Analysis

  • max time kernel
    3303447s
  • max time network
    147s
  • platform
    android_x86
  • resource
    android-x86-arm-20231023-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
  • submitted
    12-11-2023 18:24

General

  • Target

    NEAS.0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528.apk

  • Size

    1.7MB

  • MD5

    21776ee181d2a9c6ad8f0b277244c847

  • SHA1

    5d59ec198cffb6c9fc2119d328080bef70b4c884

  • SHA256

    0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528

  • SHA512

    71ffe9d5799907b6b82d51d0e088abcdc04f4b7ccb6791921ab43e5a59361c6672f2319dbd7bdfdb7e67d0061d9d8c84a2c5f29605f0d7d8945fa268d7b3c2dc

  • SSDEEP

    49152:RsFkkzEXpatNPnMkDOJ17HMydhPZ6+hYEcyQ9NfF:IkkoXItNPnzD41bBd3Vhva9N9

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:4270

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      d0348471e25a86c2f829206c5f3684a2

      SHA1

      1a15b7282e95c8b51677191c4fc233c899af01b2

      SHA256

      144f18efeb4667ad916a5d571e12ffd1109890e54565ed1d668558e99335ccc3

      SHA512

      50cc468bfabade4145325905e3734445dcfd56293b04c90b2287bb8fe47b7b08873d447e0021553eb5f06962007a80d581f69d957a0fd4698eda53ba21574d8c

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      56d4d4c08c4e3f5943131204f61bbaee

      SHA1

      d0a74468338c6f48a1bf363c211c8eee08236345

      SHA256

      7607d70ecf2b660090e293651829bb69a0613cb2249181555c402d675c70ce0d

      SHA512

      6e302b3876104b9e6f066f703dae78446d710c7e154300c9ee37b246fdf43bdda4501a3e99b7013fb21c3c348558f1f1ad58c483c5ce4cb6f9057360ed15a030

    • /data/data/com.lyufo.play/files/PersistedInstallation5433013668020475408tmp

      Filesize

      90B

      MD5

      f74e4035b3efd207a2843cdf6d0e5e19

      SHA1

      3c3d3eb3324113961bac8bdba565d73783c09d9a

      SHA256

      1c19b6a3c585daa3bbb37f746429454b912cf9fa33e79c652fde1f11b25f669d

      SHA512

      a2511914272e2abffa204a414716460eb224634de2e16642c5d31f2855a46cbe2c9aa83af0a1254f9387fcf525e6399dcecac75e146f80502bed8ce0affe0664

    • /data/data/com.lyufo.play/files/PersistedInstallation8753237490721537513tmp

      Filesize

      569B

      MD5

      9aaf6c4943340d5460f0e65954902e31

      SHA1

      9d96dea99aac4d98623c2e888c3a22240b33fc11

      SHA256

      992edad3ecda0625f9783ca44b65d321975603c9ad9f527b1d203ab6c1b18f36

      SHA512

      bbfd6cf769bc6c377f87549569049e19db5c383413d61f418c9536eebefc7c8990eedb33694fa7236e4ebe84cf4637e8aac1c4f4f318259bbf2d737df49c13d5