Analysis

  • max time kernel
    2592351s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20231023-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
  • submitted
    04/11/2023, 13:27

General

  • Target

    saham.apk

  • Size

    1.8MB

  • MD5

    ad9f7f71d99658529e7f899f80ce6d7e

  • SHA1

    f488d85977bfc6f6479bf245335fc8a59827fddf

  • SHA256

    8a30235dc69e882d6215af215d6579288872ca5867b17c43e309f37f55437529

  • SHA512

    a824b939185165338bf439d83121b5b24b85ce84e2a73d434283b7311b00dde83b82d89ca29ccde325d5df1be849e44285c681083a19fa4a5847c2c113e0ad7f

  • SSDEEP

    49152:V/jsWXkkbeXB/M/ym2k8VpTef0VrLPAhCmOkbYatyAdp:NBXkk6XW2k6Tef0NPAWkbYatyAp

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:4272

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      3b566dc8f29189b091d2746c8a6bf4d7

      SHA1

      102652b210b576e866e1695a431be273597730bd

      SHA256

      416464e93d8ea5d67c5170157a4beef4985925b8fd74f3992b28798b2b874ffc

      SHA512

      3ae44fa08b214d68d1656ed9726c9a3da66366eeb75cbef4c951cea66bb3008b0d3eac12c313deb0d9fc57a4a47f8089cbf9b370995a6280bc3d52ee05d6601b

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-wal

      Filesize

      28KB

      MD5

      c2c47a4346257c5523801626af817429

      SHA1

      2acaf244d190b8ddcdb059faa3bab0da0785a1bc

      SHA256

      0186c4d2f78edf4f66b3dfe8bd4f64022678ae5934701b4baa369e7d44644917

      SHA512

      fedea801b13e838f1075c7d216226ba466b26a4f24ccb2e356c1e1f606964e98c4a31cc938de678d1ed975d21b366d5ac8e21a533752651fc8e2efe82f72635c

    • /data/data/com.lyufo.play/files/PersistedInstallation4405181691852235918tmp

      Filesize

      569B

      MD5

      8ca21f073a6c36002287564ca764a529

      SHA1

      59d603773257ca0406273c43c62085075d916d9f

      SHA256

      b9f0134015747f21d447edb708aedec57cdecb6f7a6cec30a024e14c1cc7ceaa

      SHA512

      8152489f90782401266346263b06a803f225318189b3e53e4b58533ee82626516d866ff82f478d417b557b0ad08fd3ebb21d98f8f607967962cf10b0b8209fb7

    • /data/data/com.lyufo.play/files/PersistedInstallation7936914665459187345tmp

      Filesize

      90B

      MD5

      5e1c737c4cf3a8ae05354b0807e9cdbc

      SHA1

      aae96f29fa18db14112e3006bc60ce6dc12753e8

      SHA256

      8b6f8428201cc478369f3b88f5bd9f5106068d96c9c06f786a6aff145eddab3b

      SHA512

      12e494d1dace457060cc0036568c2b83717c02dc3ad1243dc4f1b0441a7b8a0d7f12dc8c1ec6c71c3849c8a553d579997cbf6de9203d9bc500076ce32e6e1c3c