Analysis

  • max time kernel
    2521828s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231023-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
  • submitted
    03-11-2023 17:50

General

  • Target

    NEAS.11543bd05be88f9d9f558556a514204cd0c4e0f2144106475e76e4b583cac1b5apk_JC.apk

  • Size

    1.7MB

  • MD5

    f598986a68dc631d348e01f0288a7772

  • SHA1

    b9a90d25b48246ab9233c3683539970947904360

  • SHA256

    11543bd05be88f9d9f558556a514204cd0c4e0f2144106475e76e4b583cac1b5

  • SHA512

    ce6e5b8f6a6e44848f6e04f729ebb3b6da55dd2f0dbf29f66792f075ba4bd5fae69b9cf0223dbd4351a1f78e209160f115d157563a464ba97a243681404c1891

  • SSDEEP

    49152:IsykkD0XRN0mvJLzxjXOatRPPd/Bk8DZwZdF7Pn/iRpMwW:EkkoXfJL1OanXs8DZwZdR/iRO

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:4276

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      f3d90755e086dc34b11bb3a4f3764687

      SHA1

      8e5db2ed3005b0023d82bc2d03211261b9e3e63c

      SHA256

      b5ea222fed4f52c9e2bf9dddb0b59b63334477b4bb838c8ecbb0f6084012e6ce

      SHA512

      5c5065aac7fe2a3e958c46761e6911eaf53451a153208a3941500835d7285f7a5b0ea82c7fd55a31b0d1cf0d3632aaf544ede5180b1d8fc0f4e93cc53c548c08

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-wal

      Filesize

      16KB

      MD5

      3dadbfac3b35fe5fb0e0376dda141d2c

      SHA1

      28e1edbf2f877ba050f451d712fd9a783040933e

      SHA256

      ac0dd69a4547f21c40124f19eb81761aa82a2931de89c26b43cc1a30907e6be2

      SHA512

      f314f9376ae274e5a90ebfc8b2acd697f3b38ed83ab6be923615981a6f1c63263174800110ddaff527de1dae9a906e60c1288f622024fc3d398a273ca4f2148f

    • /data/data/com.lyufo.play/files/PersistedInstallation1093833493514012673tmp

      Filesize

      90B

      MD5

      e1913b5dabf0639db35f1575edd1cc10

      SHA1

      c555f8f5fc6dbc01e49e58174d22fdea392ae120

      SHA256

      b00204eb7d63a6339851220f3c511d52bf57e2a9775c42f248db16cb046d6f6d

      SHA512

      0bb040a6f4a13b816e11827449999497453c98cc97162a7a5f509aef06792150de907dafe292de54de4ed83e6ef6f57adec34af0c6132c2c1abbf11bcef3d810

    • /data/data/com.lyufo.play/files/PersistedInstallation6124659608421154914tmp

      Filesize

      566B

      MD5

      0481ca6710f75b2e2b265e65909b57bc

      SHA1

      c0807ddb611823673b95bed7c8ca3ebcad2dc8f0

      SHA256

      a8769c17b5deb817154caae31caea09c19e6292e5cb104d40adea53ce87a5153

      SHA512

      56daab71d82c3158cf3aa953c042ed51134b2f3e99a22b31b6f0efb16d6c347d3f42b22fca1f57377acb46d75a116396e308b29b7acef209a5174a600b21546b