Analysis
- geolocation tags
asiadelhiinindia - max time kernel
862s - max time network
880s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
04/08/2026, 22:39
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Zone+Modding+Minecraft_1.0.3_APKPure.apk
Resource
android-x86-arm-20260325-en
5 signatures
900 seconds
General
- Target Zone+Modding+Minecraft_1.0.3_APKPure.apk
- Size 9.2MB
- Sample260804-2lcckasbph
- SHA256 1b8d5b68803f4e27bb0ffdbbc383b2d9b1630cd20a289ea9ce8400649a808261
- MD5 25bf9898159d751b144c7884f3822c0c
- SHA1 2a39d86d6ca23749380548bf75190a6f4adbe078
- SHA512 3f8060bb642722b9958f5381bfb6b80874e1ac6de94ca7333a9f21b82ce9c1832e470b06ee0abbd3a26b596f57a0c26907f55dfa2a392fab8913bf9a13d884db
- SSDEEP 196608:6kxUKiTD4J+n77IMMmnnRF7x+2Q8Nen4bs6tLRenw3YjSjcjzjujc:s4Je7VnX0RrU5tLsWYjSjcjzjujc
- TLSH T1FEA62341FF49A42FC9B790334BA2533531969C068B82EB67341C725C6BB7AE41F59BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.zonemodding.minemaster - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.zonemodding.minemaster - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.zonemodding.minemaster - Hides multimedia files using a .nomedia file 1 TTPs
Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.
- Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.zonemodding.minemaster
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.zonemodding.minemaster/databases/com.google.android.datatransport.events
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.zonemodding.minemaster/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 e2664aafbfcce2d956ea3bfcf877ca9154b20b6b2bb23da2a35528a51a3e1ee4
- MD5 bcdcc5c39695d9577d0a1390a7c15faf
- SHA1 f218dc6c3ccfc3764a3981fe994f6ca5fd43d6b5
- SHA512 78068d46a3d6b825fdfca2407e3380e14502944a69f43132c28808dc21185d8be3c0ddd253f82bd13c98fc63622196ac18ad72f3c6878bc46a02c9f67bf39c30
- MD5 SHA1 SHA512
- Path /data/data/com.zonemodding.minemaster/databases/com.google.android.datatransport.events-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.zonemodding.minemaster/databases/com.google.android.datatransport.events-wal
- Size 44KB
- SHA256 661e90b72d3a66bddce27092da437b6baa4b4d18702079ffeca5fc57596b3d4b
- MD5 a3c2b9c86df611c2c1165973554f180e
- SHA1 a350daf8918e3264e2a2900c3e46c1ed2f7780bb
- SHA512 fd71937d6c5156d657122dce45b7d5f39ff161c08deb3311797908b2cf41d725be45cbd9dd92dcabb842a182e5686878757e4ed0c8e520b6c41fbab6d3d912f9
- SSDEEP 48:P8zNSP/OrZ59MEoBdUdndVd/7d5IvdldHlq8/JqFSP/:Pk0PwNMEo0LIyNMP
- TLSH T11913033C57302253C269153BE7D353420F7CD60E5B13C3A2AA9008FA9DC1665BE21B89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_analytics_v4.db-journal
- Size 512B
- SHA256 93a15d43ce258bf8ce44e09516d1b9ee462cc17cba4625092f7f6ac49465730d
- MD5 85ff5f525aea6f72c9e962484b1a533a
- SHA1 12f48868a9561dffbb6f46b293105643bca98f9a
- SHA512 2ba970003331a2ca38c7aecb60694dcfb735962c5ac80a6aeced170f20bbdf54508e37ae669d8ecb60b8245a5b64a320fa3a5e58337a5f6b8937a9700310b182
- MD5 SHA1 SHA512
- Path /data/data/com.zonemodding.minemaster/databases/google_analytics_v4.db-wal
- Size 92KB
- SHA256 9072a27eda1e31a7eb8b26b9519b3bace615c1b2a3bf1ab23910d5bf4e39a864
- MD5 6d207b7188ccf7fb8798b9bde306b350
- SHA1 5e0412be28545bd307690d33d4c5736f6a5cf817
- SHA512 c4823415ff1d284913ef7d577bb3a32d5660b1aff023c6e670e121249713c868e1ce8adffcc437da4b058295f294d80168993eb38af183fb51733d0703f9d4a4
- SSDEEP 96:9D0PNL/PQTr6YP20B9ICr6YPibWVijbIa:aBQx2BOibWVijbIa
- TLSH T19E93D08D97D1AA37D06904F8F8EC93C29F34E59EBF2A4292A9B459626CC32487141D1C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
- MD5 7237409e0640cfab7bdbd429bf821a3b
- SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
- SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
- SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
- TLSH T16772C2CE9F102647C6660377B4CAE3916DA4A12D872BEB472BA50464AE42609A861F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 6280cf44484b6d8259e22990c60c96b7e009c5569c03e605f60df1c28d741953
- MD5 9f34fde6a958e4fe7078e8a8725d509a
- SHA1 a1b582c2af3166f78b6705364bcad24076a6c53b
- SHA512 b8a791225f145a0776f307fbb4cea9253494519664ed0dc1915501016671f7a5f4b39506fcec4d901895e8e0590796b69b9630c4273a147fa27753eb53661ce8
- SSDEEP 3:qqb/NjghzY+/lzyliMlTXmLf6iozMlklKllgIn:LCM+/lulvl6OioQlrf
- TLSH T1DD7212C13281C702F23783B85287A7F21430F2807E53E11F7809270C2C812C11E2A317
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 06c9ec32c46533cb218bccff8661c62cfb310763d4de33764a8fac4247392681
- MD5 d7c1d98e2614440512f4947d36435973
- SHA1 035ccb6bbd822207b051c392c62ff95ffffb1c29
- SHA512 6cd2667b7293b141f4ed6bc1faf75012765e9d3541c0444ac0e7ce6802f90ee75e3c0e6e1022d150fd1196313ad9514d6fa9a51fe6b6a38cde45e31dc67ce820
- SSDEEP 6:rLP/gEhV71m/9blDqlrElvlpQlr2j44CM+/lulvl6OioQlrf:rr/gW49blqYFl6e3+/0Fl6Nn7
- TLSH T17F725ED13264C712F7374B7851C7F3D2203971521BA3E11A780A6B0C19863C20939703
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 e8b2d9ff79362e23e7307119d2bfd8c63875951c967853bdf4b692cf7b8bfeee
- MD5 43779c6721eb5d951cc66cc7a59856c8
- SHA1 ac98c38bf9ec15eb0b748fc977b29b6039e4cb6d
- SHA512 a8ebeacc862cb502679559b07f36cff3ef4e714bdce59a24ee64d2eea77727734c9697b7e0dc5e13e630d78010d53d7b2d5e71919e4e031f4881b3d925e32484
- SSDEEP 12:7RhOLavnOAU7wU7UyWlQnGna49blqYFl6e3+/0Fl6Nn7:VhKamNZ2WnIa499FJlFA
- TLSH T169726DD1B1A8CB12F2734F7C429BE6D2203971931A63E2677C0AAB0C1A827928535702
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 84da1428191a6867a3a08b63cad18e2b5159592dc47fe00ec7e768e5a1e67109
- MD5 69a4c8456be9eaaeefd6c71384609b36
- SHA1 95787eabc67eff1d7cd4c5b80f7ccf423c82fa22
- SHA512 adba9eecf75e562f24edb2e2ad5fd605cfcae01c9ba3d7958382a83dbd259743a9a063d97987b6c1b7b56c2888795b5fac98d2731f1b6c66d895f5fb727691e6
- SSDEEP 12:WDRhOLavnOAU7wU7UyWlQnGna49blqYFl6e3+/0Fl6Nnv:W9hKamNZ2WnIa499FJlFg
- TLSH T140726DD1B2A8CB12F2735F7C4297E6C2243A71931B63F226780ABF0C1A423928536702
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 a4ed6289914ef4ad933b53573a22e8da38af0cffce050c55a4225924e079126e
- MD5 bfce6fb1ef6865bfbb3296d5dca7d03c
- SHA1 f42a097f4f0c0a9c220b5efa132f961629af5b8a
- SHA512 a23b6f3115785162210907ef6755e8f568f1e34ef29ecb1348e0e19fda2641f38aa50cad6f7f986f2e02b06a379cb42f0a36bcfbfbd17c4a7fcb78bc469b6144
- SSDEEP 3:o1Z51H/Jl:oN
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 069da213a1fc8db15226d914c443281a0bde2f65685bda85c205461ff44d1f27
- MD5 6609d3eb9f1beab236cceb7e6e7993d3
- SHA1 d9fc6919cd8788a293d603694d501f7cde4454b8
- SHA512 b2afa98d5c7d3d5fa679d4e380185b5516a0c564ea2ff1db20837ada016c880130976a1c731546db7005a1c7ce5844f6c0dafbf66eeb1c26a44ed08445fd4933
- MD5 SHA1 SHA512
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db-wal
- Size 36KB
- SHA256 09267b8d5a7b388afa1ddf431d2fcc2a923a5e4140bf1d8784aa662ca3d6dae0
- MD5 4843fe61a2076fb2102afd0667893061
- SHA1 9c676247ad642158833d1a025c65e162776f14d2
- SHA512 2c3e20511ede7882dda19f6e895c4ab79f76e23edee29062fc4786c4a8612a2eb80be90093893432b9a287251963db5b9841282b9cd3577c0cb256f8a663dd83
- SSDEEP 24:KIf6zyGSP/o8EaolzDGSP/0Xqpmzr0GSP/J+H+ba3:AzNSP/o1a6z6SP/0XqArSP/J+H+8
- TLSH T19CF22F8AAF411547C91523B660CAD3492E65EA1D833FDB57A6D104ACBDC2ECCA091F04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 424f7696f4356558e0c972441afab1d700ed42d74811673c3970001f6cf4a0a5
- MD5 8e64d486d51fbf7dad03535b64c774d7
- SHA1 e5a50456666ec62903a3302f8b6e9541c5552446
- SHA512 57d8a889e293c26e144f32bb50b4b3b4b022de4ca0b64f708fe9a3c50902c8be75a8e6b8149510bdc2d10b30dd61cacd135ab6a58d75b5118903764a3ffd9fc9
- SSDEEP 3:OlH/l+On0LCeyL7+O0sW9xzvM/NjghzY+/lzyliMlTXmLf6iozMlklKllgIn:KsIeyekkzgCM+/lulvl6OioQlrf
- TLSH T1EA818C803180CB31F2B742BC428B53E31030A2C03AC3911ABD0C3A0D18507A11919306
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 9c175dd190d827f44511d17c2b52aeb44c0e457c0043eb5ece85ddcea637cdb2
- MD5 8a60d5f7411361c6867b96e6815faaa3
- SHA1 8d77071e19de471397906244ffd63b192e21f567
- SHA512 2b8b7a03d035d4970ca30d0c66c84e976c0d82f701897556bff59159442fd2da1844600295088087be5d08006df10ea3d6c418c8f84ecb375a643e86b2642997
- SSDEEP 6:KwPopb8lIP/gEhV71m/9blDqlrElvlpQlr2j44CM+/lulvl6OioQlrf:K8oV8g/gW49blqYFl6e3+/0Fl6Nn7
- TLSH T1DB81C2A13265C35BF37B0B780287F3C2203A72511BE3B24938167B0D28413925935713
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 220f7506f9d0f5255fc628ff5068c2ddbdae58dc21682256606352e4ac8b963d
- MD5 a8ffc055a547e062a243780ba927a363
- SHA1 beec2503334f56ffea4a42bbcbbc6c717fbfb332
- SHA512 6fa2673ed6c8d6e1ba755712b8d4864474a2a095c16512df7e879299b770f36cde76a427b3c1bbd8c59977b56a4e23cc1d03942c220cb6975f79cf851af62808
- SSDEEP 12:K+z5+RhOLavnOAU7wU7UyWlQnGna49blqYFl6e3+/0Fl6Nn7:KxhKamNZ2WnIa499FJlFA
- TLSH T18981A7D071A8C712F7734B7C42D7E6C2243971921A93E266B80A7B0C19413928D35746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 84868947e55b91e06b54c9c596d06133886770dca0af3248746a3c2f7428af60
- MD5 9c676897127256411d88e2bb45d18c7e
- SHA1 c5941c9efa0d795f288db602a2b9672af4a7c290
- SHA512 a763091844a4cd8769cfd7bcf8e0a45b0198a24959d435d3110c1c1ca148f42966167e2b8f328e0370c2cc2b411dde1d64abb8327d364e118fd482f9a525058a
- SSDEEP 12:KKwo/Qm3mDRhOLavnOAU7wU7UyWlQnGna49blqYFl6e3+/0Fl6Nnv:KK/oh9hKamNZ2WnIa499FJlFg
- TLSH T1DB81A7D1B1A9CB22F2735E7C6197F6C2343971921B63F216790ABB0D19413924535702
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 bdec762e17f9e1fa0f36b0115fd05883338a3539251c31304f334009efd1cf80
- MD5 d0a36e9bcd7630d15688c33e0bec64cf
- SHA1 87abb21931337e362e73c7f8cdc15dd5351bfb51
- SHA512 d93ea8c3779ede896ae281c5f5f87233583a2b743a83623d097b4c9afb18bf64e4bf1474cced5653c47b5d773f4bdf895b284344abb9b9618075543c53891740
- SSDEEP 3:OlH/lFuJRJ37FYUFgzM351H/Jl:KeJXqVzq
- TLSH T19081247141074331FF1717F30133C010113400C0140C34CD104C3C055074471C43170C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.zonemodding.minemaster/files/PersistedInstallation3551150945113925267tmp
- Size 569B
- SHA256 1d420b3a198a08e967867f5f1931d763639263e2f2464926e19304044b702bc2
- MD5 58e327780e8acdb6338e3d4be0141062
- SHA1 15b62dfe07745b35a5de3684397880dfd4c108a8
- SHA512 900a94907a566c41ea99c6ebebf09a76326409c71602faa66d1d34b348679c7073d5a76fbc63e68b330e08a19aa388b48b762fd9a1eaaa9564ac043652e8449a
- TLSH T1C9F0E12527A84AD48EDAD20101947D500C1814FD0E9509997FDF1C614F769AEA15B844
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.zonemodding.minemaster/files/PersistedInstallation8787728550935553675tmp
- Size 90B
- SHA256 4a9625e2b828baab6207e1da6bd90870702ef0c76e94cf9092dcfb7f0a69e9eb
- MD5 92cb12fe9326e5356c9713870bfe4f60
- SHA1 d9e9cd196bdbaa98615eca8146332754b1613e45
- SHA512 3fb92d51e9f056b6afb0646fdb0b2f9ab3c6fbfed6aaf63d5f4c8d7c9327c2507dfaab2cceb08251ff9635e8daf4ec17f43c9ffa6b028167445cef1f13fda746
- TLSH T121B0121447B042A1C89AA3031C4EA6115E60188008CDCE050B0B91A20A911D09503A94
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.zonemodding.minemaster/files/gaClientId
- Size 36B
- SHA256 828dfa2576c88233777e82c01e3548fa043155fdff2308718c425f664ae04028
- MD5 85d90e7dcbb7c19136617ff5d50169b4
- SHA1 8bdc60385b556cb3fe6ba2fed1a081087a32c05a
- SHA512 06fe0b086eae115eaaf93726a9af8cf70ee787d42c8d92e4c8d790f49ddd97cb0c18f364a6a6ac35c3b3f7eca135b37f7ddd6d3eaf344ffd11b296679eaf3da4
- MD5 SHA1 SHA512