f45510c26bb19d7f86f743f83af6cfdb35813ca050544536c2337e430c22d773

Analysis

max time kernel
2770080s
max time network
133s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
23-11-2022 15:17

Target

f45510c26bb19d7f86f743f83af6cfdb35813ca050544536c2337e430c22d773.apk
Size

302KB
MD5

ece2ffc39e026085650c78f561e771b9
SHA1

a06a9706d853e4d6b9c260f66a93901ae04fd477
SHA256

f45510c26bb19d7f86f743f83af6cfdb35813ca050544536c2337e430c22d773
SHA512

d3bbfdd5b7bae6d090752848f71004118dcf74a83e1a010b0db43bf1a79f620054baf2466035d0a8491bb2a2e51cc4702ef551cbfd421c010b085dc389f6d9ab
SSDEEP

6144:WSWl3wbXxlcWlHI3T6srwL193SdhPG3d1WBUCab5Od+fgg+3FsQv/EhkE:nlbXQDrwLj3cPGt1Sab0+IRsQHEn

Score

6^/10

ransomware

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

vwl.widbf.dkqqd

description ioc process

Framework API call javax.crypto.Cipher.doFinal vwl.widbf.dkqqd

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	vwl.widbf.dkqqd

vwl.widbf.dkqqd
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:3999

/data/user/0/vwl.widbf.dkqqd/shared_prefs/storage.xml
Filesize
122B

MD5
385ce347858893f18ca21d71829a9b9e

SHA1
4c1169a3d1060ac614855290ad5e225f8f31dcac

SHA256
1ca62392cfd117130f27efefb59d5e526c9b2d3bda44e737db8085bc1f6867b2

SHA512
35d4ec33e9bb8bcdb9ed4df04b282d4f67fc02fa48cfb2d9975a50345cd26ec62f3e80caa13a93f2ba4f099f3d775a67ce73b3fd333496d5155a0f40f2e60c3e

Download Submit