10ac7991ef01b35d2944f1ba425c99e81a151d0ea6664ec344d7ac390159ec4c

Analysis

user interaction
yes
max time kernel
66s
max time network
65s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
02/10/2026, 08:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Geometry-Dash-v2-2-144-mod.apk
Size 147.7MB
Sample261002-kc5jbasvg1
SHA256 10ac7991ef01b35d2944f1ba425c99e81a151d0ea6664ec344d7ac390159ec4c
MD5 b27ff4c7065d1ddf7a30f8f9d3e592e0
SHA1 a4058dfe07e1f79e8a6f7029238c3546f7fcdfb1
SHA512 84d946d2e69459dc6c9967132e0ad236eedec5e54d3ac01e1e1c4472920fda2e2c86c6e326d88a29a89b0bd3f4978f3fadf358658271dabe94c72916644d50fa
SSDEEP 3145728:lm5IBA7hrnHfxLx6Ae0olQ5+nj9h1Ib/KoXWTJtj+Z/Bh5ZtPOeunmTL4:LBANrnHpLQRVa5+ibiOWta9run6L4
TLSH
T173783397E660C873E42E317001124593E6A62D24DB10EFDF74AE739B2FBBB501B18766
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.robtopx.geometryjump

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.robtopx.geometryjump

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.robtopx.geometryjump

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.robtopx.geometryjump

com.robtopx.geometryjump
1⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:3388

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

base.3388.tmp

Path /data/data/com.robtopx.geometryjump/cache/oat_primary/x86_64/base.3388.tmp
Size 32KB
SHA256 e6d66c2ebee73696a7be1dedd68c46f50e77d4768ca0da8358bfac1725538be9
MD5 15d53b07b765060e2575f4bdee7968be
SHA1 1483bdf4ac63f590d4790c855b8e22326d1e1cb9
SHA512 89c90f6ddb673a1c45c6ad168e134fd2b2d7d981b19f3f76d99adbf384334870686fd3c2c6f0f54366b05bf194cad6d0407d3f470705b2f6e1c85f113bd1ff2f
SSDEEP 384:EyGn1QQVC2ttbC/xCA37sS2dh0wivdMyueIMGX2rvcnS:E9u6PC/xNZ2diTFMyueIovcS
TLSH
T1BCE2501FD9A36051C1F7EDF7E78AA6DCE96EC039021E1E0054717BBF9429216E750EA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PDALIFE.vdex

Path /data/data/com.robtopx.geometryjump/files/oat/x86_64/PDALIFE.vdex
Size 408B
SHA256 f198b628cf385d1fdfd5913f16622949ee54d6f4d6ab0b28b9f62c172e040beb
MD5 b051317ff235604120a4b90c1555b7fd
SHA1 11671a84ea88cc54ef189a377b1929f103144417
SHA512 c5fbbe3f288c7ff426a19f71ace7a367a5e0b44834074d48c0ebbc5326f14ea98e98f8fb61ff8820d75ad6ee5b1831e49ce48fe7b513b4e3e24e13ab7497f81b
TLSH
T1A6E0D85FD3786CB1E6F7E03450290102525260348521959A1F01BAA869E36F11E50958
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads