fa1980a1e75d9a8f60b4c1f1ba4041c284c41e6c99fc0842910789b4cd766f2e

Resubmissions

20/08/2026, 09:32

260820-lhsblsteke6

20/08/2026, 09:27

260820-lesszatdkh6

Analysis

max time kernel
60s
max time network
64s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-es
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-eslocale:es-esos:android-15-x64system
submitted
20/08/2026, 09:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Slice-Dice-v3-2-13-mod.apk
Size 58.1MB
Sample260820-lhsblsteke
SHA256 fa1980a1e75d9a8f60b4c1f1ba4041c284c41e6c99fc0842910789b4cd766f2e
MD5 40b2e2342ad81c12eab821d5729de6d1
SHA1 78b0cc4c6c253640c70737678579615278d3a113
SHA512 c3ceab028cefbeff84d04f74f1ee7d8db4001b187a25d3bd95c973740479f183f6abc2b616a456b11e246d60fc2f2485131f5360866b9a7bd7ce93a25245ebe6
SSDEEP 1572864:a9Y5F2WNmQvaaFm5pbGJIuibzsTcfLaRR7OqW/W/2EntN:g3NaFm5hGvivsTcfL8BYejnT
TLSH
T1EED73352F183ED80C06765768E2689C0077BFA89DF42522B3185EA7A3DE77009DAD3D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution impact persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.com.tann.dice

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.com.tann.dice

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.com.tann.dice

com.com.tann.dice
1⤵
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:3393

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

base.3393.tmp

Path /data/data/com.com.tann.dice/cache/oat_primary/x86_64/base.3393.tmp
Size 604KB
SHA256 db80b6083a749600af85ea16d684091616fa5932510914f7ea2f7ac86472d56e
MD5 486f44a146929d1703467046c6358590
SHA1 67f4ae78280e70e188ffb9afbc3779019fe3d1ed
SHA512 ec76ce0919b25d39a457280671d79fe75eee8a093869927456feeaefd65f93a616553d10284a0c4215aab44d3f200c7719810f7f383d459c7b1ff4c702ed296b
SSDEEP 6144:mOJuWzOLeHQ2qBm7Ya+cLg81Uai3UXdwWmGDTxwOeluj6RDxsIjyiGyLJNpQaWl2:PeLOQ8CRoexlZXsli9HeHDzrh
TLSH
T1AFD46D5FBA529061C2EA7FF65E8745E8ED39D0162287180064A1633EE4F3F14E7A4FB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.com.tann.dice/databases/com.google.android.datatransport.events
Size 56KB
SHA256 18aa57957c79fd9c9d701d48516fb785cd1a00839b4e54775ce2053e34fe7458
MD5 9124e156709a310f212c64e28863d3f8
SHA1 564e7d63669293628815af4fe96e133b0b99de7d
SHA512 b1d2340c8f07cc0592d0bf45d65f7177ce446e023980553344ca220fc73d4dd5ea8fe5d9f6b6f576cb9f52251a33906ecfedf7cf79592bf7566714dcfda90193
SSDEEP 48:Tag59MENZBdUdndVd/729IvdldHlq8/Jq4qPSuFe4FL:TMEX0wIyNjaQ
TLSH
T1BA43419D1A3C2310E5ED243ED3E143A35A3C93DF771693E139944CF98DC20697827995
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download