e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5

Analysis

max time kernel
3096549s
max time network
150s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
26-11-2022 19:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
Size

2.2MB
MD5

ffc21561f5ffc51e341b387b60bb262f
SHA1

fa6155ab4afc9628dd1018414879c97d81e7053e
SHA256

e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5
SHA512

086d1633f3aed6a0053e5fdf1f08e940850b874c7957cebaca6efb002fb5806e9c1d7e4a8161a1bfd7625aeb8e7f4ae25b4f1ff7c6c1d8f4845d90343a8941d3
SSDEEP

49152:ZVFkq7rdC6bUd0bD8fgr0hsOKrl56IUP6NiUyiIA1zbHr8Ud0bSMrcmaX1afH:3DC6bN38fXV6YP6kAVHr8NJrcmaX1YH

Score

7^/10

ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

Processes:

com.kbbs.souhuyingyin

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.kbbs.souhuyingyin
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.kbbs.souhuyingyin

ioc pid process

/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dex 4113 com.kbbs.souhuyingyin
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.kbbs.souhuyingyin

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.kbbs.souhuyingyin

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.kbbs.souhuyingyin

ioc	pid	process
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dex	4113	com.kbbs.souhuyingyin

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.kbbs.souhuyingyin

com.kbbs.souhuyingyin
1⤵
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4113

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz
Filesize
32KB

MD5
2126e5a70fb48e951bc40d707436cfae

SHA1
04d71d4988756e38a0ea6b0f4dad6896917038d5

SHA256
6b6c580bbe167dfaf7e26e6e062ec46286a4874ed816d59bf4bf79b07f29ffef

SHA512
38d24329e7ba27bd0c9597207213de716989663e405a21be61f2c4254e4db9b1dfef30017357171710f00f2d25f81cca2c5f3546a132b448faf45e51cc87da7d

Download Submit
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz-journal
Filesize
524B

MD5
f3854a66a78f1b610f35dd37cdb8b608

SHA1
49c454e7d31ae7e9e523797d4520ca645e8c08c7

SHA256
c33ce148bae9730b8d08a594e75b54b5abeaf5a93a093c3ce9eccc48c43dfd23

SHA512
b4bbad2870580cdc77a61d162d31e806fed4248c69ec483731298723b787cf46ce67fb2e570d6718b8ef9715c2626b356d073766c02ec5da3da0dbb9057cefa1

Download Submit
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz-wal
Filesize
40KB

MD5
cc615b56f0dc79cce09c254c4bf359a1

SHA1
68baf42bb57b04f70a64ea87faf98066991b18be

SHA256
b920e1ea09e5ad9c273ab52713e5033501014fc52056a444d0e316687a7a1ac7

SHA512
9e9496faec177d35019d8ec1fd981665a931c1dc3526ab7c836b634ca1cf1c555f8067db662554fb1c7e690b7af2de9c3a0e67d4a80ce82aab60b20ab40b12bb

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/oat/x86/v5pl.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/oat/x86/v5pl.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dex
Filesize
223KB

MD5
2f5a0831182b3b89d59150c5b5c647e1

SHA1
783377889a70d20b74b31365f968b7a0403a049e

SHA256
ce1a23d24c6b5a21506b2597a6430f493b3c97c75c12fba6764154aaf782e612

SHA512
d5c87c9627542f561ce6efeb623c747414a8dfdeb5fd0b2e5da1fb5a29a6e912c9e62fb9d9fd24e5b32d781b423cdcd1e1a3e5d627b7080661c4776469042c40

Download Submit
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dex.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Download/P.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Download/P.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads