83c45ef7a55af599225a7b98b8717131fb8cb8aacf499b20552ad27083c3c3f9

Analysis

max time kernel
135s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/08/2026, 01:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1719950.apk
Size 50.4MB
Sample260807-bkv56sysbx
SHA256 83c45ef7a55af599225a7b98b8717131fb8cb8aacf499b20552ad27083c3c3f9
MD5 186d5f2bf1b7ecedf02067586677590d
SHA1 cad95137d4a51e2ec84c840ba414081aa0cd4c8d
SHA512 1919b31a0d877d78f5884a85bf7bf4ddf11b9c7788167d47285e06cd730804535093a62bca706e2e16c44de659cb7a002fb7fb87a99aea911c3ca4fea5e80955
SSDEEP 786432:MBSURYupdBfgayZ5LVh4g0tuvNaiDWN3SuELjMbb+EyBgvkqovNmgO3q/74uOu:MBvYM+ayZ5RWaEzELjeZ+gMqoF/74uZ
TLSH
T107C73359DBA0D055F8EB81319A950907A7152C2AC783EA0BB19DB07C1F77FE42E24FE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.dotemu.neogeo.kof97/app_container/bemobi-drm-service.apk	4730	com.dotemu.neogeo.kof97

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.dotemu.neogeo.kof97

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dotemu.neogeo.kof97

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.dotemu.neogeo.kof97

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

com.dotemu.neogeo.kof97
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
PID:4730

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bemobi-drm-service.apk

Path /data/data/com.dotemu.neogeo.kof97/app_container/bemobi-drm-service.apk
Size 1.4MB
SHA256 de400d67ac74f6de579482fefb22b09f6071e89a9b165c8d7fc2734554b129d1
MD5 9280a556a9843546d6b4810b4bf703cd
SHA1 01d6292a0495f86da1ab5913f6ad44aab21107da
SHA512 b32ff38560ea5e99791320adf66934ce8511b78cfd0a803de7ec081e0e2305e5b5c488d6441da56a0c59a582d7c760679236c3d5bf5c294e64e103357dea07d6
SSDEEP 24576:M7QGKSTzGycDeXZlpb2BYTKizBBtriQ3jkw+4FttwixaawqIf4i:MUOzG8l0BYTKizo4jA4FT9xgfV
TLSH
T16B651253F339996FC871C131258A6739051A4D39CA42B78B38487BBA78BB9EC4F903D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bemobi-drm-service.apk.tmp

Path /data/data/com.dotemu.neogeo.kof97/app_container/bemobi-drm-service.apk.tmp
Size 34.4MB
SHA256 6d8fc6e6dbd1a24b1bc35a8a31996cb44fc8d1bf4bbc9a4bb52123000cc97fce
MD5 6ca25a1408ff60d875bef47bac604b38
SHA1 4198fc62d024a6a4eae7565d62128b54a0bdf65e
SHA512 a0b345d7103841780e73de397f9a60d2dd842f2c3860365e7020500dffcfb3f772682a3d4bee21e84b7e51b81ceeb62b3fe76a3edd19d7dcf4c169d8335e9d64
SSDEEP 786432:iGKDZ36HE8ShxKrMG9ADZoI+UjM1QhHc4/2azgyO6C9H9u7rKDb:PKD96Hf5qDZoI+Z10c27+HEKv
TLSH
T151873301F1BDD206CCBAE5704E05A66C6E212C9490E15B2E2DD44B9A397BCBC9AFC3D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ads.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/ads.png
Size 7KB
SHA256 f0070a814bafc1d4e56582de551df13124673bdb407b694323fc84ab72452eb6
MD5 42f2ce71ce3f9672458c3112af4310d8
SHA1 2e8cca32aa01a4f5ab5afb6fab3f9ef9722c5919
SHA512 c160139657e8df34a9261036a89d67954dc6a440765c0ac8b6a4102967880784db611b9a8e93a1419bebc953b15d7354788495866f5e291860a146a8d98cc63b
SSDEEP 192:L1q6+1oTieeXtFuDAoB7/0zZOfA7/7xgdoXKi3nehaA:L1q6+1teedFuDAU/EZL7TOoXKi3e
TLSH
T13DE19D7596B13DC3B130686BDD36320B9FDE6B8946E0F31FCA84AC65B60D028CD4E552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsclub_logo.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/appsclub_logo.png
Size 3KB
SHA256 2baabae625bde1813d75715d5dbb4de514af03e613eb3c9414865769988df370
MD5 04919eb47df136869f3f0fb9d21b8af6
SHA1 a1728c4f0fa6e865cebb04b0fcdcd3a5c13b1628
SHA512 e470255e9d1308de68b8288a0a5b3c527324dce2549460eb70e81435d98f39b44b37429efb214438d93d745844824b31e3974514ff93df8f0478405a01d35f76
TLSH
T1EF614B9C8E6EF4B46DEA78E68F86C71248E406205887270BD4F956049C2857FD1B7F63
MD5 SHA1 SHA512 TLSH

Submit Download

billing.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/billing.png
Size 7KB
SHA256 6e1a7317a10c97bfbfc0fdb62f3841489f753d06ca31188fb5909a4d112d168e
MD5 a9040c0d720ee5c69ae2657a869fdc37
SHA1 f76e9c036bab05137411d03a11e5440a40112ad0
SHA512 6bb8e6ded1a231e05d6fcef7c2416d5efab6cd6fd318c04ea3ad362ed124649c28c836395eb4856ad89d895ab65efe05071b36e9b68af4a1025fb48cec1464d8
SSDEEP 192:MBpBgWdpA6OeAC+f47meZPFMpRHzgUrfYlC/4qD7:MBpBNzSeAbQmZRHcIYl1U
TLSH
T154F19DA5C61A8E76AFBC442BA723B06943A20203A934E835D781CF5F85EF357CA48711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocked.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/blocked.png
Size 4KB
SHA256 0855cc890d5a6579a5bd1874faf20e1d23a2c537dc4128385f03051e8239b3a3
MD5 22410b09a7acc7e86dc09680db223ae6
SHA1 2ad9207430e89d0655dd3ee5e8231563975b9609
SHA512 111111c7d63d2a39bcd5d523a54af15b1e91908958a5d16d91e1b1e7c92908336f8ee537692c26a8ad60c11b24a1191616754c45f6fa9772fa286fc4013d1bea
SSDEEP 96:3QwTR1npgl9M4kjumBoNFygyFfVwe8+eZXerLBGxd8iIW2+xj/Wv:PTR1npAM4kjuYoqFfVwe8hZuriBICxjE
TLSH
T139914CF1E2DEE2889E6A7CC88F0501017524FACD856A5D62C57AC56F1EC3F5F6D48183
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

checked-parentalcontrol.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/checked-parentalcontrol.png
Size 1KB
SHA256 bbc3449a3acfb0eeac4528e1a202f77db1518ce10609dced7060d4e5979d62c1
MD5 ea78abf64036b1c43185b1b226fcb637
SHA1 53028aacc1313c3b2a6f5548970fc27017b214a3
SHA512 7c4c992b639249418b38de228475052d682db041563c5c6b199881b1e3c786dbedf4805a6563ca5537eb51da7cd0c06c04a4cd7b27131e1736dd3a582f645f73
TLSH
T1A4410A0DDF811850C1AE470136FF800B9E73AD20E1F1FBA7B886A00B7D9626801259C7
MD5 SHA1 SHA512 TLSH

Submit Download

checked.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/checked.png
Size 1KB
SHA256 5be514b266bbddad5982a24a84084cd044133a48fd4a0c5107e371a7eb40234c
MD5 b7ce69f86095509ed7ac0991ac8f1842
SHA1 7d12ff30fb941b416400cc267fb5395db8013587
SHA512 88396c65bfd559db3d000c5e460fabb6f126a500835eb79b1d27aca9d44d9cd938739704932527aabc87eedc60f46d4de713888099e9ae05dced22416b7cbe9c
TLSH
T1BC31F866EBDDE61C4A680D7A33A071D00AC10D90D0A76DE0C228EDA9671D3C1E944BC5
MD5 SHA1 SHA512 TLSH

Submit Download

cloudheader.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/cloudheader.png
Size 42KB
SHA256 95ed84f1147920f37159cd69ada241747659ebb10842fa02f526c3bbd19da10a
MD5 2cda5e1b14bbc15351983c3497294b7b
SHA1 3bd0920c2f18665b989e7e7b4575e6fde6b798a3
SHA512 502d7e43a09ecd05596cc866643eac454a1ee1c037575823ad61d8de95ff8eefec69d84a59a0b55b0ac485f8fc206f8536ec2058fb25fa43e9611b94d4a5fbed
SSDEEP 768:+++N0E6Mv/Zi5YHSYmTzISb4piTN1lqF6OgqpH5RoMfIiKSoHD:xy0MCK2p4pCflZOhH3ruZ
TLSH
T1F313F2FA439FAA696CD20C20C202FF159C949110EFB77D57D8AC6637430CA54CD6966E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_logo.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/default_logo.png
Size 14KB
SHA256 5413fed88fb45c5f0de31f1229f4ce3057089cc2c41e8ff43da64135c905968f
MD5 025d76916e52f6d923bdaa3950393c80
SHA1 a5be32fcf9cb5a092a0b8a3a9ce33c727a3c030e
SHA512 f0ed6bf7375b87e7e3a4c6baf078ac6e57d0fe48f716d1f15169a39950f3f21ad6acc7c955a84862048810b300f6023103372803195c4f56ed2bff3c285d4417
SSDEEP 192:q4LZEB3S9xEMOVuPyIp+M94YevPtpj3bqMe6ArOhT+vj8rQtvF5fI:FZixMOVuyIpJFedpjLU5wT+AstNlI
TLSH
T14352AEDA57816B98C82D42130FA3B05ADEC842D4FA37A474580CD54ED970469ED3ADCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gift.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/gift.png
Size 5KB
SHA256 5becd6760a6f0b93ba30ace255964d25c3e441a779e11561624f0418d5b27a58
MD5 a19fba00151619243d73ec1097bba42e
SHA1 1501420495536a55d193c4b57b1e4877b73fb729
SHA512 291a7129ea964bfef7581e472162ca1186436044c512b2798ee5e12a629c7e0ab62de952c6c1c59f96a462b7a5044c7636d762a4a14405887647314c4cc4b0e0
SSDEEP 96:j/hh1z6r8VAzTvc1aXdSqHm8bpDqtDPe5T7flWqtmLAc7VaYcF+vCXWpH6GlQXIS:Lhh1WrGuDc18UgpMt7M7fldtSAc7pchd
TLSH
T19AB17DF12A3D9DE310A125146DE81B040E60A4FC45E2E39EE8962F629FED630AB47453
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overdue.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/overdue.png
Size 5KB
SHA256 ba9e3f76228461a20368b182eec73eed02299ec97f53d8c7f9d533228f5211dc
MD5 ec6f39ee5d8987cc6c2c67f178f9fa01
SHA1 09d1a46127f1544ae7cd728404f736a86a4bd3ff
SHA512 2a54fa8d237328d6953108723469683f598aa82599990129a67c4324d542002b4d7bfa7d5e8c4ac8ce4403e698a160f57bbbb6badf33bf15715422cfe9b50f49
SSDEEP 96:4MdOaA1RK2sTn8OQolbI0bUUB3XeMnzuap258j2K/QdpN8pWiZqE+9me5x1UG:7dOm7oTv0bUUB3uRuv2vdpN83ZqE635
TLSH
T19FB17DDB9A9E50F5E2E5E690861EC3299432B014CD70F31752610F341D08C66BBC90B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

parental.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/parental.png
Size 10KB
SHA256 5092dbfb46909afe785652455b88893e53f4eed16e4177cc81d4bcec5bdae3cb
MD5 7c137f606956fefca195ac3e9bb5dbe7
SHA1 332b115a2bb3a90ff0c1d210ceaf87c9c3f3b1b2
SHA512 3a45c5a0b96f323b85daac94a909407890358e0b70c36f947415d083d21294190339d61db521dfb2672b1647fd0b710d14827d153abd4b565d04cbb392782361
SSDEEP 192:ZNWBXdMa2IVpADJH5bPamdwPK+Br8ks7IDU4R6K4ONhTATYP7uKLTHZTEhAR:Z8RdMa+DbbPRwPkT7IDU4AONhTPTxLT5
TLSH
T11622B0F2B0DF0ACDADB68A214338E809725478A1553BA229539D1D4EBCC1DA6A47D3CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

progress_indeterminate.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/progress_indeterminate.png
Size 3KB
SHA256 44d2ab9ad27a33837ac43172baf386ec9f99a3a51b44ef1248af6e9f336ddd5c
MD5 ea8a45223d7b621edd22ee130f960b3d
SHA1 a4fdc1eec6a28a384ca420244ee2eae23084cad1
SHA512 ebf4590a61d77f92820573249e8f0416ab2eaa5976f4e1ce3df7ab5619bc77255bf9f845206afb1b2ba174ce1619bd72f2c6c415c66282d7c5d16228f93df8cc
TLSH
T1BD616CC98A4485C17A415B72F27FDEB36D648129E0C038940B489133F1FB44D5338867
MD5 SHA1 SHA512 TLSH

Submit Download

safety.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/safety.png
Size 9KB
SHA256 7cf07ebb68ab57421985dde3dad262214ff431a974d4db22e21c5b498968be33
MD5 302e231a42fb37c6f810a15ff94fbafb
SHA1 28c50a4e53146831f263d15882b18fefdcd2d0bb
SHA512 7268d68a08adf17cf96a930ff7dc336063dc20465b961bdb417ed7d74bd1d9bdeb894167a859fc66c52966cecce615c4f5f94fb88ac811e2f20da3b32b44fc70
SSDEEP 192:HLEGiHsr/04bl/ZKiFLsS4szOkIy4EYJdtmEdbSkLNCK3:rzzrM2/PFLB42H4HxdOkLNCK3
TLSH
T11012BFAD713E2198ED68B006D69028495AF2F0D8F013C656C2035C6E65EAEBD2FC654D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/sync.png
Size 9KB
SHA256 602b1a08e321810cd55a460fbcb25aec89f808e3fe9fbe60224d704c64bbf82e
MD5 8c4992210320b4185fcb85d96212f542
SHA1 8d76e87d16632d3d1b7d12a7493b57023db24a77
SHA512 28babee18d27960e1bcfbb3b3ddf8a130528f37911bc9cfbd5c233af8884964fa75f42b36cecaf3c8b4674696c8b33b52508ccd849d239989aefa2ba1ded9f98
SSDEEP 192:hSsExkuF6Vhw1lr4NkzONGFB6256ePBx+TLOEfIuMpN7GnpTQQQXDQzXWh:Ilko6VcXOs36OPSOEfNn+
TLSH
T19622AF2B322A324FD24E69FEF4B442E5C5C171178834AC7B5CC6C9BE3C799C59081299
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

timeout.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/timeout.png
Size 110KB
SHA256 013e1c7a81fc042b7cddd73077b11318cd1e98350d1e581154b219871fbe7893
MD5 6768abcdb41f9ba7be9b9ea2f037c53e
SHA1 8ff9f3014b50f12005864e38addbb4d451d1a598
SHA512 1cb05c9eee6e2efe7e32d057734ab2def297ff3112cf1aa04db865fa45b55ce96accda68506db706a97d0a4dfd1d35998a713e1240694cdaaba62d4ca5c800ee
SSDEEP 3072:p4iBq07C+dBmkqiMGDCR5Z4c20eo3idroj0r:3U+bmkqinDCRXwdEQr
TLSH
T174B3127841722FB386FA21C9D17F7309E8DADC7FB5514AAC91A7EB604B901931D60F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unchecked-parentalcontrol.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/unchecked-parentalcontrol.png
Size 1KB
SHA256 b4947c62228ca094669052574e08be8e394dfde05f08197e06c22892c0056b15
MD5 206a1ccd8dcccb239496071658654fab
SHA1 8eb13b1ec7a49fa66190e6ee131e33b4d8acbdd8
SHA512 5044fda8fc61f15433558c34c1fdd8e52d7cc959fb7be09d4f4a5296ba5751b35824e0555c211e2762b185d2f3621ba7490222d4e709c02181cebd0343eca90e
TLSH
T12921D60EEF414500C18AA5B314F7001F1D678890DAC1A5F63D9BD8370D343B9252EEDB
MD5 SHA1 SHA512 TLSH

Submit Download

unchecked.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/unchecked.png
Size 144B
SHA256 967d60cc1e8f3a3759f25cb0c49851b47735f63c9b88401c9923f3a23e7f73e6
MD5 f2d7c700b84772331d36e69219471a29
SHA1 122788eea8ddedfe59a0d084ee786486ac820db1
SHA512 abc48e2d589c81c8a1ac16c4d3d7240b26c49d0514c78cefcec75d9a4cdd67c139b3ee5b99fc6b17577a6eb90dc3c58d728e659b100fa5076e98817bb3031a2e
TLSH
T109C02BCF31927C21C33B903B0DB180C9AD567C40236882876F5189330652003E0D8303
MD5 SHA1 SHA512 TLSH

Submit Download

update.png

Path /data/data/com.dotemu.neogeo.kof97/app_drm_images/update.png
Size 3KB
SHA256 44cec954c399e97d976555970d9be7b6b67159ecb2aa913778b69bcd6ffbbbb6
MD5 adedd60287572fd9f568a9c0d1b81f7b
SHA1 0a5bfe0baab3050318fde9273fe41e8da2770a11
SHA512 47bce06cd4c5c2c9259b1b4150e7216f3934cc982a02b363b82d8d398ce7f1129d8125e2cdc3b775bc6994693c0f162d506ee14ded671f549bf053f569236d48
TLSH
T15D615BC44982D3E1B2864D376B794313BCF4005B6D4B64CDE21BCC5686AFD14C583BC0
MD5 SHA1 SHA512 TLSH

Submit Download

bemobi-drm-service.apk

Path /data/user/0/com.dotemu.neogeo.kof97/app_container/bemobi-drm-service.apk
Size 2.3MB
SHA256 30ec14bbaebcacb088834452bc01fded41a174174cbbd468f21c897bd46c463d
MD5 ff42f92f1a4fb2011f9f87bc87dd4073
SHA1 89683c6fee8a3a25b323040bb32bfddefe4522bf
SHA512 b71664fb8832173456f5c59f2c307733249f59e311966e8268f5d68d6f398d76d6563679286143de89e05f8f7e5593595ffb75237159bebc5025ba1186fd2e32
SSDEEP 24576:KgtPYGH2Rwkh0OQRlzNzeOK1JtMGyoH6/Zv5SZ9U9P7AP1YH/mRl/dUXtEugr3K+:Kgt254zjQqrKK62dSNJH1EhYh
TLSH
T1AAB57C4BA6890E73C4EE423524B63708373266056F53A75B1145E9F8FEE3AC5EAC42CD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads