278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285

Resubmissions

01/06/2024, 18:10

240601-wr5cmsae6w10

01/06/2024, 18:05

240601-wpnl4sbb4910

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
01/06/2024, 18:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
base.apk
Size 2.0MB
Sample240601-wr5cmsae6w
SHA256 278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285
MD5 2e241e2b34d2a7f4c7c108eb9fa9bfa4
SHA1 d55658c8d2dbfd7a01f5f1635a855174d1e5d2bd
SHA512 b27704a97152628cc9c4bf060891ef19724d47dcbad8f40bca19112d25bace65fa9fc26b5c9e39dccb6dcd6e79e1845383534a1859e4786456bfac7e0e3ed6f5
SSDEEP 49152:wsdkkgeXtaig3nNGm2ihQSrmF5u7TuBg7TbkD0v1Y5:7kk5Xgig3NJ2NSrmcTkg7TbkDEY5
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.temptation.lydia
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4604

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation7090029748812707834tmp

Path /data/data/com.temptation.lydia/files/PersistedInstallation7090029748812707834tmp
Size 90B
SHA256 32b5ea09e77d4eb1350d87ce9583e6950536eca038bb368adccf8defc0934969
MD5 80ddb9e8ea10424f3a8005489c545fa4
SHA1 1c7a3aceae805c352f031405afef9ea782e6fea8
SHA512 9017a45055cce025ac9f049d54354cba08d3b40a3068e80bc35706dc97d6136b271709da2eb04a11cfa1d01647b0af7aac735b2b102f1e095c9b8503ea4edae1
MD5 SHA1 SHA512

Submit Download