Overview

overview

7

Static

static

7

2a5b729c40...ab.apk

android-9-x86

6

Analysis

  • max time kernel
    3105542s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    26-11-2022 20:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2a5b729c403ec7beddbc41e0cedca7b3311d52c992466f8c59956be3199f3bab.apk

  • Size

    1.2MB

  • MD5

    d6d5a4ca95387e93b1587a291d4665dc

  • SHA1

    0931b75fa321cedf2e957206a463d6a658633f5b

  • SHA256

    2a5b729c403ec7beddbc41e0cedca7b3311d52c992466f8c59956be3199f3bab

  • SHA512

    5b416b5527564a0083df22ed537ecfad99eea98b436c4676336e5c9c562d5958ef32f8176fe069158c606725b47e49659674e5be2949bffd1864352eac2dbca0

  • SSDEEP

    24576:LJPOd9Nr4yDAAQvylkuF+Dbc41nbAQdGFOJKXatEiStJwngylq:LJP4r4yxQvHbcIbNd/KSE1J+o

Score
6/10
ransomware

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • qwlb.cbufkxjrf.pldbbvgs
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4086
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4176

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/qwlb.cbufkxjrf.pldbbvgs/shared_prefs/Game.xml
      Filesize

      117B

      MD5

      af85887185a296c934ff1762a35f16dd

      SHA1

      af52694fea6ef52ffb7d73f0db7955ad6e52e6b9

      SHA256

      df0560fcd9e28c47ad44525b73b71340b4fc9d90cd7efec7aca9e1845f16763c

      SHA512

      e11e710206c82404c7749fe06852bb179cafb5986aa37caf72a34cb48f68b3db81cb5338de3e89b9c7011af0ea4cd155a2c00549e45d63e4864b5c6f12995997

      Download Submit