Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    10/09/2026, 07:58

General

  • Target
    jaffacakes118_EpicGamesStore.apk
  • Size 18.3MB
  • Sample260910-jt2nbaszbt
  • SHA256 8b6c424ff17a6c6f1e80ac4c3e3b83e4d95bbed0758a5d59c4cf91057b82ad61
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.epicgames.portal
    1⤵
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4803
    • /system/bin/getprop ro.hardware
      2⤵
      • Checks Android system properties for emulator presence.
      PID:4861
    • /system/bin/getprop ro.hardware
      2⤵
      • Checks Android system properties for emulator presence.
      PID:4948
    • /system/bin/getprop ro.hardware
      2⤵
      • Checks Android system properties for emulator presence.
      PID:4969

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AnalyticsDatabase.db

        • Path /data/data/com.epicgames.portal/databases/AnalyticsDatabase.db
        • Size 20KB
        • SHA256 6c922f2e566c629eb9dda4b6b35e6ce9bf0f33e47c8dab2602f80dd60757ac0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AnalyticsDatabase.db-journal

        • Path /data/data/com.epicgames.portal/databases/AnalyticsDatabase.db-journal
        • Size 512B
        • SHA256 396c91953606063cb97b887214448e24ca8573a281418f65326ad6858cf8c2e1
        • MD5 SHA1 SHA512

        AnalyticsDatabase.db-journal

        • Path /data/data/com.epicgames.portal/databases/AnalyticsDatabase.db-journal
        • Size 8KB
        • SHA256 10d19eda32ec214f8e5f9ea2bf97b52cb48aece309725091f67e9fc3fd5bc4e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AnalyticsDatabase.db-journal

        • Path /data/data/com.epicgames.portal/databases/AnalyticsDatabase.db-journal
        • Size 8KB
        • SHA256 ed455d468f385e0cc45680cbd0f8b233cd2df56ae1da215b384e21f18659dba7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AnalyticsDatabase.db-journal

        • Path /data/data/com.epicgames.portal/databases/AnalyticsDatabase.db-journal
        • Size 12KB
        • SHA256 a1eb7ab703ba1409023150b4641120cf8eefc99075b584317789ae3b2f3e4c02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AnalyticsDatabase.db-journal

        • Path /data/data/com.epicgames.portal/databases/AnalyticsDatabase.db-journal
        • Size 12KB
        • SHA256 de53c21806fd39a5c774ef77e03e7d6c1da3037d7c2ce665f75d430400b54ef7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AnalyticsDatabase.db-journal

        • Path /data/data/com.epicgames.portal/databases/AnalyticsDatabase.db-journal
        • Size 12KB
        • SHA256 0067ff9d28cd6fd9f784017b08c3ac15a47898c954b71c7f34e5721d2e014969
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app_user.db

        • Path /data/data/com.epicgames.portal/databases/app_user.db
        • Size 4KB
        • SHA256 0ba8cbce9793a324a6d3048e2b21b1be8c6825f70598d470dc2b05974e45fc18
        • MD5 SHA1 SHA512 TLSH

        app_user.db-journal

        • Path /data/data/com.epicgames.portal/databases/app_user.db-journal
        • Size 512B
        • SHA256 50fa614ebec07326051451b6081ebe74641987df25ddd798c2fe871c0194df25
        • MD5 SHA1 SHA512

        app_user.db-wal

        • Path /data/data/com.epicgames.portal/databases/app_user.db-wal
        • Size 52KB
        • SHA256 a4f9efb1ab97c48586aa6f67f8abbee9a32417150a17cf613a1ca8526f1c0e2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.epicgames.portal/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 f23ccdf2bba8ba0efb68e714c1405a7ec28f918b9dd4205fb4b892fb405443bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.epicgames.portal/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 4e44b37017dbe9651c8671b0f27331c657f3b90475576366dffa735fc2945c61
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.epicgames.portal/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 64f6fd40834e6767c8c224ed5d96bb2b996c6d00b98c209d166b3321bcf82156
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.epicgames.portal/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 21f35e3ffbe6a5ebf6a5d73f1347218b06fd56f2bc08d7b162612d5f69aae0c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app_data_store.preferences_pb.tmp

        • Path /data/data/com.epicgames.portal/files/datastore/app_data_store.preferences_pb.tmp
        • Size 33B
        • SHA256 79d70c03a73f7bf55e587e4c136a3437aef3f561cdc62541b59c2059b0429281
        • MD5 SHA1 SHA512

        app_data_store.preferences_pb.tmp

        • Path /data/data/com.epicgames.portal/files/datastore/app_data_store.preferences_pb.tmp
        • Size 61B
        • SHA256 43f6070679c29b961e9d13cb610c604527690dc0e1a1e6fa1551f4eacf9163a5
        • MD5 SHA1 SHA512 TLSH

        ega_migration.preferences_pb.tmp

        • Path /data/data/com.epicgames.portal/files/datastore/ega_migration.preferences_pb.tmp
        • Size 19B
        • SHA256 3dc7d85677cd7cd544c1287b98b0d6c59edbdd0b5ab51700254bf7493406ffef
        • MD5 SHA1 SHA512

        store_data_store.preferences_pb.tmp

        • Path /data/data/com.epicgames.portal/files/datastore/store_data_store.preferences_pb.tmp
        • Size 38B
        • SHA256 d8b8276c1820d6c50fe0f190fb8a2391840569bb8bc3ab828d9744c374164a41
        • MD5 SHA1 SHA512

        store_data_store.preferences_pb.tmp

        • Path /data/data/com.epicgames.portal/files/datastore/store_data_store.preferences_pb.tmp
        • Size 78B
        • SHA256 31fd2a4d2b62fd2cd88a13252f719edfc0ebaa05ea4ddf216a27fa7c9af52341
        • MD5 SHA1 SHA512 TLSH

        logs.txt

        • Path /data/data/com.epicgames.portal/files/logs.txt
        • Size 98B
        • SHA256 988ff3a5f5cc5197e41471f095b239f9fd1ada8d3297fa3199317e177c1680eb
        • MD5 SHA1 SHA512 TLSH

        logs.txt

        • Path /data/data/com.epicgames.portal/files/logs.txt
        • Size 120B
        • SHA256 6eb4f825c3a215d2b05c72fe83ab299a723db4a864d3dbce00873d163ab334aa
        • MD5 SHA1 SHA512 TLSH

        logs.txt

        • Path /data/data/com.epicgames.portal/files/logs.txt
        • Size 170B
        • SHA256 f68e2ee14cfb8c664875d4a1e567814966a8085834e6f7aa6b387f97d875b01c
        • MD5 SHA1 SHA512 TLSH

        logs.txt

        • Path /data/data/com.epicgames.portal/files/logs.txt
        • Size 904B
        • SHA256 a12b6835bc13cbb743906e131e7043f75f913df12e1cc9b58b32385396b5c6b2
        • MD5 SHA1 SHA512 TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.epicgames.portal/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 fa27d5f2c107b7394f7caf966ee9f407114331e168f0b528ee1c7352da127f76
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.epicgames.portal/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.epicgames.portal/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 fbf60995acdd5aa98a5e7cd248af2f05dc2c53ded3eb4d3cfcbe0fd6af599f0e
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.epicgames.portal/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.epicgames.portal/no_backup/androidx.work.workdb-wal
        • Size 342KB
        • SHA256 e5906fa5d69e3648d8907a631da6ec2a3443fd2d6f49c8c5bbda2ae790fcf12d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.epicgames.portal/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 dd4f01d0ed0fdf5a013093a4b7c73096565e07fdd11d5647335fc84a375ae400
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.epicgames.portal/primary.prof
        • Size 8KB
        • SHA256 ceebd02f132930ecc182bca0bc26b9dc4186b9799b934dbab2ae76a1f475827a
        • MD5 SHA1 SHA512 SSDEEP TLSH