2d3e3491b892018302d45827b3bf5cb09699d933f1b13aa19abc3dd18fa75be0

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
15-05-2024 22:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

41369.apk
Size

2.0MB
MD5

31dfd17a42283d189207587548160b37
SHA1

809da83d46a4d4c4e67d23c4ac909ac2ff1e0973
SHA256

2d3e3491b892018302d45827b3bf5cb09699d933f1b13aa19abc3dd18fa75be0
SHA512

026e2dfc5f7edc561712e7bdd6e42f3b3d134e640e4d4ed56a217ae50e521a54435dd5e6a11259afa5349620d7476366037aacfd880ec655bbd0335bf3a8874f
SSDEEP

49152:RsXkkgeXtjNOoyi9hn9Vb1tyWI1r50IyFD2ilICIaISz29xB:ikk5XFN3RpVbGWOmIytQnJ3

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

com.temptation.lydia

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.temptation.lydia
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.temptation.lydia

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.temptation.lydia
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

com.temptation.lydia
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4632

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.temptation.lydia/files/PersistedInstallation3548003737413279224tmp

Filesize
90B

MD5
dc31216d691058be89334a71565ede99

SHA1
bff12fe5e727c10b77f158ac2e12aeac24f0fd99

SHA256
edab07b501295563aaf2f4036f46a062159704f3d0134e2c1e9ebf9785d1f4d8

SHA512
2a22c401d7e8dfc6b9b9f41899c73822fbeaa77397a99dcd4665acbab69ee51ab410e11b8c07f882482be2666a4b6712bc896286492f411505a7b16ce981f72b

Download Submit