Overview

overview

8

Static

static

6

bitlife-go...ay.apk

android-13-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    03/08/2026, 16:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    bitlife-go-1.2.10-mod-t-5play.apk
  • Size 188.2MB
  • Sample260803-vdyr9stdjf
  • SHA256 77a11c33d5b851f566b6ae27b70bbe49a8f30ed2323fb5fbd7219613269fe318
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 9 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.goodgamestudios.bitlife.go.life.simulation
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4113

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core-oj.jar
        • Path /apex/com.android.art/javalib/core-oj.jar
        • Size 5.0MB
        • SHA256 d9d541d074d858571d60e2964fd39fb74130217fa7c92d74ed1695b0962837cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        clevertap
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/clevertap
        • Size 64KB
        • SHA256 cf5cadc8687b984ac68ad1099bbbb7335f20285109feada1519a1d39266481c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clevertap-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/clevertap-journal
        • Size 512B
        • SHA256 f01b79ad5a505a82eec6676f30418f27730acd11ad2e649c171c8a8dca698bd3
        • MD5 SHA1 SHA512
        Submit Download

        clevertap-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/clevertap-journal
        • Size 8KB
        • SHA256 ae55fad1a31264ca2cd323c510de513d9eba88b0c24937c7167beab9929fe052
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clevertap-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/clevertap-journal
        • Size 8KB
        • SHA256 fc863c58e052c6925070ebad5e1da51d745732f4c105971cfa915db0f010ef5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clevertap-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/clevertap-journal
        • Size 16KB
        • SHA256 305bf8b40fcaf0108529e0f3e708d35c5bbcfbda4d6b4f3d51506044c8b65794
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clevertap-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/clevertap-journal
        • Size 12KB
        • SHA256 ab978ba7241f8401858134af2bb701822d5c8b0bb6b576b66477d2a7fcd29c8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 e00a1891b6b6ba3aa27d95f4ee30dec26029d5c277f086cf182bfc8bb5507c7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 24344900634c3c4a73eae58215d89751a2796bdc9d20c7fe3748ad130697f56d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 826b4f14288d5e1810a41ad422302a00e362ad031a807685f6a6f3b31a7b65b1
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 f88db27e3259d6afce9b4694914b510800cbee4c1c70addf0bf0ccfd177130f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 2d260d61b387ff2caacace7284eae76cb4cdf56cd200595811c03466575df3d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 2c76521a2751281966da43b8e81a0523059b86f212dfa6f2029d922c7ea09168
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 f97b2d74793c4e45047de07f772cdf7d17acd73c4320c48513bf4f85e1acfe00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/.crashlytics.v3/28d85e7dadbd4c43b54b977689290f682a71078f/com.crashlytics.settings.json
        • Size 795B
        • SHA256 d593d47a38184d582085cd322f35c7444986be6aff996da2b592d9db9ceeebb9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/.crashlytics.v3/28d85e7dadbd4c43b54b977689290f682a71078f/open-sessions/6A7327C301E000011011589D83327A91/report
        • Size 899B
        • SHA256 fa323a9dbe2a4bb1fc3508f1dd9e3a96ff8363159b1a186841a884777116ec6a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        835675086a466ed
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/835675086a466ed
        • Size 241B
        • SHA256 79139f2fa0b3b7c405a93d73eec640bbdbce6676828b61eb994111f01d3e682d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3663418887588068117tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/PersistedInstallation3663418887588068117tmp
        • Size 90B
        • SHA256 8702ab2b81be9ecad5ad01e0516c007fde6c8e25fdc7a81112d64093bb2960af
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5939680075873505704tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/PersistedInstallation5939680075873505704tmp
        • Size 570B
        • SHA256 08a757dd4d146d90f7e6570b086314da5648f6938ad6c00754158e0f50b46115
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_data.preferences_pb.tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/datastore/firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_data.preferences_pb.tmp
        • Size 50B
        • SHA256 9705fc9add57cc3c580584d366e958e3512d62f070f4c0c9f51406e37ddb9dc1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/datastore/firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/datastore/firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/datastore/firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/datastore/firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/datastore/firebase_session_Y29tLmdvb2RnYW1lc3R1ZGlvcy5iaXRsaWZlLmdvLmxpZmUuc2ltdWxhdGlvbg==_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 db748dbaca3a1718f7d772802ed9faf267ff54866740d5e4619a93cff0132026
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        didomi_config_cache_6d9972a6-0d1b-40bf-b50f-739224bfa4b1_iQYWUbXi_1.0.0.json
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/didomi_config_cache_6d9972a6-0d1b-40bf-b50f-739224bfa4b1_iQYWUbXi_1.0.0.json
        • Size 40KB
        • SHA256 e287c329fdfde79861f0a5d9057992ba03416dfc028b55cf42a27958bff7e0ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        didomi_iab_config_v3
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/didomi_iab_config_v3
        • Size 872KB
        • SHA256 17a921e5adf4df726bbea2277e99873ec02a0b2defe98d16092277a73a18dd7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        f80b36fe
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/f80b36fe/f80b36fe
        • Size 264KB
        • SHA256 72e77dcc4a53670972bec9c892b4fb744330992afcc9fc7d3a145a1d038c61a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        profileInstalled
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/profileInstalled
        • Size 24B
        • SHA256 6b026eb6603ebb8826c5c2097eec7080e82bc090829702c47da09aba3e1cfb34
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 19d1a54d3e180330894892472ab83d608e1578ba426270a17099148bf68cd5fd
        • MD5 SHA1 SHA512
        Submit Download

        installationNum
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/no_backup/.flurryNoBackup/installationNum
        • Size 99B
        • SHA256 016e10bea04b51fac1f87a70ba2111eff223692b850e94e6c7e663c2cf64587f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 9b08a53db5786be2da4a219b225a0f5d4955fb55026b8ac8b9c2bdd3380aac2e
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 f304404cc2486ac40dad29b09c402456c7ba5d4f220d2ea5452de70efd64c187
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 b4ca40b9dacb07e489ed9e09c754fd346b6b75e31a689d817e5f55ed84f66166
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/oat/x86_64/[email protected]
        • Size 156B
        • SHA256 b09dfa8de940c378a312c738c6f55974e63331191ce02f5e0a4f8546d6bca92b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/oat/x86_64/[email protected]
        • Size 96B
        • SHA256 2bcace9c6a5285012438f901991cb8c56581fe89de00e1c35f601ec3a284b6b3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/oat/x86_64/[email protected]
        • Size 67KB
        • SHA256 c63ce7c8d27f28358dfbbc2e07c41c3748ed087d3b44a03c550e65ba61eecf82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.goodgamestudios.bitlife.go.life.simulation.v2.playerprefs.xml
        • Path /data/data/com.goodgamestudios.bitlife.go.life.simulation/shared_prefs/com.goodgamestudios.bitlife.go.life.simulation.v2.playerprefs.xml
        • Size 647B
        • SHA256 e08cd488046d70d727d78f204dd04907d3b42b8f5465cc80729b78755284c4f2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.goodgamestudios.bitlife.go.life.simulation/primary.prof
        • Size 9KB
        • SHA256 62333a11e4c252272c544d00496a0d3dd428b7755eea0d5711e8a7b540af002e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.goodgamestudios.bitlife.go.life.simulation/primary.prof
        • Size 6KB
        • SHA256 bf322cd16228a64ef894ac881a1b17ff41bc3aaf7d1f8221e4fe1354998388ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.goodgamestudios.bitlife.go.life.simulation/[email protected]
        • Size 10KB
        • SHA256 c3541e453bfeea018590022f2a13dbb1b6c630b3a7217e02a3a4d7da1722c5fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.goodgamestudios.bitlife.go.life.simulation/[email protected]
        • Size 5KB
        • SHA256 17f7284b837c9fc6b1b2a5640061975ecf0982cb0630d56a779ce6e21224a02e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.goodgamestudios.bitlife.go.life.simulation/[email protected]
        • Size 4.8MB
        • SHA256 07fef7ea41d84ccf44ef2e2a6de8d23e3d3dd5920c87979a1d501a9cb6272496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.extensions.jar
        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download