c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547 | Triage

Sharing

General

Target

c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547
Size

312KB
Sample

220521-xvag4scfd4
MD5

1285e688bb834e348023425ab4bbbfa5
SHA1

605526f8ee8bb7150dbd2a4b90ab9ab5edabd7da
SHA256

c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547
SHA512

6cf4ab3fa4222487731d7cc353b96db63129e9138092167abdb577f6cace82f4f7ffb0a992e9d76c30ae5b2a24f4c87a9bdcd767f30c52ee885ea1f5b2d5d258

Score

8^/10

android ransomware

Malware Config

Targets

- Target
  
  c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547
- Size
  
  312KB
- MD5
  
  1285e688bb834e348023425ab4bbbfa5
- SHA1
  
  605526f8ee8bb7150dbd2a4b90ab9ab5edabd7da
- SHA256
  
  c18c5ca32b80d4b595500853e1899d03edbe954d1e79da14f167aa888918d547
- SHA512
  
  6cf4ab3fa4222487731d7cc353b96db63129e9138092167abdb577f6cace82f4f7ffb0a992e9d76c30ae5b2a24f4c87a9bdcd767f30c52ee885ea1f5b2d5d258
Score

8^/10

ransomware
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3