6889f2c99057318bc4d88626ba8605ce4582a8d840614f4fc70f3e3fb2ca02de

Analysis

max time kernel
57s
max time network
67s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
10/08/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Thronefall-v2.12.25-full-apkvision.apk
Size 188.1MB
Sample260810-ap29lsfr61
SHA256 6889f2c99057318bc4d88626ba8605ce4582a8d840614f4fc70f3e3fb2ca02de
MD5 616a2dff4b9e6ddf47001e625db6c531
SHA1 40d0dbc123ff9e75f83e9e7f9d10aad0fffea34a
SHA512 5353359b2e890978ced5fdfe45deefaa0712841c85b8a07bc07138aaa4f5f0faed735e87c7df22a26046aab43e8269880db4435d533d8adfb69eb149ba53a4b6
SSDEEP 3145728:TGdBCbSYHdKKtugl/l0ZelVkwavl/V9fD6S7Rj0fK6zwY0qfll6JgLIIMSA4/3xx:s6SFKk80Zelkb0ugaiDKvnfPY
TLSH
T18898F1E444C24D0EE6390174798A043CAED6AFC6C5420BE98BA8737634FFB95879D973
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.doghowlgames.thronefall

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doghowlgames.thronefall

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doghowlgames.thronefall

com.doghowlgames.thronefall
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
PID:4200

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

socket:[58486]

Path socket:[58486]
Size 48B
SHA256 2cc0dc0a12498e1e5764195e2f2653b920fcc422a06304009e642d35d6bee02c
MD5 c7c5fa41de02c603bdedbbe274bad404
SHA1 7adc886633d1b01579e12055f3cb75e8e4ff64b6
SHA512 ab67bbbf1542649529419df48af11de455b4d1a59fbc64220fdcaf1542ec8cbf602d5396cdde07fbbec447d1b310ada2b031dec926eccb7d5736331ac93ec743
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads