fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c

Analysis

max time kernel
2152734s
max time network
158s
platform
android_x64
resource
android-x64-arm64
submitted
06-07-2021 09:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Voicemail.apk
Size

4.2MB
MD5

37be18494cd03ea70a1fdd6270cef6e3
SHA1

4714aaa5195da29c6e74aeee9e9f19678af5c15b
SHA256

fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c
SHA512

5452d2e545c46b94d3209b332fea6e87727039371688e2ae63ad303c014db5e7b5d4222d4dcefd703fc4a4f15e6f685ec5e62cabe396573bed0e0f78a40d679f

Score

7^/10

obfuscation ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.tencent.mobileqq

ioc	pid	process
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood	4118	com.tencent.mobileqq
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood	4118	com.tencent.mobileqq

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.tencent.mobileqq

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.tencent.mobileqq
Uses reflection 1 IoCs
obfuscation

Processes:

com.tencent.mobileqq

description pid process

Invokes method android.view.ViewGroup.makeOptionalFitsSystemWindows 4118 com.tencent.mobileqq

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.tencent.mobileqq

description	pid	process
Invokes method android.view.ViewGroup.makeOptionalFitsSystemWindows	4118	com.tencent.mobileqq

com.tencent.mobileqq
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
- Uses reflection
PID:4118

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood

MD5
d84b0dfd9a30c76a437aadb89691e6aa

SHA1
9148708f0c1d11b9c221077fbd75bd9c8497e2dd

SHA256
6abe1ef68fbef29853af93605eafbce35c255d99e0aa8bb5b7d7f53faf1db5c8

SHA512
7311805177f2058a0f2e874c801f7ffe202d114db654d411b16d52228b3ed91469cfb1c284079615cddaa2edb7eb1a6cd5d85608fbbcbcd0aebdaa5524f5954c

Download Submit
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.tencent.mobileqq/app_apkprotector_dex/ISM4bLeG.ood

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.tencent.mobileqq/shared_prefs/Voicemail.xml

MD5
c8a6eb6acdd5f69fe75c66115aac07e4

SHA1
f2589f299770e30104c0b6874a70f1dcb2d62fa9

SHA256
89a49a5ccf8b5c3f071b1466a89bcfcd8535337d3534f75e685aeb390084c297

SHA512
0ce635edaf06655cc5619fdff2e49b38f56a3afa430a8f0263a9968b059055cb5ab0f0780d50a2fe382784aa61270209537933688c6e0232752ca74f081f257d

Download Submit