70bd38a8024f4815fe901d079b63aadf0cc4c56e00fb2e26bcddaaa74676f07c

Analysis

max time kernel
2952593s
max time network
155s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
25-11-2022 11:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

70bd38a8024f4815fe901d079b63aadf0cc4c56e00fb2e26bcddaaa74676f07c.apk
Size

2.0MB
MD5

7a6269f94e155db56ef3ace3d3eedbf9
SHA1

b27bb8bf0e2437bfdc725188a2a7668659bf1b9f
SHA256

70bd38a8024f4815fe901d079b63aadf0cc4c56e00fb2e26bcddaaa74676f07c
SHA512

25619142fea49e0677eea7a5915aa4a61703e84d0f9c07042f315be487980ffce545b0cba443956520a096afa61e0f6185046c539e06d391722e3a14a65e404b
SSDEEP

49152:gOILFA0tlO3hIOlo2GyUmSJ4jAIO+t8tvNlLF5TUnVoMdopG7OTPle:GA0rOx2UUmSJ4EIOBtvNlL3Tadog6TP8

Score

7^/10

ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

net.lazyer.frozenbubble.wyjxjd

ioc pid process

/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_wisdk/ctyxjd.jar 4361 net.lazyer.frozenbubble.wyjxjd
Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

net.lazyer.frozenbubble.wyjxjd

description ioc process

Framework API call javax.crypto.Cipher.doFinal net.lazyer.frozenbubble.wyjxjd

ioc	pid	process
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_wisdk/ctyxjd.jar	4361	net.lazyer.frozenbubble.wyjxjd

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	net.lazyer.frozenbubble.wyjxjd

net.lazyer.frozenbubble.wyjxjd
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4361

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_webview/.com.google.Chrome.X9rjrT
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_webview/Default/Web Data
Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_webview/Default/Web Data-journal
Filesize
2KB

MD5
798366eb3164ae899799ba328a4285b0

SHA1
6ccb5c252e847ec3f2a1f36eec6fdfbd502b154e

SHA256
8154402a5c44d1d1473f512965f1b4059af7af84b52f41b65db99040a4deab52

SHA512
c0b728e94d1752def53117c95ceebbb77321260d6247875f0183023dd06fe7bf98f8ec79b8756d5ed342a7b18de14f4a0d54a6baf25b25c33463ba0c1317861e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_webview/webview_data.lock
Filesize
36B

MD5
3b298aeffc4e2c5cb17fc785c89c559c

SHA1
7e5ae2fbb085486ee7e73d23d167644d6fb36a8d

SHA256
d5265e752125fdcd49ee6f8d4a9fcc292f3175c9ab7869e18d4c5a87a188a619

SHA512
b59a8fa3c55f768ad0717f79bf7cd6cd0138514980e2bd10dca6a3ddb4cab01a47add069bf046cd5a7d4e1176195e5ae4c751f0fcc2c7f8a8126114dc74483bd

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_wisdk/ctyxjd.jar
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_wisdk/ctyxjd.jar
Filesize
6KB

MD5
f2a133cb899202570eb83de1c502f3cc

SHA1
dae15479376e83d356f2f3f703a5edf5390ceadd

SHA256
3661c7001ec12990d9c016b3b781c995f02d771521b6fb19be60c9a68ce550d1

SHA512
22c56be75a36f676531a523876cb3a6de162e1e897ba0a1f61404fb1efe6949b57511b0a357e057393b8819fb1b9979f4d494b7fc9ed2f8ea791fe69ba92ee24

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_wisdk/ctyxjd.xml
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/app_wisdk/wisdk.xml
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/cache/WebView/Crashpad/settings.dat
Filesize
40B

MD5
bec2afefd9d0b347da8d1d903d388655

SHA1
e225c7251538bfb8628b4882cdf1c71cb147ecf3

SHA256
0aa96c3f86717da9a0848cc7fb4131665826f359f65440f810774cda4044f2f4

SHA512
a058a1da5056a6607c3f39c99c7e06b95dd7437c6cfec6783ab17a4a0ad6ffe89f3f67a9da96105228dc0e62b0b477cf24c7b109a0ae3b3f8a65bbf0e531f31c

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/cache/WebView/Default/HTTP Cache/Code Cache/js/index
Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
Filesize
96B

MD5
d5ce5d0c256d95ed0a787988bf8c33f8

SHA1
3d2bc78f8aa6fe0fa60bab90bbaee9a4b346338d

SHA256
ee13d2e3a72b73323969a6b920ca1bd3ec49336b9de6c08a80c0b85819221c85

SHA512
f4670e94c7735efde8e3939954fdf73e2ad8708e1042baf49416d4c8054aa50a88f29f14340887ab6093644cdf6e100e52eebfbfc167e5d94d28ceda64c9c6ca

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize
96B

MD5
859a2bc6f9f3ea62f9b008c22493b702

SHA1
e8fc9925461c3ecf78bac173adff6897812a8275

SHA256
0150311c94918c71d107c756be736abebd584c56486c9ba3fd58c8688b622af3

SHA512
a58d272f8aa064f7e6d03199bd07b96e2de556cd02b6d402e3ab91a3c6e2436116365e17b3b471e3193ac080ecbe29603f82c23c681be5a723b03ca8e95f4328

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/cache/WebView/font_unique_name_table.pb
Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/files/droid.dat
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/files/mobclick_agent_cached_net.lazyer.frozenbubble.wyjxjd
Filesize
120B

MD5
cfbaf01941676eec5715874d8b9786fe

SHA1
b7d1091d20c8f1bff9b4af27aba089ef9291d93e

SHA256
f8cbbca2c51b5da42cc2f6de642d6af437a0da28ccc54ccd4e05573902311a3f

SHA512
e40529d1237109952b8ae9b908ca92ec8cd89ad484e3e11d9ecf80e5cfbb2322a979f8e694ca38704fe5857fa757a659e38c87f6d37f23f8c2140be503a32711

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/files/snailVer.dat
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/net.lazyer.frozenbubble.wyjxjd/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit
/storage/emulated/0/.wiyun/wic/lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.wiyun/wic/operator_names
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads