Analysis

  • max time kernel
    3s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    14-04-2024 21:28

General

  • Target

    app.apk

  • Size

    4.1MB

  • MD5

    4f9b84a780b172905aa3bbb23797dc21

  • SHA1

    791e0d2ef94162227d588df66918dd4fd5301c8e

  • SHA256

    29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee

  • SHA512

    f5b3ecfc1486ea1c37f09c6bf9ba0e6239885e4a92db589f19ecf31048b47ec8bf575cfb4ef6cc3e74b63bcdcd48e0b6d497a9bcac618bd690aeaba39fdbce91

  • SSDEEP

    49152:xKjjqMqY4nCZcomDQyhFvLkuN8KYn+xETg0pJf2wc8ljXhe7sxkk+j7ZzwrUYisL:+qMqYS5oNyhFIz+MvvXFkk+JQUY0OtZ

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • com.lyufo.play
    1⤵
    • Acquires the wake lock
    PID:4448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    73dde037d43818d6392e51665bee0446

    SHA1

    79d2b7aaad055aaa21aa371d61b05684c2164073

    SHA256

    d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be

    SHA512

    95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    57f307a980a3ef792e2c485f6d658764

    SHA1

    f4a85ff23b1c66603c359eb12d25f598dcd6d89f

    SHA256

    473faa8c559e4dd43a8df09f39abae26669f14fe968d4365611e10a9b28f9f68

    SHA512

    62fb1e75fc04c838410ced314af3dd9eb2fa679d9389837414582e1fb2648537f37ebd581821e9633dcfc4b57336e1ca884290efd3237a25625da1729340cce4

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    9b506dad4af59afcaae62b27c50e24a5

    SHA1

    5c10045177538cd59e14bdff4c8d272915a32bc3

    SHA256

    cf239d30b2a2f131cdd9d6efd41ba09aa01e16aa8b41f6b4a334ec8e5bf428ae

    SHA512

    9be453de5f1d9807657477b38e0cc3bc67122389d23f17934e72a668584ba76136ab0b1c45a0eac067253c88f937233b61b55a17b9188d274ba65388b7863818

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    73476a3e5b73ecc4280789ce7a4fb0a8

    SHA1

    6297ef228844d21d6a10674801517e4063c7f028

    SHA256

    197d2f47e58bac7571d84e2eaaee278247c8125636d2d9da4a96eee38e24ffe8

    SHA512

    4543f0adb260746d29fad20820f8ece7688b355b1156c1f6cd2a01b696df0d3c1628d42ec8193db333dcb0eb2149a8aa37ef2d8c59cd358e1d40dbcd41274d3a

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    9f72ce1ed43d0c3b8195f27acb0392db

    SHA1

    bb8418ac61d1443a91c0f253cf459835bd0e9061

    SHA256

    f47562230a2b4e316f5f022de10ca8c58bc161c50c81515b3604e276ae923408

    SHA512

    2334079804242b9f12a945a79881401386e85e97977eb9f4c1bc8a21bea4f7a6c3ce0f5646ac77bea7eaf5894303dc3f46c28634e37c0711ec32e5dd56c4241d

  • /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ea9bdf4558de1b54fb611b710e256b7a

    SHA1

    87ecee5e5397474e342d77b871ef1c3a4bf75c45

    SHA256

    013843b6fce77bf18c65ee208e74aa275abc8077899c88fe70a525250affeb26

    SHA512

    6f175ea1457301e8985b0fc5615ef9241a7b57765a9e97fc536e7a301c5c36e34eff2be87230a970b3993fad76e10defacb7ec76a3bc61f38755b4dfe2aea6ed

  • /data/data/com.lyufo.play/files/PersistedInstallation7707574738110996556tmp

    Filesize

    566B

    MD5

    82abd7614c9c5c70469be422f3489aed

    SHA1

    7f109af6b9d1ac5e914c2f28d5c6820151017d70

    SHA256

    db193002ef8700c4b97963a4226f9f958a9c97c013bfa5b5b96aff56abe4faf7

    SHA512

    19177804a2f5647901dc46e20285f03fb456267a4a44ee5b6220ccb5989773e872ba01a889409754068921323250eafc76cd7d25b6c5888ae242a6dd037d74d3

  • /data/data/com.lyufo.play/files/PersistedInstallation92526931034195704tmp

    Filesize

    90B

    MD5

    34379df1f054c6d6834be260d23ec007

    SHA1

    3a356444b44112cdc50d516bc67c08928e88199c

    SHA256

    993acfee9b13418906af57ed0ee196fe3648e1fc9ce00b4de5be804f7607e759

    SHA512

    019fba2bb12ad29b249a940441ede81c98965159bfedb63c76a4f98cc599c979836a660caa8d5e550701eb4e3eea8cfa48db02ecba774451da922d7d8e626b77