Analysis
- max time kernel
806764s - max time network
132s - platform
android_x64 - resource
android-x64-20231023.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system - submitted
03/12/2023, 14:30
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20231023-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20231023.1-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20231023-en
1 signatures
150 seconds
General
- Target app.apk
- Size 1.7MB
- Sample231203-rt5c7scc55
- SHA256 b0820c7de3107b5c41d0c9a2426ce10fb73ebf70cf866307f2d3282b921e8635
- MD5 0fc6601133bc6e7ae614bfd0a472f102
- SHA1 89d2f573d8ee658ba91e0de0f8427f30fff04ed9
- SHA512 8727487c535d2f0357b9c7a53e9b565613816dc4e8a384a324e7af598bc8dd7d059e7acdf42a513a8747b239d36765cf39a2ae036eb52005792b23ea8b3a9380
- SSDEEP 24576:assI8S6pk6EXLfCLb3a9xTLULpjeLrhNCtEEcNvcXcz5Ds2NB9D:asFkk6EXLqX3abc1SRWXWBN
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.lyufo.play
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 222ea91e810e5e1825aa77ace418a9561a372138b74dd4865040204968bb0bf3
- MD5 3d752d4d2191dc29f24dacdc6027c2a2
- SHA1 62b33e8b2bcfd55330b526e02264dba7160b6382
- SHA512 d925b413754c706895004f4ba5de2724f6ca94a861ca5ef5130330c5ad42873d9b4d1c00e7af03b5a61263ead4566069035f969c3ecf1e77adb912e8ebcf682c
- SSDEEP 6:7+/l91mHPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKKM/rj:7+tjmvqLmqCRmBEyPbrsrj
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 6b25e6109edc252d83ac39ee5a6112ba35d022192b943b09a1b83914bcce0ccb
- MD5 284a554a02538ef8dd4a9c9b60a26b47
- SHA1 4943fb46e1ddf9962952248c46e640b663d7f898
- SHA512 0451718664d0cd02abb53744a6e8f52adcc11f38368ec69c55ebc9455ada6aa58b9d243bf18dc7ff05e59dec0f0812c6fb94c60b80b45b8cb823ed5b17b59c17
- SSDEEP 6:W42vg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKr:X2vqL8EEh9zmzrfRmBEyPbw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 cbc0c956011e0a4c2922e472cc41a06cdec723b73d143b5e38b065ad3d8adef9
- MD5 388ca65a16901281a734a4ee400cb31d
- SHA1 8ec21e8d6801175cdc9f96d999a4a73106238c01
- SHA512 95f37445670969060750ca9c9073b09e6c17caba4db5c4b68485647a92a7dc26ff3c371b3e1f1db40f4433dab1da5c153c5d89b31582db4d0f81bbebce3c928c
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 306654774626367196f11b395877d120751ebb7f032f7e03414bcb673b2f7c56
- MD5 5486a376f21b08590541f3e29bbf94ef
- SHA1 262468cacf83ed0f3c5be6855e73b8758f078312
- SHA512 1235e7ca45f66529a0b0b9d8e8a20de6f6a403ea59d6725ffcc0fd93483ff54eec736890b485502526d81bb8c33954a0d338d988098d49d61ceba27c13070e19
- SSDEEP 6:7+/l9L/Gn1jRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKCZ:7+tYqLiuWdwRmBEyPb7Z
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 b0c8e467686c20b78c973dd6aa59dc8dc205d83b3b593ad1d937bb6584b012df
- MD5 74fecc6f1af185f6a4b35729c98b3a0b
- SHA1 8c6eb7b2d2a661e75e89b03a481a6767ba1bca6f
- SHA512 779cc13bb7e2aa884d39dcd23dbd371952caf6112f1cf00c71a7f7a00cecb2188bc53b66fd387c2e79968e8825f6db4d4d76fa32f7e841bbb348a142df7d5818
- SSDEEP 6:7+/lJroPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK/b:7+tlgqLJdTRmBEyPbKb
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/files/PersistedInstallation4698758062453793743tmp
- Size 90B
- SHA256 57d8db1c42ed79ba72b273b41322e679d5cf1dd0acf53d0018ddcb5dacaf95e7
- MD5 d15e3d1c75ee896159266be0fb2f94a7
- SHA1 9abf8942aa96c3ac61681ea16d08d43ca73f7204
- SHA512 9a88a1b1db2eddac3b898d7819f13d86d875a55326fb28a8d46b8a28b385004aa8d27f9d7b0242102d8392191e84348aca0641ce12cecc449ab2be1b7cc97449
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/files/PersistedInstallation471127557679201959tmp
- Size 570B
- SHA256 b17fea809e8f0e5e69243715d1f69c60be76aac002bead3f9da124fb04c8d98b
- MD5 0062e3f63978ad4ae46ceed771acc981
- SHA1 ae4cb1362d641213b300457cca147d9532dfe0bb
- SHA512 dc4eb4c9ac0f33fbf3ba9be1c964259f88b829d29868e7dd6093f16c79f0b6640c12a25364e9d31be971cf205e239b8cebc10ca0efa4b92a7cc9d0c5b8537d27
- MD5 SHA1 SHA512