Analysis

  • max time kernel
    509728s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    11/10/2023, 07:42

General

  • Target

    563c2da9bb19515c804c12548c0da1af5997b59eb7baede7f7c7baf86b2230ac.apk

  • Size

    3.0MB

  • MD5

    1d23a2d11e05b932028b183338e995d1

  • SHA1

    259c3292c63136158ebb4b82b71643c9c1994950

  • SHA256

    563c2da9bb19515c804c12548c0da1af5997b59eb7baede7f7c7baf86b2230ac

  • SHA512

    1eaf4b5ff13910bdb3bdc7388b8263754940b2963b963d0e56932adedf271825c02ff2973c49a5fd3786899c6ed2114efcde7d985818d08dfa6d5fcae1f7cbb4

  • SSDEEP

    49152:2QSxNhjoVH28Hz5rjWEyh8BGgV80PPYGXgSqrFsqLgc82kQQEbTjIikc3M5sus/f:wxjjuWcRjZQsGgV80PwGXOeqLNtknEPV

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lydia.route
    1⤵
      PID:5010

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lydia.route/files/PersistedInstallation5654999185042809946tmp

      Filesize

      90B

      MD5

      1e1c87ac325568fb1abf93f39416bb32

      SHA1

      8ff903560fe9ab7e5834695600f0e5acd54d2fa5

      SHA256

      72309917ae353fdd2361526741c1f0b2308825bd1cccf6751412883993a8db17

      SHA512

      dea074c1937aef8288278e6391d0695d57a12f5e640e4eb393f720d7d4445e454397250197aa3f654651e04ff70e10ce2139a0a14ab0c3a63838f792cf7371b9

    • /data/data/com.lydia.route/files/PersistedInstallation7599876836221384549tmp

      Filesize

      114B

      MD5

      eb1406bd5ad3ee8625c0a8975036ce50

      SHA1

      e0881cf97475a5deb31b193e2c44888764ce9290

      SHA256

      d846b71076790345ed97dfbf5f6ecd59b2a27ee73ebe8b6d0436fc2dd66fd11d

      SHA512

      fbf23b8459ac2a7e7846df07c68797368295fa3cf87b147535373c0e622317b09d932dee94af4ebffb8adbbedd578202ba4e0c743e5069828955bde2b9fd7dd2

    • /data/data/com.lydia.route/files/PersistedInstallation8271694246985983187tmp

      Filesize

      114B

      MD5

      eb1406bd5ad3ee8625c0a8975036ce50

      SHA1

      e0881cf97475a5deb31b193e2c44888764ce9290

      SHA256

      d846b71076790345ed97dfbf5f6ecd59b2a27ee73ebe8b6d0436fc2dd66fd11d

      SHA512

      fbf23b8459ac2a7e7846df07c68797368295fa3cf87b147535373c0e622317b09d932dee94af4ebffb8adbbedd578202ba4e0c743e5069828955bde2b9fd7dd2