Overview

overview

8

Static

static

7

961697c4fb...c6.apk

android-9-x86

8

961697c4fb...c6.apk

android-10-x64

6

961697c4fb...c6.apk

android-11-x64

8

Analysis

  • max time kernel
    2770604s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    23-11-2022 15:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    961697c4fbb52511ac8f3b446b0b9670bc7fd5e13aacaad376444fbd339327c6.apk

  • Size

    1.9MB

  • MD5

    58f160a021279cb9d149aa74a2c422e0

  • SHA1

    bcc970c3af6aa0286ec17abc3654eb1dfd5f05a8

  • SHA256

    961697c4fbb52511ac8f3b446b0b9670bc7fd5e13aacaad376444fbd339327c6

  • SHA512

    dbde4a676d7268ef7ad8b97389154a7a65e725745e31a2ddd3108bc217e2a818826de514dd608acd124e9fbd02e74302f6e3f083dbc01b74199336f38e0a0a9d

  • SSDEEP

    49152:n/mlr3oSzljwnyxIP6PLBCKv8kgdmJPPFSBvX:/yr3oAsyiyPLD8zEJPPEvX

Score
8/10
bankerransomware

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
    banker
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.xxxapps.pornes
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4073

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xxxapps.pornes/files/com.crittercism/current_bcs/1.1669217771326.1
    Filesize

    48B

    MD5

    db227ffbbf6ebffdf0817ad243c2ebca

    SHA1

    40272770ba385b904a506f5365b71ae180f0ab39

    SHA256

    bb1d54f68f265fa75eabb523a530f766f60278c09d89347a61c593d1739e5ba5

    SHA512

    9cebce7b3d22439f5f83c16ef2e60ed0ffdcc8700a94b09f84d521a10db6616d95d1dffe0d49b88b1768c858a08fb5765a02d28fab0b507a8fccad61ae5eda18

    Download Submit

  • /data/user/0/com.xxxapps.pornes/shared_prefs/mat_queue.xml
    Filesize

    109B

    MD5

    72c63cb25a6ee9d13efa766650d5d0c6

    SHA1

    0b66633ba147fb38f11aca5933100ad4432e4fc4

    SHA256

    e6c8e9e82a4ded75a5b8e0bf4f23c6a7847621b0583d1b5c9e591e48a97d62f4

    SHA512

    fe74f3d2d5ad2749fea6566c05ad37af8a20de7ee08fdab95f4aad1c76e423e075e559ebb3342c39e8ca4aa75d31e682cc248c8b00f876844fea87035c2880f5

    Download Submit

  • /data/user/0/com.xxxapps.pornes/shared_prefs/mat_queue.xml
    Filesize

    567B

    MD5

    d70c9d3a96805e95854cacefd1e0b009

    SHA1

    e63481cfef935d56e6e501fa52cbd8e445ba3144

    SHA256

    9926d80d11d7e7369820fdf74b03d68361ac40edf21dd4805de39a85c1201fe9

    SHA512

    77a76692a8c24b1155fea7c987844559398864058eea4afd7d54d564f8774697db70f85329a2b3b7363997850a34734fb8f744e8e81c1272a108856d0549bb5d

    Download Submit

  • /storage/emulated/0/Android/data/com.xxxapps.pornes/cache/.nomedia
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit