13ffb8062f65420d6acbe005af589810874cff0dbc4b45ddff005a002d45b638

Analysis

max time kernel
3s
max time network
81s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
08/04/2024, 14:14

Target

13ffb8062f65420d6acbe005af589810874cff0dbc4b45ddff005a002d45b638.apk
Size

2.1MB
MD5

f8f051dd3d12f7ef931809e8ff31d53d
SHA1

61bf7d68e3ae48f605a5a505497becb0e80452d7
SHA256

13ffb8062f65420d6acbe005af589810874cff0dbc4b45ddff005a002d45b638
SHA512

b74bef86eb8cb933f806d9fea0680a6a98d018e8954d3d754e00fc509a5507263a282eb5e86acd23367ab94cc9ea57aeb5dc79eb66d161fff29017fff250db50
SSDEEP

49152:ZFHuK4vRcgdqo4qp5cL1n5zN47CDT4rUgZ84kSQ2XDzAspkks:ZFOkQq7qpadZGCDTINLJX3kks

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation8300652623809445235tmp

Filesize
90B

MD5
9ce8ebe2c8e75857959f91e9b37b4d8f

SHA1
101f71713889a1dd13282401dfeef635ebdc9156

SHA256
987316609545b4f10220fef17b77e1314d13e4941e48efb0da7f0e3a3bb24db6

SHA512
a2dafd9bc6d56fe47b55c736324a469e6447e4372bbde648d13f1c6c9c17dd169c8f750cc63aa8e9390746d201fea2382ca49d73f22539bde23de1d05163a3c9

Download Submit