12bf109167c37955d1038b6bff79362d86108bbc0d0adbe6a9e75f9c8e696f81

Analysis

max time kernel
2822066s
max time network
134s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
24-11-2022 02:16

Target

12bf109167c37955d1038b6bff79362d86108bbc0d0adbe6a9e75f9c8e696f81.apk
Size

757KB
MD5

d63c30ec13eab98c1795858f2f29daa7
SHA1

91af4149274d49d4560ea5ba7de87b07bde283fd
SHA256

12bf109167c37955d1038b6bff79362d86108bbc0d0adbe6a9e75f9c8e696f81
SHA512

c3ba52319ad93d1bfd5be294b254ae29ef45fd4ad1d0c7afa58a72af8dbe427001ef33910d1c8e95e9acc1761eb23a2c2285a85e9286887d1a1bafc288ad836e
SSDEEP

12288:vg+oF5FmB72G6nmyVIusj9xYRZ5hunSHqawjAVlY1aGumlmjulWI/d/iy2cp/gJq:vtoypImAIucsonSHqawjAVlITmjod/DV

Score

6^/10

ransomware

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

org.rhmopij.kgnkrk.tpr

description ioc process

Framework API call javax.crypto.Cipher.doFinal org.rhmopij.kgnkrk.tpr

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	org.rhmopij.kgnkrk.tpr

org.rhmopij.kgnkrk.tpr
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4835