Overview

overview

7

Static

static

7

c8249cf6bc...f4.apk

android_x86

7

c8249cf6bc...f4.apk

android_x64

7

c8249cf6bc...f4.apk

android_x64

Analysis

  • max time kernel
    3895255s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 18:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c8249cf6bca7f76acce364f56b34b8df21cf940090beb2cd39ec84a66b376bf4.apk

  • Size

    295KB

  • MD5

    147103d58d1fc26dc4e288f18ff9d2dd

  • SHA1

    3cc6c39f663e0710e9ca644173dd88431f05086a

  • SHA256

    c8249cf6bca7f76acce364f56b34b8df21cf940090beb2cd39ec84a66b376bf4

  • SHA512

    e311f0bd018eb6ad6b6dbef55bbd9fb065af6b3f7f62e42f7cd04e37c16133328bebb469c2da19f8c3892acb8cd749eba5eb917d5e45aa7341ee184c50738f09

Score
7/10
ransomware

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.xvnb.qkut
    1⤵
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5069

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xvnb.qkut/files/dex
    Filesize

    484KB

    MD5

    ccb0ba6ba7ba68690c70d59924a595c6

    SHA1

    d8ef45c75fa9e280d957d24c8cf754021708d0f4

    SHA256

    aa2777f1ecc605371ab6b5ad6834e180029524985672ac8f3d4f68aca15a379d

    SHA512

    40a2dde59493b7770f6dc9dae2eef3ea890a5b07b40f07b6f17f7f1db5153a0fe468daaf728b801b5392380d0a62f0168552a5ad54efb8d42c93dda350142618

    Download Submit
  • /data/user/0/com.xvnb.qkut/files/dex
    Filesize

    484KB

    MD5

    ccb0ba6ba7ba68690c70d59924a595c6

    SHA1

    d8ef45c75fa9e280d957d24c8cf754021708d0f4

    SHA256

    aa2777f1ecc605371ab6b5ad6834e180029524985672ac8f3d4f68aca15a379d

    SHA512

    40a2dde59493b7770f6dc9dae2eef3ea890a5b07b40f07b6f17f7f1db5153a0fe468daaf728b801b5392380d0a62f0168552a5ad54efb8d42c93dda350142618

    Download Submit
  • /data/user/0/com.xvnb.qkut/files/dex
    Filesize

    484KB

    MD5

    ccb0ba6ba7ba68690c70d59924a595c6

    SHA1

    d8ef45c75fa9e280d957d24c8cf754021708d0f4

    SHA256

    aa2777f1ecc605371ab6b5ad6834e180029524985672ac8f3d4f68aca15a379d

    SHA512

    40a2dde59493b7770f6dc9dae2eef3ea890a5b07b40f07b6f17f7f1db5153a0fe468daaf728b801b5392380d0a62f0168552a5ad54efb8d42c93dda350142618

    Download Submit
  • /data/user/0/com.xvnb.qkut/files/dex.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit
  • /data/user/0/com.xvnb.qkut/files/oat/dex.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit