278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285

Analysis

max time kernel
3s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
02-06-2024 08:30

Target

278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285.apk
Size

2.0MB
MD5

2e241e2b34d2a7f4c7c108eb9fa9bfa4
SHA1

d55658c8d2dbfd7a01f5f1635a855174d1e5d2bd
SHA256

278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285
SHA512

b27704a97152628cc9c4bf060891ef19724d47dcbad8f40bca19112d25bace65fa9fc26b5c9e39dccb6dcd6e79e1845383534a1859e4786456bfac7e0e3ed6f5
SSDEEP

49152:wsdkkgeXtaig3nNGm2ihQSrmF5u7TuBg7TbkD0v1Y5:7kk5Xgig3NJ2NSrmcTkg7TbkDEY5

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

com.temptation.lydia

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

Checks if the internet connection is available 1 TTPs 1 IoCs

System Network Connections Discovery

Processes:

com.temptation.lydia

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

com.temptation.lydia
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4321

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/com.temptation.lydia/files/PersistedInstallation8764970999709135412tmp

Filesize
90B

MD5
f269a9dd21f0ccc7399caaef83dfa739

SHA1
d3c8c3cd7d9920ca77b4b95fb10f6617656af58f

SHA256
e1dc72f52b7e590cf6d7a7d1ee5777699ad5953ee68a877bf3c56017db15519a

SHA512
7bfdcf33c1cbbff1614243ef4e67c9d26e91f325cf7f7d7cd93131c0ddb926a03771c153abe199c217ccdf2b11288c3bee1b2e05255a368874b546db59016d38

Download Submit