Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2521823s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20231023.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system
  • submitted
    03/11/2023, 17:50

General

  • Target

    NEAS.11543bd05be88f9d9f558556a514204cd0c4e0f2144106475e76e4b583cac1b5apk_JC.apk

  • Size

    1.7MB

  • MD5

    f598986a68dc631d348e01f0288a7772

  • SHA1

    b9a90d25b48246ab9233c3683539970947904360

  • SHA256

    11543bd05be88f9d9f558556a514204cd0c4e0f2144106475e76e4b583cac1b5

  • SHA512

    ce6e5b8f6a6e44848f6e04f729ebb3b6da55dd2f0dbf29f66792f075ba4bd5fae69b9cf0223dbd4351a1f78e209160f115d157563a464ba97a243681404c1891

  • SSDEEP

    49152:IsykkD0XRN0mvJLzxjXOatRPPd/Bk8DZwZdF7Pn/iRpMwW:EkkoXfJL1OanXs8DZwZdR/iRO

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:5127

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      188c0542bc062e48b614e5ca8c1081af

      SHA1

      0eb9b89a5c92957cd1fe748cc063b32853339774

      SHA256

      c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b

      SHA512

      62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      6f6ed772cbaa4dd39d573bb85cb7f3d7

      SHA1

      03547da38ad3e7ad4d82c5d6eb23e4694fc08432

      SHA256

      ecea6e4e813fd274446a41ba872cbfc9693bb9c00f9e1b8df06a3287c176ed62

      SHA512

      c3dbc8e4dc9cc3b9a261983bbffb8a1c40864626a74e84cbe5cfa3e5c1b58d99f0f71d0ff0dd11c71838e94020bc3e5e47155a0368cf409eea8975d750cd9e17

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      eeadebf86f96a2e96f28c84b54643272

      SHA1

      ac3138bfba664029084b800c28a2ccbc25698970

      SHA256

      369aa431eb61fef7858a24e406a1495064eeb02197ae3f81d182d0eb51d30985

      SHA512

      c5ce3de237df4396831e74c543f412ccb768ed3ba439e0706a013c719294b17ef8601526eb4afbf9b07f0a60fdfee7c90937bf011a0da9c69bc117201bb5836b

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      56bcf9ba56554baaec479b93e3292f47

      SHA1

      7c4fe68d241ba47f540d82edebc06d61f0c6d9bf

      SHA256

      b60b69710906f298784471f35f9cff0cc9780ff2e96886e47bcafb32aed04ab2

      SHA512

      a5d075ab1bbb1d92191ff93889f388f73b7dc203342f3d27fc2f57a7e860f3fb8141e33d6062139ade7d7a66c07e9a29dbb73ee04f765903cbc3971cce59a516

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      43997ef5b7a36de625b28c7e6e1a6f14

      SHA1

      4c4a004cd4eec401c9ee07a7db2619f113ceda80

      SHA256

      246685d89901ae2d9730f76e4bbcfc374f8a1216acf02ccffdf9338cf4a612bc

      SHA512

      3e0d27f641a6f63073677b15670d833635ec86266595a863214caaf4b07556dbe3ce487b3036cb149a776c27d6b85a02111dc761bbae78d190e183d9b1ac7e69

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      b1bbf4b56ebea1bfce935162381fc403

      SHA1

      316fd26b5c5f4d339ee439e78daa709bedbdda80

      SHA256

      031fb160c2e84bd41d2e020e7609102069e142881fe4795ca764f4afbf64ff78

      SHA512

      37ffa668ab0e356d7b45a04026568a23b9e87ec92aea54cabd9f3277df7fb751fd4226af7970026338b32561fd435908c62b9f8e5af61857e69211122666f011

    • /data/data/com.lyufo.play/files/PersistedInstallation312297842244196295tmp

      Filesize

      90B

      MD5

      af1855e65c2ce2907c63b45e4833f1c1

      SHA1

      9282fcb0fc40ab0f8c9a68898bf77c9de1774cfb

      SHA256

      16c2b9331e9048322b33be6743ea14f98e1fbe7bf4bff552dd5b852bc64331b1

      SHA512

      71cbd61477fc5c8398fde47d8ea2194bdc94253e37323ba753cedd4f452e70d1b6889054b962558a0c4e12c510899c540691fb1c8225d704d54fafacfa05b82e

    • /data/data/com.lyufo.play/files/PersistedInstallation4753995610867680031tmp

      Filesize

      570B

      MD5

      03912334822e959016c7571f2cebabcf

      SHA1

      80f6ea4548e9327ba1645d24b815c099dcdf86a4

      SHA256

      5782a0e4737e9514d0e51bd5a6783afa258278908716222201c2184cd0da49bd

      SHA512

      efd7106eaf87e14877b1b10371cded3c9c2b0d2305719297fc8f4c9e9f9219077b3a05ff0b98823dfd4d31078b38b6dd941d672ce360b36c9c6e15bef45e0e2d