a4b0913804e5275b11be0858e4623ec10b5ef88893709d7847d1cc203feff196

Analysis

max time kernel
2772340s
max time network
131s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
23-11-2022 15:21

Target

a4b0913804e5275b11be0858e4623ec10b5ef88893709d7847d1cc203feff196.apk
Size

994KB
MD5

66f46cd0347f2ec73a97d25785714a2e
SHA1

f48270f7d82981811eb0edf171fffc76d6c2b416
SHA256

a4b0913804e5275b11be0858e4623ec10b5ef88893709d7847d1cc203feff196
SHA512

cc066a3e53664a4e33b4a4ecd8ac68b7c93b2f1562e906948e18089f9e8abebc71143053d21d2d413cf19bfa07850add2eaa64d96f7c40ffbd023d58991c5ff4
SSDEEP

24576:8GZIbwaeDfgeWnIcK1InL7FwjcROriOOhCQOIKOFm2ku8K5ANYu/ilQeMpb:8SIbwaezgeWnVKmL7FCckri7NKOFm2Ju

Score

7^/10

ransomware

Acquires the wake lock. 1 IoCs

Processes:

com.ant.task

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.ant.task
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.ant.task

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.ant.task

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.ant.task

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.ant.task

com.ant.task
1⤵
- Acquires the wake lock.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4067