278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285

Analysis

max time kernel
4s
max time network
146s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
02/06/2024, 01:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285.apk
Size 2.0MB
Sample240602-bgc57add9x
SHA256 278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285
MD5 2e241e2b34d2a7f4c7c108eb9fa9bfa4
SHA1 d55658c8d2dbfd7a01f5f1635a855174d1e5d2bd
SHA512 b27704a97152628cc9c4bf060891ef19724d47dcbad8f40bca19112d25bace65fa9fc26b5c9e39dccb6dcd6e79e1845383534a1859e4786456bfac7e0e3ed6f5
SSDEEP 49152:wsdkkgeXtaig3nNGm2ihQSrmF5u7TuBg7TbkD0v1Y5:7kk5Xgig3NJ2NSrmcTkg7TbkDEY5
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.temptation.lydia
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4512

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation401614935808213040tmp

Path /data/data/com.temptation.lydia/files/PersistedInstallation401614935808213040tmp
Size 90B
SHA256 0fd1df1c24b64784b866e84859a7470444e783d513def5551cfa9e3d9d1afe6c
MD5 3d81eceffa72dfad67cd8aba617574c0
SHA1 0ab0127d5215366c7d81de2a1d4f6998e207da4d
SHA512 615f75465032a793b857b28676713582b5d020727e75068a9e878ea6cc806787555322aad905c49644ea55d619c966337aecc3ec00d7b4f5e3c17f3645bfef7b
MD5 SHA1 SHA512

Submit Download