63a063f42576b748a431411479d415023b94d5069418c525f2858b3bf2174213

Analysis

max time kernel
149s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
10/08/2026, 09:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PlayMax24.apk
Size 26.3MB
Sample260810-k9cjssel6x
SHA256 63a063f42576b748a431411479d415023b94d5069418c525f2858b3bf2174213
MD5 e510d216a067e4addc89cabd2df5bebe
SHA1 92ff6abdb56e14f0478f59eb231870b9401fb7a3
SHA512 eea9c59cd18c5ba1b29dc944cfd2b4aa3b1915f9a03941d6b4171db339c7b3011035fa6ba16f34add824a07d46f51fe43044061313af0bbef73f906bca1e0cd1
SSDEEP 393216:wn7D/R2T2cMVbJ+CjpL4EowKumKHv7iICR7Zar8nt6W0TPxK3QQuz6:m126lxOaKeGIlr8nt6W0TJQ/u2
TLSH
T1395723D3F7689E2FC4B310724D6E52352A1A4D15CB43974B6A48376C78B7AE80F887D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.app.PlayMax24
/system/xbin/su	com.app.PlayMax24
/data/local/bin/su	com.app.PlayMax24
/data/local/su	com.app.PlayMax24
/sbin/su	com.app.PlayMax24
/data/local/xbin/su	com.app.PlayMax24
/system/sd/xbin/su	com.app.PlayMax24
/system/bin/failsafe/su	com.app.PlayMax24

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.app.PlayMax24

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.app.PlayMax24

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.app.PlayMax24

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.app.PlayMax24

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.app.PlayMax24

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.app.PlayMax24

com.app.PlayMax24
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5095

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

CFPGCore

Path /data/data/com.app.PlayMax24/databases/CFPGCore
Size 28KB
SHA256 a4feccd5666316055adf7c7612df476c210b78e0f65225a87edc5dbeb04aa673
MD5 ef9650627a35f169c276082cd6c9ae61
SHA1 c8a9cec5ae5e3b2a0026d225bb1cfa63dfe5820b
SHA512 1edcbfba742311ddff823b98be6eb263d68da584038875aa3fde86224f1af2b84cbe08d4f0dad3f8552a541743a2ff1b8ef1ecf8d87a3eba53a9a7802ebc0248
SSDEEP 24:TLP+sig0EZFib3FTilviiMN8gZ6GSiIQ:TzjGTsqlS
TLSH
T1EED2E0DE8F103752D1E61070D89023E31E3CAF2D9B4D67DB479444F7B8812766621938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CFPGCore-journal

Path /data/data/com.app.PlayMax24/databases/CFPGCore-journal
Size 8KB
SHA256 227fd670157586b4e42a3f2de1ce63b6be4b314b2d61218e034b6604fcc7c54c
MD5 0307d18a1e15c2cb0ad97a9c0b84ed04
SHA1 f86abeb54fda7e64f6c5bb77f0bbff206d9073d5
SHA512 a55a6452f8c2ee961e7400366906feae2b79b71fab18a58a8b7f206528df72c733b4fe8a99a728e0ee351d29fb154c743b7e9073bf3705f8d57fe02798a439ee
SSDEEP 6:7+/l9Tgn1Mulng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKBK:7+t9upqLiuWdwRmBEyPbwK
TLSH
T1E702228DA7800862C81E16B7A4D483601D40EF1D8275CB9719B00C983C038CCA4A0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CFPGCore-journal

Path /data/data/com.app.PlayMax24/databases/CFPGCore-journal
Size 8KB
SHA256 088aafde2e9b45bc48b0932f4b00ab7b34072f0086447c9200d1d00c33ea19ff
MD5 6425e26fc8a2c234fc9d56f94afc302a
SHA1 6a9bc836faedfea120f153a8fa40048dba87d521
SHA512 c94311c7a64a8f2c26b69cce0950e2e66da87863db1f51246d5c69403fb8a336195c5b983cba43c53af017154560b92a8c9274ab05bc6194407a6e684f66feac
SSDEEP 6:7+/l9mPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKf/3:7+t4qLJdTRmBEyPb03
TLSH
T11D02228963800C13CA2B1BBBA0C883803E10E7148323CB2716600C9C3D466CCEC90D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CFPGCore-journal

Path /data/data/com.app.PlayMax24/databases/CFPGCore-journal
Size 12KB
SHA256 d1dd21e6c63a282d611a85844f161b2bfb62e7855cb95ab8634f7f1a83a262b0
MD5 6c4f2ade35eb03f7688e2c9706c5c26f
SHA1 9d7d7c5b6b9608b41003ddf609aa36cea11854c7
SHA512 6ec6ddbda85b1a9080a84cb912be253250e7d84b8436e3a98a0132218e55e89ff6b29ee265091a61d50499ccd68bd6dbf87c7c79681d644cf90206f271d64043
SSDEEP 24:7+tPf/eqqLf+sig0EZFib3FTilviiMN8gZ6GSc:7MPHeqqDjGTsqlSc
TLSH
T1354202DE9F113752D1E62070E8A022D32E3C6F1D974DA7DA47A486F7F8823B66212934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CFPGCore-journal

Path /data/data/com.app.PlayMax24/databases/CFPGCore-journal
Size 8KB
SHA256 7d6b4dcc374c0b14f664782dd1c3a9d9895c41f899fd27145ccf83ecff2245f7
MD5 c720d0f41dab1de100097307529a6780
SHA1 12233d64e0608f0c9b603d8e3cadde16ef839421
SHA512 c79667aef15b19efb16d74b1227d5841bc0c58b70c4caebe82f48574167347ddca04883eef219b32f9caec23d571bdc1d328d135396972cf97d33c68ff80821e
SSDEEP 24:7+tTqLEaX+sig0EZFib3FTilviiMN8gZ6GS7:7MTqoaXjGTsqlS7
TLSH
T16202E0DE8F113752E1E62074D89422D31E3C7F1D9B4D67EA079445FBB9813766212938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CFPGCore-journal

Path /data/data/com.app.PlayMax24/databases/CFPGCore-journal
Size 8KB
SHA256 0d560fc3a53e17dfabc730facb0536b13001611bad8fb8a879dd5b999ac38e36
MD5 9af7c21f24731ecdaf703d190da326fc
SHA1 18a7064a285910e1787c7f33c863b052a8952129
SHA512 41f8a3cc6aed44e64f1b45871fa20829ae9560731248e613715a7ab08ea9690f8f290dbb440727593f07857f7c181c732272d4944e113597ff3558d68a930561
SSDEEP 24:7+txyqLCY+sig0EZFib3FTilviiMN8gZ6GSX4:7MxyqjjGTsqlSI
TLSH
T19602E0DE8F113752D1E61070D8A022D31E3C6F1D9B4967EA479488F7B8813766252938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CFPGCore-journal

Path /data/data/com.app.PlayMax24/databases/CFPGCore-journal
Size 512B
SHA256 3dbff04f2de5db3b80e62284e65df89b6d1a1a62d8ffe835e952b1df159a738a
MD5 4fec5febacd02e30641a03f6f92dc7b5
SHA1 30ae205a3d24c5c258bc2e534a58e57613dc58cb
SHA512 3a4f0e48c170182ebe44beb5c6822e57a2fd4baf8d0c99c6b53b9568fe968e11cd6618b782957c34bf5a863c04dd963082de249e7e21b63b79ced8df12caec7f
MD5 SHA1 SHA512

Submit Download

OneSignal.db

Path /data/data/com.app.PlayMax24/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.app.PlayMax24/databases/OneSignal.db-journal
Size 512B
SHA256 78270f507e9af7a4c701a96ab4f2b1e063d6ef2c9b31e8de258006e2fe87b76b
MD5 fda1bf0d9b68782e06b993fde801c9e2
SHA1 7005c21ac489c39ef462e6acf8a397273a9b1d05
SHA512 029a4689ae261551bf8d2e7bed1b9e2d99878ad2f557139f18ebb09ac89fa9869362f4cd9f5c5b2d9f31a505030f66da3656e6a5129cde1992132a0bacbb8306
MD5 SHA1 SHA512

Submit Download

OneSignal.db-journal

Path /data/data/com.app.PlayMax24/databases/OneSignal.db-journal
Size 8KB
SHA256 75bf9db2766341ca206fa65cc9faf9aaa724e29f39a4166c794909a63950d01a
MD5 d76690690569d57cbe7a0f511b2e4720
SHA1 bbfcf6a4f2aafc166c2818dfe5a5482369f1cdad
SHA512 b9551e902068203dc6d1f256fc3257f0899a87413c14f73ef6167aeae5fd2399ecd8d4beb9c57a73b69e4d8db3ecb63a06aff4d06c90dfba5c4f3bbeb836c4d2
SSDEEP 6:7+/l9d/mHn1/lkWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKi:7+tzJWqLiuWdwRmBEyPb5
TLSH
T16902C0BE63801823C81E1EB790F483410E10F71FC171CB07956008D83D0B4CCE8A0D24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.app.PlayMax24/databases/OneSignal.db-journal
Size 8KB
SHA256 484bb1923d08f76818348e25c769a8f5427be415ac90c87d691d759192df13cb
MD5 18c3292c76a9e0485109b092804e9ce6
SHA1 4c6077c00e6124ef0f1c7869e4d26f8f87783fdc
SHA512 95669d040d8ee531be7c37f932e04ea5d54317faf485f3bbadfa1cb07c6b2a170cbd03e4b186fd84aa0f962096fdb429d9e8d18e05e7c40b6c4900810af73d49
SSDEEP 6:7+/l9VuGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKaglC/qL:7+te6qLJdTRmBEyPbS0qL
TLSH
T14F02C0F963412813C01D37B7D0DD83422E10E715C333CB27157009987C036CCE890D88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation2257531592605177399tmp

Path /data/data/com.app.PlayMax24/files/PersistedInstallation2257531592605177399tmp
Size 569B
SHA256 41d803afe34433cb463943dfcba6278e09e3ed1deb9bad3f8f43bb6348f36738
MD5 42a80d63e7baac79aad21b519e848832
SHA1 ff49cbec07c8908414cd8341ce8ac3e0ed107d2d
SHA512 6f88d5aa879c2b865d5ac63d28768802c60cf2efc1aaa0eccb915cb47df446f77ae7185c024f3e787a017e0d4efee661951dc60d72241b22415b31e07213679c
TLSH
T1AEF026EB67744935D9957351159CB8540D4F40B147CA86785B8F3C7244B0EEA320B40C
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation269168451708797718tmp

Path /data/data/com.app.PlayMax24/files/PersistedInstallation269168451708797718tmp
Size 90B
SHA256 134a663097a4f79d8d320edbc30ace01d823d400b87cc723de6a96ab1c89e88f
MD5 f4d6436c60c916bdf07237ba0cb14dd0
SHA1 9b8566bd08ca9879b7da9ffe1cef909400e9a3f3
SHA512 95cc3d16b22305d3717aa4c1f9b98f1a351faa3c0e1480687feec3d9a07ea28134caca8f6c605013e972e42f64780a6bad337dd1acd41cfc116a2a22a41e9867
TLSH
T1DAB012004F308151CC96B3022C8CD2041DC01440064E8B080F0DA06140C52D0D143DEC
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation3997669253175143412tmp

Path /data/data/com.app.PlayMax24/files/PersistedInstallation3997669253175143412tmp
Size 569B
SHA256 8085d5c7b23f02dc087427d75a43a7e5d973fc5c5fee238c3d74edd3027930e2
MD5 5b787f92bf5c188aa27b10448c3a6cc7
SHA1 dd3af86be9a85617215fe01aa23baeda26713ec2
SHA512 8085d339f4837ea8084c39947fad8a2b923614b94b13945df9eea5d1481d715b79133b7f320c5ee7e8921166a376c126dc5b607c65243d1325aa32b51cb3aec6
TLSH
T1C0F041043618492AF8C6104734CFB8809E1B0EA0811D2ED4BF88CC6865D282EA15B4A4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation4749884273639040877tmp

Path /data/data/com.app.PlayMax24/files/PersistedInstallation4749884273639040877tmp
Size 90B
SHA256 40008d260cc105a8de6ed1065ca8fc3199ba58573624d2e8572c59c70d199f67
MD5 102b2c768b025295e4dca95a11069d86
SHA1 459c94bec2d09a41a24b61a26b52b58dd73966b4
SHA512 afe10b2684367b23dcd8c52c38e198b62886d3679c49c394243e1072ca64bead46fcd155908ff192df680ee0b8b3a41c34a68125f2f808b7a577befe41069792
TLSH
T17BB012044A34815299C6E6022C4E91406E921880484D8F854B2CD44000821D4C1539B4
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb

Path /data/data/com.app.PlayMax24/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.app.PlayMax24/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 fd8e2a19f137e3b6b953e329022de40219b8b72ea7fc9740fe477e901a73b8ff
MD5 d7bd7769bbfdb621fb3079d818eb27ab
SHA1 44e9169ecee85e62457152ab2d17992951ed7cf3
SHA512 baec5fd00683cc8b74a018c0ea0ea73623e1fc68ea640cc00b7fa829fbb051a9fed94bdeac9b0d221c665d2269d6f7345f6cf1fe793bba00fc7cf6cbf8e761b6
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.app.PlayMax24/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.app.PlayMax24/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 c6c5cd9ec169a104c7ef2de9eeb69c2646e6d9504bd1cfd79213c759d8589c1f
MD5 393fc3f49142ece98490acd8f80ebd83
SHA1 22880f80105430ac05027fe085646c0a322e285a
SHA512 21eda532adcb66f48d4781cfd979f57d52909c829dd2bb2dd756808ad22cd68760898250ddaa8d8670e524ae5f40527ab8cc3690c8eccb8ab9eb7160c0528dd1
SSDEEP 6:KQldPas/n0+GRyg9FZdrlOERX4PBX4ogLugMBX4suuK+/Wk+ufhWpzgOw2:KQCs/0ZzdTRmBEyPbP/GgOw2
TLSH
T14C72C2A69B820952C80843F2A0C6C38D5E5AAA19C32AC74B3F6818B87CC269C9150E08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.app.PlayMax24/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 a03db32562c4a59e71cebaf4f2a133efef37d162c6b6e1558395a9aaba46ee19
MD5 c4e57cdfc77d4e333004dbe4c83eb33e
SHA1 41337329d9a735ad09255434fa83b4d3a0a81e9f
SHA512 ff16c73f643f1ffa86743925dea9f4f4e083f47918f3ab1f74ac0cb9046784b1408109d8f86993583039f2788ac59249bf3c26002bbf019c9835c28eacf78f81
SSDEEP 96:715zFRCWQDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:715zFRC5ndjnHt9S/f8JzSV+6D86T0ED
TLSH
T1E3B3F18F0F5A2600C8A964F0A5D00FA17D3F452DD397E3D27AA14075ADD3921ED29CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.app.PlayMax24/no_backup/androidx.work.workdb-wal
Size 193KB
SHA256 41bb2ea5d4769b0ce2456a81b7e5e256abbb7321d0ae1895651bdec07484b0ba
MD5 200e478016eaa9f8919464eda74d0bfd
SHA1 75cde85b1637afa444bba1de03c68e008382c060
SHA512 55b6667503a9ec91eba068e3d2d495a88ad13f460484f3849a1827ce2002b07641d7058e455f4f96b0b97d7c063fce3243167e42f22e1dccf8713c1fec65cabe
SSDEEP 96:VE21DtYpUENEYUu9u2E21DtYPE21DtYJNE21DtYm:V1DtYpJL1DtYH1DtYL1DtYm
TLSH
T17A149CCBAF5FDC30EF0F0176A44246EA0F7B04F91B6A6655BA6F571022C2540CB2F992
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads