36200ef02b917293c34f0b7308d7878a054ee3c1a12945af69ce28da07f2599c

Analysis

max time kernel
13s
max time network
163s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
29/05/2026, 02:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
toca-life-world-1.132-mod-t-5play.apk
Size 860.6MB
Sample260529-c2zelabt7y
SHA256 36200ef02b917293c34f0b7308d7878a054ee3c1a12945af69ce28da07f2599c
MD5 566fadeb570ae57c491b9ca6715480d0
SHA1 6bd8b3cacaae7dd0bcc9a631d01d3723c08e08de
SHA512 38bf303a637d3a452d8fe4afff85947498e536ade05bdb69398597284a333e43b90a3a9f5cd34bc84f3f8783fbda90635adb1cd50c9dd9b068606feb0fdd1db3
SSDEEP 25165824:eUknLTjAh+if3VI4DCvq4dujnXsqDLNMVcAt3SSvltLHO7Irt:yLTjAhDj54YAqDLSVckOUrt
TLSH
T1F19933D75A425B80CB6D1CB5C7CBCB518A522C80530A02EF1F31F155F8BFEA8A69E617
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.tocaboca.tocalifeworld/files/c139c64/c139c64	4555	com.tocaboca.tocalifeworld
/data/data/com.tocaboca.tocalifeworld/files/c139c64/c139c64	4555	com.tocaboca.tocalifeworld

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tocaboca.tocalifeworld

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tocaboca.tocalifeworld

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.tocaboca.tocalifeworld

com.tocaboca.tocalifeworld
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4555

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

base.4555.tmp

Path /data/data/com.tocaboca.tocalifeworld/cache/oat_primary/x86_64/base.4555.tmp
Size 252KB
SHA256 085f51872e562cfd96a0b36dc0869619090b8500beafc6583114650ffd361ddc
MD5 30b13dc8be57ccd37eccfd8bb564f076
SHA1 888e5d1825508bcacf97a2a70682c23572244901
SHA512 92b97e08c03e3bd1b5c3d108e6557bc8ac077be9499f7b990d264251f597072b1f3b58e44e488f134a7110ac7c91a73115a408309d042ba6359e3696a3f37248
SSDEEP 6144:XyIoAHuUoSOVLnCHrgMBuHZlGjQ/Ax7JY4Qg1v:wAHlFkCHUhbqQ/A4
TLSH
T1D6445CAFBE628021C1EEBFF79F4745E8A92AC0116257290450A167BEE437F14E774F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.tocaboca.tocalifeworld/databases/com.google.android.datatransport.events
Size 56KB
SHA256 f8affce186da9cf47d1053684ba0fea78fc99b61282c518089dd25a7eba9086f
MD5 9d06d97338e492a489d7651726e98377
SHA1 ed638ed902a53f06f1efe6f2b4ae011086b4fb5f
SHA512 9c6d694648b667be79611519da80c18b11c06befcbb333f86aa0df8740b00dfefc0e675b7efb0c665f1c16c54167e48f78adf94e4f5245491eaffe26d68184ff
SSDEEP 48:T0g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSY:FMEX0wIyNjaY
TLSH
T16F43639D5E2C2221C57E283ED7E243635B7C93DF5723927239908DF98DC206A74358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.tocaboca.tocalifeworld/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 da94041340a2c4e4c1b82ae7b59fd831eaebb352821416c1324f560a7ef33a81
MD5 67ac28b50e5e60954babe15bb68abf60
SHA1 c72ca1bd0b78451043e324aec23950b1604a16b6
SHA512 055b7fd45dd3884a5b29627131de4ff38da22376d1c5a0ebd66f74b02699ef852c5f90169e0247d6188c964d7269caabe12f3de3f8b1451a8fb14f962e1548e9
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.tocaboca.tocalifeworld/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 f0ba8df85bf85ebcab4a7fb2b450d5e8d1fdbd9ece87f17194f2c549ae8f1fc3
MD5 412f5d3cd8c8d3946c5c214178288bee
SHA1 9b55f5b82630ff6cd7658de156e767cff93a1aa0
SHA512 09600219360d7889e69ea19f379df11b6b1a19f07bad12bb4e68fc45fd9c6d6ef0b07ff9a1af6f77c5e413c6a4350120ce464e9c286cb68aa5eb16257caa092d
SSDEEP 6:7+/l9RicOn18sg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKen:7+t/sqLiuWdxBRmBEyPbl
TLSH
T1D702C0DCB3800813C8ED56F7A0D8C3440E04EB188171CF0B1E5108D43C074EEE4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.tocaboca.tocalifeworld/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 0db23ee9fc8359cc4054a9437b2b55b573f384cd300e5e75b2f236d06416fdbb
MD5 bbe5032a50a5961dcea7d901eec9b64b
SHA1 18320d53450505e4fd114537e31579c8f00445fa
SHA512 3b4f04ffbc1204a63b263b54f8141d3e01b05650579fef75aa1da6ff1d3067e3a9b976cdccd7291320e5b1ab0ef857550a00ea2f436165ba8218ae46dc893cbc
SSDEEP 6:7+/l93lFPg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKct/M:7+tBvqLJdIRmBEyPbp1M
TLSH
T11802C0CCA3420803C81D1777A0CA83901FA0A7158373CF0715500A547C437CCE8D0D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tocaboca.tocalifeworld/databases/google_app_measurement_local.db
Size 16KB
SHA256 59118f98382dc1f47d88c0d88cbc196ad8db63d0a63cbbc034b8496431b407b2
MD5 232f25b4386d00e63aa49e569ed28a0e
SHA1 cd88cd3eefaebb6ed6e71fd0540808f403f41cf7
SHA512 5549b141a54e02d411683f81ba2a76c25c852515cfe25b519acda0f7545cf548298692b9653d5fe213b5e1c6939275390ea62b76c03a19f6b65541d584e8beed
SSDEEP 6:l9bNFl4/Sls1WlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEW9zmzrfRmBEyPbBvOwk3
TLSH
T1DF72CDCDDF102606C5760737F4C9D3905D64921D4336DA4767950460AD425496451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tocaboca.tocalifeworld/databases/google_app_measurement_local.db
Size 16KB
SHA256 8fdc3bbb281ee51633c056b4c7a1905dcd964dc5dfec8ede809a8b95d22605bb
MD5 9190c999fb7de63ec1d346137d62b4d1
SHA1 3553e958f1312c4b1c0d8a46daf47bf556928968
SHA512 ff22cc9741f2e3ee84918a6dae2ed9be1aee1362d42d351f6d6455dc1757304bccebbc4a2a79fb108eaa011a3084c4090c3219c83626733334abb1f7c98f0f05
SSDEEP 6:l9bNFlsls19lO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl69dh:TLiE99zmzrfRmBEyPbP/P+/0Fl6Lh7
TLSH
T130726FCCBA20A703D2B34776B0CF93E21C30A2188337DA0B3B450528AC4228AA1A2F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tocaboca.tocalifeworld/databases/google_app_measurement_local.db
Size 16KB
SHA256 666dfcd04bd7580f95c3775a38ff596ba296661ec52b06be3f6d47493c73533e
MD5 2035413f40539fa482364bf0abadcfee
SHA1 f96f2b69f4b391544bf38fda5de6f39060289050
SHA512 58bb8c9e0186fb42809eaf20342b62652d18af3b52c9021f5444c5e88c1171687a98b821aed75a12992e2f9a9656d401763eab12e4ac68c99616fa3b5be9147b
SSDEEP 12:TL1EjE9zmzrfRmBEyPbP/hr/gW49blqYFl38W+/0Fl6Lh7:TLbpmzr0GSP/h1499F5lFc
TLSH
T1F572598DBA20D703E6730B3570CFD3D12C3472198733D50739021A2C5D423CA8162F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tocaboca.tocalifeworld/databases/google_app_measurement_local.db
Size 16KB
SHA256 00f297e6ae6371ac222ffd60ddb8347bbab24339d12c8b72ce08dbd4b7973f52
MD5 8e22af4b3465b32ad9f107a7fe888917
SHA1 605785d982e5b17c23d134504f4231dbbc8668ea
SHA512 6c6f98105e1f4f22fb24c4a09b47c3464ea42026b2b348a2eef8da09a92e8485724bd12281ef58a884e20d99befe653a356fe47829c6e24a50dc3db2df327dee
SSDEEP 12:TLIE1h9zmzrfRmBEyPbP/qFiOLaOS/yAU3KJUyWlfT49blqYFl38W+/0Fl6Lh7:TLrpmzr0GSP/qsKaT6xpN499F5lFc
TLSH
T1D772F2C9B5A4DA03F6B34B3961CFE3D12D38726A8727E61339062B1C2D4239A8171F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tocaboca.tocalifeworld/databases/google_app_measurement_local.db
Size 16KB
SHA256 e5dcd61b493ebe7a958e994fb263307006362309ab0976ede1af016adcbb6733
MD5 bc28139f3ae08818ce251dd0df0add1f
SHA1 b02ae839143004bec3529d23212bf6f4e4627999
SHA512 f5f726a38999c6a94f94a82d54720af894fa6031d52558b61ae875b62eafddf729aba7bd2eaa7d4636f3f21a453a005b84ad94ee3b050548c5d224ded56f5ef8
SSDEEP 12:TL6uEa9zmzrfRmBEyPbP/RFiOLaOS/yAU3KJUyWlfT49blqYFl38W+/0Fl6Lhv:TL6Apmzr0GSP/RsKaT6xpN499F5lFE
TLSH
T1B272F2C9B6B4DA12F6B34B3961CBE2D12D39326A8727D61239062B1C2D4239A8171F02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.tocaboca.tocalifeworld/databases/google_app_measurement_local.db
Size 16KB
SHA256 6a83c374e78e89f6d3341191cc5d7c3da85b328d250411ffaaadd4add4136ff1
MD5 565f2d7b063a21f0b6fc6acbd198d3b6
SHA1 a107f58a73dc5b386197449c6cf4b996141cd722
SHA512 25465883ac6922f42eac587bd1de1c68f356b9ade414d490f72ef5e9cbc0fe6269c87537956d0802040fdbed520174afac34d817cf07bd8a300770b9f82487ac
SSDEEP 6:l9bNFlgls18/ElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuE8/E9zmzrfRmBEyPbP/Wy
TLSH
T133722BCDDF102603C5F34F77B4CD93555F14622D83379E472B990878AD8358A9092F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download