Overview

overview

8

Static

static

7

6f0ee30cd2...2a.apk

android-9-x86

8

6f0ee30cd2...2a.apk

android-10-x64

6

6f0ee30cd2...2a.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f0ee30cd2305542130c98933c7ce2b37f5d3ceec1fa91d4d21f1ff54168692a

  • Size

    1.3MB

  • Sample

    221126-wxnbbagh3v

  • MD5

    0f19cd277d0ed86b025dc0e3abcfdaba

  • SHA1

    9090f8094990816d0cc9557dee49ce57ee369ae1

  • SHA256

    6f0ee30cd2305542130c98933c7ce2b37f5d3ceec1fa91d4d21f1ff54168692a

  • SHA512

    3ffbf3e2d4bd1632fd81c28980bdd36b47b31c090de0614cb62ae89226d3c121f5050aee4caf988e4f3c810b46bbdeb7e21a02643cb4d2714b24e41ab7d0b4bb

  • SSDEEP

    24576:TdxKhrrKE16K9QysaPTTZKvtyCdgTXSr9MSP38BCB7KnjamYi+O8:TWJXtsaP66DSBMvCBGnKi+j

Score
8/10
androidinfostealerransomware

Malware Config

Targets

    • Target

      6f0ee30cd2305542130c98933c7ce2b37f5d3ceec1fa91d4d21f1ff54168692a

    • Size

      1.3MB

    • MD5

      0f19cd277d0ed86b025dc0e3abcfdaba

    • SHA1

      9090f8094990816d0cc9557dee49ce57ee369ae1

    • SHA256

      6f0ee30cd2305542130c98933c7ce2b37f5d3ceec1fa91d4d21f1ff54168692a

    • SHA512

      3ffbf3e2d4bd1632fd81c28980bdd36b47b31c090de0614cb62ae89226d3c121f5050aee4caf988e4f3c810b46bbdeb7e21a02643cb4d2714b24e41ab7d0b4bb

    • SSDEEP

      24576:TdxKhrrKE16K9QysaPTTZKvtyCdgTXSr9MSP38BCB7KnjamYi+O8:TWJXtsaP66DSBMvCBGnKi+j

    Score
    8/10
    infostealerransomware

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Reads the content of SMS inbox messages.

      infostealer

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks