Overview

overview

8

Static

static

6

minecraft-...ed.apk

android-13-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    186s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    01/10/2026, 12:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    minecraft-1.26.52.3-arm64-v8a-compressed.apk
  • Size 670.6MB
  • Sample261001-pgp2mswwfs
  • SHA256 b618ac8afda57ec19e5614afbabdc85765d10224dbdc1ec47315a94243e2fdb9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Hides multimedia files using a .nomedia file 1 TTPs

    Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.

    defense_evasion
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.mojang.minecraftpe
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    PID:4203

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 27b77a653776f9d1efc18ba96a38755f4a93f540b484b5c73e03582ea4ec1850
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 2a2fc20dd062aaf82299159b55d9bd3a2c7de2b97ca72d6667dd6c0cd5da42f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 df3607d9ef5af97c7b096d86d45ab1c6f2d9668b77d6b80f81f1f71d596abb00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 aaa1949c52a320b45903852f418aaf27340d52ab0e60bf653872bcdec76de72c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 77b52d8fb21d97370c4a8c3c1b885a99d10d00c616b7401c56722e7b86e9071c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e1451795bc7bc1c3cd9c86e93c26ba84c05cd51bf64c2f2490ad3d15973a4eb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 bab62befc47b5e8f65063edcc7f5e45ce4cdc3c7a22e88635becc3a9c88048c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation4070150499927703161tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation4070150499927703161tmp
        • Size 568B
        • SHA256 c967e591dc59b40a25a4c6eec765ce33271f1b9b40fb59647379ec1b987c8ad4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6265387146120521647tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation6265387146120521647tmp
        • Size 90B
        • SHA256 967f5f0ad724a5c76e9b85239fb97143382c84d0c5e2a35750f4b63552900f2a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.mojang.minecraftpe/files/profileInstalled
        • Size 24B
        • SHA256 6b0b298be678ef8cf36622df9a305a9946cc63cf16f2c019ec7b1d8b46776dc1
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.mojang.minecraftpe/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 bcefa8af4b2c05447725612a7a51b788eeef3562476619d7458d74d0c963402a
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.mojang.minecraftpe/oat/x86_64/[email protected]
        • Size 404B
        • SHA256 8f95d75700810f1d8960e2a2ee693d44cfc9a2dc6c99363fbaeb80beaa2e6acd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.gms.appid.xml
        • Path /data/data/com.mojang.minecraftpe/shared_prefs/com.google.android.gms.appid.xml
        • Size 372B
        • SHA256 34fc7a19dc79d7de5442345448ee224d0fc1016260dd14dea89d749b4c39ba9c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.mojang.minecraftpe_preferences.xml
        • Path /data/data/com.mojang.minecraftpe/shared_prefs/com.mojang.minecraftpe_preferences.xml
        • Size 140B
        • SHA256 93f6e9d4362f8dd882d31c1065b729191593178df3fde4d88bed697fe48da46d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 10KB
        • SHA256 5ed2fbf16bffebc9c4ae6a17ba2d9be995b247be3fe7f419d2273a1b17444bb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.mojang.minecraftpe/primary.prof
        • Size 2KB
        • SHA256 51fb6aab1e1b5dd22558583761c717a919e37f07fcdfc2518c7aba80aa9a5adb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.mojang.minecraftpe/[email protected]
        • Size 8KB
        • SHA256 460af80321f8410e688a8a3975b94c629e78b50f7d170894e41e3005b6b296af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download

        socket:[60733]
        • Path socket:[60733]
        • Size 56B
        • SHA256 77a72c7154b9325f184b7f48daafed9560ab89cf76d9755e32c438676a15e89c
        • MD5 SHA1 SHA512 TLSH
        Submit Download