Analysis
- max time kernel
806584s - max time network
165s - platform
android_x64 - resource
android-x64-20231023.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system - submitted
03/12/2023, 14:27
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20231023-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20231023.1-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20231023-en
2 signatures
150 seconds
General
- Target app.apk
- Size 1.7MB
- Sample231203-rsd5macd9s
- SHA256 b15755d41bc16568494da3372df4442711c9eb0b1dc5ae7898a2f01d0568c8a3
- MD5 a9abb5699c9c9902a4f925de1935d9ad
- SHA1 2e066938bf9e06547f179e6555187181017ca843
- SHA512 4c54b2a8ea2e14e6fbd50d46030e4de9005031d44230793ccd046e814dc8e9ba1c528e0744d971addc95b366da15bf9f52a85c3ea6a5cfe7ffc2cc1ac42479f6
- SSDEEP 49152:Rsjkk6EXLJXcsG13u/9talZz6Zp6ZQxsvW4NG4nIIR4:mkkBX1ssGM/9talM1s+4k4I24
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.lyufo.play
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 42bf2f2aef2396eaaa04938936c73c3fa135cb444a8b6314efbb6f01b1117981
- MD5 b2efa31f23540c1d454a9c9c38dc67da
- SHA1 cec52ac3e7ced434500ef0d2e6423d7cfef79fdb
- SHA512 aff327bc4fc6a98218161e85f4c395c4b2f017f6dd17e4ebfdac6b6727eaa98427857d7cda25a42d604a8d718efcbc5ef2591662724b45413a4d0e37dc44bd5d
- SSDEEP 6:7+/l9yJg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKjL:7+tgqL8EEh9zmzrfRmBEyPbs
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 bfeb6340f8122b5e4cd1daf5786124cf5f29620de5cd880bb87e9a5e538b31aa
- MD5 972a038ef437b7f71c77ddeece4b77a3
- SHA1 2eefa3e183f471d1d1e9aed58c9be437340467df
- SHA512 589424fd6ba179aa5dc615b3ed13ddc0c9bc5a3989ad245158049b79e9dbc540fac1c40b2bd3fc542b8f99b370087afafa5816a405b78f51902aadf80cceacb9
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 160c7e44c66e0a97d7afc3ecafc2de307d8c6b5be8be6d39c99715324da8e806
- MD5 127677e81c5f40af5e56b1d3987ca177
- SHA1 95724e6efa95aff7749adfa3623258f281d5e8f1
- SHA512 60c9be36f6f458f4e8a9add53c9be030da126d1c865de4c9e02d9b16560d1aca1edd91cde6d97d70d6fcb9c9799f4254e26b6964935bd03591c42b8b539e0ad6
- SSDEEP 6:7+/l9iGn1RMJvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKj:7+tEqLiuWdwRmBEyPbM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 95a653502067ed49d0afab7b76c947787f9ad9c03e279ac1726b52271d0fd0f1
- MD5 becd05dd0c854de03410a4fb611f1257
- SHA1 628bc22493881bb8651df69ff291460bdf994785
- SHA512 c21fa73c67235539b264e3eb48008a56dd0da15aefec691b65d87f3963e4de77c4b990496cb7b20f147149460dd4eba8a188eb03b9c84e76950d4cba5a917206
- SSDEEP 6:7+/lBPuHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKX:7+tgvqLJdTRmBEyPbo
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 83311a70cb4e7d60ca1a25fb8e64c93fde0f8cac66fc414dbe28a3934bc58123
- MD5 a126fb931b3f6b30c9f4713e1363bb98
- SHA1 1697c48e6a0e79124f32ce9bd57ae62d786277c4
- SHA512 e2892130b5a34dc9015657a37243dca21469290220410a3afb49640c09a109724cba6d8f562f6f85b3904f0ca59c325881a3baf0590fe0aca0e2fb37e2f80eaf
- SSDEEP 6:7+/l9IUFPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKsBnt/gv:7+tvqLmqCRmBEyPbDn1gv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/files/PersistedInstallation1923068845563848095tmp
- Size 568B
- SHA256 b93df354346b3e6b0615274d66034531d707b463836be1f9c5e9322d61c24ed1
- MD5 33d3823d5792a7a6321ced20884cc96b
- SHA1 9d24e9070f46f64c39cfa032dbec4bfda35ac3ff
- SHA512 09af901b8be389a4c5e2435a38b84776551ef1ea7154b6f39da17380bcf55f9e01d59277421f5ab249dc55838e71a39153193769cc83dcba2eea09977168dc52
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/files/PersistedInstallation7004163546592328097tmp
- Size 90B
- SHA256 820e0fe1391b3d0366e51cbadf9e481790a94d3676fef291c4f91b677b8e3d3a
- MD5 2b8f429abd10cea85fbc6867faada4d0
- SHA1 dc614a00f71784ed8a01138756f340cf5f0df22a
- SHA512 55b2593c0827329fe487a1d05d91de087a329bbdad55afe1d878dd1097949cc2057e4253b94c794017a9e7f27ec5a32dfb86a50c35bfdca84b36f7af310990ae
- MD5 SHA1 SHA512