Overview

overview

7

Static

static

6

luckybird0604.apk

android-9-x86

6

luckybird0604.apk

android-10-x64

7

luckybird0604.apk

android-11-x64

7

Analysis

  • max time kernel
    24s
  • max time network
    40s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    04/06/2024, 22:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    luckybird0604.apk
  • Size 6.1MB
  • Sample240604-2n211aeg65
  • SHA256 ee27e1a8d4835a2b87be8467a1d77009f42dda3b112bc9fa8b6fe6db3a009aac
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
discoveryevasionimpactpersistence

Malware Config

Signatures

Processes

  • com.luckybird.io
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4270

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        androidx.work.workdb
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 c3e572d590d91a24dc109459a5546b8fcc516f2d574c46d5a61fc4cc68b8a6d3
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 3c12f202a25d4a936a40c243e4ba0bdd000089e1de9fca24dffb4f7a497f8089
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 abf570af35a5cc6dfdcc77f055cfa4486ec0c0cac37d3395addf11126a311311
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4184ac5ce9b96384fef9dd60768ac67bacc5ec76704487ba65f12528a19385f8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4fdeeccfeb27210f4b0aea0bbca5bc2947ec5d35ab77d3fbd42313cd69fb3836
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a0d5592eaad227284cfbf98004bbea4558efac59b6db3198d414e31f49968d7b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 947ea47dec2b1c98845ebb196f9fa8437df771a06ed32547b1ec58460a75cc1c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ee8d686c735c59c3d8188ffb4a089a8e9a25890d129d5392b28043ab723c9b2f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 caa30fb91c17663204bf447e79e289dcae1fa12144d1e3c3535e6ff12bbbfc19
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 37498cc3402a2aa012745a9a922bf515dbb7a4f2b30e7f2eee440ea4cbc7a032
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 7f3f074c0e67eaf2473977110ab8724e2c526a7f545bcb0e7cbec9aaceeee570
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 0d59a2bed1a70ee98c45779efec4fa6fcbaf9129e961a1707a490965718724ea
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 fc0bf9a066223c4767d59d87ecc2a5931a2b62b7928a5dbed4fa2de54875eacc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 8ab83671b5f69fd7514522696941e8da233517c4ccbfcc385ea84cac747e9506
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 e0e635300347ca807f46e5072d2f7be2dca7ffb785ec4af40276d5232d9c7946
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .YFlurrySenderIndex.info.AnalyticsData_7H49FP4xM7NV9SWJ845KP_284
        • Path /data/data/com.luckybird.io/files/.YFlurrySenderIndex.info.AnalyticsData_7H49FP4xM7NV9SWJ845KP_284
        • Size 88B
        • SHA256 d9562acc511868e5b3b8603339792fc95415000e0a5aac5adf6c837aafbb49ad
        • MD5 SHA1 SHA512
        Submit Download

        .YFlurrySenderIndex.info.AnalyticsMain
        • Path /data/data/com.luckybird.io/files/.YFlurrySenderIndex.info.AnalyticsMain
        • Size 73B
        • SHA256 0b5dd78ed585f74b9b27db6177a93a3a06a5ca02787f304f4b5f79a82e9c13b6
        • MD5 SHA1 SHA512
        Submit Download

        .yflurrydatasenderblock.9d9ea8d9-dd06-4194-8e30-907531f4a2db
        • Path /data/data/com.luckybird.io/files/.yflurrydatasenderblock.9d9ea8d9-dd06-4194-8e30-907531f4a2db
        • Size 356B
        • SHA256 61931c30b5c7b5f0c7f612c2181b1f473b090c4cbd5d264225e451af611993b9
        • MD5 SHA1 SHA512
        Submit Download

        chcp.json
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/chcp.json
        • Size 264B
        • SHA256 34eaf047dabf9dc620cfa7012640e606e673a745de64a57903b511457063c834
        • MD5 SHA1 SHA512
        Submit Download

        chcp.manifest
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/chcp.manifest
        • Size 336B
        • SHA256 4e2fa2294e2cb03482acd198148937a7dc4491e50f426f3a4d8d6acaf36130e5
        • MD5 SHA1 SHA512
        Submit Download

        nativeapiprovider.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/android/nativeapiprovider.js
        • Size 1KB
        • SHA256 6b93ab749d3a38c3c1aefd24af7258ee164a7dbd59126be5ee1524951a1ea130
        • MD5 SHA1 SHA512
        Submit Download

        promptbasednativeapi.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/android/promptbasednativeapi.js
        • Size 1KB
        • SHA256 af2dadc21ddb52cc372ef0aef8daefe2648ebb225f492d01e54baea5239aba32
        • MD5 SHA1 SHA512
        Submit Download

        exec.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/exec.js
        • Size 10KB
        • SHA256 1cf1dfae526c6be2cfddebabcb821ddc2f77fce36228d51ea4a37420ebe5d4f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        platform.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/platform.js
        • Size 4KB
        • SHA256 89833028f58dda9d34dba705bd4d8d6fca3afcd01e204dc4a49f8c41867ccc1f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        app.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/plugin/android/app.js
        • Size 3KB
        • SHA256 0409cf6e37e6723bee88c6c4250b3d6722137f140df47f00ff0e91d6615da04e
        • MD5 SHA1 SHA512
        Submit Download

        cordova.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova.js
        • Size 62KB
        • SHA256 6d384ddd84c9ea6035467a2b9d2637ede7698d358dd1e7656aaf758999bdb106
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cordova_plugins.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova_plugins.js
        • Size 3KB
        • SHA256 d765eab599142080d56d690d510e3a4f5913dec93415a62521f8697d955870f8
        • MD5 SHA1 SHA512
        Submit Download

        index.css
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/css/index.css
        • Size 3KB
        • SHA256 3b5778405f599ae13f6f23db006c066fd598939f7dd1f3ca99b37e6e129c4fb3
        • MD5 SHA1 SHA512
        Submit Download

        logo.png
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/img/logo.png
        • Size 21KB
        • SHA256 f09987ae112bdb1fffd166190d0c8b750cafa24b8f7ffac03f4e98b9a8789de3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        screen.png
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/img/screen.png
        • Size 19KB
        • SHA256 6cc8c70724ce0f914a1d301c7d9382c7505a5af4ffe936e2fc03c16a781f5fed
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        index.html
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/index.html
        • Size 2KB
        • SHA256 20c7a2543474bb35c04ebcb25e1b1cf26cf0a69d79df942c1ed405d6f8ffb18b
        • MD5 SHA1 SHA512
        Submit Download

        index.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/js/index.js
        • Size 3KB
        • SHA256 a2f0beb2c8ba2d9359923719c6c8b0b1bd1f024b00ea5afe16d8090556eb484b
        • MD5 SHA1 SHA512
        Submit Download

        chcp.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-hot-code-push-plugin/www/chcp.js
        • Size 8KB
        • SHA256 ed05cc47da329b2e1e3865ffcd16f4bfd82c8cfa13ba51b5e7906cebc7e79d6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Contact.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/Contact.js
        • Size 4KB
        • SHA256 363340438e7ef768eca8d3bd76e9efdb9b6d9930c1be15a4bcd47b79ed3444e3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ContactAddress.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactAddress.js
        • Size 1KB
        • SHA256 7f08033b5e74a1511e01031088cc2eea03cda09089d9d27f3acc04fdc9f3e9a7
        • MD5 SHA1 SHA512
        Submit Download

        ContactError.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactError.js
        • Size 1KB
        • SHA256 6de33ced69fc121ac04c08b4a9b8ee4555ad2e902e0d1847ebbbe33fe4717644
        • MD5 SHA1 SHA512
        Submit Download

        ContactField.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactField.js
        • Size 1KB
        • SHA256 59874f59e29cdd4eefaf29251cb43b1b763ff1e3377fdab51638313b2b9ce11e
        • MD5 SHA1 SHA512
        Submit Download

        ContactFieldType.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactFieldType.js
        • Size 2KB
        • SHA256 5dbf2a4304dc372a929fb039f39f1a05a367f647da0dc8e9c47849016662cf87
        • MD5 SHA1 SHA512
        Submit Download

        ContactFindOptions.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactFindOptions.js
        • Size 1KB
        • SHA256 3891cf7abbb73b6eb7fb2ff212161d6dc3facbab5ec376ae55a6f70bdceb5c91
        • MD5 SHA1 SHA512
        Submit Download

        ContactName.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactName.js
        • Size 1KB
        • SHA256 009d019d4ca4f1341c007b228dc89833b93782a061406254aa5c027ad39b6d4f
        • MD5 SHA1 SHA512
        Submit Download

        ContactOrganization.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactOrganization.js
        • Size 1KB
        • SHA256 9d1da0642e759a481abb6928b6ad003b8129be4c57dacfd1ab398a20d843a01b
        • MD5 SHA1 SHA512
        Submit Download

        contacts.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/contacts.js
        • Size 3KB
        • SHA256 0eca19f6fa728bbcbdf8a87000fc7bd06ae8ff6fcac6f10e46e1fc136fc605d8
        • MD5 SHA1 SHA512
        Submit Download

        convertUtils.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/convertUtils.js
        • Size 2KB
        • SHA256 ac7b1fc5c987f2ac36eee5c6c5744f3867f2b4c3c74683b530f568973552d4e5
        • MD5 SHA1 SHA512
        Submit Download

        inappbrowser.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-inappbrowser/www/inappbrowser.js
        • Size 4KB
        • SHA256 142bb5d6090b51d017f054aad1fa7cd68322429064a9b5fa01b25f367e7199fb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Toast.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-x-toast/www/Toast.js
        • Size 2KB
        • SHA256 9c3faa09815b9d320b083d502c5d807cde00c54a4894fefbd8847bde119dfcbc
        • MD5 SHA1 SHA512
        Submit Download

        installationNum
        • Path /data/data/com.luckybird.io/no_backup/.flurryNoBackup/installationNum
        • Size 101B
        • SHA256 5869fe16e089f106e62122e3d006fba79feba910f6ecdf0f113a7c064a6cae57
        • MD5 SHA1 SHA512
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.luckybird.io/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 b37a59fa1d26fa5c7a7196d7f796a1de6fa27cc7fc0c875f6787616d9c367475
        • MD5 SHA1 SHA512
        Submit Download