ba52d0bd1826ecaf674d68130b209e86e4297a831b181e95a9da16a4ff838772

Analysis

max time kernel
3s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
28-06-2024 01:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ba52d0bd1826ecaf674d68130b209e86e4297a831b181e95a9da16a4ff838772.apk
Size

2.0MB
MD5

a540a523d5787c237772f202bba09905
SHA1

11af54feebe5a0ab0c7ed07217f01b1f6df0e17e
SHA256

ba52d0bd1826ecaf674d68130b209e86e4297a831b181e95a9da16a4ff838772
SHA512

46848f88069df672766dfbeadda0a5a4d507b14a2dccc0cf8afe253efc97b8ff5e0353d1a59c021220bd7cc580c7c6eb5ab3d04761f8a6c611c9ca507dfdf023
SSDEEP

49152:6tsdkkgeXF9463Zuwa/hS7GDVHFmaXoU51+2FCUVaNDDib/:9kk5XjH3La/xDP5Xl51/wUENDW

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

com.temptation.lydia

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.temptation.lydia
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.temptation.lydia

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.temptation.lydia
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temptation.lydia

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temptation.lydia

com.temptation.lydia
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4506

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.temptation.lydia/files/PersistedInstallation706835913721959198tmp

Filesize
90B

MD5
0657b6add2ef71e94026986e0d8ec565

SHA1
a95e0ac61d6ad26d175c24b39699653c189918b9

SHA256
ae6b2e79fc2c4523e4041bbc508bfb57e3c1be615ff74916c1dca9a5bfac0c51

SHA512
d4a8d172c4a3f82fde1aa5dfdcd487d98bfb489715a823a398530d7272212bcf7ce3099d863da3660834cdad6361bd411497ee62929e459bbe43808144aa875b

Download Submit