Analysis

  • max time kernel
    4182173s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    22/11/2023, 23:04

General

  • Target

    saham.apk

  • Size

    1.7MB

  • MD5

    6ff8385509f1f180a1b60b49fcc33406

  • SHA1

    f36e823da5e4377b5b36f18fc3eb535d2ff3200a

  • SHA256

    87122e2d4341a44298b65c15f36571b1a9aba0b89717acd5cd3f8368cde034ab

  • SHA512

    dd492b7b934bf5627e2554a8f371e9047073ab20270ffbe83464b4a459eb6364b4344cc6b23c964a358a0064f9552e368c1912e5a8d5b156802a4324a2608d8f

  • SSDEEP

    24576:qsgI8L6pkU0XYeNM17AN7ZeGjzUqO3H+IoxkUIFFlKwHy9VkH5PNzB:qsgkkU0XYEfN7ZeGjzUR3H1nFlKMBz

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • com.lyufo.play
    1⤵
    • Acquires the wake lock.
    PID:4623

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    25b8b30fbb43e1d0ef2b55d0f39dcf66

    SHA1

    65c25ffcc36d2dcf735371d9eebd5095e414e4ab

    SHA256

    8f85fa3128d7e7ada41bd88e4672f41c4bb339893233e4783adc68a5ac4fc6a1

    SHA512

    91f15b612f0fefe50a68a13f9aea2114ed6c32c2278dbfedaeb071a86b1c3702600352183094ecf1a495912d7df84dcefa9b79c688bd5cdead9ffce67051fad7

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    1ea23fde8f6ab4eae303c321c90246a0

    SHA1

    7ecf7f563f55a9e0896f2dd50e630a40cfd4893c

    SHA256

    08e915d3cf934dc516f893f540e8b265f4950336cf917b54462e65b4864167c7

    SHA512

    08a42521b0e953143192bff9ecfad87a68a42c1c1be846ab4a118699ba67b457c569d0eed8c1b0845fe6e6e011ba63e182b3010f3e719d056e661494db129f18

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4b6d7107061f485db535910b574bfd29

    SHA1

    4a4766d2184cf11fa01eca7855ff2cf579639c22

    SHA256

    f1f63af5b4d8f7dec2980c84f54b92b041bfa0628f9488789a5c4374d2d5388e

    SHA512

    5bbee3c3a0ccb4775415edb0810771d164956fd27902b3009a5f30fd206a8abea6a50a8b19432660aa2ba110db1a07d5ab2a678cd502f59fd47461868e2cf534

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    108e2755fcff354ce30d27d2f78c449a

    SHA1

    452c813074654c8398a90b97dd37322382e0e979

    SHA256

    3f8803a2788c990bd2829b7becb685f1cb6fc5e1a2c354bc703ad909f8ad389d

    SHA512

    30cc6b3c351a83924caa65b306fcc11cbe1d62a01b8c486b3a556da625c8958a285a7bd9044e757416d5db85583b31005aeea217f05c89c58d4a0ee1997039c7

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e3ac2b999d0c318ca216f8515fc16b07

    SHA1

    3b3758f0f1a19691821b5fbb21b5d61a84ddee3c

    SHA256

    ba7ce7a2022de1585b7f86b81a6d6c1464056749e9be688bc9599dfd1ed3a899

    SHA512

    1572ab5c3673763b8ecf77fd9a3b490e2d7c3600636b04bf9c788ee8a4ecce07c1d176736cf472350f6db7d37ee0c2eaae211fa5a55ebd879265983e53be7379

  • /data/data/com.lyufo.play/files/PersistedInstallation5918082540038622885tmp

    Filesize

    90B

    MD5

    7d1bdc34f0dfa917faaaf327a7501ae5

    SHA1

    a12a07b8d12dd48bcd44bcb59ebfec3c8ec16f69

    SHA256

    de92095f10e4e4b8db25a225fb25e71a83fc93d13652ff948e44f822833c54d3

    SHA512

    2ebf614603aab345a7f796d2740f562a0dc68acb89f0a30026491adaf39a164efc7ca419c27d0424e4ab913020ec628fb7e81a5cc8e38e2c041e7c86f776dd3c