92dc910b5df989defcf8733985776f35797681ea11bc9da2432b6dfb589b9778 | Triage™

Resubmissions

10/12/2023, 02:31

231210-czt24adbe510

04/12/2023, 16:38

231204-t5r85ada2810

Analysis

max time kernel
901083s
max time network
149s
platform
android_x64
resource
android-x64-arm64-20231023-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
submitted
04/12/2023, 16:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NEAS.92dc910b5df989defcf8733985776f35797681ea11bc9da2432b6dfb589b9778apk.apk
Size 1.7MB
Sample231204-t5r85ada28
SHA256 92dc910b5df989defcf8733985776f35797681ea11bc9da2432b6dfb589b9778
MD5 57f07617681a61f549be71d962a717e4
SHA1 7c6ce38d9fc0843c908c17e6293b0615eb9d6201
SHA512 091ad6e79c86f028bc27b598de2e614af28ea37b3a8c2bf5fe3b72fdaa89ead66a1b611177ab9e52c052b43c533f92ce3c1a1019218e83911438549db3993600
SSDEEP 49152:1sjkkzEXs1NjyEOCtM3do54AnUKwn+H/NySR:ikkoXGj5MCiVKw+l/
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

com.lyufo.play
1⤵
- Acquires the wake lock.
PID:4388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 56256df644b9da6c6603379cb075a3e6a71a7dc8b6d4f185beff621806057e18
MD5 b8dae62bb8d5a76e783df766f02fb94d
SHA1 2b8fba16829836acfc9f59fc1d87494a27338aae
SHA512 dbd07420e71aa1ae8f16c5e4dd6178b1b597470a2d00ce3a0f7604d931a777e44a36c25577ce42b68426a27b267a52597ae3073de590e946d1d287f6492236a4
SSDEEP 6:7+/lTluPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKZn:7+tTlCqLJdeWRmBEyPbun
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 4cdf78aa49553293f5c5dc3c4c6d57e750915c9f8971b57ce303f9f368805e3e
MD5 8a2b137c8518829a86d287ba3a98d8da
SHA1 ae25c08755509328455c8a2e4d0ee0ce0a97b323
SHA512 03854b4b8533ad0f96bb819f891b8f086814cc8b03ae793aea1fd920623f4a1dea484aee3c288567a2ce87de21bdc33d98c86075be2e741a8b978435385f796a
SSDEEP 6:7+/l9dPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuK8lz/u:7+tHqLmqKRmBEyPbjFu
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 df6ed3e057bad0456e8e273440c4ed5f619873597dede79d1ac3c686dca4b6f4
MD5 5b9ab88914a88a248c763e278803a64a
SHA1 d6b8a3948ff30b794852cb58a32fcc67b7c5d40f
SHA512 70a6afe438236cd67a1c6a4a8065b5a0a11da0b56cb43c9d376fbf5f37859ba24f158f08a9064a3deb66ff0ac3fb0a72869f5b720f166dd3f690ff3254892f79
SSDEEP 6:7+/l9y/zXng9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKiQ:7+t8/zXnqL8EA9zmzrfRmBEyPbTQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 5408cb03f079ca5bbfa661bdcf3d86425d9692908580a696b2c56d1cf3d7ba64
MD5 d417d56fd007b3dce7c810d28a1c8baa
SHA1 fe37e6211b64d6ed6b330ef009160cc1245de9ea
SHA512 7ed0a77f102f16dec4ef213170bea0e17ae36466034e2f2ac5b14e0610a013a30ce4ada8b7475a13ca743d091c8f7091a5a6ed9fed078e86e7e37109e29bae9e
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 26de20466d37e0e1211502960b13ec13cfe8754b18f31dfc19968d1aa6cfa0e4
MD5 b712b538a6f448c056b0c563e9f848cb
SHA1 9ac12a2d3cb8a5bbac34ddf312d82c983f3328a7
SHA512 567d351c69a738170bfde20c43d8aa21656c3eb5e3a77d9aefa0f754bcbf059eab3d3649454424d586c45dcee26902cbf2c634ed4e067b2038ee7143086b0b7b
SSDEEP 6:7+/l9IAn1AHg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKXr:7+tGHqLiuWdYRmBEyPbM
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation466239054749198599tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation466239054749198599tmp
Size 90B
SHA256 d9137c1b81a80543d066d0f47711b1c8fe9917944afb7d0401824576d7cedaa4
MD5 45318190069f0227dc52afb39111623e
SHA1 45d3597a4ef624e1357ea7d568039c44b2ca0cf2
SHA512 5458632a0d94cd77456fbe93e21e68eb9d825b506d75a3e64e21b2a501ab50c009ac8a0c42d44b980536edb706d5805690917cc2f14a4007714ecddfb4aaaed8
MD5 SHA1 SHA512

Submit Download

PersistedInstallation5915618607675492220tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation5915618607675492220tmp
Size 569B
SHA256 3edcfe0a4aa75cd56fc489812d6215178fe95a0dbf602fac2e088eb0accd55c5
MD5 9102d9ac3ac66a419d74cba2b094b4db
SHA1 583617b8bf8f2a3e408746973defabb9971ec58e
SHA512 2573b533817225da4bb4256ded283ab6968128eb5549a10e38e94d2c14ae863fc354fccb777c45109f638804158f239a56a490ab66acaac42671b935e44300a5
MD5 SHA1 SHA512

Submit Download