Analysis
- max time kernel
806764s - max time network
154s - platform
android_x64 - resource
android-x64-arm64-20231023-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system - submitted
03/12/2023, 14:30
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20231023-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20231023.1-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20231023-en
1 signatures
150 seconds
General
- Target app.apk
- Size 1.7MB
- Sample231203-rt5c7scc55
- SHA256 b0820c7de3107b5c41d0c9a2426ce10fb73ebf70cf866307f2d3282b921e8635
- MD5 0fc6601133bc6e7ae614bfd0a472f102
- SHA1 89d2f573d8ee658ba91e0de0f8427f30fff04ed9
- SHA512 8727487c535d2f0357b9c7a53e9b565613816dc4e8a384a324e7af598bc8dd7d059e7acdf42a513a8747b239d36765cf39a2ae036eb52005792b23ea8b3a9380
- SSDEEP 24576:assI8S6pk6EXLfCLb3a9xTLULpjeLrhNCtEEcNvcXcz5Ds2NB9D:asFkk6EXLqX3abc1SRWXWBN
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.lyufo.play
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 08b010889d1dfb81f3c3385969849016ac527301bb7b40f64f2388de0aa3054e
- MD5 8369a87628065a4804717f223be9c380
- SHA1 784c4f17d025bbd5de464550717ba379221c21c9
- SHA512 82216eae37cecf58aa097e6d79847fe17e9a55699adadc823be64a00a26c3525d234fbfc6ec441157884f4c11b69e5df5316f145054cc1610e8e0455619bd58f
- SSDEEP 6:7+/l9oR/ng9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKrN:7+t0fqL8EA9zmzrfRmBEyPbq
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 b194e6f10a3e7fe47dbf91d58dbbdde3ac3134d774cb8a7f2c8869f4c7cf4c04
- MD5 dd8c6d6b5e65b3c5e61bff2799762305
- SHA1 4dbdacad9ae1424a9b8e894caa2f2cae4ad1687e
- SHA512 ff8c013fbc54d4908630bd6d2ec52b1b76bdc0f81a73754a332ca2793c55f8e4596fcfda6f508f60781b7308a3adc48074a71c8196c42ff42176c38dd736b60d
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 4e4981f112b5f08ea1225529d0590a4b0178a9e06cc6e69a8a64cd50581af332
- MD5 b329a928b2d6af29eeb072dc06fb5789
- SHA1 17a98565f609a8334ec7baf076cb0ef881ec582f
- SHA512 c91d2d557c44ded5b737034cd05724be6b565bf3cf0c8852020d0179104a2cefe5edf1309c7049da88e321f97844432a83f10a0ea5315eeba52cdf6596cce7c9
- SSDEEP 6:7+/l9Kn11vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK6:7+tAvqLiuWdYRmBEyPbB
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 1e4aadf590bf4d9afc6fca4a80bdf7c4c82b7f0a61632bdfd51bfaf0d4c7bda0
- MD5 78dc1f985f6a566a0f32fe67201b2318
- SHA1 0904b36d9c32ded05724a0f8bd6d0563dcee6c39
- SHA512 df7b445ee481842180891b28d7a871ae5907f9a1ebded74b788ba11e47d8b857e706fce6bec9d65f5fb15d20a13e597b731f4af91b7a3c913cbe9e4cbddec4fb
- SSDEEP 6:7+/lF90Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKg6:7+tbcqLJdeWRmBEyPbG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 0bab5e95bec94489a21886375a09fa6e0ef16f9bd5226365c39648a84ad333af
- MD5 dc46f9c72417a41fe242995cabbff401
- SHA1 08d1cdc329b1b2f5405caea4f4d1b352c51d14e7
- SHA512 98c09ceb5bd06483b010e4518d0b2a432cae57d3f15b5bfc3e105fc890d35662dbeff8ad083524777194333eabf96712619082facfd05ff88f7a23d4239407de
- SSDEEP 6:7+/l9OhqFPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKsht/md:7+tUhwqLmqKRmBEyPbf1q
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/files/PersistedInstallation4331906625141160070tmp
- Size 90B
- SHA256 c1dcc2a8b52299efac60bedcaf9c4770032a29c7fbe01102ecb2e9aecf829ad5
- MD5 6acdf3a85626d502c7a3d640d200a4d7
- SHA1 f891dcd4b1f4c9757653775e8b46d1ecba33438c
- SHA512 610b24fd9b0982d40fb53fb41dcb543ec1951f473e84cd24e257e31e73d10dfcb73fe18be00d1f06525375cfda986b362cdf14d6643d6cf2bdf7c28bb7f68cad
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/files/PersistedInstallation7133058980515878689tmp
- Size 569B
- SHA256 43265b064088e17d9b262fc4a5401fbc1c46ce74eca8908ed5266f677996f378
- MD5 ec93a1152dbf904184706216920ecf8a
- SHA1 4df9cbb331f171ae358436d4135e7b694601635d
- SHA512 1620887c71ccb98ec48746af98e91d392fe20f90efa395af047cb82b0843b6036d152f80a608c86f78f1ba410125c2ae46066c86b78f63703cce3600e15366de
- MD5 SHA1 SHA512