5e12f105f5f6676b7f8edae93b346f3a9a3968af87c83db0a06d0b72442067ee

Analysis

max time kernel
4s
max time network
134s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
02-04-2024 10:18

Target

49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa.apk
Size

4.9MB
MD5

4dbb47ed77c9ae9d22c0e7ff1661b910
SHA1

b041daf9f96b284f51561d8532e76ba52687a50b
SHA256

49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa
SHA512

738e849907ddd44ee0ea63094dbf1c7ae15c3c25ce69bed651b2cd52e29b6f2e5c3ac70cc1b1f0f9b5dfc7fad253d013101677f7221955884f77b7be497b5404
SSDEEP

98304:ATVUJ7O9MqXehCX5XWkkuGjTf6EE1P61T:ATmJ70tbmiShiP61T

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

com.lyufo.play

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation7638284582759730300tmp

Filesize
90B

MD5
3e54a5abd49c9d85a5bbf7f26d49acd8

SHA1
c946352a7c97811d57be323b6ef71bf040cf252b

SHA256
fb8c0ea82767f0569eb051e9b48f6ca4ae75297841ef5a4f9ce8cc299e55c6f9

SHA512
e140f96fc1ff1d43789b1c24c521154886949ed2f9134be8b0f82990af06cbf06fd497b8c586d54a04229aa66c47817373c00e81fac97aa40da61510b59e1994

Download Submit