278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285

Resubmissions

01-06-2024 18:10

240601-wr5cmsae6w 10

01-06-2024 18:05

240601-wpnl4sbb49 10

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
01-06-2024 18:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

2.0MB
MD5

2e241e2b34d2a7f4c7c108eb9fa9bfa4
SHA1

d55658c8d2dbfd7a01f5f1635a855174d1e5d2bd
SHA256

278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285
SHA512

b27704a97152628cc9c4bf060891ef19724d47dcbad8f40bca19112d25bace65fa9fc26b5c9e39dccb6dcd6e79e1845383534a1859e4786456bfac7e0e3ed6f5
SSDEEP

49152:wsdkkgeXtaig3nNGm2ihQSrmF5u7TuBg7TbkD0v1Y5:7kk5Xgig3NJ2NSrmcTkg7TbkDEY5

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

com.temptation.lydia

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.temptation.lydia
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.temptation.lydia

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.temptation.lydia
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

com.temptation.lydia
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4604

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.temptation.lydia/files/PersistedInstallation7090029748812707834tmp

Filesize
90B

MD5
80ddb9e8ea10424f3a8005489c545fa4

SHA1
1c7a3aceae805c352f031405afef9ea782e6fea8

SHA256
32b5ea09e77d4eb1350d87ce9583e6950536eca038bb368adccf8defc0934969

SHA512
9017a45055cce025ac9f049d54354cba08d3b40a3068e80bc35706dc97d6136b271709da2eb04a11cfa1d01647b0af7aac735b2b102f1e095c9b8503ea4edae1

Download Submit