45573b1a63a0372486d81f46bbe6e922e801e54a26b3dc26dad8a4b7e4e1eb43

Analysis

max time kernel
3022723s
max time network
163s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
26-11-2022 01:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

45573b1a63a0372486d81f46bbe6e922e801e54a26b3dc26dad8a4b7e4e1eb43.apk
Size

598KB
MD5

ea78dff210e154a4dd65c8bc60bb88be
SHA1

246ddbb92e42be060129a5f502eb68af6a5498c4
SHA256

45573b1a63a0372486d81f46bbe6e922e801e54a26b3dc26dad8a4b7e4e1eb43
SHA512

29c1beac4c3c6f5e600b108eb95fa8199d209c075a3fe82498da44c38e58c344106ff1f2fa309154ce1e44e8d671af450bab5a2846a37f2082c794d0ef01c895
SSDEEP

12288:gC7VtMiJ+W8TOJuX72VkqKiy3b9dGpZWFHzK2GSSVBA3YEfy5NiQ:gC7LXr8THXyVkqY3RdMEHz7GSSVcfcNx

Score

7^/10

ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

Processes:

com.bjoeajfpa.tubeamateurs

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.bjoeajfpa.tubeamateurs
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.bjoeajfpa.tubeamateurs

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.bjoeajfpa.tubeamateurs

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.bjoeajfpa.tubeamateurs

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.bjoeajfpa.tubeamateurs

com.bjoeajfpa.tubeamateurs
1⤵
- Acquires the wake lock.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/.com.google.Chrome.7puynh
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/Default/GPUCache/index
Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/Default/GPUCache/index-dir/temp-index
Filesize
96B

MD5
b98dc57306234e41f56783a0d39856ed

SHA1
0c9f751fe78adbdb32593650dd38f9a1ca83d99b

SHA256
66d1de2f5afe36a1da181352b9dab806f29cb6c1f31bc3c659e74f026514ad71

SHA512
c9a58b923aee1ccc90781cbc5bebc0b92bb9c67ed5369a41913f3790747abd9cfbf6a6024f4c7b122fc65323658afeb1fb0d31b0c09ee92cb8d782a15ec48e3b

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/Default/Web Data
Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/Default/Web Data-journal
Filesize
2KB

MD5
20b66bf82379cabebfc6a21c85d57d02

SHA1
a3310ac6f7f24204d9ded5dc482432253ec4fb6c

SHA256
a4d93e0ea36d67b391be14bb11d017ea85bb94b82c71225054167e6f88c7df0c

SHA512
d8fa6144bc763efbf15960df71ccc71658267ae837bf780d5ac1c01aea2092ee9e3edaea083e574ca63f4ba6981538976d70860d70f67cdcd0c8fb864748ea31

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/app_webview/webview_data.lock
Filesize
32B

MD5
92f93e0ecac33e531ea533ca16e217f7

SHA1
30cb1e4e788046c2b415616eaacfa52614f57954

SHA256
113d6e87d310034345d3945fd1d59a478a5a1e1ce05b4b8f1b9d25cdd61dc417

SHA512
eab149920e8f7bbe3cfbe755b2d6af6758dfa012b8ad5427c688e76896e23d945a4323607483869d14355c7d5d82715994cb0b6d1c12ad0f11a8f2de5a3a5864

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/cache/WebView/Crashpad/settings.dat
Filesize
40B

MD5
8c14096c3a0fca4c132e04c047364bd3

SHA1
177a05c4ed6b0d2bdc208fa2d7851be9b3faadaa

SHA256
51d0755c6df2a9bce004089f1a078f885b23860b063371c89f818ff298060d7e

SHA512
36cd84c198841dec9510a3c819946d2e8fedfbfe3acb1fd556e26987eaec3f51332f2b0381986085a94408f507e431ad2126f61509ec8c540f8bfc9a0526de91

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/cache/WebView/Default/HTTP Cache/Code Cache/js/index
Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
Filesize
96B

MD5
66b1b9c905f9d2e4c2a78a90938384d8

SHA1
d0762f7e8e2e27fc570a7181fb6ed98256c179a8

SHA256
f850f72fb8ce4331bf98f196472ac2722338a6241d261c4e38f38adb4255c304

SHA512
cee1af3cdf014e0ee1d38d8754f5c6fcac4fb8d419c60f2addbd04bf2db954b0893db35f4e0311d95545c3ba8b2bc950cd4658dbcf897d368dc6a67850bd949d

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize
96B

MD5
d0d4290c21710745c1b4cec33c0e2ef0

SHA1
a7e51469ecaa5a896d86f68aa8496844d1d8ac42

SHA256
141f84ed4e2812744ad81d3d5d8c3943317a01b2e581ff3f764c575474bcc8ce

SHA512
1c0711c5169aba51e86c4290641cd925dcf255333400d00fd0c54227812dd7604235902cfa005573cf7ab51cb28c8a05bf031f8fa23fd3fbb4424ad6fddcdc48

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/cache/WebView/font_unique_name_table.pb
Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/com.bjoeajfpa.tubeamateurs/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads