d14ed35aeddc57cd982791e46db50faac9b70d13a5f58d4345b8666a4f4793cc

Analysis

max time kernel
3871897s
max time network
164s
platform
android_x64
resource
android-x64-20220310-en
submitted
21-05-2022 13:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d14ed35aeddc57cd982791e46db50faac9b70d13a5f58d4345b8666a4f4793cc.apk
Size

1.4MB
MD5

b1d88f168c39bddd9014fe1901327053
SHA1

1ddb4223779bdac492c62482e742aed6380e18d1
SHA256

d14ed35aeddc57cd982791e46db50faac9b70d13a5f58d4345b8666a4f4793cc
SHA512

d7a2abdd14590501743903c199b281be9d09c708a61a415ddca4138b3b4a6296ab0a03671f726ce8ac1b67070e0a7ef8ab58b5390a0cf2aa83473b9c3784c1d5

Score

7^/10

ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.keji.danti408

ioc	pid	process
/data/data/com.keji.danti408/loadjar/moduleconfig.jar	6181	com.keji.danti408
/data/data/com.keji.danti408/loadjar/bootablemodule.jar	6181	com.keji.danti408
/data/data/com.keji.danti408/loadjar/mainmodule.jar	6181	com.keji.danti408

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.keji.danti408

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.keji.danti408

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.keji.danti408

com.keji.danti408
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:6181

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.keji.danti408/bakjar/bootablemodule.jar
Filesize
24KB

MD5
103acbf763ad617e9916f7611dd91b93

SHA1
57850b6874e0c573a4db58055b03e3a84cdbf373

SHA256
3e9ed9ff04c89fd7125e57d19198d9d3532b78ec4be0cbb7d70b8f2375367184

SHA512
51321cc7bf62428cabde6d5e0ac4dbc0e2b7de29f260bf611208febc76256a8e51a72ed2d064a77a880651c8279fbb8b23a4f6c83874fb7e050d176cd9e2e77c

Download Submit
/data/data/com.keji.danti408/bakjar/bootablemodule.xml
Filesize
303B

MD5
db2870ba88b3fe576ba415eefad3e7f1

SHA1
283ed5290a6b0f1b30fec0612d94f827f3cb0f88

SHA256
dab7bfd05bcc79abed3cf2b3eeadda38078e3e921f601c0fe40b5f8df867d468

SHA512
f5cf73dd30abd6fd47975a18604d922fe1a9bfa8d1a0fe183c6c80a2fb3162bff8e0ecaac9046345401c434449a5398c47196e41610f5a36206d3b8dc20f517f

Download Submit
/data/data/com.keji.danti408/bakjar/mainmodule.jar
Filesize
181KB

MD5
6f7d8952d00f2859998e847c833c8ae6

SHA1
c0782b737f3af7b4da6f1b9bd43fe3d77c25df24

SHA256
668f249e9ae763d46fa42b8d4e8c30374ba8dcc939c0423f8b28adbd538d1a0d

SHA512
68faba1dac46be828b782b5c210251d8c2388c0f785bb0cdcc8e786eec17d1515a7867535489b2a47567512b81e20647616d8771a8169d253a3495588d0ec24d

Download Submit
/data/data/com.keji.danti408/bakjar/module.xml
Filesize
302B

MD5
93706b1e15ddcbb5656a17937dc55365

SHA1
b28dd405409c992f23baf68537e748d57c1dac88

SHA256
2594a2d787714e0be65b877a7c43d44ee8c48b008cca33072d7df6a096e8cbd4

SHA512
150d3bd43daf2caeb3eaf65fe6a2523cb9a351b79257b6a175d1c9377d8e6fb9115569d658578c5d19a20c33eeb6c6e58124266b6bab64dc348897f6299889d3

Download Submit
/data/data/com.keji.danti408/bakjar/moduleconfig.jar
Filesize
30KB

MD5
1d364be2cfa43e205ed493333d913742

SHA1
157c04cf9a147f67c471ce284b24eb04f54dafca

SHA256
c31fcef0b467b781860e210a20d4c13c4fbc2404a15d3f6cc7efc01deefdd9ee

SHA512
08371b56baf8f93e0939f71e46c524c43ed48683a68df2213f7c1c348011c01300dce37a0067be171fde7acd53aa4c56493a8014e9bfb239069e17510a43b4ed

Download Submit
/data/data/com.keji.danti408/loadjar/bootablemodule.jar
Filesize
18KB

MD5
126ff9c0202f31b98812c8cc0d3c7abf

SHA1
cc7dc09931eac96e45c95ef16bed5e0f52adb2c4

SHA256
7f55c116408148d6779f5c1e410f355707927ceb5bb172e1a73322030530985b

SHA512
b19e4e1c9fe2a98e8f2febf7e87e6239f3dc5a0638744a68a949b48756dafe538d635d41a5d81643ea1faa90409405d909129b7357d7c327578f10f439fd8f05

Download Submit
/data/data/com.keji.danti408/loadjar/mainmodule.jar
Filesize
130KB

MD5
8fd9b35b67ce2af96c632327783ffee9

SHA1
b120e3672dfd505699d787ca9e8b71423fef5cef

SHA256
51b98314f6b8aa15c7843d6b74658043eb1b3a7370b3484948ee230dc25a388c

SHA512
b2f15f057455df5a94f5d38ecfaadc27a18c3cbc9908e312664175e869311934c7d705f8da7207a0075a69c9f6c75117df9e4ff5858c80d9f69c7169a23c7b4d

Download Submit
/data/data/com.keji.danti408/loadjar/moduleconfig.jar
Filesize
27KB

MD5
38be4053fcf4ed98f2419c688001285b

SHA1
5d88e23288cb4d208f5bc012ed021407c1cb2ee3

SHA256
aa22562e93b7b8212df21bef120cf519ee197c4bde35a77b8391557bc5d7979b

SHA512
983e23ef517f5d587852806c0e4332a2a59d3426ce9a86a08a9b9151b26107a686e2af111891e6c55a4f889a1149cba96279fbf0a0cf5ee7a705bd8bb2d53cbf

Download Submit
/data/user/0/com.keji.danti408/databases/SZJService
Filesize
136KB

MD5
f19703d50d1bcc61ac4317c7df2babaf

SHA1
1116d939e44ba496cc1980e7bb7a0a266dc3776a

SHA256
9dbb0ce19f20974ac14b956654a5d082aff2c21f8893f0d9a29480ebfc03971e

SHA512
2b7835157eca91fd5a6fff950e420a36be239feec05f24911dc8161fe84d8d2fffd40989464dc547e09f0c6bf1340524d7e57c89bb058aa73a7e7c3f9262d828

Download Submit
/data/user/0/com.keji.danti408/databases/SZJService-journal
Filesize
1KB

MD5
a394a3d4a159adebeb13b5a2dfc098bd

SHA1
a338250c554a376c299d7fca98ebc16bfa577c13

SHA256
2d66ed3a038c2a03d4960e74a0fc5b6543ba1a0649de849d66590abb801e31a0

SHA512
bc5f5975bfe6f9c22b33a8f5342ac8cad3f9ee5ff093f951416f0488f2f07c84220721661bb7c4ca7c4d0f2810ae3d090fdf1eecef6609cd888db409d5bcef6c

Download Submit
data/data/com.keji.danti408/loadjar/bootablemodule.jar
Filesize
24KB

MD5
103acbf763ad617e9916f7611dd91b93

SHA1
57850b6874e0c573a4db58055b03e3a84cdbf373

SHA256
3e9ed9ff04c89fd7125e57d19198d9d3532b78ec4be0cbb7d70b8f2375367184

SHA512
51321cc7bf62428cabde6d5e0ac4dbc0e2b7de29f260bf611208febc76256a8e51a72ed2d064a77a880651c8279fbb8b23a4f6c83874fb7e050d176cd9e2e77c

Download Submit
data/data/com.keji.danti408/loadjar/bootablemodule.xml
Filesize
303B

MD5
db2870ba88b3fe576ba415eefad3e7f1

SHA1
283ed5290a6b0f1b30fec0612d94f827f3cb0f88

SHA256
dab7bfd05bcc79abed3cf2b3eeadda38078e3e921f601c0fe40b5f8df867d468

SHA512
f5cf73dd30abd6fd47975a18604d922fe1a9bfa8d1a0fe183c6c80a2fb3162bff8e0ecaac9046345401c434449a5398c47196e41610f5a36206d3b8dc20f517f

Download Submit
data/data/com.keji.danti408/loadjar/mainmodule.jar
Filesize
181KB

MD5
6f7d8952d00f2859998e847c833c8ae6

SHA1
c0782b737f3af7b4da6f1b9bd43fe3d77c25df24

SHA256
668f249e9ae763d46fa42b8d4e8c30374ba8dcc939c0423f8b28adbd538d1a0d

SHA512
68faba1dac46be828b782b5c210251d8c2388c0f785bb0cdcc8e786eec17d1515a7867535489b2a47567512b81e20647616d8771a8169d253a3495588d0ec24d

Download Submit
data/data/com.keji.danti408/loadjar/module.xml
Filesize
302B

MD5
93706b1e15ddcbb5656a17937dc55365

SHA1
b28dd405409c992f23baf68537e748d57c1dac88

SHA256
2594a2d787714e0be65b877a7c43d44ee8c48b008cca33072d7df6a096e8cbd4

SHA512
150d3bd43daf2caeb3eaf65fe6a2523cb9a351b79257b6a175d1c9377d8e6fb9115569d658578c5d19a20c33eeb6c6e58124266b6bab64dc348897f6299889d3

Download Submit
data/data/com.keji.danti408/loadjar/moduleconfig.jar
Filesize
30KB

MD5
1d364be2cfa43e205ed493333d913742

SHA1
157c04cf9a147f67c471ce284b24eb04f54dafca

SHA256
c31fcef0b467b781860e210a20d4c13c4fbc2404a15d3f6cc7efc01deefdd9ee

SHA512
08371b56baf8f93e0939f71e46c524c43ed48683a68df2213f7c1c348011c01300dce37a0067be171fde7acd53aa4c56493a8014e9bfb239069e17510a43b4ed

Download Submit