Overview

overview

8

Static

static

6

minecraft_...om.apk

android-13-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    178s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
  • submitted
    23/05/2026, 04:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    minecraft_mod-menu-1.26.20.4-apkgw-com.apk
  • Size 887.4MB
  • Sample260523-flea9sc19j
  • SHA256 8e8286e2b58a8b24e89a4d3c0401d658664edda305b92ee389274f6b03c086f1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.mojang.minecraftpe
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4574

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 5b605206904c306617eb21267259b491d53aaf6d7b7b4de0f44cb2544cb59260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 4c5e1a9c36b5b261afef3f1d02a35e7a2b10e267638fd7e949be4fff5812f879
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 fd5546b4ab8ac21221923fd84b68f2f3570181e0d49b3cce8e0a14d54ffe94fe
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 cc3a51534ba1b6c75775f18668e7b99c688b7f263f9f51dcf314bc5438dc16cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 e6723877b3ba3e6c0bcbb7a8e0c478f59204d8db983902dfa3d6f464c5e052b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 052f84808687039587b8bce242226916d0170546449228ce4ad069457d30100d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 f23b46bc20a13ceab61499172b251607ac70a65b4a4ea661ce1ad2c3bd4a1733
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1026797255325813800tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation1026797255325813800tmp
        • Size 90B
        • SHA256 7d52808a0332297564242e567a0203489b11f911c81d9d053cbf4e81f46bb6a8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6008922526860579296tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation6008922526860579296tmp
        • Size 570B
        • SHA256 965b9f955c8c72e9253221ac641974df53b1d4c07590edd75021f580ed9b74c0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.mojang.minecraftpe/files/profileInstalled
        • Size 24B
        • SHA256 77df3bd6fb708fceffa700f82de2b65e5487e7dde9a995c2c6fbaae7af48b9e9
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.mojang.minecraftpe/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 de9fea820d06b2997577452f323835190de2a8ea45bb458282457a007abc9ac6
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.mojang.minecraftpe/oat/x86_64/[email protected]
        • Size 404B
        • SHA256 1f0417c68fcab1d670f6c3de6215496636d0a9549e4478c29224301b6edbdc59
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.microsoft.xal.crypto.xml
        • Path /data/data/com.mojang.minecraftpe/shared_prefs/com.microsoft.xal.crypto.xml
        • Size 519B
        • SHA256 996c91f45394e43baabc4acb16d4c6656b663c83387d9fd5677ae2c5759dab04
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.mojang.minecraftpe_preferences.xml
        • Path /data/data/com.mojang.minecraftpe/shared_prefs/com.mojang.minecraftpe_preferences.xml
        • Size 140B
        • SHA256 e11d679a944797a2c1d9e8c121e17ead437e39e3891b2ca2fc32c90cfe4f8998
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 2KB
        • SHA256 319cdfec3ee2bf9c02d18ffd87ece3a5afdd5e9fb73c16e0883ad753e6591369
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 9KB
        • SHA256 cfaaf9527a8bf127fa2c1c94a18eed8c8624b656e678a1715f4c3d11e2fe82cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 9KB
        • SHA256 84edb38657ab74c5df70f0688bdb297570c9d54944a7f93f0cae26a317224700
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.mojang.minecraftpe/[email protected]
        • Size 8KB
        • SHA256 460af80321f8410e688a8a3975b94c629e78b50f7d170894e41e3005b6b296af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download

        socket:[62553]
        • Path socket:[62553]
        • Size 34B
        • SHA256 62997d84140b4eabe3031980ea1b3bc74b7c387520ee5f87b2db0797ccfa0346
        • MD5 SHA1 SHA512
        Submit Download

        socket:[63083]
        • Path socket:[63083]
        • Size 48B
        • SHA256 4023e17fdcec5658306e289bd07988de7dfb0b94c0d9dcce98ea1280706d1671
        • MD5 SHA1 SHA512
        Submit Download

        socket:[63203]
        • Path socket:[63203]
        • Size 69B
        • SHA256 2f80e2a8b50c441ceb2b16316f9c5553c14bc80cabbcc39ef6fd63c447569f5d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        socket:[63207]
        • Path socket:[63207]
        • Size 56B
        • SHA256 f6cb9d0704a7b99dddcb01be13573257ad06195cb8a64153668f7b5eca6ea499
        • MD5 SHA1 SHA512 TLSH
        Submit Download