1118439f95ea8f8d88f067206bb030eb0e06cd8ec65ea604c166e67303423977

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
04-06-2024 01:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285.apk
Size

2.0MB
MD5

2e241e2b34d2a7f4c7c108eb9fa9bfa4
SHA1

d55658c8d2dbfd7a01f5f1635a855174d1e5d2bd
SHA256

278b1bb652f2bb7297d55f2ab4f4404d28f35fdfa5ceab0fdf66979c99240285
SHA512

b27704a97152628cc9c4bf060891ef19724d47dcbad8f40bca19112d25bace65fa9fc26b5c9e39dccb6dcd6e79e1845383534a1859e4786456bfac7e0e3ed6f5
SSDEEP

49152:wsdkkgeXtaig3nNGm2ihQSrmF5u7TuBg7TbkD0v1Y5:7kk5Xgig3NJ2NSrmcTkg7TbkDEY5

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.temptation.lydia
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4540

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.temptation.lydia/files/PersistedInstallation3678011629984209731tmp

Filesize
90B

MD5
73402cf186db1681b150bb342052cbc0

SHA1
46701b418f36f99bd65d2e6f78d35636e04f9297

SHA256
7ece99d48112a8bb820fdf32db83aceea7938b0b1ab46f5d305baeddf369e650

SHA512
a4685cdd82819759c679e3ba539343283ca2701da96d194f56ece32423f24f14a9c60a5e5a0604e571989ccc162bff4f2b404dc66cc6d778c1a3a0b035939911

Download Submit
/data/data/com.temptation.lydia/files/PersistedInstallation4231269092269829400tmp

Filesize
566B

MD5
bb2f8dcbd41fed384d08a30e05c77ff1

SHA1
464c8e39a580aed16c18adfc6523c7fb25c03f43

SHA256
a0bfe0f5e732de89675dfa94ecafd8a8ccae34c638e0d7103126d74b7e16b58f

SHA512
c9a331a15f9eade2c3fb009488cd35e55c3ec6bd2befb762c7c06f0ad8ff56f04bd1a6e479f6a98caf5cfda3bc1eea4930fed9300d77f02483153dbf394b33b2

Download Submit