Overview

overview

7

Static

static

7

d14ed35aed...cc.apk

android_x86

7

d14ed35aed...cc.apk

android_x64

7

d14ed35aed...cc.apk

android_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d14ed35aeddc57cd982791e46db50faac9b70d13a5f58d4345b8666a4f4793cc

  • Size

    1.4MB

  • Sample

    220521-qew8lshdb9

  • MD5

    b1d88f168c39bddd9014fe1901327053

  • SHA1

    1ddb4223779bdac492c62482e742aed6380e18d1

  • SHA256

    d14ed35aeddc57cd982791e46db50faac9b70d13a5f58d4345b8666a4f4793cc

  • SHA512

    d7a2abdd14590501743903c199b281be9d09c708a61a415ddca4138b3b4a6296ab0a03671f726ce8ac1b67070e0a7ef8ab58b5390a0cf2aa83473b9c3784c1d5

Score
7/10
androidransomware

Malware Config

Targets

    • Target

      d14ed35aeddc57cd982791e46db50faac9b70d13a5f58d4345b8666a4f4793cc

    • Size

      1.4MB

    • MD5

      b1d88f168c39bddd9014fe1901327053

    • SHA1

      1ddb4223779bdac492c62482e742aed6380e18d1

    • SHA256

      d14ed35aeddc57cd982791e46db50faac9b70d13a5f58d4345b8666a4f4793cc

    • SHA512

      d7a2abdd14590501743903c199b281be9d09c708a61a415ddca4138b3b4a6296ab0a03671f726ce8ac1b67070e0a7ef8ab58b5390a0cf2aa83473b9c3784c1d5

    Score
    7/10
    ransomware

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries the unique device ID (IMEI, MEID, IMSI).

    • Reads device software version

      Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks