Analysis
- max time kernel
813427s - max time network
162s - platform
android_x64 - resource
android-x64-20231023.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system - submitted
03/12/2023, 16:21
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20231023-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20231023.1-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20231023-en
1 signatures
150 seconds
General
- Target app.apk
- Size 1.7MB
- Sample231203-ttmt9scg49
- SHA256 3ed229b621ededf4ff68b9479fdad2cfeedb64c2c6702e6ad5b265135706dd92
- MD5 0e3925181265f86053b4174f3886e9a7
- SHA1 40a6dd46c716f297fc9c163b4498f853da25b75e
- SHA512 6a8534cb2283e2f0c5c2dd84c6746be1bcf4421cf67087bbeabd41d3bce4f46839905af952f628fd8a698fdd722504784c285ad127bc99fed44677382b228f45
- SSDEEP 49152:RsFkkzEXsn7XRKryCYVKyaIZvTvcQt9ER:IkkoXM7hcyCfLaLv79ER
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.lyufo.play
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
- MD5 188c0542bc062e48b614e5ca8c1081af
- SHA1 0eb9b89a5c92957cd1fe748cc063b32853339774
- SHA512 62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4
- SSDEEP 6:l9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOw:TL8EEh9zmzrfRmBEyPbBvOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 23c47e41f224c84bc5eb7c498dfb74b0a817d7b0951f8310ed0328783c392f40
- MD5 a64af2636bcbc16dc285ddddfb7d2d78
- SHA1 e04b83df5473482b6696271a3154aac27eb95f83
- SHA512 5e681941ad75811cdec5a4c1839055a065330c05faba744f4442186d21b971364c563cde981918ab3c9c3499191b8f39134355bd1a161c6fa19f0b0284b567ea
- SSDEEP 6:k5vg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKK:WvqL8EEh9zmzrfRmBEyPbV
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 1a96f98a7d03de6a85b89a54a50c4aea52e2bc4ad25636db91b538717aedf9d6
- MD5 3604d19ed9c9b0e366b6e9f7df7a54d5
- SHA1 ef98088b4a65c17269244bfce4a4c2999ebf975f
- SHA512 7d5ceca895b93675d520abf0c51d573e9c729b09e9581af1f537a32991fcf09bbadfad1ed53039ff146c0333adbd39f50ca8720b7d1a6e02f3e27ff0efc7e574
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 72d9884e725680739290562b0f86d799c8c3dea6dea6ea4dd4fd3571e0ee53a1
- MD5 6495f1325887b08bfd36b72983741ee8
- SHA1 54eea813f2ac5ee379ba938734c7b1e7e49099db
- SHA512 2ee618e6322144fcf0b5b78569ba32b4bbebc1a070e6227a9941c94a4fd763e5a1f966ade20c5c4b3d487dc0e5aebc43e418d2cb63814ee85a1a3b705f8a7848
- SSDEEP 6:7+/l9pksgn1SEl/ng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyLHn:7+tQhqLiuWdwRmBEyPbDz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 6aa9c8262487a143888612956b6dd3d6002570871b7ceab529f167f88e056343
- MD5 26553f89470c3ac61e93fc646454eed6
- SHA1 bdc7cd9dc0a252f7d30bad00ddc33cb84234ffa2
- SHA512 4037812428294116b94dca7b35e53885cf9c8dabb49f0cc41d509ebbff7d0ae94777a73f95163104f00a950b3f3fefd7f0b7b120e3b411ef7bf1d00412ca4bb8
- SSDEEP 6:7+/lhPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKmx:7+ttqLJdTRmBEyPbXx
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ddaea431953e6a415f695b4a353b2eb0732c16293608b446d882c3e63f8f0bd5
- MD5 94e55e44cb24d3ca6aaf9055306dcdd8
- SHA1 4a0d1700cefbb6434e39d850be2a0938548c29ad
- SHA512 c3c7a4ac04e45116ea5c2c40b4c3b331dd81172357e5b4d25b7373094a345686985bc361919bf079c68480cc1702eab21fa5f7c889210f313824f5a73f7d48fe
- SSDEEP 6:7+/l9HV8FPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKMGt/PVn:7+txViqLmqCRmBEyPba1tn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/files/PersistedInstallation7540468906868011534tmp
- Size 90B
- SHA256 f427e4313d03b2daf6158a6a4af6faceb6cb0ff4ab690bb47b7b0b1a402e911a
- MD5 e2879b03cbc4790f56b9588e70dfeb49
- SHA1 d6ab33ff4dccf5ef67c6b9436c896bdc982edba0
- SHA512 e46b65e772b60603a0d844e756bec8d68a00bf54f56027976d724271ea9fe9f60fc7fc962b530c106e2951831720481df7c9cf000296bed155fe3084a2d73bf3
- MD5 SHA1 SHA512