4d02bef2a363b48d33744c748588a2f8e1d5fcf96b4bd8ea6973a8c9ec84a148

Analysis

max time kernel
149s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
14/07/2026, 15:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
angry-birds-seasons-6-6-2.apk
Size 99.9MB
Sample260714-s6b3vsfy4m
SHA256 4d02bef2a363b48d33744c748588a2f8e1d5fcf96b4bd8ea6973a8c9ec84a148
MD5 751a1943d56277d836d0cf37ea4c039d
SHA1 48c2cd151dc8ba5520f8e792972dd02c635c12e8
SHA512 ff67d95114c33d0be7a1f1803c3be8746a117d1602c5ca4ea150d37bffbd73ca4d1f15c58ecc472084877c5acdc6441fcfbb9a31cbd51c276a67d1594259448d
SSDEEP 1572864:N5CVR7l+wYlXYM5ZlNXg6OvvLWVHpjhdaexsYbZ8Nrup/lwQMd+FRZpx/q:NgL7l+JXY4NXaSVBTaUl8NyplE6Zps
TLSH
T1603833C5E870A4C2FC3730B7712A07D136B53F885651E7DABBD47168687BED026A062E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.rovio.angrybirdsseasons

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.rovio.angrybirdsseasons

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rovio.angrybirdsseasons

com.rovio.angrybirdsseasons
1⤵
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4736

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.YFlurrySenderIndex.info.AnalyticsData_TCBDHSAEESVU1Z5TI3QT_234

Path /data/user/0/com.rovio.angrybirdsseasons/files/.YFlurrySenderIndex.info.AnalyticsData_TCBDHSAEESVU1Z5TI3QT_234
Size 88B
SHA256 20d4cdc1a7145f2153a7821c9603baed37738fc5b3e457976564028563ed1cb6
MD5 a0987ca9394bb2eba60d9b770f4e7135
SHA1 06daf337b1b62a8b36dce6f64f88507b3b507312
SHA512 24633ce9e12dbf1dc7d4a2300a4704aa81581d8191a7207ac96ab8ef3d90118e5f82ea009031b19bb8ae90f6bfeb6adc982d6191a0cfce4177c4c769a4212c85
TLSH
T135B01280514B5209D46760310008481286A952078C5087D5555131532461E4001C0619
MD5 SHA1 SHA512 TLSH

Submit Download

.YFlurrySenderIndex.info.AnalyticsMain

Path /data/user/0/com.rovio.angrybirdsseasons/files/.YFlurrySenderIndex.info.AnalyticsMain
Size 72B
SHA256 7a1c34718afad653f1206ccf83cb368c65ab301ac760cee740c414091d1cea74
MD5 250289b410e05f3197f95983cdfed2a1
SHA1 885d31e4a43f7d118915374c79e6bc86ece790ea
SHA512 65837bb24a910767177e8ef92779dc19869862d61d6f66ca76279d75df07c616aeb1044f7fe4960973734985be5f2866cfc58a0d6de011196a7f4c04391e9f60
TLSH
T1A3A0021D57E151EAC09220F552A93875412CE49A0588882D64266A547F81C1BA96C155
MD5 SHA1 SHA512 TLSH

Submit Download

.yflurrydatasenderblock.649d4852-26a7-4eb6-8b15-5799d1622398

Path /data/user/0/com.rovio.angrybirdsseasons/files/.yflurrydatasenderblock.649d4852-26a7-4eb6-8b15-5799d1622398
Size 307B
SHA256 59120831225d2e34a504fb0de76c4373d9bd357000aff528e2fe46f8f5f9cf95
MD5 6012e613aba3f306c5ddddffd546f9d0
SHA1 9c4a40c92b7c6ba1819bb8e49036cd9f523a0b81
SHA512 4729734355aae8fecec0b0cd4697f3eb959ea38668a0f85eee271268534826bcc965983f17151ff4d3b1c936a0edd19325aa674437f63c8a0fe691d0b2d34c88
TLSH
T17BE0E70AB5CC399FD711CD319512F0405CB5F374B547179B4C21D05521055B039E467B
MD5 SHA1 SHA512 TLSH

Submit Download

bi_data.lua.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/bi_data.lua.tmp
Size 144B
SHA256 798c83b4337a6626da29fd291c2910eca907ca8794a445ae1cfc937ed3cf4430
MD5 d359312d95a37e68d9e32c71fc5f3aa1
SHA1 8027d8382d5f223b387c5ed5b2a1a1171789f368
SHA512 f57671cae0967ac64d36c4565a22d2ffed3d1bd535c427f782e9a8ef86f3143b95063c7ff21b4b5a2128c49c9c10582435598b73ac1c223b4f3b96e8d44d8bca
TLSH
T1EDC02B2856830E9CD1E1F1880492220B1DA73246DCEC6247320EEA400BFE9C31181F31
MD5 SHA1 SHA512 TLSH

Submit Download

cacert.pem.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/cacert.pem.tmp
Size 250KB
SHA256 e78c8ab7b4432bd466e64bb942d988f6c0ac91cd785017e465bdc96d42fe9dd0
MD5 9d8c2e9a93881cdf1f2a7fc3d01a6318
SHA1 76c94151f0205a933f5ebd6713bd728eb3823762
SHA512 d79fccf1196fcbc7867c6a4a1dd21b270500e4f6359ff4c40eadad1a37ff3a4c545f5e37fd0906c1ac76c221fb6dcdc80e17520b44ec51e98d688e3f125e7833
SSDEEP 6144:QNy5WXkqx9NGUqd9ijkiNR6Stcm+d4tLKb0UbTDdTj:QNyALYQl760I4tLC0UbTpj
TLSH
T14E44AEEB8F912D4928E3E490C8AB126EC959C3A29EDBB0B31D193845C745B2D75FD0CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 160B
SHA256 d817b19c6877ee2bdd4fe8fafe4c7540588b7f4629bbbf319d14fdb7a9945657
MD5 289959f3806a3b29ff9134cce28365ff
SHA1 231a7330d2f47ce607f53bf0741cb8efb186f300
SHA512 f5038eb039b2d9611b7ab2ca3f1c9a04d4b56fba26342f912373644b6e391f6b0797411eb874b6b8fcfa0ec22e4475de542f22a97337acb8fa5949f0fe6ef902
TLSH
T1A1C08CE3E3A1BB00920DC63C6FB78876B6CC86A4EE8A20DB68840122080780581A26D9
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 176B
SHA256 9d59e501bc073f2c7727e79e8d697cc48d52f72bbaabe2150818f46256fea992
MD5 e6179be04df0502979aeba4af98aad9f
SHA1 b870cc0f3c3944bbbdb2228476638e991858c019
SHA512 817323f6a6ae9100883f04a2bf179c4575aef244fd47f5f69f245fb84fa26d2576265ef333a651cd7a8f047924962bead7e88eee63ac4d20806cf36dbaffd4fc
TLSH
T1B7C0C0A023506FBC454C01D003F34E3099DE311519452202AC4000172808D100CFBA4A
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 208B
SHA256 10da11d0ba1b1e039ff9a26fab25ca2212adf9f7661423d01b3ec65cf065644c
MD5 0b3f17d14cda463794437c4c2e3fede8
SHA1 dafa6d8d03134245b3c323add17c5b959bf90474
SHA512 3342137ab7a2dd0881cedc8b5259dacfafa9505547ee9836c1300cdfb7519530f01ad3b866649193ae0d83f5e889d24dd165a9c5764f0cb952e757ad6cb36df7
TLSH
T134D022F3F3BA4FB87C4B192896B34420BD8A032CA44606BF78602740606898810B4C2A
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 80B
SHA256 7d74f6119df57ef020bd991ecd6b9e98ee0b2e43f0404e406e1504f89d67f4b2
MD5 ef471323e95454fc08df513e84fe584c
SHA1 a7d01b15f2eb25ca6aac59b9bc574b7fe191b9dd
SHA512 5b067f223402576f9e1f44c204d7d3abfa494158a21b831569737aedde033cbc9b3997a6bcbcf94ebbfd4c09d6fab4cc1cca1017e5ea44039877626247966fc2
TLSH
T11AA0247511505F50740D01301CD3CC3C74C0450CFC05D01F7C0003031C104104071540
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 240B
SHA256 3337eb5ac5b8b4ae0796d46e8462f9e1abc4f00ceb8b8f3e7b19dff751a89714
MD5 1640a2fcf11478748d412c293d778b91
SHA1 4564a18534a9d43117d3186ac265d075dd0634bf
SHA512 4e6c4d09b555a22c626418606fb5d3b7fbcd86dd47b35525fc437aeb404868e56f2705a2094e5ad82e85977b08e121798aef1714cf3e02c2e0ec32a32b67d17c
TLSH
T181D0974800A8F99C2B5080E1A3A019F9280D3294E71A21B464122136FD068C440B24D4
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 128B
SHA256 120aafb6cf6bb6fde8fcd155a4167c8078c45294657a3e73781729815e484084
MD5 5ed2e8286148c99329b85715e2eddad8
SHA1 1418187a60bb3c0d3d3f120d9f47f258e11ab853
SHA512 6fa1901f5508a7ce71b2ba30865fe5e2bfce8dbc9288d55d23b2cb6b4da8c1d0fc7eb58f9be953c86664186e24663b9bdd401e0c2f20f4790f2b0cef3378a1dd
TLSH
T1C3B02B97A712AE00940C433D57E78475B2D00584F94610677C000321180440540B04C8
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 128B
SHA256 afa5c7e9d58a4ac3f17389d6f8185bd0578f14957afe052cd84b1eb424fd0e68
MD5 43cc78598c7041aaeb96024752041430
SHA1 36c97ed09a04f8a3bd9fd4db226b2642ce9f38ab
SHA512 b94142b39dbe6cfa70c63d746a0aaf76f0c9ee6480df4e18eba153f6e0c31e7512cfa92d1ef51530c5ebcc21cd668d1136c9fa73e28517da42b1bf9cfc65d7cb
TLSH
T124B02B92A2223F80500D433C6FE744BCB0C00544E94B008B3C400111040880640A10D8
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 128B
SHA256 d6888951ba741a30f781068ea5641171a200061867f4d64584f1d7906a18000f
MD5 355b5c0514e28b8f623f43234e72bc0b
SHA1 ae32ac38b8f53c69d36fe00a848e083de9863ff0
SHA512 78457e5583540e7d08fdb00d36ba8f984ecd3cdeb34f302d395cf3450fb366e0ba42be74711711c8de43f1b2df1ed38937d9e16f4dce306ec8fbb3cdb59f7c08
TLSH
T1AFB02BE6D2213A01940CC33C9FE78874B0D40584ED86308B7C000111050440940A05C9
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 160B
SHA256 2ede5f630aa578cc613d1b15d0f06a8928a86a5a4d5b3b4ec8f6fd519afdce25
MD5 496226446b6851f97a239a259cbe7f1d
SHA1 97d518ac72622316717271590fbe382187708ab1
SHA512 5ea18d3e0b1913f17ece8037e6a0ae7e60442f1510897d8636dc905336bdd01fbb10dbac30c5418ffdc820427bd383a469e0631b726bfad5a3498ae1d8cdef85
TLSH
T1FEC08CA3D3D1BA00A10C863D6FB74879B6C893A4EE8A008B688452230C07D4580A1ACA
MD5 SHA1 SHA512 TLSH

Submit Download

fusion.registry.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/fusion.registry.tmp
Size 160B
SHA256 4abbc9df1ec35ae30001f38310f42e8a91d56ed5140ca668ddf3c928bb8201e5
MD5 250e74b15f8fd22ff6688f0061f11fa3
SHA1 d139a2bfb00cc581022c76679905f4b8008da9d0
SHA512 093dc66000535602b306a8ce8337d7deadcf473c533ac362a201960aa138e1769dee3b12a8e290e71c7e6325ee181bd13d74443a617a3d25755fded55068fce4
TLSH
T1A9C080D3E3D16900510C853C5BB748B575C44768ED95004B68800111184780540915C5
MD5 SHA1 SHA512 TLSH

Submit Download

highscores.lua.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/highscores.lua.tmp
Size 16B
SHA256 31cc5e1f37a4f6ed9f6559d7fb7a817264930e2a126a93fd2bc1dae426720ca1
MD5 41cb30ba3bd1cf69982ef697c8503561
SHA1 89aa117063b92f4480d5da7b60bab6459835f1f3
SHA512 99e3c4bd79d3d5a2e19afb210f34d9a630e86e6f2e40011ad4ab8b0b2699cff2972cd8572defbb304d58b4b595420963e3223d74b645a55cbc1029e591256013
MD5 SHA1 SHA512

Submit Download

ef09ba26-8d4b-4657-95ab-ebb0d5f5ceaa

Path /data/user/0/com.rovio.angrybirdsseasons/files/net.hockeyapp.android/telemetry/ef09ba26-8d4b-4657-95ab-ebb0d5f5ceaa
Size 805B
SHA256 815cbe83f4c358188e7628e9251684d9211b8397791c43124db56a11918f9d33
MD5 ee7861c8aafd24109c0eb0937365b616
SHA1 5cb5f7e39fc2b46e747fb904ed6af603dcafddd8
SHA512 3fd8af780e5f083d893b67eaf23dcb13b403634402631bf70d51578f81d3fffe1dfeeb1eda54238c7124ac594880cd5c088dc31441aad8d139875fb9b404d7e5
TLSH
T19801D0A39165AC3E4FDA43722F4A49A94B7FD20534D0118C0DE9A7101E4DC18128E33B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.lua.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/settings.lua.tmp
Size 608B
SHA256 59feae5e673e52ef64c984614343a1ed0da7247b014b5be0a3dee35a99f2eca2
MD5 69a510c5ab875bb4ffdf9f38258aec8b
SHA1 de4eda552c09a42bf77f4ad04f2012397e738715
SHA512 f85e42e052b7361e60fa003b2619b915853eee856ae9038d2830773d0848f8ca34e1a82c115ebab7cc0b6eb7e6fd9609825ac4e972d40dec2d7fe7f32850e3f5
TLSH
T102F0620888AA792E48FFF19E4D489580286983D19D41B39042D0D49506E32892A8A893
MD5 SHA1 SHA512 TLSH

Submit Download

settings.lua.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/settings.lua.tmp
Size 5KB
SHA256 ee8bb3d30625465ca4aed5ab549069218af8c30b1caa016213979c2dadcab610
MD5 ff69573d536e86e6ed763444502e579c
SHA1 bc31fc3f5c9bd30b28911cf2069060fa0cc1b447
SHA512 c58a6b9063b05170854fc6bd0737de1b198bc5a61725aa5ccd146dc91109cd1667dbbb820312d3c24c81dce0ca8b69d1d4556a63303d45662e46ca0b092dc3ff
SSDEEP 96:ZZrnNfvWdqWVKCEvUslwpI9OtN80RCqn/xiXq9BLcgJ/CWy4/t2BUJN6pZ7f:BncqyKCCsN80R7nJiXEJcgJ/CxWJA
TLSH
T1CFB19EA317168366D59978F5228B72C18372E452138BCD99AD7184B6E30349FF8AE0E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.lua.tmp

Path /data/user/0/com.rovio.angrybirdsseasons/files/settings.lua.tmp
Size 11KB
SHA256 7504ae0bfbe9ec3932a81bf8baf56a5175b1fbdf93b502a2b8f7f49696f4bee4
MD5 df0429e78c1e7146a893e3d63ecf146d
SHA1 d54ff035e71a3ab5bc375e11c6aff13caf4abcb7
SHA512 589aa1125410989887908130f20e8ef8e1c023505d9c6f836cc4e520328908ac86522a87a24ebe1e4fe4812f7905b7d5a4840c5e53f108c8ed8220466397647f
SSDEEP 192:pD6B//IX2P/t0xijI/z/XRUDOoPNr91RV9XkAvDlBpgkjIKmhHdlJ8KqYfCy4rAf:pD6Nw2P/GxuG1sfDR3UAvDlczhHnJ9dV
TLSH
T145329E26B8398065F8AB73C2E733B30489DA1C18953C241652A55307FED84FE6C7A9F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads