dab842d83052414e82d09093c02e4d6b83cc97b3e8ac6278bb81651e2ed0c908

Analysis

max time kernel
2949446s
max time network
149s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
25-11-2022 11:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dab842d83052414e82d09093c02e4d6b83cc97b3e8ac6278bb81651e2ed0c908.apk
Size

129KB
MD5

423ad30db6fae5d57d5694368791dc3b
SHA1

ec8b3ab7d32a897011eee19524b81319b02045a6
SHA256

dab842d83052414e82d09093c02e4d6b83cc97b3e8ac6278bb81651e2ed0c908
SHA512

db845e7a08b4750886c2d895786f6498ee0d3431880f525e8b00822410d050d44ea1456371ecaaed2a71be021fdc95176c6c012461637c3cf60f8f13c0e626b4
SSDEEP

3072:2F+gwtLqLn+uIq1IHLzrrW6kydicbA7ZmmSduMi1zSutB+x:2pGqL+uIHLzHW6kydicstw61e

Score

7^/10

evasion ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

Processes:

org.kman.AquaMail.UnlockerMarket

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock org.kman.AquaMail.UnlockerMarket
Removes a system notification. 1 IoCs
evasion

Processes:

org.kman.AquaMail.UnlockerMarket

description ioc process

Framework service call android.app.INotificationManager.cancelNotificationWithTag org.kman.AquaMail.UnlockerMarket
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

org.kman.AquaMail.UnlockerMarket

description ioc process

Framework API call javax.crypto.Cipher.doFinal org.kman.AquaMail.UnlockerMarket

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.kman.AquaMail.UnlockerMarket

description	ioc	process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	org.kman.AquaMail.UnlockerMarket

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	org.kman.AquaMail.UnlockerMarket

org.kman.AquaMail.UnlockerMarket
1⤵
- Acquires the wake lock.
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4114

getprop
2⤵
PID:4175

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Cookies
Filesize
64KB

MD5
cb7543c4df600f2af58097cce0e334ba

SHA1
83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

SHA256
64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

SHA512
ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Cookies-journal
Filesize
1KB

MD5
f41d52e851f3eec8ee9d11ec58b78cef

SHA1
64dfd4910aa4e52105014e19f88834ddd16fb48f

SHA256
7501f1a2ec49add3425f33e220aadea8ce16199a140103ac58f7dc059d281908

SHA512
d7cb1bf9b95bd40a53bddf474a482d5e65b44b5d48c189a0adbd420e60cc49b71ea4c6d207078e15d2d9d22afa41066c4f7de2d854f35364332acf744cb024e4

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/GPUCache/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/GPUCache/index-dir/temp-index
Filesize
48B

MD5
d9ef5d830a51ecb396997f701454da5e

SHA1
e24083a983930879abf61103218af9cd832f0585

SHA256
161c8d1d7f2db06288dfa982d0f2394dce2419b05bb1c96931cf883e03436443

SHA512
68f3c8d8d916b3a9b6ba5085fe24ca4d7f514837db5be753aefca99c15ac940b0ca4ee1a85e4421f5b71345c22f6363970df864e04a8f9681505b3debeb66b94

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Web Data
Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Web Data-journal
Filesize
1KB

MD5
51dac615492f191318a1e061b2d5f909

SHA1
7a70269e643890669577f6ace0f879d713321e01

SHA256
ca2214b690cc204127d84063dbf8b0649d8c2f788fadaab11f0f8363de67e47e

SHA512
aae0bcd0c6edddebc8b51a247b4968c34d684f16c2c246c97cb40cbdcbc13dbc0c7e719e028f2155fc4c58296bb2146ee22c384199d46fd88d7742f6be2fb3d2

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/metrics_guid
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/metrics_guid
Filesize
36B

MD5
bdf570555ab343d22c11e5c1d153d4e0

SHA1
383d0b8e8b185e1007cdc1a870304a6f5f2c293d

SHA256
137a8e53e76c3ea6442978cebfa2e20ef1187031e3a46ff8e85ce3111226ddbb

SHA512
5f9f90c5fc199db464f5a73469e5a8634b1aca3af4a62db2844124a8690212e8070a894cf63fac408e8379a9932b211fab907f58a1a155a1a76364767714b9a4

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/e1cc6d52d3d6a143_0
Filesize
205B

MD5
dedfa74dcd43709adea46a0e97e1051d

SHA1
2332e3d74495b27f8793ccb17e5bb5affd9c180c

SHA256
cea45ef18b1d4c9f9a3ea51f0ca457cee927a8ebc20d6fa00633228c2fbbbd85

SHA512
b56fe1aa57ef5b8ced2f5d75020221c59df5f18445c952bebcde67f5af75dbc71babf61d127268defcd29432dec60cd81b8e8db7ed99b748ee22f9bae81acb5c

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/index
Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/index-dir/temp-index
Filesize
48B

MD5
01e203a5bd5e590f2e6f8f1a79eb9323

SHA1
c51219d0fa21a807b80c1726436ccf98860109c5

SHA256
a347f08cbcf1a132c5c1d0636917a9bd3849070e1522369bf2003f6d494b0474

SHA512
8f6d1579ef7ce9a7237012c31c67c532f6efa138ace144dd3efa1e48b90f176253907dbe88b403c2f5507d6728c7ba95ff7e9a4987335bf613a87d7872d8f923

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/index-dir/temp-index
Filesize
48B

MD5
f968d128ed3372c19dcafb7481b2062d

SHA1
184290439fad1bc3baa2437e841b9afca2b78734

SHA256
3db4060fd48493ac7ec75124a86552d31340bdf72e6c744e4e00d2f6a1fe6645

SHA512
4f5c9e54e6de851f300c9ae93835dacac44f8dbea83913a8cb1facab2847c76536a396a4c13ed7a7c5c79effcb09515f2d89c11864f8877ac995f21d6700e642

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
Filesize
116B

MD5
d6bcb8ccd8306ca97bc9113a3559e406

SHA1
ea2263ddca37a02fb2e054395f386aa0da027efa

SHA256
96af3ff99e99dd6ce9ccd046ef2e8e0164a27013512ad6ef39132c9b745ef005

SHA512
2087a9d81a34cf7ef0823b2c10b28191b74538d4058159f4f41fd810bed008acc7a385f034e4a79862939afe36b5c2067898ddbb595e8e1d106345eccd000f71

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
Filesize
168B

MD5
1e3b554179041c4064f50ced2c952542

SHA1
268de35b2b13e720feb78133bcbe18c6cbebebf0

SHA256
f759ab56d1c083ba0c56c65b19d0f019edd158dd27bca3efe320730c3fd1b777

SHA512
1eeaf64c540e3aa4c947981ba93bbbe8cd793b1cd3735d9ddf0c9a9ab3a925b784329299d68c5f4a4c3dc3239d5cbeba723b1dcf4cf6d8ecb7e605cea69b3bbf

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
Filesize
169B

MD5
9d52303bcf54c3b56ba52100cd8c2f99

SHA1
d64c9635227da87e0c7e2205f8131bbd17a6d93d

SHA256
cf834a1e52a7aa27d2ff521d0053e3d793b6d7466115b06b70d5e4750295eba0

SHA512
278aaef28d81ddeac2a872ed553e84f172091d374a3edf9d95874a39339cd4afbb10c2ec3cb7b6ffb29578fa111772e44d3893fcadb3e98967bf514bb40d41cc

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
Filesize
217B

MD5
ac9fb62de41d76c13ce0a90f99ea84a8

SHA1
d70f72655246df734835ef9ee037778125eeb1bc

SHA256
121e83584cbf2607ed4866dc3eaa613325020809c942710c44f358bf06c977d6

SHA512
ac9259ae7b1e9e3f7b74bff352d7ee42bad4dec041d0fa831cb601149fa702aa9b74ded2e3b44e63886acf425713b3aadd8a9ba3780010c4e802b61daf8d03fd

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
Filesize
265B

MD5
d2645e8804b9a6c33df5e9b9a85b3719

SHA1
f7541489b9e8c65dfb4bad3a3e9824ac0a58c08b

SHA256
dbb2f739de7d015fcdbd5697e0456ba44651a1e8bcda8bee0d0e158befdac184

SHA512
78cdc038cc20595cedcf1b92497cfff3681b6ed78aae02fe8f5e2c9dfd992cd92a366b4722c4c13ddb9fbfbfc24e00e9ade05ecd12e986b323daaec7d8ed8087

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
Filesize
322B

MD5
4f241f137a48bd7cea9c6dbeff70c499

SHA1
084047d3abdaeeff69459a59db4bc782e49d471d

SHA256
091304424c9a3d01aaee09f141e7849b53a7dfba043ad6fcfcd9df0091866e74

SHA512
33c91b76f107e41344b2ba1ed140f383e924dff7e592f940493f023f4cbf40973d31713147881f3bd04dc99bccd37283af8485991fcee320ab5c26e34ec9d0bc

Download Submit
/data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
Filesize
380B

MD5
86e77de382388b3301e3136895f6ca98

SHA1
a14102df6651218677c16eccf40e5a089d9c2ec9

SHA256
c5441d33d3b04e89866792329ec6e13b7c71ce74ac34e0f4d24dfd19ba54e9e3

SHA512
86ad197becd95f1f742ac3cf7c79bdd8580ebce5113c60df47e62157db0b4e43976a8266158a9a3796ddc5c8c3d200c9d4ae963445f35c7d678ee10b1cc38989

Download Submit
/storage/emulated/0/.lock-i4s.30.29.4
Filesize
13B

MD5
a460d7ca526ac53555497c6c44c9e396

SHA1
b63fb2ad096c39572f62f53c50f4a5da6a09e17d

SHA256
0890c90db00b0e0b5a70fc0259664c6674e79ebae695edef14a3100e15740bc2

SHA512
a582e00b3f189f405f4a89dd4c2e12028593be9d9cc39245a937b7fb6bf0fc7a666dd44c17f8919b80692ebc72fc6d7c8b3e50c0b42c357e5058b49d5c97f1c9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads