Analysis

  • user interaction
    yes
  • max time kernel
    109s
  • max time network
    211s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    26/10/2026, 22:30

General

  • Target
    Slay-the-Spire-2-v0-111-0.apk
  • Size 994.7MB
  • Sample261026-2faa1scb38
  • SHA256 431cc3458fca05cf08bbd3a332dc3efd1d4510191d55217544669bb1adfc9392
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.megacrit.sts2re
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4178

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        compat_manifest.json

        • Path /data/data/com.megacrit.sts2re/files/compat-packs/sts2-android-compat/compat_manifest.json
        • Size 8KB
        • SHA256 ab99bf928e14819c8f15b1cd8763cedf012d4a8005a4a1f5ec5cd2d427ba8a6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        compat_manifest.json

        • Path /data/data/com.megacrit.sts2re/files/compat-packs/sts2-android-offline-bootstrap/compat_manifest.json
        • Size 2KB
        • SHA256 c2de4662cc604ba6195f35f1feb3c7eabd94bca2fabf64b013c9d30356859cda
        • MD5 SHA1 SHA512 TLSH

        bundled-compat-bb99d078-6456-4609-9c6a-54f66fba71f7.zip

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/bundled-compat-bb99d078-6456-4609-9c6a-54f66fba71f7.zip
        • Size 1.6MB
        • SHA256 810d53b00f07363d2806d8bbbb8d11ef2a426f17a306a43249e0d6955dfc303a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bundled-compat-d1bfcf9a-b715-4481-815d-31f91f687a1d.zip

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/bundled-compat-d1bfcf9a-b715-4481-815d-31f91f687a1d.zip
        • Size 25KB
        • SHA256 d46d20afb60e9403bace7cf939a3e9659431859b96f2797c320af6a956215ef5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SHA256SUMS

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/SHA256SUMS
        • Size 1KB
        • SHA256 32622086dda60b4326db4e2dfcbbf2833935bca267b0a96170c1ddd8934ba3f7
        • MD5 SHA1 SHA512 TLSH

        compat_manifest.json

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/compat_manifest.json
        • Size 7KB
        • SHA256 294a29dfb5fb927404127f7bac946a783d95b99b8af65a02330d121aa569d4eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.103.x/STS2Mobile.dll
        • Size 504KB
        • SHA256 e8df8f4956ad6b82af94afc754c17a58009162be6b5a8e313fc3087bfa420210
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.106.1-beta/STS2Mobile.dll
        • Size 504KB
        • SHA256 937c6a4932b940734b1fc7aade1dcd1823d3414b25772311d39b21502064f8f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.107.0-beta/STS2Mobile.dll
        • Size 504KB
        • SHA256 7b0a9a89f64a0811582283cabc57ec72f6cd4d8da6119fcdb135b2bc5e6820ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.107.1/STS2Mobile.dll
        • Size 504KB
        • SHA256 0d3318a5c5b4cf5311e1d00891604e0b9b273f6d21414b782003f2df09e73a99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.108.0/STS2Mobile.dll
        • Size 504KB
        • SHA256 1aa20fdc6e081ab3496250c1dcf720e52cb921e986befae511651f54c7fb112b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.109.0/STS2Mobile.dll
        • Size 504KB
        • SHA256 6fcf294a997cede011b533140920c55eb42430f2e093ebf68a5572a786990450
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.110.0/STS2Mobile.dll
        • Size 504KB
        • SHA256 0906946b397120309854c10b9ad7d0f9fd1c31fcca10108e18af61932a6e9a44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.111.0/STS2Mobile.dll
        • Size 504KB
        • SHA256 251ac195fc5f4413e13f47d3a37bb3961f12ddcd3fa3d55be3184ad9346fd060
        • MD5 SHA1 SHA512 SSDEEP TLSH

        port_compat.pck

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-9e94a2aa-a8ff-44a3-a988-1a2205a8e684/sts2-android-compat/variants/v0.111.0/port_compat.pck
        • Size 48KB
        • SHA256 edbd11603e64a320ab5d780766df326e32cc36d98bc8dd2408798b4550f2c12d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SHA256SUMS

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-f85901df-2b38-41ef-b341-27aa5721bd34/sts2-android-offline-bootstrap/SHA256SUMS
        • Size 292B
        • SHA256 25ee3a431b023f3339f9e0ddc102d2c00c4d702d671fcaa06b2ac475398c4cf5
        • MD5 SHA1 SHA512 TLSH

        compat_manifest.json

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-f85901df-2b38-41ef-b341-27aa5721bd34/sts2-android-offline-bootstrap/compat_manifest.json
        • Size 1KB
        • SHA256 6f806afe7c4e27e10803902694a8482192421f79de2ad1f4de50c237ace2f031
        • MD5 SHA1 SHA512 TLSH

        STS2Mobile.dll

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-f85901df-2b38-41ef-b341-27aa5721bd34/sts2-android-offline-bootstrap/variants/offline-any/STS2Mobile.dll
        • Size 54KB
        • SHA256 99e0530d2bfdf7567637fb2de90db82608af3fc614717c73cf64a9f9bf3bef75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        port_compat.pck

        • Path /data/data/com.megacrit.sts2re/files/compat_pack_import/compat-staging-f85901df-2b38-41ef-b341-27aa5721bd34/sts2-android-offline-bootstrap/variants/offline-any/port_compat.pck
        • Size 336B
        • SHA256 ebb768f7500688945a11a21b5836ceaa1c177d2cfb55cdbd6c6843a1bdd70aae
        • MD5 SHA1 SHA512 TLSH

        settings.save

        • Path /data/data/com.megacrit.sts2re/files/default/1/settings.save
        • Size 2KB
        • SHA256 e438da55c903f941b355386574ebd957bff34c95c0db21e459d1b5bb6a5d5304
        • MD5 SHA1 SHA512 TLSH

        instance.json

        • Path /data/data/com.megacrit.sts2re/files/instances/profile-sts2-v0.111.0-41cef1ea-0861bfa1df34/instance.json
        • Size 361B
        • SHA256 144e0857c0ad33567fe0231bf17ea13ccf5410e0304d73bef9a5baf4673a95e0
        • MD5 SHA1 SHA512 TLSH

        selected_compat_pack.json

        • Path /data/data/com.megacrit.sts2re/files/launcher/selected_compat_pack.json
        • Size 550B
        • SHA256 730ec52ed71351c69aa92755f8823f114aeb9a53c26e48782d253b0c984cdc53
        • MD5 SHA1 SHA512 TLSH

        selected_game_version.json

        • Path /data/data/com.megacrit.sts2re/files/launcher/selected_game_version.json
        • Size 288B
        • SHA256 a71f50059cbe1811e167a421092084d69b1ca228ef93a98f9264d10099f8f25b
        • MD5 SHA1 SHA512 TLSH

        selected_instance.json

        • Path /data/data/com.megacrit.sts2re/files/launcher/selected_instance.json
        • Size 1KB
        • SHA256 af0dca62ecab63df6553e82b73695c63dc1a5df8ae0d91ae43699d292e4a226c
        • MD5 SHA1 SHA512 TLSH

        sts2.log

        • Path /data/data/com.megacrit.sts2re/files/logs/sts2.log
        • Size 287B
        • SHA256 6ed0701827ea432f4af0d97d1528ca07f4d2ceb50be61eacabf0c82591f96174
        • MD5 SHA1 SHA512 TLSH

        sts2.log

        • Path /data/data/com.megacrit.sts2re/files/logs/sts2.log
        • Size 115B
        • SHA256 4147c3bc1dd9573c996e9a2630110a7bf28ae446d89da72f28e09a9cece6cc89
        • MD5 SHA1 SHA512 TLSH

        sts2.log

        • Path /data/data/com.megacrit.sts2re/files/logs/sts2.log
        • Size 121B
        • SHA256 92a130a4201170a8c799f74b0ca973f128345524b9180e5cd4d72278bb693e30
        • MD5 SHA1 SHA512 TLSH

        sts2.log

        • Path /data/data/com.megacrit.sts2re/files/logs/sts2.log
        • Size 37B
        • SHA256 b5471a36f7cb06dacd9d37261500514d688cf8b3a427d7655d32a9506da86683
        • MD5 SHA1 SHA512

        sts2.log

        • Path /data/data/com.megacrit.sts2re/files/logs/sts2.log
        • Size 44B
        • SHA256 66641a9981eca65083a638b8fa48d93ebeb189fa89999baa404918d9b6de3979
        • MD5 SHA1 SHA512

        sts2.log

        • Path /data/data/com.megacrit.sts2re/files/logs/sts2.log
        • Size 677B
        • SHA256 511e8ba57fb298c920d68df4eada7742176db6e3b628a77d08a6f62f51d44cf1
        • MD5 SHA1 SHA512 TLSH

        bundled-source-63b3c1f1-a242-4ae1-bbc2-4574dffce18b.zip

        • Path /data/data/com.megacrit.sts2re/files/payload_import/bundled-source-63b3c1f1-a242-4ae1-bbc2-4574dffce18b.zip
        • Size 927.0MB
        • SHA256 eeab1effa0cc5cc996a21970a6dd7ed32c1b7234f8c31cebbe34ec4153db195e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .android_body_manifest.json

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/.android_body_manifest.json
        • Size 7KB
        • SHA256 c7318c919fa3017bedbbc64ac00a4f549ebba610678c0ba5f83400c7f7cce382
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .payload_manifest.json

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/.payload_manifest.json
        • Size 1KB
        • SHA256 1181d0b2b90c14161479f9ca7f5bc83f41805f32ce2b4ae98d8dd7268500572b
        • MD5 SHA1 SHA512 TLSH

        SlayTheSpire2.pck

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/SlayTheSpire2.pck
        • Size 1687.6MB
        • SHA256 7225a6d44a972920d57a43612ead53dbaeba6628b730f492c8651c5a45bc3867
        • MD5 SHA1 SHA512 SSDEEP TLSH

        game_actions_2868840.vdf

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/controller_config/game_actions_2868840.vdf
        • Size 10KB
        • SHA256 dc1059ab6c119ab2be822a193bbc518ffb95c49a8f2f638118870aae53a28df6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0Harmony.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/0Harmony.dll
        • Size 2.2MB
        • SHA256 ef1898322c9f5c86dc1b0758b272a9c440823b4a41ca9a0b82a3aa6b3d206387
        • MD5 SHA1 SHA512 SSDEEP TLSH

        JetBrains.Annotations.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/JetBrains.Annotations.dll
        • Size 106KB
        • SHA256 5f2b1475a7d80033a1ad25ea2710bd4b5fed40c28316cb0439bfb9aada2ef86b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MonoMod.Backports.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/MonoMod.Backports.dll
        • Size 27KB
        • SHA256 ac3f32bfd44aab83abf71abdff6dde548d57b7c0f8a1fe6d8964e348b4eeafb1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MonoMod.ILHelpers.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/MonoMod.ILHelpers.dll
        • Size 4KB
        • SHA256 fdd0e3538340fd78b8f521e62b8cac1ebb7683ac1f27f6aaedfc1044b14bf4bb
        • MD5 SHA1 SHA512 TLSH

        Sentry.Godot.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/Sentry.Godot.dll
        • Size 58KB
        • SHA256 bef522b322662f6dbf280891e23e2001483107f8bb981f1692c264928753112a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Sentry.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/Sentry.dll
        • Size 812KB
        • SHA256 4f1619b048d0b0f604265075bc5311f9f2e4a0ecdc09662009b7ee11d50c216c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SharpGen.Runtime.COM.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/SharpGen.Runtime.COM.dll
        • Size 165KB
        • SHA256 2686187b458aba592e845d8c47f28c730efcca23eae77e3950a5178a9846d9ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SharpGen.Runtime.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/SharpGen.Runtime.dll
        • Size 78KB
        • SHA256 0e6acd59ab2173a6467626d69cf9f5b5b7651111ffee6e30fb7818de59335b4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SmartFormat.ZString.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/SmartFormat.ZString.dll
        • Size 260KB
        • SHA256 723e9ffdb9cec9565d9bbbdb27b4d19a9b0ba4ff006e1ab8b94022ae5c426450
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SmartFormat.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/SmartFormat.dll
        • Size 139KB
        • SHA256 6220cde1dafffde5c51a4e23db4bb16e8ec620ef52bac51c0ad5f48c4769f168
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Steamworks.NET.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/Steamworks.NET.dll
        • Size 378KB
        • SHA256 e1cd0bf2436cefbb8bfcfcc1cea0587e5b9c740769e8340f7b9e9de72785fcf0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Vortice.DXGI.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/Vortice.DXGI.dll
        • Size 89KB
        • SHA256 616983bed0d84c6ad499d1963edf12bb5bfe701e60a3ba860d1768516bf56d20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Vortice.DirectX.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/Vortice.DirectX.dll
        • Size 268KB
        • SHA256 5e1da8c22e0a33cc24078965c80ca4093a2c806aa580076441eb0f27ef38b56f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Vortice.Mathematics.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/Vortice.Mathematics.dll
        • Size 122KB
        • SHA256 bf8aa203d01c565a26811e5b32afba5030c7c6e05298487c6d24608e4fb43fad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sts2.deps.json

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/sts2.deps.json
        • Size 34KB
        • SHA256 b4daebc073d305d38992016352e3f5ad0542891436c40d05733ca5dbc9a708b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sts2.dll

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/sts2.dll
        • Size 9.3MB
        • SHA256 0861bfa1df347538d932f22d580e75420f08082792eb914e53b4882764acdbe9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sts2.runtimeconfig.json

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/data_sts2_windows_x86_64/sts2.runtimeconfig.json
        • Size 357B
        • SHA256 bd81a252bc3f0e8bcb649b404c1da945913c5377b9d3a2c416c52730be8714c0
        • MD5 SHA1 SHA512 TLSH

        release_info.json

        • Path /data/data/com.megacrit.sts2re/files/payload_import/staging-b1474d54-b545-4a3c-ac5a-f148411f0402/release_info.json
        • Size 149B
        • SHA256 74f244b13e9c6849149bec3b37e1729777a7f21306c56383405c2949eea62e22
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.megacrit.sts2re/files/profileInstalled
        • Size 24B
        • SHA256 c8f6f83e76b664f5b62ab5df3b59e55185bd6565086c3ee929ef57f5ed5886f5
        • MD5 SHA1 SHA512

        20261026-223555-before-launch.zip

        • Path /data/data/com.megacrit.sts2re/files/save-snapshots/profiles/profile-sts2-v0.111.0-41cef1ea-0861bfa1df34/20261026-223555-before-launch.zip
        • Size 1KB
        • SHA256 a916000de23ec0266e300c0042f170fd447c25567a51acfd5dc99bb5d7d7ef4d
        • MD5 SHA1 SHA512 TLSH

        .sts2_temp_probe

        • Path /data/data/com.megacrit.sts2re/files/tmp/.sts2_temp_probe
        • Size 2B
        • SHA256 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
        • MD5 SHA1 SHA512