Overview

overview

7

Static

static

7

3b0f6d36a7...db.apk

android_x86

1

3b0f6d36a7...db.apk

android_x64

7

3b0f6d36a7...db.apk

android_x64

7

Analysis

  • max time kernel
    3867052s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    21-05-2022 11:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3b0f6d36a78148cdb7fb97d9d75f70b34fe21b0c42321ed7aeb6c8af247d49db.apk

  • Size

    276KB

  • MD5

    32d35ba4b1c181c6e620f088062e8c73

  • SHA1

    a1ca223290ec9883473e5aa2ec404edf1511f665

  • SHA256

    3b0f6d36a78148cdb7fb97d9d75f70b34fe21b0c42321ed7aeb6c8af247d49db

  • SHA512

    df5c5970b0ccb618f7f2f56a40ef10401457b123607e330b1cf8133dc2cd05700f873cc3b4e278695440c0be45d3360ab7044a30f86d2da357595685ea2a0f21

Score
7/10
ransomware

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.lima.jqgfq.pavmapzp
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5743
    • getprop ro.miui.ui.version.name
      2⤵
        PID:6496
      • getprop ro.miui.ui.version.name
        2⤵
          PID:6603
      • com.lima.jqgfq.pavmapzp:RemoteProcess
        1⤵
          PID:5847
        • com.lima.jqgfq.pavmapzp:guard
          1⤵
            PID:6897

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/com.lima.jqgfq.pavmapzp/app_tfile/fields.jar
            Filesize

            151KB

            MD5

            07f164db880c1b6691b5c54862e9a3c4

            SHA1

            6dd9102eff0b0134fb9bbafd0122bfae719565fd

            SHA256

            2e6db810857d45da5ea6f084812401401f0f7a2bd6e7c3a7a96c7d46995551fe

            SHA512

            46bec2510d5ed27d54248f32556d2b7969d0e2557f17fe2f1f6f18177e2dbfc42598cfe555d44b38a2bc2480212aec036f4a4df392ca39dafe09a830b03f93f9

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_tfile/fields.jar
            Filesize

            306KB

            MD5

            35926f0158766813027fbfe1ab5b1125

            SHA1

            8f166af95ff940dc45b933462ee7ffdf30dd5d06

            SHA256

            47a1ed442aa97ce2a6c313cbd64547cd506b809593745707d3fc9585f6a6c3f4

            SHA512

            b0fb1d19eedb27b3efda5354ac947db9ec89901d0f5c5b9a64325f2d74f4e11f5330f984bb9a9e5ad1c2d3abcd62e1516d94e7778d273ed5df51993dc9573ba3

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_tfile/oat/fields.jar.cur.prof
            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_webview/.com.google.Chrome.nuHdLv
            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_webview/Default/Web Data
            Filesize

            120KB

            MD5

            a48cd9324b1f8754b07f00d863b840f3

            SHA1

            11c6614775b35a58f440971dfc87c8aaac6d6173

            SHA256

            8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

            SHA512

            35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_webview/Default/Web Data-journal
            Filesize

            2KB

            MD5

            ff75e82398f7a3ee9da4637cf75aa19c

            SHA1

            dbd46538ed8887fd7b79fd5d53b1691cd88e5b0e

            SHA256

            d04a518fc9ec0782a667c35d5416bb08c309afe53bd8bf40c2f659a7cc8c5be5

            SHA512

            6d2e8f58802445e318e1e34e9bc3d9a96bf3788e12043d58994831cb945d2dd9bb9ab92c6f1b34520e329622d7c2b877ec54509fb7b74c421bba97e8825d29e8

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_webview/variations_seed_new
            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_webview/variations_stamp
            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/app_webview/webview_data.lock
            Filesize

            29B

            MD5

            861c7dda26ac5b2ed96438f44adaa965

            SHA1

            27683b8a0838bcf94ee54695437b4c6f9bd3162c

            SHA256

            9be65198eb2eb1a876c7c040403212d9c6eb9da963d21b8fb5519c978f308221

            SHA512

            8bc335e51f28e2e10aa05d366cbddb3e9a14ae6101839b5bbd8d03f0922d631f1b1c3827ffcfe6eb70f3a33bb046ac594d85d95510f401aa6cdbd752e79989ca

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/cache/WebView/Crashpad/settings.dat
            Filesize

            40B

            MD5

            6d27b218e996a0007f755c828a6819e0

            SHA1

            34f0fb7bc070b2894072920efcfa352b8ae0a472

            SHA256

            e4321b70b9cb1f89a1e00609ecf28bf30950229eb8756842c0108631c5db4c03

            SHA512

            7ee99de551f7e979277de8ff5430b9034d0a6f26af9b2d32c72748f564a644619b2d5686d3c9fb6d2797a6c30d8df3d9067a0c1920bcea2cc92a3cd571bcf153

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/cache/WebView/Default/HTTP Cache/Code Cache/js/index
            Filesize

            48B

            MD5

            6d7d499960179766cd4261d12dacc411

            SHA1

            e6f8553b0015e12b23cc551afe98763f3b1c9bed

            SHA256

            c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

            SHA512

            6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
            Filesize

            96B

            MD5

            004b9661f43491a378e251384c467125

            SHA1

            89b8f94bf59c00f5a23f1435274032d6e2bcb8b0

            SHA256

            b022334704441eb9643536cc12b2a401d15454b8ef5d5d2afc6a7e2b9c739241

            SHA512

            6079a3c7047d9fbdec8859bd4e7017422970c23d1a108efb80f741ec4eda456d62f799898b148072b94d1b21a6ba12187b7f479955f0ac3d4bef1ccc486a004e

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
            Filesize

            48B

            MD5

            6d7d499960179766cd4261d12dacc411

            SHA1

            e6f8553b0015e12b23cc551afe98763f3b1c9bed

            SHA256

            c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

            SHA512

            6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
            Filesize

            96B

            MD5

            f9a69bc727e012ddae5fe41d1dcd9c03

            SHA1

            fa010777cdbbf445eb2a1b2faf8b08b7917eff98

            SHA256

            9b2bcf029599686cbb2425e5b02b5a27a6877bf243e7a0208a5bd1aa3ca7a7ff

            SHA512

            5c99f98f5cd205e6f26d0df073a52e49f6d710f92095a2ff7e8f26999fab00e245e2729298aef326b627b8ec2dc95511194d2c29fb2e5081ed2bcdbd5a824afb

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/cache/WebView/font_unique_name_table.pb
            Filesize

            57KB

            MD5

            f080fa2a56ab5479d58063e5ea871447

            SHA1

            4b3fd57a98916fa5784305b76ba30af26b5253d9

            SHA256

            0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

            SHA512

            8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/databases/tbcom.lima.jqgfq.pavmapzp
            Filesize

            104KB

            MD5

            d38ae211ff7f51f74c2894f8a09dadc7

            SHA1

            0c1fc4eaacf28fcbd52fccece5d5a485b72a9539

            SHA256

            c8fb7828fa7cf5c9201ebf772be107562dccdb3b7cf4b997062a7cd5ccdc3d02

            SHA512

            eb61b52ff331c63b448cc5f4c9edcbe4427ea90cb396e72982276569fb73ebbed89a9eab9b97c8d5b496cccd1db96ede033adff5f2ad6610dd55ac12ef49fbe9

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/databases/tbcom.lima.jqgfq.pavmapzp-journal
            Filesize

            1KB

            MD5

            3e89d62adcf71b327f98ee9c42612ff5

            SHA1

            8c3fb4c10cf527744e9dc0088b1b8b8b05387b0e

            SHA256

            79dbfdee6b9f937779804ae7884bd52cdaa47159d02f76f2d996ba6d206467f6

            SHA512

            277038f781ab1348957097768689a3a88fcc082c0231e19a8eaf838075219a27fe955c5ab39d16d7c53929f2d406f688b8e5580f92ed5fbbbb1efb6444f47cb9

            Download Submit
          • /data/user/0/com.lima.jqgfq.pavmapzp/shared_prefs/WebViewChromiumPrefs.xml
            Filesize

            127B

            MD5

            97ccd9a2b2063143df56b6937f961ca4

            SHA1

            5e78a91ae5df289ce83443cb7d5589dd3504fb5d

            SHA256

            248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

            SHA512

            86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

            Download Submit
          • /storage/emulated/0/Download/sdsid
            Filesize

            4B

            MD5

            b8c37e33defde51cf91e1e03e51657da

            SHA1

            dd01903921ea24941c26a48f2cec24e0bb0e8cc7

            SHA256

            fe675fe7aaee830b6fed09b64e034f84dcbdaeb429d9cccd4ebb90e15af8dd71

            SHA512

            e3d0e2ef3cab0dab2c12f297e3bc618f6b976aced29b3a301828c6f9f1e1aabbe6dab06e1f899c9c2ae2ca86caa330115218817f4ce36d333733cb2b4c7afde7

            Download Submit