Analysis
- max time kernel
3s - max time network
66s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
02/10/2026, 22:32
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
com.mojang.minecraftpe-1.26.52.3-free-www.apksum.com.apk
Resource
android-33-x64-arm64-20260708-en
6 signatures
150 seconds
General
- Target com.mojang.minecraftpe-1.26.52.3-free-www.apksum.com.apk
- Size 352.9MB
- Sample261002-2f7aravang
- SHA256 b0389408ea16f19e77ac75b75fbd1101d49c7ad7670f1c537b74e3e96726dae7
- MD5 315902b91ffae9660bdb524c4e7738d3
- SHA1 f7b9ad64f2e7c3f3caf8752186b70fd3fd9d00f1
- SHA512 1bbb63fa52a1e596bee5caadb8c32d23e041aea5feca5f1ae1e9ab320749332940b75d8b43a5fde80578dd1c8d03da7d76988cf3d78cb56b10dc78dbc0a1cb88
- SSDEEP 6291456:3ckKY8CvGwy2RY9xoIYSjxOMqThWDjjCgwS3zY28rmBKmR+EbnZG13AsGeMTMy4d:3XhGwLYXoIYSlOVThWfjpkX4K4wwsGLM
- TLSH T1B1093367EAA50825E16EA33B602B1B81E2258745DB13E3AF4471C5B43CCBED41B56FF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 9 IoCs
ioc Process /data/local/bin/su com.mojang.minecraftpe /system/sd/xbin/su com.mojang.minecraftpe /system/bin/failsafe/su com.mojang.minecraftpe /system/app/Superuser.apk com.mojang.minecraftpe /data/local/su com.mojang.minecraftpe /system/xbin/su com.mojang.minecraftpe /data/local/xbin/su com.mojang.minecraftpe /sbin/su com.mojang.minecraftpe /system/bin/su com.mojang.minecraftpe - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.mojang.minecraftpe/[email protected] 4177 com.mojang.minecraftpe - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.mojang.minecraftpe - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mojang.minecraftpe - Hides multimedia files using a .nomedia file 1 TTPs
Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mojang.minecraftpe
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp
- Size 31B
- SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
- MD5 8c92de9ce46d41a22f3b20f77404cc1d
- SHA1 8671a6dca00edb72be47363a7071be65cf270373
- SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
- MD5 SHA1 SHA512
- Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 64dc64a2d9974f0586718439655f393d30c920daf8ba463a95c6f0b8d4575449
- MD5 20d543e3bccc71fc3c57758a19484fc4
- SHA1 b6f24e70f65da5c4cfcf15dc0a0b07d88008a248
- SHA512 57611bf37b811191a764d9f3cf86e86cd9b32f3dbbc639e06e0a3dc715c82c63eab8c232c702d340c049f5b7d15ff098e0d21d59297892e33e5aeef463206355
- SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSY:RMEX0wIyNjaY
- TLSH T14243639D5B2C2621C57E283ED7E143635B7C93DF5B2392623A908CF98DC206974358A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 768a12831003a472611ddd3d0d10a1acabd82062c9b33a22e6a4f501800d0385
- MD5 fc4118f421ea4bf108e9ae2474caf857
- SHA1 97537460b6ed598939cef6b934c874e8bdaac7ce
- SHA512 91ab777b1417708ee608db2185568454e3612510c21104638f7fded5158799ff0d7b014141f6b0d61335e6c376ff573713b70a9205386ec0ecdee2403192678e
- MD5 SHA1 SHA512
- Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 f609a3d928c4559c5a0dac53499566c21628a2bb30178ad78472e6deda86fecc
- MD5 3c1323063f52617bbbd8944fec5085d3
- SHA1 3a60c7deb48555b87ec1c0eb0d220e0cf25a0331
- SHA512 6918231552c881078c734777a8499a60c03a25f99cc9e0b50fcc5641912aad48267c25601fc0c77f3bb3f3b133d41a042569e86d09d60b07713820a8271bf02a
- SSDEEP 6:7+/l9Xn18g9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKuM:7+tEqLiuWd7RmBEyPbhM
- TLSH T1E40222AC73800C22C8196677D0E683440D00B71A8A72CB0B05A008D42C034CCE8A0E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 4a1ec8f28c31caf3b846fa85e8851a78131241d3f308d76af5fb0b402b355600
- MD5 a59f6160304b03bfeda9abc1bef61068
- SHA1 a888fc59ee7a7e863413bbd59b4b1c8ea7f1f626
- SHA512 00096fdfb37588694eada948076eb2aeb62d6d220efd188ac0910d6cfba4076539cac33ef46d2d7d8cecb9e8d3e3f0d357e3c72dd63bb073f2a57727c0f62c90
- SSDEEP 6:7+/l9ph8FPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKmGt/X:7+tHhiqLJdKBRmBEyPbA1X
- TLSH T17E02229863880803C02967B791E88341AE20AB148363CF17056008582C066CCFC91E00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation6775357226857920777tmp
- Size 90B
- SHA256 e81fadc10e6a34347155706217b3a989f3e59411742eaa51d5eda31a0941e15d
- MD5 d01295f85020537e9dbbe0715261ba82
- SHA1 a778b7c4bcadf560a838226fb0337db45bbbb64a
- SHA512 208c282396cfe01cedcc7d048ee69999a7020c9191c6b64d29003621cf5f1a8406fd4a4054c78db033813ad207c24c2936fdf63884341be880d9c79c82ac3e43
- TLSH T163B012065A7081D1C9D7E2471C8DD1101DA01D40640E8A085F08E15481911D5D343994
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation8553185421229298954tmp
- Size 570B
- SHA256 015b94ddae7c459237d3428e09297195da8b6be2d7977d449a565e12964efe7a
- MD5 9cb93badfd8657553d08876fa5c499ca
- SHA1 0998955df6b13fce2f2828577e842fe52a1a0a76
- SHA512 d4f3aff068fa3814d61ecf3c019e22b758b370d9896a17fcdd8169fa5e08c6b1b65ee225708e1a96dec4b1dc04589deb28f7d2722057432c7a391b29c3cbbd55
- TLSH T1CEF096CF1AD24219D89502122C8CBC448C6C9A755E410831FE9E08F2DEFDB16A313E10
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/external_servers.txt
- Size 383B
- SHA256 33e15907dc11002171fd7720e6be74b37b67cbc4c2c5cb05e55d2cc9a11ec025
- MD5 2f30b6b98734330991fa76b9436db710
- SHA1 fc6c1929638ffe933c45b29620e388d9430e282d
- SHA512 321500d38210f7ec4b7964b1b86ad4a7ca959f7854f7940d8c8b629b898222453a003fa5be547ef06d648b2c95df7bf69de9d4879a5fae73e69cc9ed99c2f1ee
- TLSH T1C4E0E9899F3F4EE0639C6C4102118F2436748E5EB962D0C4CF166D05F95206DF5E54C0
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/options.txt
- Size 32B
- SHA256 5682e4367b106fa65afbf57daac85d3002163bee03ad7218c93db10622169201
- MD5 65fdcec26b6089c994d3b2e635a395d6
- SHA1 c00f9ab26b380caa48803b609390c44ee89bfb80
- SHA512 ddd72d95c2306f5c65e33fdc25035669de276f46134a562832828c5adcfd9a06d1bf51c8fa20f5cce27bb5d8c027e7150281815c46c59ad412c54f37dac1ef94
- MD5 SHA1 SHA512
- Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/pe_world_servers.txt
- Size 299B
- SHA256 2dbd0314b63ff96ef1a685aa1462c92c8e75c3883afc0ab76e0ee3f533a88260
- MD5 d1c60a9b2648e789ee6e5f43e5238ad7
- SHA1 bc8a6d182558971851ecea5123a6b69846301e86
- SHA512 51f4ddff3f41a91506874b2a0feef5b5fce4469e6546cab57da933b87027d7849b1962052529bba381a68703cf57c2786d82aef87dd38bbf4a105ade0036b2af
- TLSH T1F9E096DD9D3B8EA4736C2C920224CF203A398F0CBD65D0C48E667D02B86046DF96A485
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.mojang.minecraftpe/oat/x86_64/[email protected]
- Size 404B
- SHA256 8f95d75700810f1d8960e2a2ee693d44cfc9a2dc6c99363fbaeb80beaa2e6acd
- MD5 ffa8b6fb9adb2236bd7ec33962658419
- SHA1 e5f39ebd91563ea1d86ea2ea3172e2ef2dfeb092
- SHA512 d2a6506229ebf342380b2af5235968c7b27b5e7a483fe308e3bea7d3085bf57d81dbaf8a6561dddc9b99aa01ced5d109f7e0d74dea425f2a47e2c991b7b05b9c
- TLSH T18EE0CDB5F75D8A53D65C113C205EF083DA54C34AD716C622D8051DCD77C137115E1D15
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.mojang.minecraftpe/[email protected]
- Size 8KB
- SHA256 460af80321f8410e688a8a3975b94c629e78b50f7d170894e41e3005b6b296af
- MD5 016617e60bff401854c47ec9d4d56b37
- SHA1 b6da861209b4fdeb2dba8c57511eb65b558c9131
- SHA512 30439f5bb51806fd31d4c2debfdc3032b01b252f08b463939dfc51d508b956344e6924b0546f2ec289477e8bedc2b2cd7d34dc80213da0f09b6946b72fa84bde
- SSDEEP 192:CI7ObQCjbgMTEdVgd06v5pKDBquUnqhOz:CuKbpYP4TvLKDBnUvz
- TLSH T109028583FB16DDB3C5ACDB7F646E135123B143411303535E8928C8996EC369A9B8EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH