277fcc0c3cd9284f165068a065d68c7cd22ed30256f119391d29c07e0713a9ce

Analysis

max time kernel
3018954s
max time network
162s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
26-11-2022 00:57

Target

277fcc0c3cd9284f165068a065d68c7cd22ed30256f119391d29c07e0713a9ce.apk
Size

428KB
MD5

a8536216974fd7bcd962b0d85ebe05b1
SHA1

bd1356d157713ca5cd88a10501993d4a7387135f
SHA256

277fcc0c3cd9284f165068a065d68c7cd22ed30256f119391d29c07e0713a9ce
SHA512

ea1c006615a9183f24a1d1965ad59aef64cf2eec77717a0a75223fb3c3282f2396accc22ba8fb7f67c19bc87fac87e012889742370af6a13a7210fba4037f965
SSDEEP

12288:Gs0dfSiQduFJ3q2Ko/KWtaQot7wyXJkJMAbd086:GBfSiSU3qLioQKxk1bd086

Score

6^/10

ransomware

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

info.rgmhpljt.hikhju.puvtns

description ioc process

Framework API call javax.crypto.Cipher.doFinal info.rgmhpljt.hikhju.puvtns

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	info.rgmhpljt.hikhju.puvtns

info.rgmhpljt.hikhju.puvtns
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4368