1a959046cf9eb76bf6828ac3bbe575219d5d87ec04e9c84da46af89aed6549c2

Analysis

max time kernel
3099046s
max time network
148s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
26-11-2022 18:54

Target

1a959046cf9eb76bf6828ac3bbe575219d5d87ec04e9c84da46af89aed6549c2.apk
Size

168KB
MD5

635e85134c601165100dc206322f958e
SHA1

c0beba82670f1af207d0d1f16d8114d859528cb6
SHA256

1a959046cf9eb76bf6828ac3bbe575219d5d87ec04e9c84da46af89aed6549c2
SHA512

d51a31caecd5cdb313a6e1f7115e53fc4f776182c0aee4cd0c5501aef0921bb7d1078972b94d31b03360db4437cf4eb69dc47c21d3a61f8ac9bba4f1f9664514
SSDEEP

3072:mch/do98kfqsjHJOpf0WpFhX77PLxYM8eaylUpvHH3jtKDtrynmy/d:m22pjOcW3V77PtJXaylKPXAxymy/d

Score

6^/10

ransomware

Reads information about phone network operator.
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.vpsmobile.pornster

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.vpsmobile.pornster

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.vpsmobile.pornster

com.vpsmobile.pornster
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4541