Overview

overview

7

Static

static

7

de8562ff27...78.apk

android_x86

7

de8562ff27...78.apk

android_x64

1

de8562ff27...78.apk

android_x64

7

Analysis

  • max time kernel
    3102000s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • submitted
    01/07/2022, 07:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    de8562ff271337c4b2a426584650eaf1aee994cb9e77593abad378a3b1820c78.apk
  • Size 882KB
  • Sample220701-hyfe7sagg9
  • SHA256 de8562ff271337c4b2a426584650eaf1aee994cb9e77593abad378a3b1820c78
  • MD5 SHA1 SHA512
Score
7/10
ransomware

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.rhmmpu.jgglkr.kspq
    1⤵
    • Acquires the wake lock.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4772

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Web Data
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 0cfbf26281900ea65e920f754a700841fe116a3215e36a1c1a49984bcd401b70
        • MD5 SHA1 SHA512
        Submit Download

        webview_data.lock
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/app_webview/webview_data.lock
        • Size 28B
        • SHA256 67e9456c3f83485e9c6b277b516c5bb4b7e5425e8d2f49d4a6193ba944357955
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 24ae14dd5d5ffe344e795a8c40c2113442d506e464b03e16fce2b6d2d0c31e7b
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 f11d8be63ffc51e5495f8589f2ec93a35c7de7c24bcdf5787486db9187986e74
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 4c8db808c3b36d18f22af40e9eee677b767e4468351549f2b9af4d3d423e8365
        • MD5 SHA1 SHA512
        Submit Download

        font_unique_name_table.pb
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.rhmmpu.jgglkr.kspq/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512
        Submit Download