4a0f962630b292dcbd19968d8301da8450f52973ef15e376b1a9f491fa21342b

Analysis

max time kernel
2952186s
max time network
162s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
25-11-2022 11:21

Target

4a0f962630b292dcbd19968d8301da8450f52973ef15e376b1a9f491fa21342b.apk
Size

979KB
MD5

8da1821876e9c6812b1969e1319ce361
SHA1

ed2e99511f74aa51930cc6834d345a019e335bdb
SHA256

4a0f962630b292dcbd19968d8301da8450f52973ef15e376b1a9f491fa21342b
SHA512

ff396683964eabbead3af6808d7adf078c97659fa10a2c4235222104e8c8da4e79e941f6b8c0603b753fafc49379aa08a75c374b3d80788d07e1a1046d6a1910
SSDEEP

24576:j2DjFZAZ1ZZZBZLKys2gleKys2glFKys2glL:jWZAZ1ZZZBZZs3Ms35s3p

Score

7^/10

ransomware

Acquires the wake lock. 1 IoCs

Processes:

org.cloud.messages

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock org.cloud.messages
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

org.cloud.messages

description ioc process

Framework API call javax.crypto.Cipher.doFinal org.cloud.messages

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.cloud.messages

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	org.cloud.messages

org.cloud.messages
1⤵
- Acquires the wake lock.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4554