978306e11798f4aead05b052c0846c3fde868c57b98887c73bac40a0aa934d4d

Analysis

max time kernel
3815237s
max time network
161s
platform
android_x64
resource
android-x64-arm64-20220310-en
submitted
20-05-2022 21:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

978306e11798f4aead05b052c0846c3fde868c57b98887c73bac40a0aa934d4d.apk
Size

2.5MB
MD5

497b450ba5e619ff04d02bddc0a984c3
SHA1

51bccc065018f4190eaeba5eeb5a5211d8131c11
SHA256

978306e11798f4aead05b052c0846c3fde868c57b98887c73bac40a0aa934d4d
SHA512

0fc3566f55de5cd787a74ab372be98d2313d18c2360e3dc036ea4dc134d84e89ba049b232f1c9f173e626e90575a280ce1caf4a52fe6e46c18025bd4ae17c730

Score

7^/10

ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

Processes:

mssuit.biyouexcel

ioc	pid	process
/data/user/0/mssuit.biyouexcel/files/0.jar	6932	mssuit.biyouexcel
/data/user/0/mssuit.biyouexcel/app_b_data/classes.zip	6932	mssuit.biyouexcel

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

mssuit.biyouexcel

description ioc process

Framework API call javax.crypto.Cipher.doFinal mssuit.biyouexcel

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	mssuit.biyouexcel

mssuit.biyouexcel
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:6932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/mssuit.biyouexcel/app_b_data/classes.zip

Filesize
333KB

MD5
92347f79b85c9ad218af7950a07b9b24

SHA1
63c80f01f50fc4bdc021655ca624624b10f5f159

SHA256
f187f694b155d9b58fb61729d7f7fb2c0b9a74de824dcf92a2ff1b01acd39c5b

SHA512
3f862664dd6e391f2109b3d8552e6b6f8a2e004071eb7347c934b4ba94360bbc6869ee0abdf5c135c3c3ad944cd6ec974988e7dc766dd80cd341c3065927d37a

Download Submit
/data/user/0/mssuit.biyouexcel/app_b_data/classes.zip

Filesize
902KB

MD5
6710a661317e4e52d9fc23c59b34b45d

SHA1
0b098432858dd79a3da29ea8949265cc72e66aef

SHA256
f86d1bbe6cd6d3596c995c9b994fb1bab288e5d3df36fb083aa2a58ca82dcfd2

SHA512
84ea2705499eda8cd784a4d22ea5dc0347a37c604bfeb5278d2cd21637e8e31bc1d39a2a2c72e09f32476840cdbba0368a794c9a88096a0ce2af3f84b8e7fc72

Download Submit
/data/user/0/mssuit.biyouexcel/app_b_data/oat/classes.zip.cur.prof

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/.com.google.Chrome.jORofK

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/Default/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/Default/GPUCache/index-dir/temp-index

Filesize
96B

MD5
5c12a361feb5c32c6ddb492130375b21

SHA1
d2166ad374d8dd799c41ab6346b0c397087ccc83

SHA256
fb9fade5a5b2d295493bb2b3f7b97b52bb562d7da30153e736ef0cbd59221979

SHA512
ad2234649af0cb1ec0c2f03a62b0c2f3dcd0993e4ea8a14af9d33dfa5d439a04b2ea40c1b6926e5718079d04ce2309928f38132f8dc5684e718b3bcffc331276

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
a441597ac122b15bc5dce1664f979217

SHA1
17b0a52ef81e72f199cc6643c550417adce4b92d

SHA256
b1bf46fa8eb22da0a06955e4d06cf9c97d8cd048ad140e267a94fdaeaf79bd65

SHA512
cbbfcf7a5b8c38aee1c95736160c808b4438a8a565afc785304526acf1858d81645222a664e2e483d9b39b8ca1ad17f6eb9bf941b497db6b6c75b659ebc3d857

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/variations_seed_new

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/variations_stamp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/mssuit.biyouexcel/app_webview/webview_data.lock

Filesize
23B

MD5
b18bb9353f6d9745659ab8acc566b45e

SHA1
41b5ceba5d69c3ffb55fca8e350e619f3ebc8366

SHA256
9694f5dce297253617cb39e1dd375c5f0ea773231c2a899406e242881708b7ef

SHA512
73cc1406d07eeb1ee044a6a2d491d72ddfc4aa88bd8f554867a5a41bace74b80ea9160145af67d245f69a5549e423e3ed4ab0feb7f4453cd184ccade6c5d2780

Download Submit
/data/user/0/mssuit.biyouexcel/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
cc5d0ba5279c3a3c3a839940062c0d10

SHA1
ad1e6ace7a02b7f478c099683a28406b784457ff

SHA256
731c4644a969bd03ad4961360351582f5c5bca0b412cb345c8650cc68dc755ba

SHA512
1dce5896ed9e5a31506b53e02a83964682f7181992ebda6944987a7b8e60349ddee6e8cf34099e36aa0b39c333de6c8f6c498d74975792170b5f2aa1257bcae3

Download Submit
/data/user/0/mssuit.biyouexcel/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/mssuit.biyouexcel/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
511bf93a8965610948f6d2d5689feaa5

SHA1
8243a6ce40f4202e3dbf929dea86b5a35a5902a8

SHA256
421b80ff0770dcf75022793189b572a038faa2ad6564cc5393818c9dbfb048eb

SHA512
0dd4f6dbbc0162101fd2ad155a364c077de859d750def47aae3c6bf1053e3ec96bbf050d69515b182819ef52daf4bd72c9eeb4c1a9fd0656540729e3f27652ec

Download Submit
/data/user/0/mssuit.biyouexcel/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/mssuit.biyouexcel/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
3ac78d01f924771aa907d43aa1387653

SHA1
6b9bb698832d807fc5ed19c111e6fba1f3371b81

SHA256
b2ad295bd4c395402887f519a77da1d649ce137dace8fee58fd0e4d71ea98969

SHA512
b40545352cdb5fb2a948e55e981823958f9175aa0a66fcbe8d820d769d5fb952dfbad9571776799e2cd2130b3a78611a204a30f9e705e30acad1b3aafdba85f0

Download Submit
/data/user/0/mssuit.biyouexcel/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/mssuit.biyouexcel/databases/0000yd.db

Filesize
72KB

MD5
44018270d5dba48546b05d09392db8fd

SHA1
66f44aa5a79a57896d0762a27f9f3d631685faa2

SHA256
c70f9872874390370600eb437ba1acb07dcd6498c2fe027b2f862ba565efd735

SHA512
0b0e32315c10cf98746bd083626271cc5f0f36937ed8baba606b8ab5297a824dad5afd68f0c0ad7dfdc6a1f321cb189e4ee4122d6c6ba5c5d632ec7f700932bf

Download Submit
/data/user/0/mssuit.biyouexcel/databases/0000yd.db-journal

Filesize
1KB

MD5
4e2bb03d4a0ee9d4b9ffc3bd3598ab64

SHA1
9bb82aeb719121428f59ceeeac13df53dfdbb1d7

SHA256
c7efefea985c5db672dec5ecd03e788417d45146e3cbaf21c7dad799bfeca08c

SHA512
73584e8165b5291e03d48ce1d6d60b2bf8079d3853246744e6468ba18b2d77f8feb0c5eeaa53b6d0761d92adc57b66133c0ca9bf4cd9535427c00df7275a636a

Download Submit
/data/user/0/mssuit.biyouexcel/databases/b_db

Filesize
440KB

MD5
d841b2bf6f4cdbab2fe67030b8fb90e8

SHA1
d24edfa8ea5449cd2eab77296580cf7845a7076f

SHA256
6cabb7b7d06236e474ed392d54f4706cac87addcf65a026edd9f4b3e1f0e9abc

SHA512
63e78ab2c5cc6b161287275d06ddaae5ea1bc2c43a27223bf8ff62aed57b4c052ca9b6f38693b4d69c023a6c976344cceeea80e1cfe35713ad13d104be5d1b8c

Download Submit
/data/user/0/mssuit.biyouexcel/databases/b_db-journal

Filesize
1KB

MD5
1a8dc48641ec398717488984382523e2

SHA1
54912ff29252319a16afdde51544c90c4ef8a3a9

SHA256
2d71892b2fc7258d6b25f13250383ed7ec474ebc2deab007481bef6ce9aef6ae

SHA512
a73337b30e546bc808a30c653ab064be5ebcfda59150b5570fd9e889957fd044144f6d3c3056bd99b7f5a52e15801943adf2af7693863f790cb270911e0cd5e5

Download Submit
/data/user/0/mssuit.biyouexcel/files/0.jar

Filesize
167KB

MD5
a0e27ca5ce3bcfbc64f7a82b2899940a

SHA1
7f02da57c985ec6d1fb4b63dcc8a9e8298656577

SHA256
b96231cae7033012eb034f9046890d5f6c58751957d8c0a689e98e01de81ae65

SHA512
054977b6ec65f01d16b947087c17a6dacfa97b2c54ff56e1d4d388c3e6268497949c4e2fde976f9bcac610f2fbfa4872a20127fbf6150a47a2701baa7e2709ff

Download Submit
/data/user/0/mssuit.biyouexcel/files/0.jar

Filesize
305KB

MD5
e0f01aa78a1f1a56f8fc21308cd382f1

SHA1
d96972ce64fd73f63c6e9cb49015f6e4b2476181

SHA256
7fb230eec65a7afb386dfcb69bfc4c2b61359c1357271df204dc1d3912430c06

SHA512
78b50a3802f62cbbd07d6d104dd0bcdc6b475fb7f3d08659a6bb99f81935885cc12bdd13c0c6a1b2775c0459bdcff675ac1759a86be297ac38d4c1e26f3c73d1

Download Submit
/data/user/0/mssuit.biyouexcel/files/oat/0.jar.cur.prof

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/mssuit.biyouexcel/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit