Overview

overview

7

Static

static

6

luckybird0604.apk

android-9-x86

6

luckybird0604.apk

android-10-x64

7

luckybird0604.apk

android-11-x64

7

Analysis

  • max time kernel
    40s
  • max time network
    54s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    04/06/2024, 22:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    luckybird0604.apk
  • Size 6.1MB
  • Sample240604-2n211aeg65
  • SHA256 ee27e1a8d4835a2b87be8467a1d77009f42dda3b112bc9fa8b6fe6db3a009aac
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
collectioncredential_accessdiscoveryevasionimpactpersistence

Malware Config

Signatures

Processes

  • com.luckybird.io
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5009

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        androidx.work.workdb
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 81c98d4974cf9af6b3f43208e9777e3a4bff24707a785e8f74e2d7c462e09fdc
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 60d6eb4939d6c31a5a09182a53724a97b073c0a292baf27ff2a3c7e038a17e99
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.luckybird.io/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 fea028bc1b714077eb279341d977b57abab8699f53a52c2718949c9c50555b1e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a4b798975afb9cef839019cb4ec806eec68867a6df00e58155b3bb024b7bdeeb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 80860c1abd80fa298a70d7fd2bf88986e317fcdd802077a94820dfc5dcad99c5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 04601741ef53a5b26a860fb4650b0604225c10e43e86c00946677b6482544870
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a0e2f1010f3edeb17857910cd38e9808b28022dfb44d97c0f56ac97d55d74e03
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 28c144790dea5fce3782dde427dbb53cca8c045525c1cd64feb72f09bd85bb3f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a94794c6c7a08cf951c708e40dce35c8e15cfba9e6ecc845dd79c6c827df4758
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 516ec8df4d98c4e2fc24e9b99cfc610dd74f20355178a7242a550dc1d9a6237d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 afab38e2a171cbfc1c29516f19fd1d2615f4a119ee4f3015c56a33b95926d6ae
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 97a0bc8bd25c8a41558f1bfdfb1795d88320456c208458756cbad2d186037ae4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 65fe31f1ac5c13aa55f77169c75b6d9f7017ed75c5083b807d529f8a2458ed19
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.luckybird.io/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 36a8a6d440d40afa92c6b51316c5459c4c25f6dd74966436d62949dbab5592f6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        .YFlurrySenderIndex.info.AnalyticsData_7H49FP4xM7NV9SWJ845KP_284
        • Path /data/data/com.luckybird.io/files/.YFlurrySenderIndex.info.AnalyticsData_7H49FP4xM7NV9SWJ845KP_284
        • Size 88B
        • SHA256 fb181e01d5069d2ce4d8e9cf01c2edf8dce3d1b22798c27eeceb6e1f565283f4
        • MD5 SHA1 SHA512
        Submit Download

        .YFlurrySenderIndex.info.AnalyticsMain
        • Path /data/data/com.luckybird.io/files/.YFlurrySenderIndex.info.AnalyticsMain
        • Size 73B
        • SHA256 0b5dd78ed585f74b9b27db6177a93a3a06a5ca02787f304f4b5f79a82e9c13b6
        • MD5 SHA1 SHA512
        Submit Download

        .yflurrydatasenderblock.028515b6-9784-4c9a-a263-cb444346b606
        • Path /data/data/com.luckybird.io/files/.yflurrydatasenderblock.028515b6-9784-4c9a-a263-cb444346b606
        • Size 371B
        • SHA256 0f6bccf94032c8393c816bdcc1daa5f8c53ec99d7753215679e6be0d50af6b44
        • MD5 SHA1 SHA512
        Submit Download

        chcp.json
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/chcp.json
        • Size 264B
        • SHA256 34eaf047dabf9dc620cfa7012640e606e673a745de64a57903b511457063c834
        • MD5 SHA1 SHA512
        Submit Download

        chcp.manifest
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/chcp.manifest
        • Size 336B
        • SHA256 4e2fa2294e2cb03482acd198148937a7dc4491e50f426f3a4d8d6acaf36130e5
        • MD5 SHA1 SHA512
        Submit Download

        nativeapiprovider.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/android/nativeapiprovider.js
        • Size 1KB
        • SHA256 6b93ab749d3a38c3c1aefd24af7258ee164a7dbd59126be5ee1524951a1ea130
        • MD5 SHA1 SHA512
        Submit Download

        promptbasednativeapi.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/android/promptbasednativeapi.js
        • Size 1KB
        • SHA256 af2dadc21ddb52cc372ef0aef8daefe2648ebb225f492d01e54baea5239aba32
        • MD5 SHA1 SHA512
        Submit Download

        exec.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/exec.js
        • Size 10KB
        • SHA256 1cf1dfae526c6be2cfddebabcb821ddc2f77fce36228d51ea4a37420ebe5d4f2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        platform.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/platform.js
        • Size 4KB
        • SHA256 89833028f58dda9d34dba705bd4d8d6fca3afcd01e204dc4a49f8c41867ccc1f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        app.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova-js-src/plugin/android/app.js
        • Size 3KB
        • SHA256 0409cf6e37e6723bee88c6c4250b3d6722137f140df47f00ff0e91d6615da04e
        • MD5 SHA1 SHA512
        Submit Download

        cordova.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova.js
        • Size 62KB
        • SHA256 6d384ddd84c9ea6035467a2b9d2637ede7698d358dd1e7656aaf758999bdb106
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cordova_plugins.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/cordova_plugins.js
        • Size 3KB
        • SHA256 d765eab599142080d56d690d510e3a4f5913dec93415a62521f8697d955870f8
        • MD5 SHA1 SHA512
        Submit Download

        index.css
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/css/index.css
        • Size 3KB
        • SHA256 3b5778405f599ae13f6f23db006c066fd598939f7dd1f3ca99b37e6e129c4fb3
        • MD5 SHA1 SHA512
        Submit Download

        logo.png
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/img/logo.png
        • Size 21KB
        • SHA256 f09987ae112bdb1fffd166190d0c8b750cafa24b8f7ffac03f4e98b9a8789de3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        screen.png
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/img/screen.png
        • Size 19KB
        • SHA256 6cc8c70724ce0f914a1d301c7d9382c7505a5af4ffe936e2fc03c16a781f5fed
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        index.html
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/index.html
        • Size 2KB
        • SHA256 20c7a2543474bb35c04ebcb25e1b1cf26cf0a69d79df942c1ed405d6f8ffb18b
        • MD5 SHA1 SHA512
        Submit Download

        index.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/js/index.js
        • Size 3KB
        • SHA256 a2f0beb2c8ba2d9359923719c6c8b0b1bd1f024b00ea5afe16d8090556eb484b
        • MD5 SHA1 SHA512
        Submit Download

        chcp.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-hot-code-push-plugin/www/chcp.js
        • Size 8KB
        • SHA256 ed05cc47da329b2e1e3865ffcd16f4bfd82c8cfa13ba51b5e7906cebc7e79d6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Contact.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/Contact.js
        • Size 4KB
        • SHA256 363340438e7ef768eca8d3bd76e9efdb9b6d9930c1be15a4bcd47b79ed3444e3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ContactAddress.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactAddress.js
        • Size 1KB
        • SHA256 7f08033b5e74a1511e01031088cc2eea03cda09089d9d27f3acc04fdc9f3e9a7
        • MD5 SHA1 SHA512
        Submit Download

        ContactError.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactError.js
        • Size 1KB
        • SHA256 6de33ced69fc121ac04c08b4a9b8ee4555ad2e902e0d1847ebbbe33fe4717644
        • MD5 SHA1 SHA512
        Submit Download

        ContactField.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactField.js
        • Size 1KB
        • SHA256 59874f59e29cdd4eefaf29251cb43b1b763ff1e3377fdab51638313b2b9ce11e
        • MD5 SHA1 SHA512
        Submit Download

        ContactFieldType.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactFieldType.js
        • Size 2KB
        • SHA256 5dbf2a4304dc372a929fb039f39f1a05a367f647da0dc8e9c47849016662cf87
        • MD5 SHA1 SHA512
        Submit Download

        ContactFindOptions.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactFindOptions.js
        • Size 1KB
        • SHA256 3891cf7abbb73b6eb7fb2ff212161d6dc3facbab5ec376ae55a6f70bdceb5c91
        • MD5 SHA1 SHA512
        Submit Download

        ContactName.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactName.js
        • Size 1KB
        • SHA256 009d019d4ca4f1341c007b228dc89833b93782a061406254aa5c027ad39b6d4f
        • MD5 SHA1 SHA512
        Submit Download

        ContactOrganization.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/ContactOrganization.js
        • Size 1KB
        • SHA256 9d1da0642e759a481abb6928b6ad003b8129be4c57dacfd1ab398a20d843a01b
        • MD5 SHA1 SHA512
        Submit Download

        contacts.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/contacts.js
        • Size 3KB
        • SHA256 0eca19f6fa728bbcbdf8a87000fc7bd06ae8ff6fcac6f10e46e1fc136fc605d8
        • MD5 SHA1 SHA512
        Submit Download

        convertUtils.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-contacts/www/convertUtils.js
        • Size 2KB
        • SHA256 ac7b1fc5c987f2ac36eee5c6c5744f3867f2b4c3c74683b530f568973552d4e5
        • MD5 SHA1 SHA512
        Submit Download

        inappbrowser.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-inappbrowser/www/inappbrowser.js
        • Size 4KB
        • SHA256 142bb5d6090b51d017f054aad1fa7cd68322429064a9b5fa01b25f367e7199fb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Toast.js
        • Path /data/data/com.luckybird.io/files/cordova-hot-code-push-plugin/2019.05.17-16.24.51/www/plugins/cordova-plugin-x-toast/www/Toast.js
        • Size 2KB
        • SHA256 9c3faa09815b9d320b083d502c5d807cde00c54a4894fefbd8847bde119dfcbc
        • MD5 SHA1 SHA512
        Submit Download

        installationNum
        • Path /data/data/com.luckybird.io/no_backup/.flurryNoBackup/installationNum
        • Size 99B
        • SHA256 647dd4a07dada331305ca269035248d796a7d6cba4b17a0b014148b514419ed0
        • MD5 SHA1 SHA512
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.luckybird.io/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 0cc91a7357cef04b840166978db9222bc28c6b8ec9a3ed3aabbfd2d4f2836e03
        • MD5 SHA1 SHA512
        Submit Download