Overview

overview

8

Static

static

6

com.ea.game.pvz2_.apk

android-10-x64

8

com.ea.game.pvz2_.apk

android-11-x64

8

com.ea.game.pvz2_.apk

android-13-x64

8

com.ea.game.pvz2_.apk

android-14-x64

8

com.ea.game.pvz2_.apk

android-15-x64

8

com.ea.game.pvz2_.apk

android-9-x86

8

Analysis

  • max time kernel
    37s
  • max time network
    153s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    30/09/2026, 09:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    com.ea.game.pvz2_.apk
  • Size 4.0MB
  • Sample260930-lfxtbabf76
  • SHA256 753c3f4b3207b8476f6a680e64de5d0145563409323a33de7b8237570ca81494
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.ea.game.pvz2_
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4182

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db
        • Size 52KB
        • SHA256 8413c63e50eefd69ccafc07a38585e7c4827fa7c978b3e21d06104cd5ea5f97a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 3fbf7923206c6b170014b97464ddad863173ebf9cac1c1d18087a98e6bc7d816
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 5b1c73cf0d0c005eba76dbb9fc768cd7db4da370521e5c8508c538882192234a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 d2b29488bbf66d39729986a09867cd954ec68f294594e956cb13f0d19e2cb2d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 4f78d3b9959d92118ae7307b544c95cc208d03be8407ec933d4a9a11987ab750
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 417b506f1c7bddd9b3c9f99bb6bda9ea1fc76792047d413b19e9883aaa456948
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 6a56c908d09af4b42530e8c8ece63ff6d441c1ea7cc6e701aa651d56c179b18b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ea.game.pvz2_/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a362e8cda413c48b4d719c70f674c1147ca286c09ef9c03f5aaeadfc392cc6ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9eb98ffc2deb4c58ddc921989553f2124d076a4ced54d91545a5e5d9bab82d78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bd661700f281cc80f44151625e6382441440bc20727a6821e02cbe05cc9021fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 85c38fb3e8386f280914b7e60b2dd78486a2629679e9f0217e71ce4a338a4eaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f85864f51e74829f11126fdcc04848543cf174052b25c752eb00100ce9b5f4cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 65e80ef51f0aca9a9554cd8d4700449e7958ba7a3829c519b0ee641261940c63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 ed98290346e363f0205abe30aadb0a243cdebf213ba3c30c5b30a83abbd19799
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d2639a14211839a006fd4e6cb9eb61bdc6363b3bcf2dc5a88622f913c63b7776
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 7a663a53718c542ebae2f994419b3eb701b16b6186ff51daa3cab1b6719b2579
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c0c3940cafe63c204d9b427e289718a882b875a5dc2e43ea334b01a2d2c9cc2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3bad004ae778abb4cd45858ea2c3783e3f44c59533283598db9e4f4e4e73b37a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ea.game.pvz2_/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 112e7cc467fe7b182823bd0e5cf28cd954a905eb5d6a53a4e6aaa92884c9a33f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        report
        • Path /data/data/com.ea.game.pvz2_/files/.com.google.firebase.crashlytics.files.v2:com.ea.game.pvz2_/open-sessions/6ABCD68E0184000110561279F798B1D8/report
        • Size 737B
        • SHA256 e94dce6463c7d7d769bf5c33cc0010f6a354d52fb2a5dd3b70c2b85182a59b7d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.ea.game.pvz2_/files/.com.google.firebase.crashlytics.files.v2:com.ea.game.pvz2_/open-sessions/6ABCD68E0184000110561279F798B1D8/userlog
        • Size 456B
        • SHA256 9fb78fecb142d97d73bdcfa254b67b59b8e42df46871ae741fca9b8d41a4c4f8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.ea.game.pvz2_/files/.com.google.firebase.crashlytics.files.v2:com.ea.game.pvz2_/open-sessions/6ABCD68E0184000110561279F798B1D8/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        1790760594536
        • Path /data/data/com.ea.game.pvz2_/files/AFRequestCache/1790760594536
        • Size 3KB
        • SHA256 bc70954f8cfcbfca16a4699645bc3969cd45cb41524e7f4cc3cccc325a19501d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AppEventsLogger.persistedevents
        • Path /data/data/com.ea.game.pvz2_/files/AppEventsLogger.persistedevents
        • Size 602B
        • SHA256 2c774d7ec2b53b1cefef6df9708c4f04f3c2f2f9048f442bd6a68a5c9c1c2640
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3277121934748008699tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation3277121934748008699tmp
        • Size 566B
        • SHA256 891d2a4b73d2c9da56dd27de9e1c1b522af7bd726af5b0b10bab80e959a56392
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5346305726300792172tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation5346305726300792172tmp
        • Size 570B
        • SHA256 013426bb5db4a4bbad92e0da8fdfc973a54ec03ec9a73a7614ab7f9df2ecdb82
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5967087257499739855tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation5967087257499739855tmp
        • Size 90B
        • SHA256 6d40ed141217a65c5c72239b37697f11fd5a20f97e65f14349a63f2c349e1288
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation8367757882044776031tmp
        • Path /data/data/com.ea.game.pvz2_/files/PersistedInstallation8367757882044776031tmp
        • Size 90B
        • SHA256 1608ccec77f20a98384a2fa1544aafb3effdbdacf98f3839de34de6ba441f45b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.ea.game.pvz2_/files/profileInstalled
        • Size 24B
        • SHA256 9f13cab859454796b689abb7db52281995d4f530d15ede99765bee20e75e1f62
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.ea.game.pvz2_/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 ce2598f1a5f5e0d9768240ffa7c2d37f207d90dcab6935e083b00b1dd008aa21
        • MD5 SHA1 SHA512
        Submit Download

        somich.txt
        • Path /data/data/com.ea.game.pvz2_/files/somich.txt
        • Size 482B
        • SHA256 d2ec02c24b807836fa1c429ef4d942bb851ba25d0abbc66e07275e33f5df3611
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 71382cc272b29c869d3ab5325f270406f28df944138f697254d496c91ffe8464
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 5f41924fa08f52e716a4bf5eb6fde79bfda297a4246b360b240f4cec6645502a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 99255857b048d663539d89b927b8c9008b81753ceec9484ce6ff59e286245e93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.ea.game.pvz2_/no_backup/androidx.work.workdb-wal
        • Size 265KB
        • SHA256 f49572746e7b08241432cb8ab7477737136d14fc9d8ccffae3aef73f3ab94de5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.ea.game.pvz2_/oat/x86_64/[email protected]
        • Size 308B
        • SHA256 3034b79095c5675affd58c0095a173ae5988f386a782a06075aeb07a514ac272
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.ea.game.pvz2_/oat/x86_64/[email protected]
        • Size 156B
        • SHA256 cd14e4e78d80eec3f3af4334fb024d99b21f81a43022b257d5170b92434b7eac
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.ea.game.pvz2_/primary.prof
        • Size 1KB
        • SHA256 cd86380770be730c228cd6f703b16f73a8fec3b1a69a5171fc00d2f3d49c4ee1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.ea.game.pvz2_/[email protected]
        • Size 24KB
        • SHA256 6655124716f0da78a182d1fd647e59424cea8bcd91a74c7d570d112abd2b0773
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.ea.game.pvz2_/[email protected]
        • Size 11KB
        • SHA256 e8cc3f0bfc7988db9e0183c120b929c9b27c95a3d7245d1fadc3df3b60c7ef55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.extensions.jar
        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download