Overview

overview

7

Static

static

7

a406285bd9...9f.apk

android_x86

7

a406285bd9...9f.apk

android_x64

7

a406285bd9...9f.apk

android_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a406285bd96e8b69d13029a20617e0f9a83213efca5df0bd3881341c43e9149f

  • Size

    432KB

  • Sample

    220701-f7xdzafge7

  • MD5

    d5d2db66eddbd76ab3c7002439afc1fd

  • SHA1

    aafcbe91c15bcd9b2fcf43d95b12a8ddf341d6aa

  • SHA256

    a406285bd96e8b69d13029a20617e0f9a83213efca5df0bd3881341c43e9149f

  • SHA512

    24fd2bf737ece350c9a281ad6b4bbc54f54b1760c852f7539106d2c268ad68682e151da5ade47d4716f76088d87fc7abcbf4aab4d2b94be9e9b22847097e64f6

Score
7/10
androidevasionransomware

Malware Config

Targets

    • Target

      a406285bd96e8b69d13029a20617e0f9a83213efca5df0bd3881341c43e9149f

    • Size

      432KB

    • MD5

      d5d2db66eddbd76ab3c7002439afc1fd

    • SHA1

      aafcbe91c15bcd9b2fcf43d95b12a8ddf341d6aa

    • SHA256

      a406285bd96e8b69d13029a20617e0f9a83213efca5df0bd3881341c43e9149f

    • SHA512

      24fd2bf737ece350c9a281ad6b4bbc54f54b1760c852f7539106d2c268ad68682e151da5ade47d4716f76088d87fc7abcbf4aab4d2b94be9e9b22847097e64f6

    Score
    7/10
    evasionransomware

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks