Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    28/09/2026, 04:33

General

  • Target
    ab-space-MRBYT-2-2-14.apk
  • Size 46.2MB
  • Sample260928-e61vbsvcqg
  • SHA256 d985747a1a73a6c85e7e9c5aae12905d0cbc4b0c5d1acfaadf4c1616f4d3943b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

Processes

  • com.rovio.angrybirdsspace.ads
    1⤵
    • Queries information about active data network
    • Checks CPU information
    • Checks memory information
    PID:4794

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .YFlurrySenderIndex.info.AnalyticsData_HUZ6QNPTBBA4V3JB75KG_234

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/.YFlurrySenderIndex.info.AnalyticsData_HUZ6QNPTBBA4V3JB75KG_234
        • Size 88B
        • SHA256 9ccc26b21c2b0a4c225ec2a44145b4f339a330cfae625abfb153cd831c0b5aa3
        • MD5 SHA1 SHA512 TLSH

        .YFlurrySenderIndex.info.AnalyticsMain

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/.YFlurrySenderIndex.info.AnalyticsMain
        • Size 72B
        • SHA256 44d32acb5e48711eadea8fb697b67637db08291a0210c1dd4aba577c564b2687
        • MD5 SHA1 SHA512 TLSH

        .yflurrydatasenderblock.51ecc574-97aa-403f-a573-fe241f733730

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/.yflurrydatasenderblock.51ecc574-97aa-403f-a573-fe241f733730
        • Size 307B
        • SHA256 8295c7ff253ab77eaf4f972e72b1014b4e1f3c21c7bc6f4dd236b27468fe828b
        • MD5 SHA1 SHA512 TLSH

        bi_data.lua.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/bi_data.lua.tmp
        • Size 320B
        • SHA256 621fa03e180ab3be5fe5f04470688937604c1effd9fd6a7d9e8f190ea0e7e152
        • MD5 SHA1 SHA512 TLSH

        cacert.pem.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/cacert.pem.tmp
        • Size 250KB
        • SHA256 e78c8ab7b4432bd466e64bb942d988f6c0ac91cd785017e465bdc96d42fe9dd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eaglepurchases.lua.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/eaglepurchases.lua.tmp
        • Size 16B
        • SHA256 3c73828626e3110564ff70aa50683a8d04fc9c4d55315a778312a3518346368b
        • MD5 SHA1 SHA512

        eaglepurchases.lua.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/eaglepurchases.lua.tmp
        • Size 48B
        • SHA256 3a75adbd31896d082cbad6f7a1672d85c95b711b4314db0f74252702caeda3ab
        • MD5 SHA1 SHA512

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 16B
        • SHA256 6f27602b3850e89dc076b9d47fa3353528527ed9be9b62862eb758a6b96fba7b
        • MD5 SHA1 SHA512

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 144B
        • SHA256 10c669271dd66a2d0b519efb760121581eece672087a4308d54116f71550d609
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 192B
        • SHA256 86c3a23b56d73979c7e4aeb908b6ad6a8d4e2862563c8c03b05daa56168e69e6
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 36339ed29848e04f9eb8aa0c3046d8974f83786b5824e63ff13e5c6754b84f99
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 16B
        • SHA256 9705560a6f55b0848e715ba780a16b3ce6b2e186e8f44cd16643be07647c14d8
        • MD5 SHA1 SHA512

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 ed889b702f7194e43935831dd27d8aa6ddff379292095f6a158b65cdc99817d4
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 d2179df68e30ec45d5b3ddcd43b60887d6754a50f8da79083b85557c21c926a1
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 d86911a017d9ae0e5717b34d4361368c2b55e826ccd27d3e087609f68039f936
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 08c863785ad3676140c85831bad4ef32476ce8f1fe95ef6200c3d86261212808
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 62d0e900705936798be6dd4144abceb8e15b9c7c0897e07dce81c4659246aa4b
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 657bcdf4a95b32b3c9823333fb52b7ccd69ddcf71e6943f7de359edcc853a583
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 16B
        • SHA256 477be7c29e7d6e471edfc797af2879df741d71621231cce685aff64f8e3f5ac1
        • MD5 SHA1 SHA512

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 b6691812456dcf567502b7ec91e31fe369a9658cf77cb360c2200d1153ae2e17
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 a045368d3680007d7105c979a28e6de12c64fcdb7700909a09b7071cdc0e6cff
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 1846f82a5f3039cee946752f44acf7d0c370b4658dc9bde34a279fbff1e48072
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 704cf861839069438fef49cec261b22d20427efe05c757849e47823f7a856ac7
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 a8992075b8dfa55624677cce94bd29baff6e728c0ba93571a2943ce0d03a6de1
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 f6b0c3d1bb46c9917fa4478557b1fcdc922fbbbda96e4e94f61f6b8fce4d0720
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 81c050af925534e0afbc42206acc0e7ad6c8e96642127f161f49e25cfaf05930
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 90636dfa84e03f385e67973efae9ae11fe77dbcfbaf4a92fa65c99e87d289b19
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 c18fb678d27b326e80937ef765a1159d5ab73ec5291dff5e729f47611ad06321
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 51426f74edff997155dd4de70bb919178563f3dc0c212cad9d109b171474fc6e
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 16B
        • SHA256 5c65442fa29720d9c662ef5c522e5741e0855e916873c3bb0ac068c88f6d120e
        • MD5 SHA1 SHA512

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 826d8175c453d490e566bae58ccb1a23f2e2548b05fbf188ca3e1f4f9c0822c1
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 cc42f1ab717a3c0770a457b4244724413c1efc2f6bee9dab03e78acfd728d143
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 40783513b30627ed344c59e14e6f21d725d9818858f1c2662b6f92ccd42155b3
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 c075edf1144fecfaeb1363e9a559a351417cdd14a03d6d395aa0d9fd33b3d066
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 d05c34b1728553bf7dc92bc9cb0821e89b774e2a9f35ef3ecd74b9b02071a29f
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 ec2e1f2454add35794ebeffe1fd5090d3895c2b5ecc2f1933a55d5c4ae90c75b
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 224B
        • SHA256 9d83ec3f9e136ae7b149cf921d7958534e7c51871685877d8855a4f4bae41ba7
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 16B
        • SHA256 d7ba91538e3ab58535b21a55651965b9e40094d674f5d023565f14fc0fcc0ea6
        • MD5 SHA1 SHA512

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 96B
        • SHA256 947bd2b08f3b750fa4aa247d8cc6d7c48d7faed21a3aca0cd0b27ee9b9ebaf80
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 144B
        • SHA256 301a4a3f368b534c4afcb2c8ba0009c961979b9ae1f57295e28339d203535162
        • MD5 SHA1 SHA512 TLSH

        fusion.registry.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/fusion.registry.tmp
        • Size 144B
        • SHA256 95d622657edd8e5f88c1fcb6dd6bd407744d3a4adfaa07c767a305b5786710f7
        • MD5 SHA1 SHA512 TLSH

        gamepurchases.lua.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/gamepurchases.lua.tmp
        • Size 32B
        • SHA256 d43e32be6a687ece3c863554a7d9af5c9e07b85b85577f38dd568653cd35e405
        • MD5 SHA1 SHA512

        gamepurchases.lua.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/gamepurchases.lua.tmp
        • Size 96B
        • SHA256 9320c98534165720bbd384764c94342950e48f3b3b7290bb189239a837cc9a1b
        • MD5 SHA1 SHA512 TLSH

        settings.lua.tmp

        • Path /data/user/0/com.rovio.angrybirdsspace.ads/files/settings.lua.tmp
        • Size 1KB
        • SHA256 743b5311e43c0dc2adf9cab103478425770ae2c7ec3adf793257aa27e1ac9417
        • MD5 SHA1 SHA512 TLSH