5187413ec4689013fb59e0a0b65b48f90cbc0f4f8e78a5b53d8ca515c129f043 | Triage™

Analysis

max time kernel
188694s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
15/01/2024, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5e901a7e2b0fba0975321efa770302c73488b50faed9daace1b7c37dc5d017c2.apk
Size 3.9MB
Sample240115-eel7vshge4
SHA256 5e901a7e2b0fba0975321efa770302c73488b50faed9daace1b7c37dc5d017c2
MD5 e711c165643168c7c547fd5833f8458f
SHA1 d8fc959a324beaa192501f7a4f4abbb2b262dcda
SHA512 cac71beaa742ed810ae7f7899fa1443ed39281aecbccebd83d72c8f4d5fc94550f1c00222c2e5d020238d9f4bfb19911346ae9017853e45df2e6803d44ae586b
SSDEEP 98304:SWlkyUb0jyUrwe2kx3TUEl7XBkkW8st6Hx:SWlkteLx3TUEl7RyzM
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator.

com.lyufo.play
1⤵
- Acquires the wake lock
PID:4617

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
Size 16KB
SHA256 d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be
MD5 73dde037d43818d6392e51665bee0446
SHA1 79d2b7aaad055aaa21aa371d61b05684c2164073
SHA512 95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe
SSDEEP 6:l9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOw:TL8EA9zmzrfRmBEyPbBvOw
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 99c226442b128686a485df8fffc961f37933071f8eef55513be12f8315ab41d0
MD5 1755f29ce1fd711871cb092e7a419976
SHA1 201a15d4c9a1db3d9eddf175a645f5243b74e207
SHA512 2d9b2579bc5b1e2d79769805fd642199a9fbad41a9878c3a538e0e8520a994714012863206db1239c525fc7ef1494743a26554d274e50ba2dc018ee6bf57ed5c
SSDEEP 3:+LNll2Nll:+
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 1a484fd83bf9343454dc4ec28eae7e91ad80b77d00c477a9ac11a53e437f0a79
MD5 92fbe2a16c3ba99211f5acd93a42c1e2
SHA1 20df36be3f384a837d0c5ee161b86295cc51e1f8
SHA512 36f488ddd2b5b1ad8799b538dbb84724172397a45b1d1a8e282ad46c7b820ffecf1de20b65aa5e9112220f5675d556a90f5e2a86ff8870eb70f43405474fcc12
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 98de50b6f08d50e68dda4b9f9d34454e036c55ef7d18b97c7a8206d53363b976
MD5 894ab3471bdd5b48ed5802d95b4f7992
SHA1 7c0dc50f1e382159c1376709ce2ce944caa0d5e2
SHA512 74a513e7af98e209f062cdfa91837ed1d2183d8176eea542be5838fec5aac1644eebf2a0dd2b170afc0ada406ca4965fa353d1f587052dad4eaa17fca91d4db4
SSDEEP 6:7+/l9Un1Tg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKN+:7+tAqLiuWdYRmBEyPbr
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 68fd730a73c1d206c369146ee8a9b6544942a45798bd11bf9b594f8994411405
MD5 9229e1d30aa753caa25536e9b8199fa9
SHA1 98a500b5c2d5709cfe41a99c1e941b4f407f5fd4
SHA512 c0b379f150ae65e6ba5a3826572d7389d0de79ac86e9b7ac4b5d808549f217f4ea1fbe9fad67a274140411501ae3e22d3ee1c37d5e55bae17d290f781508ac7a
SSDEEP 6:7+/lHIgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK8:7+tHI4qLJdeWRmBEyPbP
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 cc2b2f409b99606c73902cd8adc13db964b8b8a2e4eda47a5dc8cef3f0611aeb
MD5 8a7913d589bae6a49de5ddf74dec8aa4
SHA1 fc3ff32a821561760610a942067e2e2fc92da156
SHA512 6110eabb806fc132c71091768101c9e452d53acf4938efd923625deceb6bf4a20103d406c5d85852b785c3333884d90251ecc864988e5d62f57487fd35805649
SSDEEP 6:7+/l9gPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKtf/N:7+tuqLmqKRmBEyPbGN
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation9175227154389376768tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation9175227154389376768tmp
Size 90B
SHA256 5fc43d5ccc71aa6dd95a06c1e708d5f2bbbb702ea7d4e7781830cda3f8959dc7
MD5 2db7f8dae76b5f8b52a705342a1352a8
SHA1 8eaa97eca98fba2f36fa9a57d58ceaa7a7d8378f
SHA512 7ae095ed45a597a2eb72cac2ac7f7744781c081f5bd7d602359092777ada71f273a68b68e24c0a85e2a78875e5216d6421fdd0d3df992e4866ce90af29327d05
MD5 SHA1 SHA512

Submit Download