filecoder | fa9d1664ef9192b50228d7c21589f4fe9f3002faa503b39666a8a3bcd03ed635

Analysis

max time kernel
3191445s
max time network
160s
platform
android_x86
resource
android-x86-arm
submitted
03/02/2022, 06:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fa9d1664ef9192b50228d7c21589f4fe9f3002faa503b39666a8a3bcd03ed635.apk
Size

6.8MB
MD5

57d941c6c2b1425ff9b9679024b8738f
SHA1

b502874681a709e48f3d1ddfa6ae398499f4bd23
SHA256

fa9d1664ef9192b50228d7c21589f4fe9f3002faa503b39666a8a3bcd03ed635
SHA512

e819aa27e999a12eaa6d5f5b756bb8af9cdecb4c0399f9c9a4456398897f7e03547eee07ab907d1cf392879acf4c8084ee011f75c821a07db9d55b53cac995b6

Score

10^/10

filecoder ransomware

Malware Config

Signatures

Filecoder.C
A ransomware family that spreads to other victims via SMS.
ransomware filecoder
Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	net.south.seven

net.south.seven
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:5048

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

T1102

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...