2b3884ade9ac52f97c15c54f3161c293bb3fc18858a6bad1eca7080d313aa7ca

Analysis

max time kernel
3018838s
max time network
168s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
26-11-2022 00:57

Target

2b3884ade9ac52f97c15c54f3161c293bb3fc18858a6bad1eca7080d313aa7ca.apk
Size

866KB
MD5

30d394e0469ed6b907049eab757c9249
SHA1

55642bb90a1a5dd0788c3af080e06a7b0aa774c0
SHA256

2b3884ade9ac52f97c15c54f3161c293bb3fc18858a6bad1eca7080d313aa7ca
SHA512

31888f7f7361936c7bf0696b6c8a459d66b17b50ba6d0de04267f6ca7930ccd5dbb82e8eb1301363ba7b752932d3404472ad457b9ec77f7d0b45fec6bf7ae624
SSDEEP

24576:CgAglwRkuBTxCTJ8Zvg52QhVNLolKHYZ5WUkPjHmCypA0He3wXTbWRvu6He8x3:CgbmRkECTCxrQhVNLolEYZAjy/HegbWR

Score

6^/10

ransomware

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

pro.rgmjpnj.thokvj.upsvrnr

description ioc process

Framework API call javax.crypto.Cipher.doFinal pro.rgmjpnj.thokvj.upsvrnr

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	pro.rgmjpnj.thokvj.upsvrnr

pro.rgmjpnj.thokvj.upsvrnr
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4842