f1dbed595f4bbbf0106f1984f63cbde23650cd8ba5c50c2da92a2e8adfa9746f | Triage™

Analysis

max time kernel
1415560s
max time network
149s
platform
android_x86
resource
android-x86-arm-20220621-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
submitted
31/07/2022, 09:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f1dbed595f4bbbf0106f1984f63cbde23650cd8ba5c50c2da92a2e8adfa9746f.apk
Size 3.0MB
Sample220731-lkmtxaaae2
SHA256 f1dbed595f4bbbf0106f1984f63cbde23650cd8ba5c50c2da92a2e8adfa9746f
MD5 d7e2fff32d4386cf1d6981fa2416f322
SHA1 4695a3986e6ed367cdc1d22997f32ea9d8293243
SHA512 ad87d65b497e52a21bfb3b9f028e9b4a910e4070528e0b5b0e5ffd4b7726d825aa45c516f3c6980a36357d414a6e333683b592159296c0afee0c1ba6b0fbd51e
MD5 SHA1 SHA512

Score

8^/10

ransomware

Malware Config

Signatures

Makes use of the framework's Accessibility service. 1 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	zuera.gotc.serko

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	zuera.gotc.serko

zuera.gotc.serko
1⤵
- Makes use of the framework's Accessibility service.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4617

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads