5187413ec4689013fb59e0a0b65b48f90cbc0f4f8e78a5b53d8ca515c129f043 | Triage™

Analysis

max time kernel
188692s
max time network
156s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
15/01/2024, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5e901a7e2b0fba0975321efa770302c73488b50faed9daace1b7c37dc5d017c2.apk
Size 3.9MB
Sample240115-eel7vshge4
SHA256 5e901a7e2b0fba0975321efa770302c73488b50faed9daace1b7c37dc5d017c2
MD5 e711c165643168c7c547fd5833f8458f
SHA1 d8fc959a324beaa192501f7a4f4abbb2b262dcda
SHA512 cac71beaa742ed810ae7f7899fa1443ed39281aecbccebd83d72c8f4d5fc94550f1c00222c2e5d020238d9f4bfb19911346ae9017853e45df2e6803d44ae586b
SSDEEP 98304:SWlkyUb0jyUrwe2kx3TUEl7XBkkW8st6Hx:SWlkteLx3TUEl7RyzM
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator.

com.lyufo.play
1⤵
- Acquires the wake lock
PID:4966

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 024c04908b23187ee3668cb0988cd4feb807eb01b89c6589e0fde4d789e53452
MD5 daaa2738a6e5439dcaa56dd8943247e1
SHA1 621c711c2f94df3bc44cbbf100d15805f92150e1
SHA512 6f5624e6aa9642474dc46623b3f4afec6f080aa01f6ad1202e0b5aeeac545ce5a72fc16f134be915da16bd2166d256fce0437c9262a8f2ca62193bd246f2811a
SSDEEP 6:7+/l9Sfg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKH:7+tYqL8EEh9zmzrfRmBEyPbU
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 f6f8c58c7fbded26297d68fa7b39f8babf6a44a7bc462a571d6f10a12262e835
MD5 1e0f3e79398dbc2833c1f5529538444d
SHA1 092ab4fe01ed1efa128b5bd774ddb77fda7515ba
SHA512 3987f64999c0b76254e68fb1bd2fa1cc5860d4465851dfa745c220600fc02bfc0c90fd8a1cf1949427b2b6ce687d51aeea674d9a38c524e2fb0f9d781eb38759
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 4674b6bda4c2076fe12efa5c114f24cc39ed47714ca40ac4c27849ddaab01b0b
MD5 5b468d3283f14593918fdee82a0e8a6e
SHA1 8c1da1c9e6b3b78127a6a67792dc3692edc6c1d7
SHA512 dd0b4e4cf6c3ce8b8ef995cafb636278846a6b487e95d8a3b3995ec481a41a205a1b6616d2c906979ce28ed290b5151c1b495759cf2c0e218ff22f6feca44c20
SSDEEP 6:7+/l9kFn1Bg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKwb:7+tSlqLiuWdwRmBEyPbt
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 94855dc7e0c5869ae3e4793d05204b61f94f6ca2198345be772e14cec738527e
MD5 a2da3d1b7af74177152d041aebc25599
SHA1 0de1d32533d1749352fece3381adfbac7328df55
SHA512 7572c8a66ac8c1e83cbabe12b56c02efabe4e1a3a8c9ac244a43aa5bbb6348aef42bc2223c40984bf2f7ec4f6c250fafe95de845ffba7d0c95850b6c817b911f
SSDEEP 6:7+/ljZl0FPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK7:7+tCqLJdTRmBEyPbM
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 e1871f1ba254c5e4bc8108e475d6481097c5a4c478a0acd0de6c032d488b0fe2
MD5 6e5b43a8534f8a219acf667b7067cbbe
SHA1 124066f08623c427ea00f3e73d0e3a436a1f279f
SHA512 4752c94b70f21d83203bcb373a39b367429eaf8ed281acb15db0d0f7a566f640807025afaac56f18a85545811407ad719fd89cf41e74c7887bd25875b0767019
SSDEEP 6:7+/l9x2HPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKq/U/Iu:7+tEqLmqCRmBEyPbb/0T
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation6756436359720336898tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation6756436359720336898tmp
Size 90B
SHA256 0809f19a6020af12d3fcfc8a09b9ebadd5da85d98f82b30438fdb61cba683625
MD5 8d744fe9e430c9b8b42a94ae6641ffb8
SHA1 c6d191363440a70d43798df95651093af9c37e7f
SHA512 06e51e248be0344d9b01c0db21d4782f4ce200ec20b94228846eccea9bd358e7a0e376727d1f6f2a507c4a79e86f7307b801ccbda0365250378ce0d4fe6c136f
MD5 SHA1 SHA512

Submit Download