Analysis

  • max time kernel
    2521813s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    03/11/2023, 17:50

General

  • Target

    NEAS.11543bd05be88f9d9f558556a514204cd0c4e0f2144106475e76e4b583cac1b5apk_JC.apk

  • Size

    1.7MB

  • MD5

    f598986a68dc631d348e01f0288a7772

  • SHA1

    b9a90d25b48246ab9233c3683539970947904360

  • SHA256

    11543bd05be88f9d9f558556a514204cd0c4e0f2144106475e76e4b583cac1b5

  • SHA512

    ce6e5b8f6a6e44848f6e04f729ebb3b6da55dd2f0dbf29f66792f075ba4bd5fae69b9cf0223dbd4351a1f78e209160f115d157563a464ba97a243681404c1891

  • SSDEEP

    49152:IsykkD0XRN0mvJLzxjXOatRPPd/Bk8DZwZdF7Pn/iRpMwW:EkkoXfJL1OanXs8DZwZdR/iRO

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:4407

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            986be1650f476d17fb83a2a05a6e4bcd

            SHA1

            bfb88b0e257dab9c7a3628ff2e08e71fa3dbe1eb

            SHA256

            3290df0bc8704bd037bf1014c902565571bf8c78950998c2bb23d345c552b8f8

            SHA512

            05cbabb306a34c51ba3a8aaa5da21602c9ba8067d87887ff52e1915709c047629ba8e620ddca2fbde0c7ffdbd228c7a64d1251d950f11a15514fd16989778f95

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            bd2fdccfc761a845455fb41eb596a0db

            SHA1

            74e21d8447c03909e0d731ae7fc40f1b6afaa23b

            SHA256

            83cde6cc26e7f0909af2596d951403a3263784a3179a599ff9180e5e150562e3

            SHA512

            1e7b6ca6e3e378955c23b234924a050dca1fae687d46c1b816a2b8521ee0971e4e80ffd0752892afb68dbfa1d8999a36a9c83b2f1cce0f3da02835207d3b76ef

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            d9cf75fdd1c2292d986f6c3d5d60f2c8

            SHA1

            07ecb1d3a26d952ae5fecf54f36699ab498510b1

            SHA256

            2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

            SHA512

            442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            9789a3eef53187b52177e8a5b132d9a4

            SHA1

            9ff38a4bf3839d9847259cd62cc6a0a654bd9fd4

            SHA256

            1e0fefe57940d2fd4e39af9d8d56a3e078ccfc07dcda2bf9e9fe6b1e7a799a12

            SHA512

            ad5e46af309b0a749b2ff3cdf95e090043f45fb2287469e229f5f1c11c2abd0e2d4e180c0fad6d4b6d9cb8144de969e3ed64f8d69b916c50423f0ad5eda6924c

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            b52b1f3e19414f672beda743eec37167

            SHA1

            8663b5106e876771fcd946e0f0c238417ae0c198

            SHA256

            59481cab24b30b12bf01eb6d04faeaba48a0a6f00c4350866c0dcbda56d4b9ed

            SHA512

            b4a066b43d95aa9755cab371e4f6f3e8064f42e59fdd1dacd37208d2ba55a4d5e974d4db19852a0a9686afa94439780dbb5e897c639682b2829aedf04beba742

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            fc1b1baeb8d1908a493174a76b569e58

            SHA1

            abfb62824eb4d8e72000d503365ae71488d6fca2

            SHA256

            0cb89eabe5df3d0ef128b7edd16ad72ae08d2e9e40067c0f7db26b11ffca7678

            SHA512

            27c02803bb8073ae8ffebfda9ea4a501e4231e1cf469bfb2d55234c43cbed73371039ad5e946ac95809c7be75bf7af996d04b48bf86c93c4a4caaa04b4ea680b

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            be3327130d365992302a6557d9b96562

            SHA1

            7ea3431f9a2ed5b77039e92688e940983ea880f9

            SHA256

            844779f7ffb3d5cd47acf2ef6c01c93484712ca87c314d00ffed5f3690f3ec2b

            SHA512

            19f777c783ecd66c324202cdc6d157ed79ce08918ab19b74b6bdcec3a2ccc43f3c0845f191eaf700823eef788749e22f7d3a75388706c5e995b8f0634562c17a

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            015457082cb14d20ae9e0ea7efb1c8b1

            SHA1

            c8fa5522cd5eb5ab9a0f13c10ff124a2ead8aa1c

            SHA256

            fcc6d9f433bc09b0a988d442ea84daa44757b93f00ffb01747ae796cb8705d50

            SHA512

            b83a1143f4093c57bcc3673b688887e0f05876ff00b2a39d31e50a3646b03ddb07de6bad5badeaf96af482cdc1decb66e6e44373dc86c1f7c2b6dd085fe367ef

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            4KB

            MD5

            4a6f41a2d668643a533e59b2adbc14cc

            SHA1

            09107b5a5522977f1a0e48fbcd1ff82d63f04128

            SHA256

            ab803b369bb16b65a6d20a59b9d3f3edf9124e9c502848708c9f543788a019f9

            SHA512

            9e413701dce20dcc980d2b7766c9150168aaa7ba292fda62517a9e65f659edc1e5cc81847946ac8d00edb64dda8dd4df6cddedfc825896a8a7026bd67fd86566

          • /data/data/com.lyufo.play/files/PersistedInstallation2457186689747317410tmp

            Filesize

            567B

            MD5

            84d619eadf6e8fa7342cce3c2215ad54

            SHA1

            c2e0399963f922b3d56e7e9532fd3f7e2cef0100

            SHA256

            c837936110d51f27b8ae52e3d105a10b06199755d3cdf248bcb7756ef5a2b2e9

            SHA512

            9c211b9fc2d067b0879062ddb62b51f4d93a69d61396759896914c58b226555f3fd2dc836294b83f4b2a9b524c1bcfd8171adaf89625b8e00ce50b18d2684f0a

          • /data/data/com.lyufo.play/files/PersistedInstallation8252592253482333382tmp

            Filesize

            90B

            MD5

            15d1ad3ef1113e8e2ada01dc4c75e92f

            SHA1

            76c4f9b64169e09ea272b185a63f0c702eec7bb7

            SHA256

            6204fbd922f178aa191d873d3de32aceb9e99c78729d26ce16d0575f3b3c85f4

            SHA512

            b8b18c112c83302b330cdf0b34f745a2897af309e2c578036ce1dfa1ac4fa6e3a44d13c2d319971c688dfd313f4a2c2927135a70386244f082472f2c8912eef3