fc0d4fe02de6b5f43663ada7c6de1794b9b1e4ef0b4a96e61b4f109164b82515

Analysis

max time kernel
3s
max time network
142s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
01-04-2024 01:24

Target

fc0d4fe02de6b5f43663ada7c6de1794b9b1e4ef0b4a96e61b4f109164b82515.apk
Size

2.0MB
MD5

27463359a17477a4710cf71990313549
SHA1

beae04865c63bbe61e8fb61fd2db3aae1c8170af
SHA256

fc0d4fe02de6b5f43663ada7c6de1794b9b1e4ef0b4a96e61b4f109164b82515
SHA512

6f7f8fb590bbc2d13bd3d2dc3d263adde3a5ceb738453d0cd24e3ef3c1f1f08ee5ab45bfaf5fb8dc679631cc45ad7a56a80639dac8b4104393ee66b4976fd8ef
SSDEEP

49152:9sKkkpeXXOCn3v+VpQ2HcjISMgIhkHJYnxg9pXIarTiIfcLp:fkkIXe+f+VpQ2H7hg1i+9pXIX9p

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

com.lyufo.play

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation6304151603707587720tmp

Filesize
90B

MD5
bede384d8e00018c424b85d378326d8e

SHA1
d3ffbf2804ffcde938bab4f6dd17a6240fc7f118

SHA256
59a5860858163cd4bd14c9198b725fa6051e48a2f5aa101ec2469590063dc666

SHA512
a018be9e63f95a138e0642b7e5b55e47d9e13d92c9ce41258e95d9d4ea45a2de7271c5e11144e2d05f86bc3b1f5f751e2d00d96377d55a0c802f58bb75e14ef6

Download Submit