Overview

overview

8

Static

static

6

minecraft-26-44.apk

android-10-x64

minecraft-26-44.apk

android-11-x64

8

minecraft-26-44.apk

android-13-x64

minecraft-26-44.apk

android-14-x64

minecraft-26-44.apk

android-15-x64

minecraft-26-44.apk

android-9-x86

8

Analysis

  • max time kernel
    899s
  • max time network
    940s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    25/08/2026, 22:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    minecraft-26-44.apk
  • Size 748.5MB
  • Sample260825-2q8asswzhy
  • SHA256 7cd787dd39a8d35aa6f9f97b67c90e6c412b028378b67470aa4c34639a494c76
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.mojang.minecraftpe
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    PID:4742

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 a08a6f3a054cf65270af3a70964a5b005e0f45105aafaae7bf8f27e07d36ff9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 71ce71367b385745ec5c2a938b0b06ff765c4414ceb3bd7fbc794d27f5e65249
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 610d4efc8fdfffb752281a9792d724529b6ed1bb2d9a287ff376eecdabd263db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 cf90976ac9e53d7cfb2e81c473eedd460a1ddcd4f07922fcccffaf29964c710b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 891689552e533733e0baf55b9cf4f8c8985f816991fdbf24db71148bb8810c6f
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ed915c29b83069879a8077eba3aac7dc7617601737f4abab0936bcf738b86b7e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 b75cae0e68e77b2cf6996b241b32ac0f63d5b625849e3f4e5ffa28702d43f71a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation3826437635223062485tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation3826437635223062485tmp
        • Size 90B
        • SHA256 68e3a1f50ed0e7d796d290d83273d5c9a842aee9e6b8a18bf669c00aaeeee513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation8049634568652489819tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation8049634568652489819tmp
        • Size 569B
        • SHA256 d5091b18f3fa27475df04a48184896d74b800c87f62e3357c571f63cf6f550f4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.mojang.minecraftpe/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 3774989c2644f02d8f95cb1d9a03d5c9635a710de41a398fa10820503f672009
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.mojang.minecraftpe/oat/x86/[email protected]
        • Size 1000B
        • SHA256 918b3dee0a03c026d125c4c6e74a81eeab14d77cdb18a1ba103134e3e0cd61e6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.mojang.minecraftpe_preferences.xml
        • Path /data/data/com.mojang.minecraftpe/shared_prefs/com.mojang.minecraftpe_preferences.xml
        • Size 140B
        • SHA256 5e3537a15cc5a404e726c598c9bcac6c99d0f678da10a3e55c1760d3d247bb46
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 25B
        • SHA256 25a822139d06016af8be1296c0242b60e35074f94c713e03323636be1162ce91
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 2KB
        • SHA256 ccdc552c83306173fd6a2026ab7918189262f62a3bd3c9264276931d49a7f338
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 4KB
        • SHA256 7cfe53b520c789b70b3ac3acf25201f49816a2ff9dfdf5118a655daebbe596b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.mojang.minecraftpe/[email protected]
        • Size 8KB
        • SHA256 460af80321f8410e688a8a3975b94c629e78b50f7d170894e41e3005b6b296af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download

        socket:[76656]
        • Path socket:[76656]
        • Size 50B
        • SHA256 3dbc1649049db4d3a34a6b61125f976994b9ec65a25f2a3a2625d03f196c326a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        socket:[79275]
        • Path socket:[79275]
        • Size 34B
        • SHA256 62997d84140b4eabe3031980ea1b3bc74b7c387520ee5f87b2db0797ccfa0346
        • MD5 SHA1 SHA512
        Submit Download

        socket:[79754]
        • Path socket:[79754]
        • Size 46B
        • SHA256 5d1172c748ff642ad9c6b198d55ad0cd5db84a7171fb834fd2fb711e855f8c7b
        • MD5 SHA1 SHA512
        Submit Download

        socket:[79818]
        • Path socket:[79818]
        • Size 44B
        • SHA256 c7ecaefc98783972278c120d1ae96216cdbbb9801d239f13b2547383bedd9e80
        • MD5 SHA1 SHA512
        Submit Download