Overview

overview

8

Static

static

6

minecraft-...DS.apk

android-15-x64

8

Resubmissions

06/09/2026, 16:06

260906-tkcmyaca658

06/09/2026, 16:03

260906-thnmescr9t6

06/09/2026, 16:03

260906-thephscr8v

05/09/2026, 15:53

260905-tbwz8aep7v8

Analysis

  • max time kernel
    70s
  • max time network
    84s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    06/09/2026, 16:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    minecraft-26-44-03-v8_ROCKMODS.apk
  • Size 701.5MB
  • Sample260906-tkcmyaca65
  • SHA256 2ea88092fc9beb535c9ad43128d2d67e06bc6e17bfadf45b9b0eeb22dcd0e860
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Hides multimedia files using a .nomedia file 1 TTPs

    Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.

    defense_evasion
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.mojang.minecraftpe
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    PID:3355

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        base.3355.tmp
        • Path /data/data/com.mojang.minecraftpe/cache/oat_primary/x86_64/base.3355.tmp
        • Size 522KB
        • SHA256 3085c2c77fec1836214e9c713c8fe52562977c5aa200c9ef60519ae9b17f136d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 856b901daa333afbb23d656ac41f0630151a9857621d43608ecf7f2822823b7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 a52344d2a91e1c7ee3cb5050d161b01122b6e3ecdbc7ae340fd86d9c2eb110ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 5bb5f57c2c4dd94820465283b23d6cb1f0b9d4c63e38d9451b2ac32144d9bf36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 349c382f2828e3d9cbe321be1d51767834b0c1ed7f3d328fc5aa8edef48c40ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 6e80068d027db9395d38d7cbd6e43935b235267fc8e6111b44ab92e3a3934664
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 721ecab72188514863730469a5af1000a7067f4ace2436f67a40a8fcc0178b9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 35c99caab4a60f378132d528b4d63fe0ba539a59d104ac99743d91ebf21383dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1369380565130396970tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation1369380565130396970tmp
        • Size 90B
        • SHA256 1a27da9ff46330df6505e949cbe8cd63b62997cd0327dcbcc8ce68c5f8261ac8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation9169859355954863241tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation9169859355954863241tmp
        • Size 566B
        • SHA256 1bd94a6bcd5b62e67434ef917824cb43dbce488bca393a4de0d49735382dd0fc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.mojang.minecraftpe/files/profileInstalled
        • Size 24B
        • SHA256 ca1ab09bc45d706ce5f4505d7cc8b3ccb70ffcc795d918e8f061cfed41657fbf
        • MD5 SHA1 SHA512
        Submit Download

        external_servers.txt
        • Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/external_servers.txt
        • Size 128B
        • SHA256 59f9212782502d6e7f5050d7d070401a82f81852989d8f46f6451a1c11a11e0d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        options.txt
        • Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/options.txt
        • Size 33B
        • SHA256 ec42b226683c839a1184466b7030c4701dcfb7c1b65a30275ff821a360666fef
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.mojang.minecraftpe/oat/x86_64/[email protected]
        • Size 404B
        • SHA256 1f0417c68fcab1d670f6c3de6215496636d0a9549e4478c29224301b6edbdc59
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.mojang.minecraftpe_preferences.xml
        • Path /data/data/com.mojang.minecraftpe/shared_prefs/com.mojang.minecraftpe_preferences.xml
        • Size 140B
        • SHA256 cf5d74604ca8d6f7e660e82e65c856fed4416d3e5c5af23d4eaa7ac3a9d74775
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof.Yvnqmg.tmp
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof.Yvnqmg.tmp
        • Size 7KB
        • SHA256 bed12bdb589d5b09af1dd943485999913a043289240c98208c61f491272dc9b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download

        socket:[20445]
        • Path socket:[20445]
        • Size 50B
        • SHA256 3dbc1649049db4d3a34a6b61125f976994b9ec65a25f2a3a2625d03f196c326a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        socket:[24678]
        • Path socket:[24678]
        • Size 44B
        • SHA256 c7ecaefc98783972278c120d1ae96216cdbbb9801d239f13b2547383bedd9e80
        • MD5 SHA1 SHA512
        Submit Download

        socket:[24715]
        • Path socket:[24715]
        • Size 56B
        • SHA256 f6cb9d0704a7b99dddcb01be13573257ad06195cb8a64153668f7b5eca6ea499
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        socket:[25646]
        • Path socket:[25646]
        • Size 61B
        • SHA256 e44b1a578d20c866401d48bc494caddd3a4313b0c08ad8a8cc56baef7100b271
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        socket:[25651]
        • Path socket:[25651]
        • Size 48B
        • SHA256 4023e17fdcec5658306e289bd07988de7dfb0b94c0d9dcce98ea1280706d1671
        • MD5 SHA1 SHA512
        Submit Download