Overview

overview

8

Static

static

6

minecraft-...ed.apk

android-13-x64

8

Analysis

  • max time kernel
    3s
  • max time network
    182s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    23/10/2026, 04:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    minecraft-26-52-03-arm64-v8a-xbox-servers-compressed.apk
  • Size 667.4MB
  • Sample261023-e3fd8ahw5x
  • SHA256 987d5b027c2622361ac9f11c3f8e817af35149167ae4f23648d997b65c8e3813
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasion

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Hides multimedia files using a .nomedia file 1 TTPs

    Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.

    defense_evasion
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.mojang.minecraftpe
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Checks CPU information
    PID:4228

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 e870680c74a3f16b8258962cb5e83e4d8252e18738d02b1c982845eead95c721
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 083ebe4f4985e92f777d9cf04a6f0c27c26a38159fb9bc259200bf912bce0037
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 192feb029e5ad8442ae1791e5bf204b2a508c71b4ac570a3b2b504275021e1b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 73f1ca7c8effd17b352217379f9072895f2338671a93c3b17db254b435e80caa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation2844508185638902654tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation2844508185638902654tmp
        • Size 566B
        • SHA256 855b206de8dbaf2f11df5801626c924efdc73a128607004ac851dd886a0cfec7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation7543819493387624059tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation7543819493387624059tmp
        • Size 90B
        • SHA256 2bbc40e3ef3c89c4d4297c448b7e9c77295b131c85ca373d75e5a8e3a8c82468
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        external_servers.txt
        • Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/external_servers.txt
        • Size 128B
        • SHA256 97572cad5b0445663718a7de30348ceec114ec43844768b5ceb3b523e79de733
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        options.txt
        • Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/options.txt
        • Size 33B
        • SHA256 ec42b226683c839a1184466b7030c4701dcfb7c1b65a30275ff821a360666fef
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.mojang.minecraftpe/oat/x86_64/[email protected]
        • Size 404B
        • SHA256 8f95d75700810f1d8960e2a2ee693d44cfc9a2dc6c99363fbaeb80beaa2e6acd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.mojang.minecraftpe_preferences.xml
        • Path /data/data/com.mojang.minecraftpe/shared_prefs/com.mojang.minecraftpe_preferences.xml
        • Size 140B
        • SHA256 fda4b510f8c653b53a602a3e9a686fbdb86659762626f483c48e79b37a7cc403
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.mojang.minecraftpe/[email protected]
        • Size 8KB
        • SHA256 460af80321f8410e688a8a3975b94c629e78b50f7d170894e41e3005b6b296af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download