Overview

overview

10

Static

static

10

02d6ca25b2...09.apk

android-9-x86

7

02d6ca25b2...09.apk

android-10-x64

7

02d6ca25b2...09.apk

android-11-x64

7

Resubmissions

27/10/2022, 16:01

221027-tghd1scgdr10

21/10/2022, 10:54

221021-mzjlgagdc97

Analysis

  • max time kernel
    439343s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/10/2022, 16:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209.apk
  • Size 4.8MB
  • Sample221027-tghd1scgdr
  • SHA256 02d6ca25b2057f181af96d2837486b26231eaa496defdf39785b5222014ef209
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
evasionransomware

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Checks Android system properties for emulator presence. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
    evasion
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.majorityapps.exoticflowers
    1⤵
    • Acquires the wake lock.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4150
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.majorityapps.exoticflowers/cache/1582435991586.jar --output-vdex-fd=118 --oat-fd=119 --oat-location=/data/user/0/com.majorityapps.exoticflowers/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4320

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Cookies
        • Size 64KB
        • SHA256 64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Cookies-journal
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Cookies-journal
        • Size 1KB
        • SHA256 3ef8f5d4231dafa70b7b89167aaa5c33f3096470064e62a8ca2329989fb3f09f
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/GPUCache/index
        • Size 20B
        • SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/GPUCache/index-dir/temp-index
        • Size 48B
        • SHA256 855223d75b2ee3c5c9b1514a195da10fe95368721d15825bcde923b519e78492
        • MD5 SHA1 SHA512
        Submit Download

        000001.dbtmp
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Local Storage/leveldb/000001.dbtmp
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        000003.log
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Local Storage/leveldb/000003.log
        • Size 260B
        • SHA256 b66f73cef9b506a6cf538322240d9c1cd261a306aa8888132e1be393f92a855b
        • MD5 SHA1 SHA512
        Submit Download

        LOG
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Local Storage/leveldb/LOG
        • Size 70B
        • SHA256 1677b3da802116420b77996904283c17c75400d58b7d1497df5a0c431f4ad199
        • MD5 SHA1 SHA512
        Submit Download

        MANIFEST-000001
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Local Storage/leveldb/MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Web Data
        • Size 104KB
        • SHA256 47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 0270fee38660a8fcd9d41ec13f1b06552955db81dc340e1c6ff323baffe1c256
        • MD5 SHA1 SHA512
        Submit Download

        metrics_guid
        • Path /data/user/0/com.majorityapps.exoticflowers/app_webview/metrics_guid
        • Size 36B
        • SHA256 5993493b8f4f52a15c963830f07a7111098962f028de6e227c797a64a2e12913
        • MD5 SHA1 SHA512
        Submit Download

        1582435991586.jar
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/1582435991586.jar
        • Size 20KB
        • SHA256 105c54b6fe3f25350e92187467761598e4c21d62b1091b77d091f65f3bd98864
        • MD5 SHA1 SHA512 SSDEEP
        Download

        1582435991586.jar
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP
        Download

        b6c577e5e6175e80_0
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/org.chromium.android_webview/b6c577e5e6175e80_0
        • Size 5KB
        • SHA256 0a9cdd674c01ada270bddb458cc45e5b6f5775482e52f1e4dd6100fc0942ad45
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dfe6b2497a7513ba_0
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/org.chromium.android_webview/dfe6b2497a7513ba_0
        • Size 6KB
        • SHA256 1aa1c394ab2cd39c545da926d84734de851f1bc91e0fd73f6630b3407d928973
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        f038e94cb33282ab_0
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/org.chromium.android_webview/f038e94cb33282ab_0
        • Size 123KB
        • SHA256 4e11362d8199626631e6a1fa7897a4e6ed1a59e4d5b78db9a5681a32ebf1814c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        f038e94cb33282ab_1
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/org.chromium.android_webview/f038e94cb33282ab_1
        • Size 196B
        • SHA256 f647461c21dbb5e9ecd7c89aca2ebb861fcde49f6c19f47974aae88281f360a4
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/org.chromium.android_webview/index
        • Size 20B
        • SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 72B
        • SHA256 83b78a06bb9d5d7bba0b69ded7e2144617c582eb9a04e67aa138c5647347701c
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.majorityapps.exoticflowers/cache/org.chromium.android_webview/index-dir/temp-index
        • Size 120B
        • SHA256 4ce61becb381f546cd19d63c557bd427e0df7910c3dc4db52d2ebd4d02fc88e0
        • MD5 SHA1 SHA512
        Submit Download

        221027_180204425.get
        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180204425.get
        • Size 213B
        • SHA256 b8d96e6299b772d6e242d9c4e59a1774121f5937d31de9f0fa3e504b218778bf
        • MD5 SHA1 SHA512
        Submit Download

        221027_180205242.get
        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180205242.get
        • Size 51B
        • SHA256 574644c9971ae3f01b0d529e3e7e50781b7c2f719d9ad365daa553130ef3b933
        • MD5 SHA1 SHA512
        Submit Download

        221027_180205393.get
        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180205393.get
        • Size 51B
        • SHA256 125415eddadf0717360f4dd4f75592e52da2cefe843deb8b3ef200d8c8289c95
        • MD5 SHA1 SHA512
        Submit Download

        221027_180205679.get
        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180205679.get
        • Size 51B
        • SHA256 6bfcf28df4dd6216e6a2d2adb7ef685d385db2243bccea95d6c7c20b49adc495
        • MD5 SHA1 SHA512
        Submit Download

        221027_180206008.get
        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180206008.get
        • Size 51B
        • SHA256 1a11258da6cb684378037aa8690c031eefd538e80561ec5cc82834d1ab807e5f
        • MD5 SHA1 SHA512
        Submit Download

        221027_180209939.get
        • Path /data/user/0/com.majorityapps.exoticflowers/files/221027_180209939.get
        • Size 51B
        • SHA256 aec145d04e3ba137ca8f61c9684c0c0a6bdabf967f862baabdcd3b745fadb70b
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180204560.log
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180204560.log
        • Size 368B
        • SHA256 f305edd3ccd4e921892989bd30a7cf8167b0434307e1f62d202204929015d063
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180204560.zip
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180204560.zip
        • Size 352B
        • SHA256 7b1f50fc2238866f77dfa502444a81e6eaf9eff15f6ff6350e7faba38b1c36fc
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180205270.log
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180205270.log
        • Size 256B
        • SHA256 d1b78439abe827d29626f5751126bc4370bc73fff77c2a7ed51c1c87111967ae
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180205270.zip
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180205270.zip
        • Size 241B
        • SHA256 eae27f506b43920acd45cb7fb10ddaa030081c7a605865ebcb1381d7c76f6d1c
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180205422.log
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180205422.log
        • Size 256B
        • SHA256 4deb4df5383e3393ff2133abbc968922f3c37083c7f34247957401612dd6dd92
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180205422.zip
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180205422.zip
        • Size 241B
        • SHA256 99f9117efe85e5c39b43ea151e8f30dbca1fc16301a88dc9ecfb3a57d6926646
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180205723.log
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180205723.log
        • Size 256B
        • SHA256 bbfd4b2d6197f28e1e9eff56df69cdcab94fc8cac5cd15e4476e1f9758a1ef97
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180205723.zip
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180205723.zip
        • Size 241B
        • SHA256 d00f77b1a0fecf5948e3068dc193796a8c209a2c02bb9e03bc816c3979bc0272
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180206050.log
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180206050.log
        • Size 256B
        • SHA256 fcc5709edcb7739a9a52420deb9d3325638cfaeb8fcbb8b53bb0648dfc8002cd
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180206050.zip
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180206050.zip
        • Size 241B
        • SHA256 aa4db8619f2e80d18a5cdcf29f673faedc738da73521a2b32eee3fd6ae1c46a9
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180209973.log
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180209973.log
        • Size 256B
        • SHA256 3a86f11c25fa96a50940d6dee172b420c9c65f3636fe87669acbddedd1c63b33
        • MD5 SHA1 SHA512
        Submit Download

        25bcdf6401de672f_221027_180209973.zip
        • Path /data/user/0/com.majorityapps.exoticflowers/files/25bcdf6401de672f_221027_180209973.zip
        • Size 241B
        • SHA256 a916fd02a57451e5083ca6c504e333a16f7bbf8efb52918433fe8203bbe21eb4
        • MD5 SHA1 SHA512
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
        • MD5 SHA1 SHA512
        Submit Download

        admob.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/admob.xml
        • Size 133B
        • SHA256 06b7feb3ee830e3b33662778a9aea265fb926ec1f98344055e99a72903752b5a
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.appid.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 129B
        • SHA256 60e7d9eef080c7ca927bfc5aaa7d3c244aa09ff439b68fed0e6ed9980559c9c8
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.appid.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 23745ba77eea25c76920c691aa84c6ebdf98fb9574d574127bb4d799c61bcb28
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.appid.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 3e2a8feb9fb764baf463e8d03473fa9b64352605874fc408aa3a088c33e1b21a
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.appid.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 a037657de85950792d516b16e35525b28eab09ae20d29e1cd447ee3e5ed933e3
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.appid.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.appid.xml
        • Size 2KB
        • SHA256 43b349e0860f5a31ced49ed4b3143344c1f80785c790dfd6fec54df6f1405b81
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 299B
        • SHA256 48fb55117eaa498d350a2eb600856f556c382d3e2772b4dbc0d8ce2711611d62
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 395B
        • SHA256 2ed6fa1bc2061ff87768b923b7f7677c849002754d31ee192957583a701742ca
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 456B
        • SHA256 220c625b2eea98b421597881c669b6dc4644ed224473a01abef1bff852202aa0
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 519B
        • SHA256 eb8e3cbb6a747d224ebb89d6322f3213f27d3fd610c3beb06d249ab53d64e1dd
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 519B
        • SHA256 1da54c70ba1e5a5a7bf026e63d1da528b1e471889d4bd9b40162bc9830e7ef2d
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.gms.measurement.prefs.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 520B
        • SHA256 5fc82aeb029b652252ed2479499d6e8235ef2813f2d236372ab25579702b95f9
        • MD5 SHA1 SHA512
        Submit Download

        rateapp.xml
        • Path /data/user/0/com.majorityapps.exoticflowers/shared_prefs/rateapp.xml
        • Size 107B
        • SHA256 8f2d81416d2aa770b618858d0272183cdd01b8be028f789a4acc9ee103157c4d
        • MD5 SHA1 SHA512
        Submit Download