Overview

overview

7

Static

static

7

23a90d100a...96.apk

android-9-x86

7

Analysis

  • max time kernel
    2984049s
  • max time network
    149s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    25-11-2022 19:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    23a90d100a5fc99f7dc3c03edaea7f036f04b893d06e153291bcd3682ca2a796.apk

  • Size

    4.2MB

  • MD5

    29efe40de5e0a76cecf0142310c6f968

  • SHA1

    842c446aa0b12c05483b5e9d72b9aaa6354ed2bd

  • SHA256

    23a90d100a5fc99f7dc3c03edaea7f036f04b893d06e153291bcd3682ca2a796

  • SHA512

    ab3c8114eb7a0c0473d1753a196836f80a03cf5dcc6165e095c72208a3a3c88f6dabe474ae1b803be753928626a7c52f2ee6b0c3510df2ee11a8f40895d5a301

  • SSDEEP

    98304:IE9vK8GZW1E2Ah5pxvPE1UFGaz41RS222tWBrKZ+nFBrjBkIjPno5dVH:IooW1fAhx/gaz4bz2dB2ZqrjB1w5X

Score
7/10
ransomware

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.zm.ppl5hd
    1⤵
    • Acquires the wake lock.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4119

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.zm.ppl5hd/0000232f/0000232f.so
    Filesize

    1.0MB

    MD5

    072429d7f56e2a9defb277adb95e10a8

    SHA1

    5280250f74b2d4de9e1a9b641f2db98061558f39

    SHA256

    52b82507b3beb8833c86bf0a7c62aba3ba8c9f80f1d85f6c446e5fa982591429

    SHA512

    b14391fcb0250c1598a06a3b76d783d6dbd46d8d62ad0329106b3e2e7ad867887468776c23bf47dffff0a3eaec27fb616b7bc1e5af2d029569998a40c4505d04

    Download Submit
  • /storage/emulated/0/zmaee/ppl5hd_dx/0000232f/0000232f.so_temp
    Filesize

    1.0MB

    MD5

    072429d7f56e2a9defb277adb95e10a8

    SHA1

    5280250f74b2d4de9e1a9b641f2db98061558f39

    SHA256

    52b82507b3beb8833c86bf0a7c62aba3ba8c9f80f1d85f6c446e5fa982591429

    SHA512

    b14391fcb0250c1598a06a3b76d783d6dbd46d8d62ad0329106b3e2e7ad867887468776c23bf47dffff0a3eaec27fb616b7bc1e5af2d029569998a40c4505d04

    Download Submit
  • /storage/emulated/0/zmaee/ppl5hd_dx/0000232f/0000232f.upd
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit
  • /storage/emulated/0/zmaee/ppl5hd_dx/0000232f/assets.zip
    Filesize

    112B

    MD5

    857cc9c2b59536a6fb3a5520f85c5a40

    SHA1

    ea56b1841b51bccb1f3287cb56440c966b9acc80

    SHA256

    db299d9dfdb443eccec0b264b9aa3588e94cc7c233192178c7288c548526fede

    SHA512

    2acb9fbd50e9dd666266fc0c27f9b586889a909fdd2a6460f9cc3a50d812394e1e6a0e908a02e6e6e508fc01b31c528e3cccfa28a9ec0a952923e4f826c488b4

    Download Submit
  • /storage/emulated/0/zmaee/ppl5hd_dx/0000232f/resoure/setting.dat
    Filesize

    12B

    MD5

    706b1ec3acac9a2f2a9c9be5a19caa3a

    SHA1

    c2cb87505bb874689a804e05f929a1534b37b426

    SHA256

    ce1bf76234587ca627ac629b6a62e7b0925a6003545a88efaa4af80b0224296b

    SHA512

    1ad267131ab5ba140ea8e3b5f3fd2d1511904b9d32c150877dcdab1733a9818ac1dd5beaeb6ef1de971622a2a60cb9b4b4a28a8fdfcf7a8e18664c7d43b7396c

    Download Submit
  • /storage/emulated/0/zmaee/ppl5hd_dx/update/0000232f.pkg
    Filesize

    558KB

    MD5

    89454ca8c7be77938978f9220e9e0947

    SHA1

    8b9070414875a0aa0e3bc66fb9fe01209db5338e

    SHA256

    807fda4f1e0f914a3254fcca7d3027965793261495a17a405200e2165a1b73a0

    SHA512

    fc2584b8d8fc357ee482b4407abcbbbb241616262520eca99822fd3087d34a32493ce9a775571866a4ec23ac5a9a28cfd312684074ae983f3bb2d12fa618ce17

    Download Submit