4fe50aa7d2a3989149abff49c0b10dd43ed2f34a9db698986e9a419101d956a9 | Triage™

Resubmissions

23/07/2026, 09:28

260723-lffj2avdpc6

23/07/2026, 09:22

260723-lcdahavdmb6

23/07/2026, 08:54

260723-kt6spsy1et6

Analysis

user interaction
yes
max time kernel
11s
max time network
59s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
23/07/2026, 09:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
The_Battle_of_Polytopia_ v2.16.3.15581 _MOD (1).apk
Size 120.7MB
Sample260723-lffj2avdpc
SHA256 4fe50aa7d2a3989149abff49c0b10dd43ed2f34a9db698986e9a419101d956a9
MD5 9f6a0d8ff02671d3c2dd564b425212ed
SHA1 5e5f331d8fd4e1cd389c00e86f2d43b63f986bfa
SHA512 e385a6d9817d2e35422d0aa17372b0e848fa8bf4ef80116ae04f2ce59439cb57a948220cf86bdf59f542b416f2d63be4f975f23af3f6f0cd18657c815c32a254
SSDEEP 1572864:YbX6KrftAalAr+/IUBHwHUCvg3jQy6BPdxI7AZ4m1JdwHaVNrO92Q8ecV/DkDyxv:/KjtyrSBgTyabIMqmBPtO92HecVrk5PG
TLSH
T1DB582343A759CC72C9AD9236ACB30762BB336D555B1B878B2404B7B97CF37C41A492E0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	air.com.midjiwan.polytopia

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	air.com.midjiwan.polytopia

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	air.com.midjiwan.polytopia

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	air.com.midjiwan.polytopia

air.com.midjiwan.polytopia
1⤵
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4894

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db
Size 16KB
SHA256 7763329a20d91d18002e2a9d11801921c01a2d605c9355c1da3ed9711effc3fd
MD5 3a5b92420adc04fbed7f1a9d2aedffb6
SHA1 d18452fdef082dc1ae8f9df36ba28dbfca413a7d
SHA512 19783623e8d1e021cb467f11f823b24fd6466061061c677aef7fcfb7e05d3192989c5a3b728cfead8274df541fae5449302e66e6f7c23b2f502f449e63a90a61
SSDEEP 12:TL6Ee7LzmzsRmBEyPbP/DvJ+/0Fl6fuPnL:TLwHmz3GSP/DvJlF5PL
TLSH
T164722BCC5F10E703E127073A60CB93D61E38611E4367965B3A6509649D531C8B162FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db
Size 16KB
SHA256 160a65ce756059924f0b60b1f4dc09849b117b738d969a5b2cc9eda592ccc639
MD5 7357b73cc8f51dabee778a1421194a7a
SHA1 73e79951b0ab4c24623f267fe0b296580583498e
SHA512 53ceb0dc0e502b402b1097317961949e055c8a63fcc47ca787d1262d5bd4120192c312c926e97560e3c84cdcbcb8ba345782ae9e7e7dad0a26ee2a6609136988
SSDEEP 12:TL6UEr7LzmzsRmBEyPbP/h1V49blqYFl5+NvJ+/0Fl6fuPnL:TL6fHmz3GSP/h1V499FSvJlF5PL
TLSH
T1FD72F089BA24EA52E2670B3960CBA3D22E38312A076796167A1A0F2C5D433C8A061F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db
Size 16KB
SHA256 01a544482db21af40389489909e55f9ccc0854dc4c52ad3da20f0d94b5cee220
MD5 1c07969b509b844e4e873d71e8c58b34
SHA1 94c3204c646b19b804f81ff2cc0672946b46fba5
SHA512 719c8dcc986982a84d41b96a1325e02904cb6f2335a720db62c60c81d8598b0791c643bab85f32cc39e95847ed5de98eb77eb05868c8b79216732a8a7b2363cc
SSDEEP 24:TLQHmz3GSP/3DKaOhG0LMG499FSvJlF5PL:T0GKSP/+aOhZMz5m15PL
TLSH
T1037268897964D697F1770B3C51D7E3C22A39306B0B63E316390A0F2C1D833819471F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db
Size 16KB
SHA256 0886b9a9b6b61ff94cf9673f60c446ae73d7b4eb081f0e1ebfbd7c60e7917312
MD5 1d6982c277306a5a040c581ba89a6db1
SHA1 a5930a33cc7eb8d4ff7a5b7c4940b914198774e5
SHA512 994409a4e082364cc90e1bb380d36c0059ded0ada72fea81df9ee2724e9e9b3667bded60f2091454fa92c0cefa748d74b911c3f8d3b86781ea2f2d36ac0e510b
SSDEEP 24:TL0tHmz3GSP/1KaOhG0LMG499FSvJlF5Pp:TkGKSP/IaOhZMz5m15Pp
TLSH
T16A7245897968D656F17B0B3891D7E3C22A38306A0B63E316791A0B2C1D433C59071F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db
Size 16KB
SHA256 e6065fe01f3c4eb5f85c14ae812a7266e8b0cbf4e18d50f0658e9fb3706bfc52
MD5 d332f7ca46aeb8c2c90751c758099cfd
SHA1 340658525ac2383d22fba546db23f8e882d8e58b
SHA512 3246092ce7c160e135cf0934aece6fd5ab39ddab5704f1bb4a7b8a9ff6c77a29943b4bf728198f2d0429898eef288d2d78acc2976bb9fe94bf1d47fdf69cffa9
SSDEEP 6:l9bNFlgls10l/FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/WjA:TLuE0l97LzmzsRmBEyPbP/WU
TLSH
T10772268E8F14A207C227033674CA53951E28512E43B7AA472BA40870AE631D8B091F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db
Size 16KB
SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
MD5 db36daef009d2615bbd9dfdb4f4d871b
SHA1 48f15ced1db6f00a2e1082ff632fb87d27b4b8df
SHA512 bb61280afeb208d4ef43224b9f871d09eeb24a4660c2b6691f5893f459871eff4ef4a537a3d0df268fa51e74bc55a76ade599d398f6d58fde4975adb8e8b70d6
SSDEEP 6:l9bNFleLIls13FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwa:TLDE17LzmzsRmBEyPbBvOwVQ
TLSH
T1E272D8CD8F10A206C5270337608AD3954F78551E936796472BA408615E52198B051EA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 508ad382d1f8eb5b99ff5a36970ef3c9c3ae8c6440ea972e7113cacdfee14df3
MD5 4c7907d3031a8d311da146f8d03b3df1
SHA1 c684791a93d31bf97730b2ec06f5e05af9494e0f
SHA512 6969db1047aa388819735be96753ffb49ff9edde5c5e2d290611d8a43bc365a32c8784e1483a061ac33bd47100bc45ddd282fc4331ff4e3aebe5815a76216c17
SSDEEP 6:7+/lP4dg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKjw:7+tP4dqL8EA9zmzrfRmBEyPbT
TLSH
T143912B8DDF112603C1771B77B4CF93915D286229C377AD5F2BE90474BD435899061F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 fededd735d6d6ea4656ae5856abab40cd27297bc6d4b14982c30147782089352
MD5 15e7972103d4ce1e21eb6221bd439792
SHA1 f4fa43a3bee7620269e5822cfebcd98c898b5354
SHA512 4de554f39ab16d385f1f32e529b046f52de05cb0db4db341ed938294e6f2d21c56d5f36960a876181a8b510626e083b0e844ab1ce28d832b92a4fec951b014db
SSDEEP 24:7+tvKaOhG0LMG499FSvJlF5PZqL0tHmz3GSV:7MyaOhZMz5m15PZqkGKSV
TLSH
T15D02458A7A68E667F17B4B3C91E7E3C12A38316A0B63E616795A0F2C1D833C59071F11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 2fdb6eb4ebe466058e48d16cf29614b44738bcf0e28e716cae6d333cdbea041a
MD5 6744e2793dbd6b4ae5f6250243e18fb6
SHA1 3f0b1e9d4a2c055d6ba84b444ef5ee3f6ac6657b
SHA512 9a764f82f326d29aca0983c6358be9126a80f21383fb343b93c6150f21c750f1e08e21310b6d8d0bd6f7ec0cfb7c45735c393e18943898cc778a331d1e3094e1
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 22a2d58cb13222e2424af02ea4385151dde32f49015e92f5a8fb353f909177f7
MD5 a4aedd676334cb9385d4cc9cf8c74550
SHA1 1b6c615bdf64775ad4f70db38da4a5074d29cc83
SHA512 be0709cf7ef057d87e0aae2ba132fd5c7762374f8d8b4cc4c4469bcb7f188d7745b86594104459836901f648a08ffa98d06b17ed7d300b1d6102f6fb7cf96779
SSDEEP 6:7+/l9F7Hn16W2vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKe+:7+t7wqLiuWdYRmBEyPbA
TLSH
T18402C08C63C02C13C82D2EB7D0E483480D05F7288571CB17369008943C0F4CCE4E0D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 730a9add66a2fc41ead7aef52034c2e24fece60a99b3ed994585d1254f516a11
MD5 a206223d775a1c7fe19f821c72b41470
SHA1 031c28173b2946f4c8bffdf0d5ebe3dba519f0b9
SHA512 c512112b9d6f75ae4eea87c67138dadcbc3da299b2cf82f4cc978d29f034a5fbae7737fa9a98a65234ad0becc8b001524b81bc73b884105145357f08289b88e6
SSDEEP 6:7+/lYqFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK0:7+tRBqLJdeWRmBEyPb3
TLSH
T12E91808967430913C9396F77A0D583941D256729F373CB571A9108547C476CCE890F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/air.com.midjiwan.polytopia/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 3a7d252cf9ee26f58c9fbb4f9a5b31c5cd7ab1c1e2c3052a21c12c775f61f448
MD5 9e803e446d00f3a20c949d4cb8360ac5
SHA1 3418498dee483b4b64b54fb2128c7e7fbd494846
SHA512 5305303dc4a373452b3d2993c6b275e0dea971b7d4d6009f39a33f067e31d5b9fc7c0c7434d9253737ac790f40aa861cb57c867a6ca94e51d371a5be5d9a399f
SSDEEP 6:7+/l9LIPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKgBM/B:7+tpAqLmqKRmBEyPbjBsB
TLSH
T17002228873C00E83C02A977B90C8C3401E24B76482A2CF072AA008642C06CCCA8D0D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FIREBASE_CLOUD_MESSAGING_LOCAL_STORAGE

Path /data/data/air.com.midjiwan.polytopia/files/FIREBASE_CLOUD_MESSAGING_LOCAL_STORAGE
Size 188B
SHA256 699cb4f7d7033d74e8abdbf666485aa759c55423aec4b571cf6f52e83b879efe
MD5 2ab66912203c8a5bc4f20bb8c1fdc938
SHA1 3c76afcd7e6ae8c64cf2e8b5292b86d4d4da9318
SHA512 7eeeb4425e46d9bc77ad2b8f8e82241ebb2e9d78499d3bebca1c254fafb19888f189e6f0fd6d866cac913e8fb7b9ced86850491770a2f0a57f0ac5b12fddd781
TLSH
T16DC08017DCF43345F0D132FD55E348547388135115524DAC50531990771183677D44FC
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation6090808826081738670tmp

Path /data/data/air.com.midjiwan.polytopia/files/PersistedInstallation6090808826081738670tmp
Size 567B
SHA256 f0f08adb656ed7ca55987ed8a2bf957233ab936c89eb506b484ccd2c7b6c3674
MD5 0d0c5faa43d28cc3c153a5f2205b1f51
SHA1 d373ae70eb81c03fecd3fcbbe8c4bf2bae7b78af
SHA512 2de23d46ad6c8a8794237cb4bbf1e78d6e95fee5794ba84e9109fc363c39ee56ebc64ed82147a3c5035fa82d6231ae60024d633e9636dab8a45e5df36b2ed072
TLSH
T1C1F0411CBB109708E9C91102944C7C010C0441421D1B42767F880AA14B92F6A918F8A4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation8837278412691940585tmp

Path /data/data/air.com.midjiwan.polytopia/files/PersistedInstallation8837278412691940585tmp
Size 90B
SHA256 c5aa565c65780dc824342bbc7a61196d8e7ab4de088079845599dced2721559e
MD5 a8857a35e5c7fb41a699d6d693b898c6
SHA1 4b9a6a34d89d3b7e502fc11c5942515c9d1722c8
SHA512 388705ba2a0e17c7e4d6a9537b647687ed76541139cb9f7270d444d3df71a73cddecd9fa27ed42b1403054a1e35dfe3924d7010c288c3df97249a732d93ab18e
TLSH
T134B01245DA304241848DF3431C8C95001E801440080A8B144E0AE1D043D21D48393AE4
MD5 SHA1 SHA512 TLSH

Submit Download

timerslack_ns

Path /proc/5024/timerslack_ns
Size 8B
SHA256 2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc
MD5 d46bf94e9eb1d22281a71504685082ac
SHA1 e4e0629aef7425ba63e897bc471f8625de44edd3
SHA512 68a1a1fd4de784e3a2e0e956d0a63ac4ca540ef90e7fd9a2ddc92cf68e52e29792db64f6615054a6e5460467f0b7abe055c899136d98ce6ebab3d580bc55ec86
MD5 SHA1 SHA512

Submit Download