29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee

Analysis

max time kernel
2s
max time network
139s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
15-04-2024 01:04

Target

29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee.apk
Size

4.1MB
MD5

4f9b84a780b172905aa3bbb23797dc21
SHA1

791e0d2ef94162227d588df66918dd4fd5301c8e
SHA256

29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee
SHA512

f5b3ecfc1486ea1c37f09c6bf9ba0e6239885e4a92db589f19ecf31048b47ec8bf575cfb4ef6cc3e74b63bcdcd48e0b6d497a9bcac618bd690aeaba39fdbce91
SSDEEP

49152:xKjjqMqY4nCZcomDQyhFvLkuN8KYn+xETg0pJf2wc8ljXhe7sxkk+j7ZzwrUYisL:+qMqYS5oNyhFIz+MvvXFkk+JQUY0OtZ

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.lyufo.play/files/PersistedInstallation5340951432396425230tmp

Filesize
90B

MD5
ded38b0214b6cf373bbfbb52c72256dc

SHA1
f1e30bfda1bf362d317ae921e41ef623ab79107e

SHA256
5652ad105abee4abb9ea7564f7e7e7d4ff9eeb53bc2b51fa4dcfb94c4bdaa31a

SHA512
4fb71d521779587a74ae98ed0a5b94a471b2ed18e1ec785d042153f2f9abc3dc60f312c6958f4f492cd4b64eb1350a6312c9bea4e99fa9300f780b02c8feafdd

Download Submit