ebe5361270a1bd4d02f74a7ae91dcf2398c0dec9b19a18611a8a0a9ccbc1459d

Analysis

max time kernel
2s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
30-03-2024 17:48

Target

01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b.apk
Size

2.0MB
MD5

ee8dfc02c1dc19829501c2a72468a442
SHA1

f0e8d39e9dd4c8aec55777d11ff1c98abeafa269
SHA256

01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b
SHA512

74822080cc8156e8ad5b02889fb647fe1373519178a8c551926b8890e525478c5278141c8498f9db0e7c8adca8c7d7f86bbf7c235881f30df6ffd641558de8fe
SSDEEP

49152:AsdkkgeXwYn1lDLXbJpemlMte1je0yfRidlRkYbTAXMWFo:Lkk5XhlDLL3evte1jCkdlRkEG6

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

com.lyufo.play

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation6844100365854150878tmp

Filesize
90B

MD5
c9a29b0d330e62501312b99d48abcea1

SHA1
1d2da2aa4755d21cd80f1a1edaf6e07d871abc6d

SHA256
81d6a223b0272f8c3750e4c168a1bd5da73edd7556033b067d342a36dd6d4714

SHA512
7866eba1ca77d19d04a6d13e9a82cd65eba053dd913b488383be8410bebfe3c3b1df1babaaf14d2155d23ad9a71b89d753ad0d4390935823a957460f351cbc95

Download Submit