278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285

Analysis

max time kernel
3s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
02-06-2024 08:30

Target

278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285.apk
Size

2.0MB
MD5

2e241e2b34d2a7f4c7c108eb9fa9bfa4
SHA1

d55658c8d2dbfd7a01f5f1635a855174d1e5d2bd
SHA256

278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285
SHA512

b27704a97152628cc9c4bf060891ef19724d47dcbad8f40bca19112d25bace65fa9fc26b5c9e39dccb6dcd6e79e1845383534a1859e4786456bfac7e0e3ed6f5
SSDEEP

49152:wsdkkgeXtaig3nNGm2ihQSrmF5u7TuBg7TbkD0v1Y5:7kk5Xgig3NJ2NSrmcTkg7TbkDEY5

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

com.temptation.lydia

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

Checks if the internet connection is available 1 TTPs 1 IoCs

System Network Connections Discovery

Processes:

com.temptation.lydia

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

com.temptation.lydia
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4282

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.temptation.lydia/files/PersistedInstallation8178405017054607648tmp

Filesize
90B

MD5
fe49b4c55aa6c1ad804a2bc4198a39bc

SHA1
6ede406406fa278ba9f6f9ab6203c8554c317514

SHA256
bcccdf649a2f1244ff6c49772407bb0406bf1e124b3e879ded3ba52a020fdbea

SHA512
b02248a2c1e15cec21884ffb19d8704ef82adf5d9156863096c242cad90fe5623f2ba1f9cd13b2c179a6e97557a32f3365a1cdf6c73d98d7360eb53b2a16747c

Download Submit