Analysis
- max time kernel
813427s - max time network
144s - platform
android_x64 - resource
android-x64-arm64-20231023-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system - submitted
03/12/2023, 16:21
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20231023-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20231023.1-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20231023-en
1 signatures
150 seconds
General
- Target app.apk
- Size 1.7MB
- Sample231203-ttmt9scg49
- SHA256 3ed229b621ededf4ff68b9479fdad2cfeedb64c2c6702e6ad5b265135706dd92
- MD5 0e3925181265f86053b4174f3886e9a7
- SHA1 40a6dd46c716f297fc9c163b4498f853da25b75e
- SHA512 6a8534cb2283e2f0c5c2dd84c6746be1bcf4421cf67087bbeabd41d3bce4f46839905af952f628fd8a698fdd722504784c285ad127bc99fed44677382b228f45
- SSDEEP 49152:RsFkkzEXsn7XRKryCYVKyaIZvTvcQt9ER:IkkoXM7hcyCfLaLv79ER
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.lyufo.play
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be
- MD5 73dde037d43818d6392e51665bee0446
- SHA1 79d2b7aaad055aaa21aa371d61b05684c2164073
- SHA512 95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe
- SSDEEP 6:l9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOw:TL8EA9zmzrfRmBEyPbBvOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 4a67beff5c3fb8eb43e0bef87100a5be2f8ede662aafc77a611a29021a7a83ca
- MD5 22c0e77782f6229747dd404add36b328
- SHA1 3b7d7bbd7bf9c02b6d2a2cffca66894272553e1b
- SHA512 fd9c01e830f8d934973a5bf57b1831fe7703c9558b1e97f0d3d95b0d871ab920db63eeff730b482ffbf220b631062cdda399e34fcdbedd0cef285604f20eb0d3
- SSDEEP 6:7+/llPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK2l:7+thqLJdeWRmBEyPbHl
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 418a057c6ce788e2b9c1c2a1cec33e975ffe77dd146a13988c47bd56bb2c3a2b
- MD5 119ad1b2fe71cde6d501c50ddcc82869
- SHA1 e7fa54a9ee8a519200c6fdb197f3fb74ab4ca7e7
- SHA512 96bcf3b778b68ee998161811acfdea645316c9a2c5992ede6b3ffc32b573f8befa57d2d09332badfeed23a1d5fc729a93b5174e8cb52ebec09ee44ec57905d72
- SSDEEP 6:ul/gPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKCfmM/:ulwqLmqKRmBEyPbJT
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 c8b60afed8832b6ae2b26468f604b2f4fed958e37610d8867af6f6a178466845
- MD5 ad52fdbee11bd9cd157f1d0d7900af8b
- SHA1 991e92d11fa54fc3b06016c6cfc29763bfcef87e
- SHA512 2c735444c77b511c83dd025438df833b3ed8564f5cbad10924809991746bc35d3cb2853578be263ece3985e63381415b16b3903568e8b201c1f31cd4c382621e
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 356c1cceba402f667ee2914061e205bb1b0730ccdb1f9618022ea308a6c3ca6c
- MD5 a06c11af3253dbf5e188200f6c4378e8
- SHA1 e5455fb0de04479f73486e5bb74bafbb8a5c2a4d
- SHA512 a96624acf6f511a4273b927eedf1327940b0f94fc960b6f51863508d707f44863d67ad24d285f054a03a8e6ea12f43253a75d48ee387b224e0a156ac6f168574
- SSDEEP 6:7+/l92UlFn1vWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK1N:7+trgqLiuWdYRmBEyPb4N
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/files/PersistedInstallation5634007238224327499tmp
- Size 566B
- SHA256 0ae104c38451809e27c0e9284da7bbf7264def0629e101e17a79b15c66d8e6ce
- MD5 3cd8a94c173d45ec8ce1293ee8931545
- SHA1 b534bc06eac4986c19e760ad9259c8c68ed2da2d
- SHA512 eb91aae58b9e03641ff9417b48d0d4b47044daf7826b770d2d83e04301f26cdd505407ccd917222fde1682ddfeeb8eac21d97594739f3bb636b1c6bebd7dd8ef
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/files/PersistedInstallation8363405913848927459tmp
- Size 90B
- SHA256 b1f49419b5022c87c5d20844a2fda31faaad5e2a06baf6659e40ba7da5dcdcdf
- MD5 47bd1f94cc40e71d2d398a354aa9516a
- SHA1 46078668e272013c95e2f98675de800c74023fe3
- SHA512 93a2ea25791b33cf4b68d9c2b8d6fb80c0fedbaa9ed1ea76ad3886bab277ff3264ac6e593bb884547e60314bb06876df527d3f0f5bb0ee6a3397e75a838369e8
- MD5 SHA1 SHA512