13ffb8062f65420d6acbe005af589810874cff0dbc4b45ddff005a002d45b638

Analysis

max time kernel
3s
max time network
69s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
08-04-2024 14:14

Target

13ffb8062f65420d6acbe005af589810874cff0dbc4b45ddff005a002d45b638.apk
Size

2.1MB
MD5

f8f051dd3d12f7ef931809e8ff31d53d
SHA1

61bf7d68e3ae48f605a5a505497becb0e80452d7
SHA256

13ffb8062f65420d6acbe005af589810874cff0dbc4b45ddff005a002d45b638
SHA512

b74bef86eb8cb933f806d9fea0680a6a98d018e8954d3d754e00fc509a5507263a282eb5e86acd23367ab94cc9ea57aeb5dc79eb66d161fff29017fff250db50
SSDEEP

49152:ZFHuK4vRcgdqo4qp5cL1n5zN47CDT4rUgZ84kSQ2XDzAspkks:ZFOkQq7qpadZGCDTINLJX3kks

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation7221392318778137299tmp

Filesize
90B

MD5
73ee2e9116dec4488014867ab6baa85f

SHA1
7e341aa00f10f48700e4b55bbbd59cfb16788447

SHA256
6c95e34e6b2504e32633c6986d455d3d381abc199c9e0b239fb90c232310fe59

SHA512
9109db1d9c57b69edcd93e77fc1156c9ebbd3ebe8c2f1cd7e7105f1996ea5896a18bed40b91f1091d01d5e2efc28c30f3ddea31868a1941049eaa153969ec3f3

Download Submit