Overview

overview

7

Static

static

7

9912bc2244...3e.apk

android_x86

7

9912bc2244...3e.apk

android_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9912bc2244394a7c0912a496dfb9138e15ce0f932362b313dc80392cb7f5e53e

  • Size

    4.2MB

  • Sample

    220521-bhzetaehfj

  • MD5

    06a4ce32c266e4407a6745a80b3a4c31

  • SHA1

    68d0f9564bdd1ffa92de27d4c1c6763b1e905d1a

  • SHA256

    9912bc2244394a7c0912a496dfb9138e15ce0f932362b313dc80392cb7f5e53e

  • SHA512

    4be1552045dfb6c4b5d5ebaa8547810b4170dc20e2f76accff0cf39a91b740c414a0357309e2ed1aa6baaab2d2dcb51af4d10e97efc6dc2e5a48461f32f71f9b

Score
7/10
androidevasionransomware

Malware Config

Targets

    • Target

      9912bc2244394a7c0912a496dfb9138e15ce0f932362b313dc80392cb7f5e53e

    • Size

      4.2MB

    • MD5

      06a4ce32c266e4407a6745a80b3a4c31

    • SHA1

      68d0f9564bdd1ffa92de27d4c1c6763b1e905d1a

    • SHA256

      9912bc2244394a7c0912a496dfb9138e15ce0f932362b313dc80392cb7f5e53e

    • SHA512

      4be1552045dfb6c4b5d5ebaa8547810b4170dc20e2f76accff0cf39a91b740c414a0357309e2ed1aa6baaab2d2dcb51af4d10e97efc6dc2e5a48461f32f71f9b

    Score
    7/10
    evasionransomware

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks