Overview

overview

8

Static

static

6

com.ea.game.pvz2_.apk

android-10-x64

8

com.ea.game.pvz2_.apk

android-11-x64

8

com.ea.game.pvz2_.apk

android-13-x64

8

com.ea.game.pvz2_.apk

android-14-x64

8

com.ea.game.pvz2_.apk

android-15-x64

8

com.ea.game.pvz2_.apk

android-9-x86

8

Analysis

  • max time kernel
    27s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260721-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system
  • submitted
    30/09/2026, 09:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    com.ea.game.pvz2_.apk
  • Size 4.0MB
  • Sample260930-lfxtbabf76
  • SHA256 753c3f4b3207b8476f6a680e64de5d0145563409323a33de7b8237570ca81494
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.ea.game.pvz2_
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4927

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db
        • Size 52KB
        • SHA256 c776d1acf90c60f95a89ee4db8222acedc8e0b097d5606297aa641a3403821ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 be3a1e29f7363d12ae0c738943eaf130b23a0fc3121d0f3e23722101d573e95c
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 c76ec9d907d59f7e40ad85e98db94616eb572acfdbc0c2dd6b83445dfbf3c653
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 88af01bf1f20c0194d7c14c83d84135404909da062ec685ec3dae652b2d6efc7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 ef119340b145244930a136f4996fde490ef293d58190ed4934f8b5e587dcb1c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 1812ae8a7b80e128c967aadeb4052ca0b759fc0b2f8771b96070e6c7768ec552
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 fe0d473bdf94e2cffab30b3b14969e87e7db27d382c3db43f60b32978a317116
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 c0073b6bb69c436b5d03fb2ee8120ba296546d5b8e9784b7ab87726ba17e0df5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e8e71e20f6bb0903b174ee4313bd0f64a9a47867d4fccd9aac946a43a10988be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c15225cd93959e9c00b7a2bce80206996f67a127fee9bca322a7414a3c2437cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 df22f4c2af4a967bcb6786bdbe2f60b75abdf95c46e5ae09030147e1a9cb07a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3403cdea616fa93b746fa3b3e9611e8ef9d565d5f352bde54a5a1307c891a62b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3c375bb9051edb2e1e2867fad6a443c07f25f65ac811fddc1638b0ff47b88aac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 c8c484b812f57a990a7d157dae7bbc0d7065db66f5e12bdab5e3d33c99a510b7
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 83addc088ced5c0f3aa343d7bccd3b06477cba18d5fe88c07af42c6cd2748c0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 2de6ed60666eb5f3e2710daa533f40ca0f389ee9b7aa0148eb3715ac7440a32c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7f19f11b19a0dc4f16b380d9e905fe99fd95a73f2d5bf6bf92382d0ca339306e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c7e6ad64dae18824c4b22bbfab736717ea650017d3ab2e89e5a6017a467acb9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 bba41cbb17539d34233617e90e5c73be6f4bfdf952c25bba9ca9d6520f034857
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        report
        • Path /data/data/com.ea.game.pvz2_/files/.com.google.firebase.crashlytics.files.v2:com.ea.game.pvz2_/open-sessions/6ABCD68E02F80001133F14CB0EB16A52/report
        • Size 737B
        • SHA256 1495e2b128b12fe633051318ff8e0b4a5df4e0baa56bff45a3a5f79abc10619f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.ea.game.pvz2_/files/.com.google.firebase.crashlytics.files.v2:com.ea.game.pvz2_/open-sessions/6ABCD68E02F80001133F14CB0EB16A52/userlog
        • Size 460B
        • SHA256 8b1f7de05afffd4ff45ce64792ad37455a22f9ef1ccbdd95852935b102c748c2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.ea.game.pvz2_/files/.com.google.firebase.crashlytics.files.v2:com.ea.game.pvz2_/open-sessions/6ABCD68E02F80001133F14CB0EB16A52/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        1790760594387
        • Path /data/data/com.ea.game.pvz2_/files/AFRequestCache/1790760594387
        • Size 3KB
        • SHA256 97adc88e2e561de155e405eb618f1515105cb9fb620eb97b621cf7963468a88b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AppEventsLogger.persistedevents
        • Path /data/data/com.ea.game.pvz2_/files/AppEventsLogger.persistedevents
        • Size 602B
        • SHA256 2c774d7ec2b53b1cefef6df9708c4f04f3c2f2f9048f442bd6a68a5c9c1c2640
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3444629225438047260tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation3444629225438047260tmp
        • Size 569B
        • SHA256 6bb49e22f35c9bafddcf41954aed86488312995de9f2c33583b56826e1f8ae26
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation7178357987905150413tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation7178357987905150413tmp
        • Size 90B
        • SHA256 a1d121a901fe624c86c457bb0d9512e5b9f4d2b162848b0328c4b1b510e0a719
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation8008353527315862689tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation8008353527315862689tmp
        • Size 568B
        • SHA256 7143a420763feb05921106b36bfc778e1b8fc14df3656756724335f42d1688a9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation8884450165923491961tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation8884450165923491961tmp
        • Size 90B
        • SHA256 5d4d65f7faf99f686ecc1efdae818b92d744ef3c58650cffbd47deff4934683e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.ea.game.pvz2_/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 dc92c36980dd6856de2b5e03514c23062149519059c852b270fb65b8fc1f7e9d
        • MD5 SHA1 SHA512
        Submit Download

        somich.txt
        • Path /data/data/com.ea.game.pvz2_/files/somich.txt
        • Size 482B
        • SHA256 214875294ec3f4bc1a305de62ab2eb55cb5f930fade006d07b43095f9af73747
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 7bbbe57e9fa25f13697de1385ecd3f73202e526e76d6880712158bb04d82099e
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 659fa088f60967af1d5c1512421e411c4ce4084a30dd8797259d950fbdc3021b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 d823b4fd276e1dc81867cfd40a1e73fd38db5b0959fb583b7a2f64f2d5c0835a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-wal
        • Size 265KB
        • SHA256 432f0f061b4086b94549fa1d9329b50bb7c3f94ab8b8e5bcda3c576c7827067a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.ea.game.pvz2_/oat/x86_64/[email protected]
        • Size 409B
        • SHA256 95f96e29bbcc3ea087b1da84eaf00b693bf2014c03f96932e13b65367591c76f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.ea.game.pvz2_/oat/x86_64/[email protected]
        • Size 409B
        • SHA256 fd6daaffbf400e3ee0906fb7e4221653f0426e18847ad65ff045253519237a54
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.ea.game.pvz2_/primary.prof
        • Size 1KB
        • SHA256 2caf62ae9b1bb1dff15b673dff1b217860834d741c71724c5935bd906f6fec5e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.ea.game.pvz2_/[email protected]
        • Size 24KB
        • SHA256 6655124716f0da78a182d1fd647e59424cea8bcd91a74c7d570d112abd2b0773
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.ea.game.pvz2_/[email protected]
        • Size 11KB
        • SHA256 e8cc3f0bfc7988db9e0183c120b929c9b27c95a3d7245d1fadc3df3b60c7ef55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download