29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee

Analysis

max time kernel
2s
max time network
139s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
15/04/2024, 01:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee.apk
Size 4.1MB
Sample240415-bfacxaad37
SHA256 29e10e48615c69ef475ea6f203d30281869f5a1979e1e15b84bd74c0643f76ee
MD5 4f9b84a780b172905aa3bbb23797dc21
SHA1 791e0d2ef94162227d588df66918dd4fd5301c8e
SHA512 f5b3ecfc1486ea1c37f09c6bf9ba0e6239885e4a92db589f19ecf31048b47ec8bf575cfb4ef6cc3e74b63bcdcd48e0b6d497a9bcac618bd690aeaba39fdbce91
SSDEEP 49152:xKjjqMqY4nCZcomDQyhFvLkuN8KYn+xETg0pJf2wc8ljXhe7sxkk+j7ZzwrUYisL:+qMqYS5oNyhFIz+MvvXFkk+JQUY0OtZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lyufo.play

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.lyufo.play
1⤵
- Acquires the wake lock
PID:4476

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation5340951432396425230tmp

Path /data/data/com.lyufo.play/files/PersistedInstallation5340951432396425230tmp
Size 90B
SHA256 5652ad105abee4abb9ea7564f7e7e7d4ff9eeb53bc2b51fa4dcfb94c4bdaa31a
MD5 ded38b0214b6cf373bbfbb52c72256dc
SHA1 f1e30bfda1bf362d317ae921e41ef623ab79107e
SHA512 4fb71d521779587a74ae98ed0a5b94a471b2ed18e1ec785d042153f2f9abc3dc60f312c6958f4f492cd4b64eb1350a6312c9bea4e99fa9300f780b02c8feafdd
MD5 SHA1 SHA512

Submit Download