Analysis

  • max time kernel
    813427s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    03/12/2023, 16:21

General

  • Target
    app.apk
  • Size 1.7MB
  • Sample231203-ttmt9scg49
  • SHA256 3ed229b621ededf4ff68b9479fdad2cfeedb64c2c6702e6ad5b265135706dd92
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • com.lyufo.play
    1⤵
    • Acquires the wake lock.
    PID:4557

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db

        • Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 4a67beff5c3fb8eb43e0bef87100a5be2f8ede662aafc77a611a29021a7a83ca
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 418a057c6ce788e2b9c1c2a1cec33e975ffe77dd146a13988c47bd56bb2c3a2b
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 c8b60afed8832b6ae2b26468f604b2f4fed958e37610d8867af6f6a178466845
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 356c1cceba402f667ee2914061e205bb1b0730ccdb1f9618022ea308a6c3ca6c
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation5634007238224327499tmp

        • Path /data/data/com.lyufo.play/files/PersistedInstallation5634007238224327499tmp
        • Size 566B
        • SHA256 0ae104c38451809e27c0e9284da7bbf7264def0629e101e17a79b15c66d8e6ce
        • MD5 SHA1 SHA512

        PersistedInstallation8363405913848927459tmp

        • Path /data/data/com.lyufo.play/files/PersistedInstallation8363405913848927459tmp
        • Size 90B
        • SHA256 b1f49419b5022c87c5d20844a2fda31faaad5e2a06baf6659e40ba7da5dcdcdf
        • MD5 SHA1 SHA512