df1d5d6c4c0a2710dd3fa57c417bd8d1a1e7d766df4e9b6807567ffac9c1eb5a

Analysis

max time kernel
3015355s
max time network
142s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
26-11-2022 00:57

Target

df1d5d6c4c0a2710dd3fa57c417bd8d1a1e7d766df4e9b6807567ffac9c1eb5a.apk
Size

3.1MB
MD5

f289d9bb1cc8a4f35008f53579fb463b
SHA1

2bda08f69bd1eb0ed7b9223dda0c487de5bb16f6
SHA256

df1d5d6c4c0a2710dd3fa57c417bd8d1a1e7d766df4e9b6807567ffac9c1eb5a
SHA512

b0e5afd7d372241e74b8c717216c2df7b6677d51655d91571311f41e05d823dde8e0a7f8875cd10eb0ecc6e43d2ad441a6e4b43911714aa2398ae433e7ebba1c
SSDEEP

49152:isIQEwZHwBHxIHUY8Z4o/pGQ0NZXym4lAB0h9WNZyyOcp56N4vb687/zKdhAMZiP:ow6US9GUXnyrQLWUXek25aATH5

Score

6^/10

ransomware

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

gov.rhmnphjh.gnkrku.ps

description ioc process

Framework API call javax.crypto.Cipher.doFinal gov.rhmnphjh.gnkrku.ps

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	gov.rhmnphjh.gnkrku.ps

gov.rhmnphjh.gnkrku.ps
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4069