a16878598e0ce5924fa45c09319b48e566f4d935626042ba378f4f1f7b9ad798

Resubmissions

24-11-2022 17:19

221124-vv4d3shb99 10

02-11-2022 04:21

221102-ey155ahcc5 5

Analysis

max time kernel
2863212s
max time network
166s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
24-11-2022 17:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cf8e1c24065c6af0d2c64c8e454dc808.apk
Size

1.9MB
MD5

cf8e1c24065c6af0d2c64c8e454dc808
SHA1

e2f5c145d78ea874ed2db9e99e7428e16c580860
SHA256

a16878598e0ce5924fa45c09319b48e566f4d935626042ba378f4f1f7b9ad798
SHA512

3e1fdd6b2a4039c2e57cabab82d95cfb7e2b651e99e896cc9a1d14b1fed6e849f0aca586db1c573ea13070681782b9dcdf1198fe7b01f635925b0ace69a9e215
SSDEEP

49152:7eNdbyBQvhSYzrEI4nZTJQnoJuXpEUByge1:7eNMQ0znZ6oJu5E

Score

5^/10

ransomware

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.zrwilvjx.myikbhif

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.zrwilvjx.myikbhif

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.zrwilvjx.myikbhif

com.zrwilvjx.myikbhif
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4607

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.zrwilvjx.myikbhif/app_webview/.com.google.Chrome.HHVryZ

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Cookies

Filesize
64KB

MD5
dfb2098ca7b3bf16d6f5f1e7d3839af5

SHA1
ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d

SHA256
e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224

SHA512
fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Cookies-journal

Filesize
1KB

MD5
d46d17eaea26daf8b0fa0fe314fcdffb

SHA1
5adec47c71f945b3d4ef9d6d170eec43f52b2fac

SHA256
171ad8f37af05e625a5949bd59a0cb1065a58457711085cf2c6076338ee22410

SHA512
cf292796870f7beab5d522a0178f912c1b67820389bce4e9cc0f55e1841ad277addb51f12b1bf761e95d9a04145911219a1b398a9c579ebfd25cf2fce26f46dc

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/GPUCache/index-dir/temp-index

Filesize
96B

MD5
e1f6739d634cff9db238936f92d104a0

SHA1
f7b607cf18cfadfc25af77202411342563d8edd5

SHA256
521a1994162f610410f40798a2c55922e7aaf6d9da5076279fd11263c63825fe

SHA512
b4aae388f93a7cf2680a29d7b5ce7c126d113d46cf3e3c2441a627ed35a65e4d2603355a60dc3161be35e9bb3f9d4017bd7d85e30cad0d4ca27974ea94193eaa

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
b478f16edd5f77dc8385bf0db1583d63

SHA1
6ef668d0c50f9953c1f63d42d684944699748aad

SHA256
63fa060b6214e19bdc51eb262201f704cc9cdddd486168d3ea836190db66be34

SHA512
53f3245a330e6aaa5aae10793f88f44fefd014078f78c3481bce9da65bfa8127828bdbd5c39a9000187428f2f55247b9662a2fffd9a0586f01104c2ac44755f2

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/variations_seed_new

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/variations_stamp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/app_webview/webview_data.lock

Filesize
27B

MD5
405f0e6e5a012d780559c163626899d9

SHA1
71b63cb1d6d956fb2bec22801ce9f74edf3d5a83

SHA256
7462921589111575cdfa435e562abd5911f5b9bcfdae73f9682e0cd7a98fbfce

SHA512
9eff3c171c0d6366aa1383a613f6f419664ce473f7041665d2e5d2e52b0d6fa6d94c76141a9743b4bb65bdd3d7a52bb3bfe207dda3d6bae496fcc6f70066cd35

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
e56bb959c6fcf29dff7ad8b743ef1e82

SHA1
4fab16f21d424581814864354eefca22ef0ca5f4

SHA256
9f9495996a8106cdc43f84b09fd25c1fba449c68ff7d58841d2424e102045299

SHA512
1d2a2ef649afc0a225e8edfc0c58815f3a869ea8a33e327cf0095357418d839d25d6d949a3932a66794fe4c910e9e4daa3e3840947865cfb292566b9e669dfec

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/4100f42d56e98391_0

Filesize
326B

MD5
0d80a95de11c4f0babae40aec69008dd

SHA1
2e644c0a129f981b6e5f76d2d45ae89bdb2a583e

SHA256
ec2d5336077c0309ffd1e9cd06791e495acdca4b308718c6859b8153eb132224

SHA512
52c5170555ccd6f247c6743e075602c4fa6cf774d8f6ec4f4925a1ccb06b29d9295e3a7de3b0a8998c8a381349dfe4383c9e644a58642ae07c8259a185eedb04

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
5ea9598e1a21499529073c1756a8ea0c

SHA1
2fc9cda37a613ca09b306423d7068179d7888bd2

SHA256
d61194eaa37d578eece99110c4adc4df0b7abd82917449b0aeac17a024e8b6e8

SHA512
f4d5858dc5a9cfb35996743659863aede778af1caba57d8db2c693cacc068de7243dede9f6085cb3aba1eef38f417e25de9d7232e6d3044391240432deca6538

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
6f3c99f8c5a8cc129a0abd69b384d5cd

SHA1
6748e3f7e1bd80472085faa09c9de94fe902d27b

SHA256
f306b2bf01a5abd971858bcd977859e508cda2149ee5025bfef9c3c9a133e108

SHA512
8423271d2571d18478bc53ff3165e1da0988496f07de49abb9973c1e4ccf8054410d60b80cb659480557dd4e81c406ee1bb79a1759f90a5a098e84b73edb979c

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index-dir/temp-index

Filesize
144B

MD5
d1ae44488db3153857d27fa0c8e0f414

SHA1
899b80a7a1fe9ecd98cb1cb60da77ef23d99492c

SHA256
d490ced812cd2189f86cd9445ff93081dcb6a58b4a54f789c7cde49244e2662c

SHA512
c3fb1dd446c8e8af0cf34d7343b4654c7c77110adbb1dc8d0160c74a2f1f0f1c913d19fed336743c63e76ca3c1fbec52d4082e11834c985b6d3dfe3f1804859b

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/Default/HTTP Cache/index-dir/temp-index

Filesize
96B

MD5
e77503c212a15504bb346fd6e44609bb

SHA1
f31cb0bf423c0df6d36cbb3c76d7719043602983

SHA256
15a07eee59c7efae125390fa73dc9ad045c32bdfbd1fd74d2591170435896a38

SHA512
48ee625c3e494ba95f119757ea593d660a22e156c13e4741631ba7f1f3310ac7490f0e162520fd54fa1e246863a8d9fad8884e0936a80d83fa01e4c948ab21cb

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/com.zrwilvjx.myikbhif/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads