Analysis
- user interaction
yes - max time kernel
123s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
20/08/2026, 14:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
r6-game.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target r6-game.apk
- Size 21.4MB
- Sample260820-sbbhvaea46
- SHA256 0ba58b4d1e08443a454f15ac1db57457de20627eaff3b84005280c49a3e58148
- MD5 c8e9162fa6501e9e83c59ec5c2e6c0ec
- SHA1 36a2e6708e8156195e04345c635aff74f3a94786
- SHA512 e32edb908acd2327e98f3206ce7c1376e6853ff9715e6675582edf4ceb6b32ec3fae2f72349186c39b0d2a38066c0966c11df0948082ef25c9df43257d209a5a
- SSDEEP 393216:xDAzxXqOvG/Ja6hbgzabMvTEqKDvdVrJKlNI:xDAzEOvsJa28hCDdT
- TLSH T10337124797872486F6A6B07F45891935FD603C306201EFCBB9207B795633AE98B77388
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.game.r6 - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.game.r6 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.game.r6
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.game.r6/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 888f7049977b1dbe1793ad4c46fcccd40322c43469129ab96e4de52122c87af4
- MD5 b7a883942680b9885a41f8a7830f15f8
- SHA1 1deb85d29cd57faa72d7c414b02743bb37651c6e
- SHA512 04d8add2fb8229454e4d653b187fdba9346f38eaff45b56542b6dedfd19b11f2aa3bd3ab2c5ee5e2a7ed4f42ad633d37ca476e86ec3f44bd8648fed0ba920809
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.game.r6/primary.prof
- Size 2KB
- SHA256 297418b3248ea02392de127fc997c241d7d42d81a1ef60f6605036288c179413
- MD5 f6792e8cc7576514b8b039a44946c5ed
- SHA1 993b4b7ac2540a98b44e33dc6571b3e6d9531905
- SHA512 b915929551682689e4b36af868d0e1ba77f073ac72e8bdd93f97d7727d76de7d2b5d61fb32809ae32ed4d2194cf75062204889a8fe2882114968f7daf5ba1a04
- TLSH T1FB412BDF1B492CCEEFBD8863256EE3DA53B98A1C5B167070C346160F15E10B044A9661
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.game.r6/primary.prof
- Size 4KB
- SHA256 ca3508fafa46e3c2bbf98953f6f3ad0212ed598155944516f1eed41223db6b87
- MD5 0b0a669980254798d086f469986c15a0
- SHA1 4a596fe7e270d40bfe41382ac19daccbc48c1ea5
- SHA512 97f1a5a54f7083976c76ddc4f45935c47085885e60aeb10536794a51364b2dbdbd37542accb98f651cfbe41c530c6508468886cf6463cfaeb3375fdaafd1cb1f
- SSDEEP 96:/kSm6Wr7lqOMT7zHtTV6vuPm+rOWj9Bh2MCZrqtMAkIyD1YGEEqmkF11:M77oO27zVV6v8TrOWj9qHZrq9kR1YGEl
- TLSH T11EA16F3CECBDB61E9A5D26C44CAE1B406347C4215D2DA29DDF9316799E401CDF608E29
- MD5 SHA1 SHA512 SSDEEP TLSH