fa1980a1e75d9a8f60b4c1f1ba4041c284c41e6c99fc0842910789b4cd766f2e

Resubmissions

20/08/2026, 09:32

260820-lhsblsteke6

20/08/2026, 09:27

260820-lesszatdkh6

Analysis

max time kernel
73s
max time network
64s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
20/08/2026, 09:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Slice-Dice-v3-2-13-mod.apk
Size 58.1MB
Sample260820-lesszatdkh
SHA256 fa1980a1e75d9a8f60b4c1f1ba4041c284c41e6c99fc0842910789b4cd766f2e
MD5 40b2e2342ad81c12eab821d5729de6d1
SHA1 78b0cc4c6c253640c70737678579615278d3a113
SHA512 c3ceab028cefbeff84d04f74f1ee7d8db4001b187a25d3bd95c973740479f183f6abc2b616a456b11e246d60fc2f2485131f5360866b9a7bd7ce93a25245ebe6
SSDEEP 1572864:a9Y5F2WNmQvaaFm5pbGJIuibzsTcfLaRR7OqW/W/2EntN:g3NaFm5hGvivsTcfL8BYejnT
TLSH
T1EED73352F183ED80C06765768E2689C0077BFA89DF42522B3185EA7A3DE77009DAD3D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution impact persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.com.tann.dice

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.com.tann.dice

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.com.tann.dice

com.com.tann.dice
1⤵
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:3386

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

base.3386.tmp

Path /data/data/com.com.tann.dice/cache/oat_primary/x86_64/base.3386.tmp
Size 604KB
SHA256 6821e50a69baaf14da0e8353e007ab8327bf3bb17117fa2a14e4f366b05f63c3
MD5 3b7c3cf428f5bc249c8ba1c79a407507
SHA1 53334d49d311ddcfa1087aaa5fb9481ddc4abb77
SHA512 7998613403bed2ba3b6db437bc6ca9c3c6c13d6d55d838b7baa10fd43120ac1f99027310fdaae6aaf1709128ceaca1c4ae5882a53c9a68eac10023471bd2d8f6
SSDEEP 12288:WRtcOJdBAoQo+g1HH9xRIzXx91ps2REjRC:0cwHR9xRQXhpsN
TLSH
T132D47D9FBA525061C2EA7FF65E8705E8ED39D0152297180064A1233EE4F3F24E7A4FB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.com.tann.dice/databases/com.google.android.datatransport.events
Size 56KB
SHA256 7a3847adfa5e863a174d15a3c05e303bf13700c888db001b8fc7b470c656a4db
MD5 842f26daf1a10ebdcddb50cbe7625be4
SHA1 c02b549d26bce0b1bf155b4629c4c9ea5ce9dc51
SHA512 51e4ec221b034b3eda0231c783f0843fa344c1518e51265531879e4528f44c0ceb6b92c6a5f7c92c63055960fc5aaabc144a100ad197ef2d74a2ce727bd39f0e
SSDEEP 48:Tag59MENZBdUdndVd/729IvdldHlq8/Jq4qPSSFe4Fz/:TMEX0wIyNjas
TLSH
T15143619D1A3C2310E5ED243EC3E143A35A3C83DF371693E139944CF98DC20297827999
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download