Analysis

  • max time kernel
    3303448s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-20231023.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system
  • submitted
    12/11/2023, 18:24

General

  • Target

    NEAS.0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528.apk

  • Size

    1.7MB

  • MD5

    21776ee181d2a9c6ad8f0b277244c847

  • SHA1

    5d59ec198cffb6c9fc2119d328080bef70b4c884

  • SHA256

    0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528

  • SHA512

    71ffe9d5799907b6b82d51d0e088abcdc04f4b7ccb6791921ab43e5a59361c6672f2319dbd7bdfdb7e67d0061d9d8c84a2c5f29605f0d7d8945fa268d7b3c2dc

  • SSDEEP

    49152:RsFkkzEXpatNPnMkDOJ17HMydhPZ6+hYEcyQ9NfF:IkkoXItNPnzD41bBd3Vhva9N9

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:5042

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            5947b7696a70596f49e7e69e7b70b9bd

            SHA1

            5e73f958f832101b741bc6c3b21153be5e398628

            SHA256

            d4541e714575181cac4457d6da90e1a29fb117084f27fec7290d30958c501f21

            SHA512

            83da4e48589b87bd5bb85349918bd25145396095a79f5c37bc8efd59d1a5f2aac8480773f3cbe19f90907eadda111f52b8e898a0ec1a6d584a4fd620e99e1c96

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            9fd6ffd5e5e1095c1988f57894958eaa

            SHA1

            77f609ca4ceec290c47222f4064491b957db7908

            SHA256

            e0496625aa3075676aaa49c1c40a219afa1e244372a8de19d5f3c52561dfbb4b

            SHA512

            f3d2874bc6e2cc3d735e08b3d66323e7e3f6a70c767543694ca16dd7d4e58015eec22ba56cec248d4e9a316be4d8cdca23fd3394127ca8a74846a2e9630564fa

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            eb52a90bb70b76e946b62f50b6f7fb85

            SHA1

            42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

            SHA256

            48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

            SHA512

            b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            e4e12c0647c4b69bd641e86a09848a81

            SHA1

            4a42d57829c79f5ec73eb30a05c4a9d172c40ebb

            SHA256

            f71d9b9cd790d84fca74a8a08279173e3371d411fdc1d3fc4fd07f953e8bd44c

            SHA512

            09bf2e8a6dbd85dd7053bd119c951d2ea6a676b2e9e6bd8afde9fe662c1d8881894fa1efb2e7bbe2f93aaef49e3649e35ebbc4b132f8b0b3be80fffbf3b1a673

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            8f31dcc765e3f3bc9a77ccd415ee2bca

            SHA1

            1729379d9fb34e4ffdd171f01f9f035e9a3bcb38

            SHA256

            f1bd784d908ff5e9bd3b0c98e1ce20e13bd7364cd1ab63619bf0922177fd38f2

            SHA512

            a7d3f4ba52993bca721487f35580069832a4be7810634136e6705450146f4ddc5b347f15474c39b10477a9e7ce65c37a40bed9269eab4151135276ae1e7a59f1

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            1b5450e88ea8785aebc9de9733440c81

            SHA1

            f8b5e486d21b459b76ba12e5d82e2245995fafab

            SHA256

            eebbc4bb849738b0e1ef71ff06656c11ffad6577342ca3ddd2ffd2cd704a1896

            SHA512

            e480dd4e93b276f5c86716a6cf420f2ea63c5c0f68b88746bd0a3b3b6d984eb9eb27f780481c5603b3e1e3b4a12efeabb07c84818a5ef7b7a914582667c6b2c4

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            d1524dcf3a5474635595287836c304ef

            SHA1

            7d62df439cfeeb75c64aaff483b0e70644cf9099

            SHA256

            d919604f4e75f49f96df2e2b4828c1b7802145afbfe6d46dbfb4bcd918d91e38

            SHA512

            d202f2fdcad2ad7838070f61d43678140502ef44b7070c6911a928f7e7eb1c9b7855625abd471e1b5431c0f780591ae771cda3512c6f023352f7ba0ca6c22c23

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            4KB

            MD5

            4116a75202cb9e31c694122c3ab39ba9

            SHA1

            413c0f429d279c5d61d4264f78d66cea8d01e88e

            SHA256

            fad16e873c58146e92f4064f3ddf91394fae730ee0986eb6b43084f35133ec1d

            SHA512

            6dff8610ea01e519ff2b91ad1fd9d9c90adfea567df49fcf609160bfc183ec4fb4f17478421d4a45785f5a9c8bd0ae9a01af47c7683945117acbeb4227081f37

          • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            1e01b30d50d3c0b3cc5d85cdacfe5cec

            SHA1

            773162164b721462346adbe8cc5a9b15602bd9ad

            SHA256

            bdd5d5f59b74690802b7adfda839be05a8c44727d54bfb45ae6ccfd93926088d

            SHA512

            e8487847004c66cdd2af1bc928808a9391490a186b7536c9383863d51503def7d573c0b77efe985e7ace32ca83668b16cbd20a2ee5e59198c44584432eb0a5d0

          • /data/data/com.lyufo.play/files/PersistedInstallation7311887914319017118tmp

            Filesize

            90B

            MD5

            df86d9d8545aee5e340fdd2ae76f0b01

            SHA1

            ae80b0990eee047a4acb61749e4d77cbdbde0fc9

            SHA256

            b81e29531aa11b523d7f6c651941b59278df47d64b54c533d4b8ade31874efbc

            SHA512

            cf12d08b5279a301c96cd89e3543054a5780c2ff873f8e543d66c2680fc0cfd1a321231574700b0db83db63e14117ba3c6a36e1bd08c66b242caa05673db9238