,O=RobTop Games,L=Stockholm,ST=Upplands Vasby,C=SE
Timespan
Oct 4, 2012 - Feb 20, 2040