5162789c6e2f847eff3fea69d1a20850fc0b718997671a47f8cf34f835055a91

Analysis

max time kernel
2940482s
max time network
134s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
25-11-2022 08:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5162789c6e2f847eff3fea69d1a20850fc0b718997671a47f8cf34f835055a91.apk
Size

568KB
MD5

afaa84841ae5d440eefcc99a78a10385
SHA1

16020c086954354ab99db2a9c7ed89c37502badb
SHA256

5162789c6e2f847eff3fea69d1a20850fc0b718997671a47f8cf34f835055a91
SHA512

cb8fea1775de7bcc0336183e1861be90a7af849a90fcffe1010f766bf6f357f744566e5cf1fff50cd1516599e75ef49552457e93532ef265ab718171dec567bb
SSDEEP

12288:AfTdqxEzvfCRQs6AZoskAQMuTyOZGVQPTdFJbyUjTVJCYKkKP5:ArTfv/2oskAQ1TySGVYNyUj5QYpKP5

Score

6^/10

ransomware

Malware Config

Signatures

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.rgmppl.jkhkjt.ksptvi

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.rgmppl.jkhkjt.ksptvi

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.rgmppl.jkhkjt.ksptvi

com.rgmppl.jkhkjt.ksptvi
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4749

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/.com.google.Chrome.J6QEVq
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/Web Data
Filesize
112KB

MD5
b663831f8cc130493476d94f2d7a5330

SHA1
043a1956ab8e40821d67043f8a9110a8eb36fb93

SHA256
c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

SHA512
e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/Web Data-journal
Filesize
1KB

MD5
096f7126d3cbda11d0a58794c792a019

SHA1
52cc929e19b10eeb875968068678646358163831

SHA256
a552882d12335cd04b52fcd8a0482c50a03912bd25981ef18888ddb8c9a0b7b1

SHA512
41be3a998dd6efd40a88bf4d4e3943f95cb5e57d61ae043654a8ba60d922a70a369456d3b5e95cc8a6e31a1a57cf41c3450c477509b2c4e29caa22e56ffc9d35

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/metrics_guid
Filesize
36B

MD5
0d08e2301b06d9900d66f27559df72ba

SHA1
e6e318b99a04bbf08649e683cd8d1129d2e80c97

SHA256
57a11acc33fd4eab1a6b146a0a784347e9b1eb3342e564e9d150be8a76a3117e

SHA512
6c50b301d4f7e42c6579c21cda5906fbc5491c4d6b343360e375274216c7004d4e455ca0876db48b3af483c23ebd82ae1b95f9c164665a1799133a54136a7ce5

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/cache/WebView/Crashpad/settings.dat
Filesize
40B

MD5
fc422e8b2121edb53727ca3ad05edc80

SHA1
b972284f79925d8eec6bc2acec16a3fb7635f31a

SHA256
08235f81aa4ce47b35dc1b551c951f299b1e178b57af87603bf46c622479ea5f

SHA512
42a1ee3b8ca6407f4002dcdd22b6195aad58632b36c34f73ce8bd5dba9683d72f23653a6fdeac6604c4557fe54862491b698caeddd8784237d131794eb209af2

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/cache/org.chromium.android_webview/Code Cache/js/index
Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
Filesize
96B

MD5
617bff01e1c34b4370df6912828ebf80

SHA1
01e049c2e397720ab04f72b79af7972e68df91d7

SHA256
5f4ca33ff330564f45aefe6c62db539db3c3880da2d43faaeee801e35df2af61

SHA512
91e34d7f25c518000ec05c46e31fdff544471622956fc09764d02f0416d185eab4c7a12204b793cdd83f4f9b867d9798801ba42bdfa1fcbdaad4403e94ec32d9

Download Submit
/data/user/0/com.rgmppl.jkhkjt.ksptvi/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
6ef709b8536878951e87c29a1518fc2b

SHA1
24376c70b00152501b3d98df61fa7db435339172

SHA256
10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

SHA512
96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads