Analysis

  • max time kernel
    3303449s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    12-11-2023 18:24

General

  • Target

    NEAS.0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528.apk

  • Size

    1.7MB

  • MD5

    21776ee181d2a9c6ad8f0b277244c847

  • SHA1

    5d59ec198cffb6c9fc2119d328080bef70b4c884

  • SHA256

    0ef864b53b9269db53aaf4cd30fddb08a78da64bbfe8d8de40680ef280a4f528

  • SHA512

    71ffe9d5799907b6b82d51d0e088abcdc04f4b7ccb6791921ab43e5a59361c6672f2319dbd7bdfdb7e67d0061d9d8c84a2c5f29605f0d7d8945fa268d7b3c2dc

  • SSDEEP

    49152:RsFkkzEXpatNPnMkDOJ17HMydhPZ6+hYEcyQ9NfF:IkkoXItNPnzD41bBd3Vhva9N9

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.lyufo.play
    1⤵
      PID:4392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      03267deb0c36c1577e7d0ee8cbe9e1a7

      SHA1

      48bb89466b6ed3d5bd0f66536b278259b42e1e02

      SHA256

      a7af5e2cf67477c41ca109cec17224903be5beeecc5fea1122d4a0655ef41980

      SHA512

      ad43a5ae95b4bb1ab0fb1d734568d0ed37c93b0c5e64b6d5aaee66eb679d69680f3153b715ec9a3a1670d0f01fa1929c29d0dd705ae41f203f94823dac467bfb

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      6fa7fd5f2af753c2781b588cec38d6d8

      SHA1

      8d95cef4054d5ed7d9fb25a72b97a84f98782ca8

      SHA256

      914a94ee228d61d9898923e638c832c91f78000b951472e5ca019007467f39be

      SHA512

      4ea0147f50f975e4f667b8c5b50063cc1f33479d53f1d9c38281bc208ba7aa63e8a0e0639c3ceaaeb5a46473b00a35539053dbb838079042d5c64d2b3c05f1d1

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      68c1cabae8c844156db96f247ee368d3

      SHA1

      a65f543981263bc32527132d2a65a1fefbb40009

      SHA256

      4d38eaac7bc8060426a1011fea0b148fcab08c081b08be91a5c7280397bae2f6

      SHA512

      d954d32aa97730c64a49fa90da6e1a10f855e39b9e09b613459d9ad60a243459e0f4d8aa4d750f2aca2201aec2c2b02585b2ac9dd27e9963da5678e21109ca76

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      5b65018482bee330594773702c15bbb6

      SHA1

      22c5f79c196082081d7560481eaba032c51ddec3

      SHA256

      f1543fea86a08e9f875e5ee45e55c97d9808c3cc654a3d9fb84bac741493830a

      SHA512

      93e39ca591a7f973007bc14bdf53cb46c626554e1daeaa078cb6f6f279bd54035fcbc5da71d091397d0387480f0704ede07d7034736dbffefbfabb4cc023742f

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      f828a18635116e81ce988f820d5c101e

      SHA1

      78616f96d123a9a3ceb33c3d046329fd359b2061

      SHA256

      5be2091a9699e74cd238aa630cefa6ca2c0eb0e7b8c766a49ae8c3019971abea

      SHA512

      118b587f589bcb7c0a586dd44081c79eb9b80dd93e56438c34a121a31d39967427ce00ec1d81780bc4d29899d9507b547f7a56faa8dfdb9c44011829f6f65279

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      54e50242857670af4c73aef4541421a0

      SHA1

      8b55139906f9e570c2938f0ab0315acde50061bf

      SHA256

      f71751b8255eb8f969c6a70c55016a2f193d5f34d6eb67298593e6e5b5134cb7

      SHA512

      24af5c17ed47b8425ea0d9eba793f10266285f4af019af89b9c1e8687cafcb2e2545168528dfc6c2f96a24928db92f58aff7204dd78a6c6f14d48c9a47db7f05

    • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      337cad202dd13226e6fb290b095da0ef

      SHA1

      649f526f36d1764e1bed1cacd5c93facf57b67df

      SHA256

      fdb445878b8782bea821e809e96c4bdae66401527f78b48d685dec443400b7ba

      SHA512

      4622885d92fc30f471f67711105d558156750f1a75abd5e3131fdc298abc4984cfa605bfe92f6b837f80a87712733f42a56e24f1c8557f79c9a02660ae364fbc

    • /data/data/com.lyufo.play/files/PersistedInstallation1045668799283799556tmp

      Filesize

      90B

      MD5

      734d455b8ff3ce84fe78f88d41266e50

      SHA1

      377be1e2ffb02711790b44f45c1d48c41af2e8e5

      SHA256

      b85a304d1b71e6a8ef40586bb137910ccae744513b8b19f2ca2f2ebebba3c059

      SHA512

      1cdca75399bd96daadf2cf4811e159f13c235203fcd917678a571d958ace03c02eb2b66d6c43f09a336e8f4fcf6e690cdbb8f61045e2e65254645ff75bd03ef2

    • /data/data/com.lyufo.play/files/PersistedInstallation7104098073675183941tmp

      Filesize

      569B

      MD5

      d6564286762719d2e73ad25461b26667

      SHA1

      83ca396dceba2f47f8d3542fbcd8a651ea199fbf

      SHA256

      c204eb650aac4266cdd450fb084b9443ab53e4eff9e60d714ebd3f1537d66d32

      SHA512

      c8b643e794ace85def00d3c91928c77beb7aa83d70783bd8799721ce24828554bcd16f9043474b62a4d428ce3ef0fb0cd1b77428f34f6f5952cba0c11e36b7d7