a8ebbb0822f4b9487a87fb92260e364ca0cb526a5144a4167203767c605ae7e7

Analysis

max time kernel
3111165s
max time network
160s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
26-11-2022 21:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a8ebbb0822f4b9487a87fb92260e364ca0cb526a5144a4167203767c605ae7e7.apk
Size

2.7MB
MD5

701402f53e561c85d527f5db743e8e41
SHA1

e45b9d287445276b8216f418db65cc9ab5bb58d1
SHA256

a8ebbb0822f4b9487a87fb92260e364ca0cb526a5144a4167203767c605ae7e7
SHA512

6b9ecb64e3abada6ab29651307c7fb281fc3a372f62fb32b891d45cf12c9d8af7650deb9a350dfb17b3b1ed868888a1d246d9d3c21b27f2f26b941cc663adefe
SSDEEP

49152:pVFkq7rdC6WvP3NWS3M9Oz33sy8ujyXeWLTmPOaAe8gxP+UXvP3NWS5lx7rnLvqD:nDC6WvP3wOz3quYMA2xP+UXvP3FlxvL0

Score

7^/10

ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.kbbs.souhuyingyin

ioc	pid	process
/data/user/0/com.kbbs.souhuyingyin/files/csouhuyingyinco.jar	4824	com.kbbs.souhuyingyin
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/vpl.dex	4824	com.kbbs.souhuyingyin
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/vpl.dex	4824	com.kbbs.souhuyingyin

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.kbbs.souhuyingyin

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.kbbs.souhuyingyin

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.kbbs.souhuyingyin

com.kbbs.souhuyingyin
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.kbbs.souhuyingyin/databases/baidu
Filesize
192KB

MD5
fb1488ef8cecb4943c82562d9bc64340

SHA1
55fbee4a964e15f7e1bf9fba6aaee35384dcf436

SHA256
755a37c018174b0bae70a4e88268f92059ceca69b3a7e6845f945cdd0a33b042

SHA512
7abaa6d22f1e31e9bcf04b18f42b8cdff06aa052f9373102cf54bd1f3a2b03cd8216db7d5a7649ab740415ee3c785fe34891004078f45bbb1223918b54b2ec67

Download Submit
/data/user/0/com.kbbs.souhuyingyin/databases/baidu-journal
Filesize
1KB

MD5
f69cad30d3f36613c21729872a119acf

SHA1
3d6a748a73c1c155563475358c9d7a581e6ff848

SHA256
461692ede003f7bf1c57646e7dbb553c1c5b83435afa7c564c3be40dafbd828f

SHA512
1accf637d0df6accea758d29771d3b95143c22085514b7a2eae9dfbbaa16ca2fb08a4ab60eeaf332a7a6885e0189b72968cb79c0f32a0adec7b754a135778e57

Download Submit
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz
Filesize
88KB

MD5
90d3c46a4acf687fab99de13702ba3f2

SHA1
e61804eb6948ffe3ac63257689659cd8507cfdac

SHA256
89fff3f4140fa6ee2b939cd489e271ae7228f00a3c69bbaee08752042029e38a

SHA512
adc65d14b77bfadb4728d86d046c4e249100029a17ede55fc9396c470ed72d2d408885a9dbb7974cb65632f131ad21f317b06d538e34ed64348e958f73d9c078

Download Submit
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz-journal
Filesize
1KB

MD5
b077c13ac837fc686fc643e9f672912b

SHA1
6dd065c041d578c53d766ece230df94daf743374

SHA256
52ec848d80e317cc00aca4ab30a94ba7695219d4e52b8f8ac9656c91dc88e014

SHA512
879df85af33037cf0352896a440a78529db431a9a224e275b071acf01ddefbdd5d1ec94f05f44dd5d1369ce47e8d70e7e639cb2f0a32c46c6a7ffd03d2112617

Download Submit
/data/user/0/com.kbbs.souhuyingyin/files/csouhuyingyinco.jar
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.kbbs.souhuyingyin/files/csouhuyingyinco.jar
Filesize
428KB

MD5
0ca7138023c18802277e730501d42d3d

SHA1
147c90c58b865733f6a721f2c24bb308d79cdfb5

SHA256
5d16aacf8f36c5b6e25daad3506e55fa956a655447a87370f5bb8e20eab54e3c

SHA512
21a23e85d121817cf5dccfc5e2d847ec1aac12ac5d09959dec26cf6de15b8826a9eae2a6d9541c690680142a1b1a34f864882d144d4e98b6347a1091952c900e

Download Submit
/data/user/0/com.kbbs.souhuyingyin/files/oat/csouhuyingyinco.jar.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.xxx/adc.dex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.xxx/adc.dex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.xxx/adc.dex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.xxx/adc.dex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/vpl.dex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/vpl.dex
Filesize
223KB

MD5
2f5a0831182b3b89d59150c5b5c647e1

SHA1
783377889a70d20b74b31365f968b7a0403a049e

SHA256
ce1a23d24c6b5a21506b2597a6430f493b3c97c75c12fba6764154aaf782e612

SHA512
d5c87c9627542f561ce6efeb623c747414a8dfdeb5fd0b2e5da1fb5a29a6e912c9e62fb9d9fd24e5b32d781b423cdcd1e1a3e5d627b7080661c4776469042c40

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/vpl.dex
Filesize
223KB

MD5
2f5a0831182b3b89d59150c5b5c647e1

SHA1
783377889a70d20b74b31365f968b7a0403a049e

SHA256
ce1a23d24c6b5a21506b2597a6430f493b3c97c75c12fba6764154aaf782e612

SHA512
d5c87c9627542f561ce6efeb623c747414a8dfdeb5fd0b2e5da1fb5a29a6e912c9e62fb9d9fd24e5b32d781b423cdcd1e1a3e5d627b7080661c4776469042c40

Download Submit
/storage/emulated/0/Download/P.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Download/P.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit