b15755d41bc16568494da3372df4442711c9eb0b1dc5ae7898a2f01d0568c8a3 | Triage™

Analysis

max time kernel
806585s
max time network
148s
platform
android_x64
resource
android-x64-arm64-20231023-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
submitted
03/12/2023, 14:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 1.7MB
Sample231203-rsd5macd9s
SHA256 b15755d41bc16568494da3372df4442711c9eb0b1dc5ae7898a2f01d0568c8a3
MD5 a9abb5699c9c9902a4f925de1935d9ad
SHA1 2e066938bf9e06547f179e6555187181017ca843
SHA512 4c54b2a8ea2e14e6fbd50d46030e4de9005031d44230793ccd046e814dc8e9ba1c528e0744d971addc95b366da15bf9f52a85c3ea6a5cfe7ffc2cc1ac42479f6
SSDEEP 49152:Rsjkk6EXLJXcsG13u/9talZz6Zp6ZQxsvW4NG4nIIR4:mkkBX1ssGM/9talM1s+4k4I24
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator.

com.lyufo.play
1⤵
- Acquires the wake lock.
PID:4357

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 05d536b4ba7880a5993b36a5d74e624d37465b6e45379a223e7c5fc82b874fe3
MD5 3e73f1eb22b1477140cabb4e2e0a8faa
SHA1 06eefff3e3175fe9b546a61c78d788f5eb76e028
SHA512 c85a2e270e5c62da168c6a61420fa0be1fc2aa70c8690d60c3a8e270905e0766c679df71f536b52533d9300106e718ed1a91b361443cf5729642cce1a3fd956b
SSDEEP 6:7+/l9Y/0FPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKt/Gt/iNn:7+tXBqLmqKRmBEyPbmSA
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 03a7fad3251551d8c6cd4c8c1aa69da386d446d08e49dbbb50f8d01df3a78f80
MD5 40b3a5e16a4e5aff2d633277212c75b5
SHA1 aaff11065a95c4a9d096a5efa84c9d35f30d199b
SHA512 3375aa178cec14044df1a8f483f59ceb60adcea0597044da8dc4777be80635ba004bd2d10832f1733f62b92ad4e8dd403e3a6d4c503caeca702b3c6b4d155a01
SSDEEP 6:7+/l92pg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK7:7+t4qL8EA9zmzrfRmBEyPb8
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 fe91568beb6eff722b1deb4db78bc65c5d6be22f28ab49ae629bf16c949cc38f
MD5 2de863cf71659be9f393af7e4c7fa2ce
SHA1 771818b245dfc7762dc3ebf66b7afc9586362639
SHA512 0035dbe35923adbe5136fcf69899720021bd19edfa37b0ba78009ac4e9aee5c4a7ba95c138af299257b53a8cc68b50ebfd3e1135bcd6861ec355b83b9ce75592
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 53434d4f9654ea746337aa54489efa3315ba2c0bbe04d3dc83eb67a15bfdd9d6
MD5 df9b3b59bfd12f243b0d00f3b5f27975
SHA1 89a1fca60672c54ad34ea59f53dcdbe71279f704
SHA512 34f44b1257a4d1d259e9ba0f7e3e27424c0335fc52c728d72b41197abc7fc69cf712388876b91b2926fb60f3ebeecd6644f6bb23564026d7a05ab0e64a697e6a
SSDEEP 6:7+/l9wrgn1W/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKn:7+tIbnqLiuWdYRmBEyPbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 6cd6636e3d4cdd82215513f80f4b1f85ac0322dfbd1ea08d3e6ffc6e969d6f2c
MD5 616928243c197939ef87967428189107
SHA1 9214084658c77f3aee3d13f00a6c35b169e24d3a
SHA512 01a0087b5c4be1fc365cb4ec641ea9b1e6e03b01f1f2b1d746c481f4f69e87c584675b0a1a4d14a243b2cc8dc09e05206629de4990796bf43a8fe81d6904d5ae
SSDEEP 6:7+/ltPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKC:7+tJqLJdeWRmBEyPb5
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation8696307107801184715tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation8696307107801184715tmp
Size 90B
SHA256 f6e9ec2464b84dca3aba5f3972506676f78bf74e2197ac71c9d7f7a6c295bdbc
MD5 bb78a45d5fa9f97269cd1a1c7edb8300
SHA1 591dfce8a8f2afa529feeb61a67af5311ca6c034
SHA512 956427c691f6bcb3c19c24454a633132464393c857ad2dd10a1724cd5992e5b20dc5500c341932dd715452b3b86b9ac0d734fb6900e93495181bd85d11a81ccd
MD5 SHA1 SHA512

Submit Download

PersistedInstallation9053440314824513308tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation9053440314824513308tmp
Size 569B
SHA256 14eb5f05618b766d0f4952331e9825eab1173722953a0feab61de6dd7913f8a7
MD5 3c44883a8443a63efa61b0c6e0d85569
SHA1 c032b989a0be670584ef196be7cc5882f2a93f90
SHA512 b1b1ac9b080f1cc1607bea1dcdb26a584a24e0c41f13d8425e993f17594c2effa29fd49c2d3db175ac00a587ce5c5b9f0d864a4115816bf42a0f0e92c14bf89d
MD5 SHA1 SHA512

Submit Download