29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee | Triage™

Analysis

max time kernel
3s
max time network
144s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
14/04/2024, 21:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 4.1MB
Sample240414-1fbcmseb64
SHA256 29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee
MD5 4f9b84a780b172905aa3bbb23797dc21
SHA1 791e0d2ef94162227d588df66918dd4fd5301c8e
SHA512 f5b3ecfc1486ea1c37f09c6bf9ba0e6239885e4a92db589f19ecf31048b47ec8bf575cfb4ef6cc3e74b63bcdcd48e0b6d497a9bcac618bd690aeaba39fdbce91
SSDEEP 49152:xKjjqMqY4nCZcomDQyhFvLkuN8KYn+xETg0pJf2wc8ljXhe7sxkk+j7ZzwrUYisL:+qMqYS5oNyhFIz+MvvXFkk+JQUY0OtZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.lyufo.play
1⤵
- Acquires the wake lock
PID:5094

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 5fb4b9841e6eeb8e0f2f39e3a09fb37e073cfacaadbf65d29d41adeee1961cc1
MD5 e006a9a4d7b52fc009b963a261929eb2
SHA1 1816c2163765f19f8a3b79f9626cb9ff7e1aef47
SHA512 8705d2344445cfb7ba302d7c166770db506456167c681685eb108c3c9dd55d4a805f520b11f376059b9980bf4944f87c8c07fc0b9213f2680357a12a6a931c31
SSDEEP 6:7+/l9/qkyg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKP:7+tZqlqL8EEh9zmzrfRmBEyPbs
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 8824af3ba9833929f2c1e4fbe646106cd3bee7ba35379abee9903bef84c09418
MD5 bada2029d52e8d06ac15b9277ee2ec80
SHA1 301d5c90ab3f1ac6e7bac2ae2600378e9a70132e
SHA512 7fa59a2c78efb51f74507a2ec7efb0fdbbd927b73b812e12d664d70b4623fe08533de7c1ae685ed1cb5a487a77b45c232f5db74c81670cc7d7597bece5724b0e
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 f14ac5eaedbd3f1b8076110c4837003f396d1c36b5fe41cf204bbd61b9d39775
MD5 8b9d79959c37997472068ad9ca0e153b
SHA1 bc23dfb7ce3c5aad56d0e27aa291f509f9711c09
SHA512 9f5cefc6b1d7a11b8a9ed75789ab13ba007aee5c2dd72d2edc840493e3f25a0d7c15299d8417bf9a21cf2930771e5a69c36d4218381c2cca21cab2924c1eb9b3
SSDEEP 6:7+/l9xY9aHn1maWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKqc:7+tUaWqLiuWdwRmBEyPbbc
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 f03e31048a8129da630e056197259deb5fa4cd84b29f307e8b8ae0e06e9c6b9d
MD5 cb7057ef106a46d42e1dcd7e3599fb8f
SHA1 5a5df84b1d1c96bac1d979cb45bdbc309c0e40b3
SHA512 cc9c947dade551ec4acb30abf3b95f0fa0f1c0a1dcec240baab201dce10641d17ab3f31ba2d461bb9182773e27771167f35babbce991b618ea2bca0a98f798f2
SSDEEP 6:7+/lTFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK8/:7+tTBqLJdTRmBEyPbF/
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.lyufo.play/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 b1d83645c9075af95cf2a9a53e0885c2ea39725c378ad57290bfb582b3803371
MD5 b737e8646fee47a492879a89664506fe
SHA1 e068d2ca2383cbea75e084ed546bac665f55a8d4
SHA512 ca8aa6d34ca69b7d9b9a6bc9282df99c4f6a2a16665ec39ece2d6050866e917ba22af8ab5b8c40efa7faaead12de936dae322d06c198759f974e8c3819eeb68d
SSDEEP 6:7+/l964Pg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKW/m:7+t3qLmqCRmBEyPb5m
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation6067597058409487689tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation6067597058409487689tmp
Size 90B
SHA256 fc6693734a71f7d7bcd065e6b2e3e9ecc1ab97f4d55979c40df54cc70d706fc8
MD5 1ffc58e7019220589cc1b2494c26408e
SHA1 ef69adaa035f0c859efd099e26de72aa1306049e
SHA512 650f7b1b53de48aea35497cd6c1a11048e739eab6b1adc4b06a53efd1229211dc6e8bdec455a3d9ff4649d9badd43b418a81f760cbf853569f21122d0e074595
MD5 SHA1 SHA512

Submit Download