976ae466e74883097891f6aeea6e13eea690c21954a367295680f6cb231488a0

Analysis

max time kernel
2818381s
max time network
132s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
24-11-2022 02:16

Target

976ae466e74883097891f6aeea6e13eea690c21954a367295680f6cb231488a0.apk
Size

310KB
MD5

e83cbdb1a9c0a13f007f6fe1e9531453
SHA1

e29c7c4321a7e218c447a363710ec36a8f3b35ed
SHA256

976ae466e74883097891f6aeea6e13eea690c21954a367295680f6cb231488a0
SHA512

4bb8a3cb728633167180abcaaacd0bbfaf0ca1e26b0f0e283cb32e474535e482fb7c5a944ba4a0742305a9aa8b3d063e198c6abf20f4761e5d6407c8790a29e1
SSDEEP

6144:Gv0jBFvCXguDJFY1lM5tHtsh+NYVMLyBmBjLwjxW+KD6yQUOe:GMH8g4clMxpixdChQUOe

Score

6^/10

ransomware

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

hk.rimkpvjs.gnkrkr.pu

description ioc process

Framework API call javax.crypto.Cipher.doFinal hk.rimkpvjs.gnkrkr.pu

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	hk.rimkpvjs.gnkrkr.pu

hk.rimkpvjs.gnkrkr.pu
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4077