Analysis
- max time kernel
149s - max time network
160s - platform
android-13_x64 - resource
android-33-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system - submitted
28/05/2026, 10:42
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
miga-world-1.98-mod-t-5play.apk
Resource
android-33-x64-arm64-20260325-en
6 signatures
150 seconds
General
- Target miga-world-1.98-mod-t-5play.apk
- Size 592.9MB
- Sample260528-mrr8msc18n
- SHA256 631c314b355e8fd86fe763d7633cc58a85493d15a07d0f0ec6e431a5c6a48088
- MD5 42704fc7c24e39c02656904224cfaceb
- SHA1 34321e85211bef2baa4c5008b7bc00ae30a9e105
- SHA512 8c865efaf253f9b67485a6d206ccae80b49b2dda29db6b792197fe266e8dbd4ca65d2ec70b742c079fa347a44077bfae41d93da44dfb9fa083b9536af2bd4f8d
- SSDEEP 12582912:V/Q1gvkByAy/WQ3aehj48poELL6bNWqOl4T8x5AFySNVoJsrPh97:dQ12Kmj48phPZCs5NwrPh97
- TLSH T198593315B9A8894DC53A60B0A072C0CA2524161FC105D15FB9FC34A97FDEFDB17A2EBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.miga.world/files/5dd9224c/5dd9224c 4266 com.miga.world /apex/com.android.art/javalib/core-oj.jar 4266 com.miga.world - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.miga.world - Reads information about phone network operator. 1 TTPs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.miga.world - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.miga.world - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.miga.world
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /apex/com.android.art/javalib/core-oj.jar
- Size 5.0MB
- SHA256 d9d541d074d858571d60e2964fd39fb74130217fa7c92d74ed1695b0962837cf
- MD5 f1a98ecb23b9134c358015fcab1f0215
- SHA1 e71c1849677f17d5aa83a20853f3483136d449e4
- SHA512 8e2a6dd96a89d2195ac770320933a1938977dd55ac98bc822bf33646fec208a2354f1e2dee14463eb776da13b737517affe9bc336093fec1fa9bbc6c7b67f1d2
- SSDEEP 98304:Qql+aJkseykHZ+zblfzkriydf5MZnkkrGdOTPUfrLqwQftuBC1u2ewMBGiQxPesC:Q4+aJkseykHZ+zblfzkriydf5MZnkkru
- TLSH T160369D02FA724A33D06D833B85F36B557331F669F7838B5F00159574AE432E26EA72A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/app_crashrecord/1004
- Size 222B
- SHA256 db8de54c621fd28ea06e4186538545f59d7303d1852290ee6121f0fa280eccd2
- MD5 26bcde4daaf6802a1e89f383fa3e039c
- SHA1 76fef25f91eed94fecf127603146a82626310913
- SHA512 ece2ff067ef49a47aa99a3425970ee2a6e9a7407a671e12af8f3331ee0bae4ecc494b8ee7166228925b005e0cd03cc487a41fc6adc62d4732f238ae79c17a9bb
- TLSH T18FD0A715F261142C8BA4556C91036F4E152069F101E9CD55DBC5512280051925E7B8ED
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.miga.world/app_crashrecord/1004
- Size 58B
- SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
- MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
- SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
- SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
- TLSH T109A00475D5417C71D351113C5415440C50505570C107D57CD7415470310D0D0477FD7C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.miga.world/databases/bugly_db_
- Size 52KB
- SHA256 7964c2e870a8ab8b16f68f6a163ef5dd20cc12c6396bb53e238466975b9f9b09
- MD5 a941b6b649813d4121193625b78bd374
- SHA1 2eca59a2260824519ee7ec4ad33b43b6381f2e88
- SHA512 9e4bcf8144dfd63fa0131582d3527ef94e2b4935084f51e45ff7bdfc0b637027df71db22ed70740971ba5c7257994fa34b12331bca1c18b38ead3a022dfd9bbf
- SSDEEP 24:TLKXQ3Bq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGSch2BQeeoJXKCeQQQQ:TJ85WuAriStwwuMN5meposSlPXK
- TLSH T1FE33FFC33F151224C1E441368C909AA14774EE8EA9D5FDCF68F2202D5EA2D40A6B6CAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/bugly_db_-journal
- Size 512B
- SHA256 4cc9f29687ae6152f9576614dcd983296f8ce5e93a6f25673b02654f16c62443
- MD5 4111112dab04dd8fa904daebf3accee6
- SHA1 13d18584e7ec9e54240176005bc964879c6cba38
- SHA512 8a7fe922a34811802ee97044f39bbcbe0e119923e610ae61930bedd0356532bac9f07254ee132c5d905652b895a02bff15dc8ac20a1dac6dfdd8190b063219ad
- MD5 SHA1 SHA512
- Path /data/data/com.miga.world/databases/bugly_db_-journal
- Size 8KB
- SHA256 9cb97003c39d91e516ab072c893a4cea088538459e62bb3d159654f017b47652
- MD5 94890b1edf75831a2504495564734eb1
- SHA1 24e0a5c7c3768ff49693af74015b9af47406ab10
- SHA512 e81c734109a0e47f272e690b2125b814c665c83d59b456cc245f97823b6bb8b72a601e676c4c1b8414dc159e98d1a516f06259e3953a8c5eaf969e810db14485
- SSDEEP 6:7+/l9wn1fg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKib:7+twqLiuWd7RmBEyPbTb
- TLSH T1470222A863800A22C81B9A7790E583600E05A7298AB2CBC725A00C983C474CEE4A0D68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/bugly_db_-journal
- Size 8KB
- SHA256 7fa07077636704805c0ec6027f6dc7501210aa7bf1f4351f53f4c40ac0e04eac
- MD5 fc43d225f1620672cf989ff8bc30639c
- SHA1 e1cbf2943641f9285275f963a40492c4db5316da
- SHA512 39dccc8ca30a0bb024484a4109c532111060ce780822c1f667bd40e39ac33dac30b9e3a00b51a3e1625abce3917cc0c20cd766b334a5a6c19ea11504e2082bb1
- SSDEEP 6:7+/l9/OPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKKK//Xn:7+tpiqLJdKBRmBEyPbhKXXn
- TLSH T1B102228CAB400C03C0195F7790D983411E10AB288363CB2705600C9A2C067CCA890E00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/bugly_db_-journal
- Size 8KB
- SHA256 3ddcef0b5d008a4b050e357dd4970b473fdb133138bc6f7c2f378d218907f803
- MD5 ab6413f8993ed3cb7a702818ae4d7239
- SHA1 75348ae8d3a82ecbb0faa988a50b4a122812bffc
- SHA512 958adc2193e4fbad4db7de6d20011f1711d31116033af91c9145d8293efb8c934e88feb4899c76baba0319950d03b8f3f7bfb6088865a836002d2866e5ae8a3c
- SSDEEP 24:7+tbqLLQKBq5JQfs6y2nriS3dVi6fXX+McEnKwm/mpLwBpGS+:7MbqZ85WuAriStwwuMN5meposS+
- TLSH T1810299C37E151514C1E5417B988188A14A78D74AA5D6FCCEADB2043D9F86D40A2B6CEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 3814f883de28b16ec240481a50b4746dc6ff2e4a164971e9a8164bb6bc7e8896
- MD5 0b3d8e10b8a0f2a98d1037ae57d35052
- SHA1 77bc3464ce5d61b18802a4af9976b29060538284
- SHA512 8d621dafbc680f0f6da62fd2584bb276522af901f3017fc1780d05ca39e6cab45e756c6370fafaa14ec622e482ca963f1f330ecee4526ace24f75361801bdb75
- SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSyFv4Fb:RMEX0wIyNjah
- TLSH T11543409D1B3C2310C56D283FD3E243A31A7C93DF5726936239A48CF98DC20697925959
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 018ea72bf1c6ae579d8868aa266adc4085db5e0d34b30d6e1e96151e36777499
- MD5 5f442f933880c3bcc17ccd82d6513934
- SHA1 10be6ad36e69abe5c415790f5f35c9e67c48e726
- SHA512 c973f1a9d6d17f3587f8b3c617ddc2be7837841eaf862f111fde183ebd94db9f2c9cbb003b30b612b84dfa10bcc08c74f5f67fabbfd704a959da1537b1c4ba9f
- MD5 SHA1 SHA512
- Path /data/data/com.miga.world/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 ec9e63e6954ffd8aaa3ac5b32ff91d6d7d16f4dd51a1dc8373d47052bbfa7a8b
- MD5 eb6530d0f4cf6f2adf1513eb307c42fa
- SHA1 73d7ec425151638355d3579338e9d95e0560a275
- SHA512 39ff722bcbcd1a2f9934e94dbbf839fbbe502010600eff1df80ed7d9c0231b22a734158d09b6a0a39aea1f7ee8ff900993af89bf332906e060ad13d5fd8f4668
- SSDEEP 6:7+/l9Ze8Fn1Sfg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKH:7+tS8ufqLiuWd7RmBEyPbs
- TLSH T12F02129A67811913CD1D56F794E983940D14A7198662CF5B5D9018947C479CCA4E0F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 5221e2bf9a774eb69040fa64ad8bf18f78dc23d91487c84cac75594816e817f6
- MD5 58c226fffc9a53210ce28306f184e589
- SHA1 e4260d916fac63e19a668ec91728fe71643ee48d
- SHA512 d7e0ac22f6ddb0b2cc1fdae4899c7cc1fa7eedc46f69e037988dafc81187432ba96ef79dea6adb982f8a5c95011b1f6f340ef5365b428af67ac03a49dbcd8ebd
- SSDEEP 6:7+/l9KOPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKna/y:7+tIiqLJdKBRmBEyPbwqy
- TLSH T1EE0222CC63480813C229577790D8934C1E10A7168323CF07955008543E02ACCB890D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/com.google.android.datatransport.events-journal
- Size 24KB
- SHA256 d9b1f86d9389c885ef21cb6a37103cb89b35db9bd5ea487b08aff41739be2265
- MD5 f24dc4ac59e6dafb4ed8f1ae10ef016f
- SHA1 f1892977aaf15a801f5d31253418962c24ab2353
- SHA512 f8c654e5c887e4f82c8d1604ea9b8535c51d43b200c14d5072fbf8aba762cdcc124eafa00b91757272b1e6258450c59ca54c71754af227540162d4797ad67037
- SSDEEP 48:7MiVSWqIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSL:7nVSW8MEX0wIyNjaL
- TLSH T1C5B2419D193C2221C5BE2C3ED7E10253693C63DF5723D5703AA48DF9CDC246AB0A94A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/com.google.android.datatransport.events-journal
- Size 16KB
- SHA256 3114209ff43e8c98ed43a4d0e167f92285781da3ea84c175f3b9b1a76a7220d3
- MD5 712a089ca53fc0f451dbad4dd6279885
- SHA1 134ea4687c29aba6307659bff0633e4c4cad0ad6
- SHA512 be034b5619c9092d57fc4d458833189c48e45107e9ae9e29cbf25bc73385c33f444d6460b1d5c5bea120fe71f63ef1d1596d023d0cc4b3df2bac5109b12b7386
- SSDEEP 48:7Mb89EYpZdw6zNhSWB8qYg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSW:7ZOYdrDv+MMEX0wIyNjaW
- TLSH T12F72A45DAD3C2211C57E683FE7D10253093C53DF5B23A0703AD88DE98DC2469B0354AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/databases/com.google.android.datatransport.events-journal
- Size 20KB
- SHA256 afa74a76f7e851a3d3f06766fe34a7c43d3c170d9f1ff8a369c3e6f5e5480f9f
- MD5 e24ad4c243f90403d4cdc22a064218c7
- SHA1 78c649a8e2c6249ff02434ac11b4cd8402de4ead
- SHA512 4c2d6942efe3b409dbdac1fbf0c698857647463386e66998acc91d0852bd7dfdb0ce680451fc4bbd68e4fe4d5d25bbbdb70d463b853718b4817630f84b24844a
- SSDEEP 48:7M4LxFRq4g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSCVFqs/g59MENZBdUdnd/:7DBsMEX0wIyNjaycMEX0wIyNja1
- TLSH T13392619D1A3C2211C6BE283ED3E243A35A3C53DF572391703EA48CFECDC246AB0255A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.miga.world/files/5dd9224c/5dd9224c
- Size 245KB
- SHA256 74c56d2aec2ead1eb9f6945b898d5c37367386833f16698091db976c50318074
- MD5 90c0a728ee3a02ff3953f11f06c1b19a
- SHA1 413777b0ecf8f329e1d7602b4c92c7faf4329aea
- SHA512 89c2b305df767c63dd94394b8999ab3662cfef2bb71b5d80ace46521ce7dfa73cf74c183c948557b4cce89c51e50113f6ebc38dbb30e77a1121664174e2025e5
- SSDEEP 6144:8B2iVHPQa1+UWLd9Kmy4Wro1iDaPbke5ZlkYSQBJb0de4A9p:8MiVHIa1+pLnKmP9iaPbke5ZlXJodexT
- TLSH T182344B56FD90AE59DC78863A08F367062331F8796647CB472285DA7ABE532C61FC32C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/Android/obb/com.miga.world/main.192.com.miga.world.obb (deleted)
- Size 3.1MB
- SHA256 683ae3fbc30a7348046b9cbc73502e2f5db8031e83142e5c2f1ac67a8bf3ddb1
- MD5 0ee0c4275c3833bc3d3b9e597219afb9
- SHA1 fdf4a329aefe4381d2ed6753e58e90c66477e8de
- SHA512 ca8a13804387b9e03175033e3d1d78d38ef71b6a82ba81a029e107bfa435b978306af0720890cb2ee9f222a1fb859d4598e4f7e1df8262375f7e7ae3203885a5
- SSDEEP 49152:nGHY9IXrJptuVS8IsoyhLz1uFZcokodpr0IYUOpNLwklRqxjwLMu/QtdqACpiu:GqI7rt8rIsBP1uF2oPRt3wLMu/3
- TLSH T188E51B12B174B60AD936B0E094F0F1652511E62BD40581ACF2EC741DAF8EBC953FDABE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path anon_inode:[eventfd]
- Size 8B
- SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
- MD5 33cdeccccebe80329f1fdbee7f5874cb
- SHA1 3da89ee273be13437e7ecf760f3fbd4dc0e8d1fe
- SHA512 991294f43425a5b80f8a5907ca7cdbb611401282585a58bb415077005428e3b4c0f661fc07ba5c45f627bd8bdcb172389ce2fda461c029b837abc70f0abbea20
- MD5 SHA1 SHA512