Analysis
- max time kernel
3s - max time network
148s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
28/01/2024, 10:06
Behavioral task
behavioral1
Sample
app_2.apk
Resource
android-x86-arm-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
app_2.apk
Resource
android-x64-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
app_2.apk
Resource
android-x64-arm64-20231215-en
1 signatures
150 seconds
General
- Target app_2.apk
- Size 2.6MB
- Sample240128-l43dpsaccl
- SHA256 80eda7033269de92848ac375cfdf33b0decc441bc963fa69cf12eb300aa4669b
- MD5 c93b941b651c60fbac0c4b7ed074fc43
- SHA1 ec8657f364574c5ef5deffeb69cab9472387373b
- SHA512 c5fff5238ee1487365941cdccba9174f3d3e4a3a2fab152fb71fe87aa2637f263b7fdb077eba4c8370ffa5e1baeabdb2a968cbf69ad2e64fd7fcafee7660138c
- SSDEEP 49152:U7sXkkQEXKEZwudRpetijpOVWFZ5Rr9Abxn+svL5iJwiFwHWkmYL+3vg:UwkkvXwi9OVWTJ/sjb4wHWkmXo
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.lyufo.play
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 89e912032940722375befa5a84500bc0f3dbf62d4bc17203cc76be35e1db42a8
- MD5 986077d3ca973b4c52800f48fa7f3759
- SHA1 0ceef58b42336fcb3021bee3b42e1f211721e992
- SHA512 03843a934e7844df16507b0e21e148a82fbdca5745155494013190cb82be830958b43ac8994ddbe57a7bed5194b9556765251e2b289354e95c6ba7048f1e5e37
- SSDEEP 6:7+/l92g9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKX:7+tIqL8EEh9zmzrfRmBEyPbg
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 e140a09b22e8edcdb242bac906cec55a359215a5a8541dcf7a3df34758a4716e
- MD5 bf6d87a8dacbe613de9a6e40ff3bc5c9
- SHA1 0d795ccc840865af6cfaed849714c2d36959412b
- SHA512 064fdc45917ca2c66d5e81eed3c39b39062c60564e31cfc0705288d5837634011d1b9eb282a25ea24df916a6ed067359310ae46a84b1b301f892002070c9ede6
- MD5 SHA1 SHA512
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 3090aa6d9222a99f18857de0b45d1ab38ba2362aa8c4273350efe168fa310564
- MD5 75e99005a4b4d20979c7930bcaad7812
- SHA1 0d71ebd0ea8c72bc067361e2bea9a3ca3372053d
- SHA512 1513506f5ab871102c5b105605702139028467f4879bfb3d24db3078851005ef214a3edf099ad3ccfa3ee170ac9ca9ab76218ce3a6a7b2587983292beb0ed3fe
- SSDEEP 6:7+/l9PlmlFn1d/kWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKa:7+t+CWqLiuWdwRmBEyPbR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 92ee764aabb4d245da7a4b668691a20fd8e6aaf6ddf18f30a5cf8dceca4e6996
- MD5 e83fa9c1114fa1acef5def83c4c667ce
- SHA1 b65cb4424d651ff066b8334b3921a1e3f8090637
- SHA512 f37d21c63b4df5dd265823dce171f447ba0454dbe819f74dcfe40191bbcad93f7e75d3498dc55a993e1c38c526e61f6b1cee8a4f5e8d9c04386c70395418f9a4
- SSDEEP 6:7+/lb1Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6B:7+tFqLJdTRmBEyPbLB
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 c4768b2c3d3c0fe4e7a9adea066b54ad81467888a3da18a63fb63c1a92476167
- MD5 6471a48beeb63b4b5c9a4c3196e63c87
- SHA1 e105a38f128de78b5b9330e1ecf8e45276cc410c
- SHA512 67b2a4bd8eff17c1d2853050cff9cac7209053b6aba74f8267894beda7f29d1b01ca22818417045962211c44de099bb08cdb685ba2149b9bb88b49bb52453fc7
- SSDEEP 6:7+/l9DPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKl+/Q:7+t5qLmqCRmBEyPb/Q
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.lyufo.play/files/PersistedInstallation3717957271527393643tmp
- Size 90B
- SHA256 58b8a61b54c67b432364dacfb01f8fab8742e4d988347412105bc7307901969c
- MD5 cb096f95edf20202c6aa1918344cd447
- SHA1 c398376ca95492250d58ddfd6a3743b6f5ec0209
- SHA512 714e5398e2561b619a99988b6a8a922d28b79132af4dab5c2d2ddcee35005ab38b5d45f36a95adf9af3fff1b7ae2e4b14710042c0b4de59816f5bce84329c67f
- MD5 SHA1 SHA512