Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3303448s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-20231023.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system
  • submitted
    12/11/2023, 18:24

General

  • Target

    NEAS.0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528.apk

  • Size

    1.7MB

  • MD5

    21776ee181d2a9c6ad8f0b277244c847

  • SHA1

    5d59ec198cffb6c9fc2119d328080bef70b4c884

  • SHA256

    0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528

  • SHA512

    71ffe9d5799907b6b82d51d0e088abcdc04f4b7ccb6791921ab43e5a59361c6672f2319dbd7bdfdb7e67d0061d9d8c84a2c5f29605f0d7d8945fa268d7b3c2dc

  • SSDEEP

    49152:RsFkkzEXpatNPnMkDOJ17HMydhPZ6+hYEcyQ9NfF:IkkoXItNPnzD41bBd3Vhva9N9

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:5042

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      5947b7696a70596f49e7e69e7b70b9bd

      SHA1

      5e73f958f832101b741bc6c3b21153be5e398628

      SHA256

      d4541e714575181cac4457d6da90e1a29fb117084f27fec7290d30958c501f21

      SHA512

      83da4e48589b87bd5bb85349918bd25145396095a79f5c37bc8efd59d1a5f2aac8480773f3cbe19f90907eadda111f52b8e898a0ec1a6d584a4fd620e99e1c96

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      9fd6ffd5e5e1095c1988f57894958eaa

      SHA1

      77f609ca4ceec290c47222f4064491b957db7908

      SHA256

      e0496625aa3075676aaa49c1c40a219afa1e244372a8de19d5f3c52561dfbb4b

      SHA512

      f3d2874bc6e2cc3d735e08b3d66323e7e3f6a70c767543694ca16dd7d4e58015eec22ba56cec248d4e9a316be4d8cdca23fd3394127ca8a74846a2e9630564fa

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      e4e12c0647c4b69bd641e86a09848a81

      SHA1

      4a42d57829c79f5ec73eb30a05c4a9d172c40ebb

      SHA256

      f71d9b9cd790d84fca74a8a08279173e3371d411fdc1d3fc4fd07f953e8bd44c

      SHA512

      09bf2e8a6dbd85dd7053bd119c951d2ea6a676b2e9e6bd8afde9fe662c1d8881894fa1efb2e7bbe2f93aaef49e3649e35ebbc4b132f8b0b3be80fffbf3b1a673

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      8f31dcc765e3f3bc9a77ccd415ee2bca

      SHA1

      1729379d9fb34e4ffdd171f01f9f035e9a3bcb38

      SHA256

      f1bd784d908ff5e9bd3b0c98e1ce20e13bd7364cd1ab63619bf0922177fd38f2

      SHA512

      a7d3f4ba52993bca721487f35580069832a4be7810634136e6705450146f4ddc5b347f15474c39b10477a9e7ce65c37a40bed9269eab4151135276ae1e7a59f1

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      1b5450e88ea8785aebc9de9733440c81

      SHA1

      f8b5e486d21b459b76ba12e5d82e2245995fafab

      SHA256

      eebbc4bb849738b0e1ef71ff06656c11ffad6577342ca3ddd2ffd2cd704a1896

      SHA512

      e480dd4e93b276f5c86716a6cf420f2ea63c5c0f68b88746bd0a3b3b6d984eb9eb27f780481c5603b3e1e3b4a12efeabb07c84818a5ef7b7a914582667c6b2c4

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      d1524dcf3a5474635595287836c304ef

      SHA1

      7d62df439cfeeb75c64aaff483b0e70644cf9099

      SHA256

      d919604f4e75f49f96df2e2b4828c1b7802145afbfe6d46dbfb4bcd918d91e38

      SHA512

      d202f2fdcad2ad7838070f61d43678140502ef44b7070c6911a928f7e7eb1c9b7855625abd471e1b5431c0f780591ae771cda3512c6f023352f7ba0ca6c22c23

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      4116a75202cb9e31c694122c3ab39ba9

      SHA1

      413c0f429d279c5d61d4264f78d66cea8d01e88e

      SHA256

      fad16e873c58146e92f4064f3ddf91394fae730ee0986eb6b43084f35133ec1d

      SHA512

      6dff8610ea01e519ff2b91ad1fd9d9c90adfea567df49fcf609160bfc183ec4fb4f17478421d4a45785f5a9c8bd0ae9a01af47c7683945117acbeb4227081f37

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      1e01b30d50d3c0b3cc5d85cdacfe5cec

      SHA1

      773162164b721462346adbe8cc5a9b15602bd9ad

      SHA256

      bdd5d5f59b74690802b7adfda839be05a8c44727d54bfb45ae6ccfd93926088d

      SHA512

      e8487847004c66cdd2af1bc928808a9391490a186b7536c9383863d51503def7d573c0b77efe985e7ace32ca83668b16cbd20a2ee5e59198c44584432eb0a5d0

    • /data/data/com.lyufo.play/files/PersistedInstallation7311887914319017118tmp

      Filesize

      90B

      MD5

      df86d9d8545aee5e340fdd2ae76f0b01

      SHA1

      ae80b0990eee047a4acb61749e4d77cbdbde0fc9

      SHA256

      b81e29531aa11b523d7f6c651941b59278df47d64b54c533d4b8ade31874efbc

      SHA512

      cf12d08b5279a301c96cd89e3543054a5780c2ff873f8e543d66c2680fc0cfd1a321231574700b0db83db63e14117ba3c6a36e1bd08c66b242caa05673db9238