49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa

Analysis

max time kernel
3s
max time network
151s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
17-03-2024 15:11

Target

Eydaneh.apk
Size

4.9MB
MD5

4dbb47ed77c9ae9d22c0e7ff1661b910
SHA1

b041daf9f96b284f51561d8532e76ba52687a50b
SHA256

49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa
SHA512

738e849907ddd44ee0ea63094dbf1c7ae15c3c25ce69bed651b2cd52e29b6f2e5c3ac70cc1b1f0f9b5dfc7fad253d013101677f7221955884f77b7be497b5404
SSDEEP

98304:ATVUJ7O9MqXehCX5XWkkuGjTf6EE1P61T:ATmJ70tbmiShiP61T

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

com.lyufo.play

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation2518165552651960596tmp

Filesize
570B

MD5
520075160e5dbcdd61cf57b4a6f7fef6

SHA1
1eb915d87411a5b75f04146d00307b7fa1ecbb34

SHA256
9b226240937ef2d639f37624774d34b74287b5ac6402d59176cb3ab661008ed9

SHA512
0de538f4ed3b045cb56fb554d45e86ceb7b9a916efb839c3013c4be485c793ccfb7ae8b32eb317b1d1b4b01acf870841f65d912493a32b89f537105ae34ec0e6

Download Submit
/data/data/com.lyufo.play/files/PersistedInstallation6336210915100106558tmp

Filesize
90B

MD5
76c4eb27a2b10e1dfc1f5400e2f39464

SHA1
fe0ac75c4ca96b75fc42c501f851bee6fdccb994

SHA256
dba34d129979c08e7faefa9f52c0d482c42917efafdf01d3636625e24057e6fd

SHA512
7e320aa63048d0266b035cb83a4497b9dd9bd3b1e54c3a5350ba27a343106e8ff438af648024445a17b89d1f61554d0fb00eb5de542a99bc9a2fac80e3966f42

Download Submit