01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b

Analysis

max time kernel
2s
max time network
148s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
30/03/2024, 08:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
base.apk
Size 2.0MB
Sample240330-j2bf4abe7z
SHA256 01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b
MD5 ee8dfc02c1dc19829501c2a72468a442
SHA1 f0e8d39e9dd4c8aec55777d11ff1c98abeafa269
SHA512 74822080cc8156e8ad5b02889fb647fe1373519178a8c551926b8890e525478c5278141c8498f9db0e7c8adca8c7d7f86bbf7c235881f30df6ffd641558de8fe
SSDEEP 49152:AsdkkgeXwYn1lDLXbJpemlMte1je0yfRidlRkYbTAXMWFo:Lkk5XhlDLL3evte1jCkdlRkEG6
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.lyufo.play
1⤵
- Acquires the wake lock
PID:5097

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation4213423200713942406tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation4213423200713942406tmp
Size 90B
SHA256 e2d888a44f89b2480b88f9cf396c15f31ec6d808987eed24721aafa6dd5434ed
MD5 50688711d560e6b3522908691866d719
SHA1 6a634af8714e91f9bbd16bf694b656db467b6fe4
SHA512 2d93cac34cc0e7edacd1c8ae08cbbf6a85db70a57d6d4571288e0b6eefb9c72e6d10acc484b30f2a53e91aee847efd1bd81724277fc2224c7573098ec88d5155
MD5 SHA1 SHA512

Submit Download