01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b | Triage

Analysis

max time kernel
2s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
30-03-2024 08:09

Sharing

Report Analysis Logs

General

Target

base.apk
Size

2.0MB
MD5

ee8dfc02c1dc19829501c2a72468a442
SHA1

f0e8d39e9dd4c8aec55777d11ff1c98abeafa269
SHA256

01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b
SHA512

74822080cc8156e8ad5b02889fb647fe1373519178a8c551926b8890e525478c5278141c8498f9db0e7c8adca8c7d7f86bbf7c235881f30df6ffd641558de8fe
SSDEEP

49152:AsdkkgeXwYn1lDLXbJpemlMte1je0yfRidlRkYbTAXMWFo:Lkk5XhlDLL3evte1jCkdlRkEG6

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

com.lyufo.play

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

com.lyufo.play
1⤵
- Acquires the wake lock
PID:4242

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.lyufo.play/files/PersistedInstallation8922237482405579959tmp

Filesize
90B

MD5
f75a10fcbeaae9c3f7519cb8c0d65d27

SHA1
1e169847e865adf5c3f0f2eae07af81a6915b2ce

SHA256
638323d3f96b7d8cdd662f6cb66d68730afbbb38430228d981368c98ba79cca4

SHA512
95730a49504ca7f55914de6421385741d52f6fc9bdc580590c7d69f93904511b9adf5757af4eaa3d76ee1ef74343a0c5f17fc6804d88f089e3c6cae79629ffb5

Download Submit