Analysis

  • max time kernel
    2592352s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    04/11/2023, 13:27

General

  • Target

    saham.apk

  • Size

    1.8MB

  • MD5

    ad9f7f71d99658529e7f899f80ce6d7e

  • SHA1

    f488d85977bfc6f6479bf245335fc8a59827fddf

  • SHA256

    8a30235dc69e882d6215af215d6579288872ca5867b17c43e309f37f55437529

  • SHA512

    a824b939185165338bf439d83121b5b24b85ce84e2a73d434283b7311b00dde83b82d89ca29ccde325d5df1be849e44285c681083a19fa4a5847c2c113e0ad7f

  • SSDEEP

    49152:V/jsWXkkbeXB/M/ym2k8VpTef0VrLPAhCmOkbYatyAdp:NBXkk6XW2k6Tef0NPAWkbYatyAp

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:4374

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      1f91fb0a20cc678d02da27329200a5da

      SHA1

      3563cff6a6e95983439260e240f2674262f74c11

      SHA256

      29567eb3bc552d0cc5fae2a353afa1a0432a384645084c3e8957142454b7fff1

      SHA512

      638638db9872f2729fe1556cc95ab318594ea3913a322a6694e793991bc0e0cdb08ddee1ab7b76073e041adc9f89d6579c14cbf3dcaed9e0aff3c922fb758186

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      e2fa81f358e1fd8f1e0cb5314921c73c

      SHA1

      cbcd841c7b31994b0e71f840c543c8678217b72d

      SHA256

      749f29704563c3515102721a49d67c7c30b31981299c36fbefcb48407338325d

      SHA512

      42c0a5c095e7665a4bede408f95318b4ba3e97eed8a3e2f246ece3b5e7237a239c0ab7173debe2905d89951a8b8780b3baddf7fd6f4f500897962f2efd579bb3

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      2d35822510cf82c8f5ae2b168ac99a91

      SHA1

      b07038d44e8fd767f369a48f2ab592c03b0a8d3e

      SHA256

      8515fcf88eb0b8cc251dd58fc9baa0c1dfe802ced304fbb5ccb3647fe3e8b00e

      SHA512

      4e9268a671f0eaac3c2aa781a1b2cad12ed683ddb5d7611baa89f1577946d1fd1be54c83a3d6a874a18db7373a5816773df29393506775c14020d26a8899da92

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      8374e9196896a1c57fb44f8d4bce4ff8

      SHA1

      a55d961ed5267354e8351bf0d3b578a4f33be56f

      SHA256

      4bdeea6bce5f47bb9fe59ad92e4ffd0b3df853b4e0f97e7af8669fbca1d6a226

      SHA512

      e16ebd537b747268ac81a0a7193ce9f86d6e5dbed2607b92de0394e99e04ba364edb2ea37a73f5e2fa1315eff829a24c3f08d7935a33763b41dada3f78e51367

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      90c6799d66a56ed7b1d24b61b99e7ba8

      SHA1

      90ee7f8e79ef4609305318bb218fb890f857af9a

      SHA256

      592ae2345d331e890602f76c5bedb64222f486e530649bfbf8a166373c729f8f

      SHA512

      1e91f95db258cf0185490fcafb090477f279ce3c990620a80c2c4574aa93a72b62a7bc6914ab48dd909e57ca273b357f8fb10bea61650727e4d75a6eed37e7b2

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      87cd9d3818f8521a5aea847464095826

      SHA1

      a466a0911fad0c666d54bc5d75c40852b6bfb28c

      SHA256

      753425cfcff6397d975a7c26793293d1a47535e3b8668e79c1d48fb399bbaab1

      SHA512

      e806e582fef967d0d31ae88ba97da384f138d27ad5b9dab32d254430837cc6c94a61134a393e770815e4660a5551fec66a300f3e4f5cad8f04af8c612b1155b1

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      5483d78951f4155b90a231a5e8b0e7eb

      SHA1

      b8efd3a20e56cd5c59cf5cb13f46aa1139f83261

      SHA256

      9a7b494a8645514ab5cee3f2a9c848dc974a82d5dffd78375c20cd5a9092fa8f

      SHA512

      3e55027c10f7841eabfbae0d658035c483d3943d552e937ed88e278bdb1c923cf8e013f5dd29815af73635230d86104b8d3abb14ec54844d57b9ed2b89597a93

    • /data/data/com.lyufo.play/files/PersistedInstallation298649162428631412tmp

      Filesize

      568B

      MD5

      caff5c874c9b75e2e38cc85a9bc0d02c

      SHA1

      e0cbdb677a2009a72fba514e4662c6be508a4edb

      SHA256

      fc3652b646d093d38c4457186b8d517c67abe79272d0d1359507b36dcfbf4774

      SHA512

      583416361e0cf3ab0aa128109296b2478db6ac9d21342f405c70b92064b086b428181807dd0ae63f620ac24a2017805e39e8c592a1c0768516a77ce7dd31ab1e

    • /data/data/com.lyufo.play/files/PersistedInstallation5264913948521255945tmp

      Filesize

      90B

      MD5

      259b33f2bd5f902eb82ff9f8975a60d0

      SHA1

      ddde957c5ee8c0c9fe0c92d119be723dde37978f

      SHA256

      d295c0121143047db0e0cb0323246c5a648eba5250d9b1333a3d8134ba218aa7

      SHA512

      8073ad9418adcb33d47d003f34ac14e148aee84bc5ddcc24099ff86d42cfbfd3db85eb2d851e0f1e8f3ee3ea68ba0cb9438eff908ff004746cb563e5d03437f8