1137090db6e1a9254dea1df1266fb1d15c2cd26637e3192d3e165a37e37185da

Analysis

max time kernel
2827170s
max time network
168s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
24-11-2022 03:02

Target

1137090db6e1a9254dea1df1266fb1d15c2cd26637e3192d3e165a37e37185da.apk
Size

747KB
MD5

f3633981f7aa08ae89cbd1ab6f092dbc
SHA1

8b5ece0b38487a7e6292979f8bda28f547739616
SHA256

1137090db6e1a9254dea1df1266fb1d15c2cd26637e3192d3e165a37e37185da
SHA512

6ba7bbbe5afd1e650dea7ea9d1bc13ef2549dfa964e1ba2a13d2cda641239a0675bf66332563bb2b5bf6e3530cb0b1ab7a15777b57ad211730ec1015ae145f3c
SSDEEP

12288:coGg5IGBgAsWI+iyndxZVo+gjbqcYqseHQl325n2K3JUF9CqdcHtRQHzPMx:XGQdxZVo+GqO7Hg32hL3JOJdcLQHzPMx

Score

7^/10

ransomware

Acquires the wake lock. 1 IoCs

Processes:

trial.app

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock trial.app
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

trial.app

description ioc process

Framework API call javax.crypto.Cipher.doFinal trial.app

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	trial.app

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	trial.app

trial.app
1⤵
- Acquires the wake lock.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4437

/data/user/0/trial.app/databases/a

Filesize
96KB

MD5
a569cd3fa7073f7197c8e902fba64942

SHA1
34f9702c7478fbbf90f1333520748e94b0944b36

SHA256
eb66c1e8c0a275caa4ade44bd6fe8f1d9b7203e8d53e22cd52475e305321636e

SHA512
0d8c1048ee5f048cf31bff03de3c920907e709009620c981f7b8826810bd72d2a1f1762aadf72b43baded60e0d6581de6b8918a20f26a3b788f0f2fd33f0c116

Download Submit
/data/user/0/trial.app/databases/a-journal

Filesize
1KB

MD5
a9439bc5b7a554a335b6b15ca468465c

SHA1
6496b5583105d50eec3374e427bd4dc6ade773ca

SHA256
d21a516452201fde048003b6a0319f7cd4a9d147bad424664f70786d786cb3ba

SHA512
79ef608b6889218b54b4681105195938dd02f6f24f959426b28d9f77b1e50bcd3f96b3520e3159c3bb7e429c67f05d3c460278a5632fd2d5fa84403d5117dcb7

Download Submit
/data/user/0/trial.app/databases/tasks

Filesize
80KB

MD5
f6c5a564258dc315ef6782156b97ea87

SHA1
4b0fc80421775d7c5073749d87f4c70e1ffc8b79

SHA256
c7709b621732ae9b600dc0b6e7636f065b69181e29019f5d655e296c8cff6a39

SHA512
afb3f4ddf284ab199e49ae978b6919a8483dbab69f4af45a86b1200fa2b8502c68333e38c4fb52d60858c35eeda667ebd2a2a681fc2e5ce65597f02700639f6a

Download Submit
/data/user/0/trial.app/databases/tasks-journal

Filesize
1KB

MD5
e349bd53ac3b9af902184718ced25258

SHA1
6f703441c0ed81e0749f94181d9534fc1fb9054a

SHA256
3e59d98790d1b8e23adaea9f8d6332bd759a27e794a3654190889ceff64c32f6

SHA512
da1a90df9450fc83104eab6b1361fafc5feb11435f6603535492d0b33b0d732e16f9a50c100ceba6f04f2862dc69c13a74a338324bc2afc4a127aa49844e1ed5

Download Submit