4ff4fab93e18fafb0d7742bb9c0f5ee299477f7f49e7b24929f63b969fbfc43f

Analysis

max time kernel
17s
max time network
34s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
01/06/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Offroad Legends_com.dogbytegames.offroadlegends_sahara(1).apk
Size 41.4MB
Sample260601-sdnwysgv8x
SHA256 4ff4fab93e18fafb0d7742bb9c0f5ee299477f7f49e7b24929f63b969fbfc43f
MD5 4e0706f710ab652dc40c4ef4eb623720
SHA1 3edccdb490009e874f1c4a7b3f74e392c66ae229
SHA512 8f3064d375fadadec4fcb16b60abb559a95d40246684db75d63a39acbb33af0765877ca77e9cb8bfffd48a7f79640147f8629d28e10950a9345d8dd4a5bc0c07
SSDEEP 786432:ZYLBmk+gNKslhNRuASd99l5gR3vxKlS+E6XLeJOLsr9ym66ZaegLsBc4xJYQ6YPI:AmkXNKshSCySl6X4Sm6sqwY3YPyJ
TLSH
T103973341F5D85D6BDC37E0321B564321519AAE19C392D38FA888376D2EBFBD08E446CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dogbytegames.offroadlegends_sahara

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.dogbytegames.offroadlegends_sahara

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.dogbytegames.offroadlegends_sahara

com.dogbytegames.offroadlegends_sahara
1⤵
- Queries information about active data network
- Listens for changes in the sensor environment (might be used to detect emulation)
- Checks memory information
PID:4691

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

config.datB

Path /data/data/com.dogbytegames.offroadlegends_sahara/files/config.datB
Size 140B
SHA256 3745832061d835503b4d60ea664fd19d92118e9517bec29783a0e5c40bb05ee6
MD5 4afbf6bd9ebbcedf1506a148384048c9
SHA1 cc687fb111ea234c1c39255c3215c48fc5562848
SHA512 9cff1dc8821967c8c61f3a0b4297fc38b49849e359ca12a2a75f61fda785397578ba98fbed6515664898e1dec8b0be522b9e8ce6a04261dab8cb96aef7207d86
TLSH
T1E0C09B35C42016E3F20BC2F6D8951D41304E751E456355345CFD58F05591937B91B517
MD5 SHA1 SHA512 TLSH

Submit Download

safemode

Path /data/data/com.dogbytegames.offroadlegends_sahara/files/safemode
Size 4B
SHA256 67abdd721024f0ff4e0b3f4c2fc13bc5bad42d0b7851d456d88d203d15aaa450
MD5 4352d88a78aa39750bf70cd6f27bcaa5
SHA1 3c585604e87f855973731fea83e21fab9392d2fc
SHA512 edf92e3d4f80fc47d948ea2f17b9bfc742d34e2e785a7a4927f3e261e8bd9d400b648bff2123b8396d24fb28f5869979e08d58b4b5d156e640344a2c0a54675d
MD5 SHA1 SHA512