e8f116f00ea92c142d791aaef8d0f4bfc8db50115f124db2ad25e8ed5ef61ab3

Analysis

max time kernel
3182036s
max time network
134s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
27/11/2022, 13:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e8f116f00ea92c142d791aaef8d0f4bfc8db50115f124db2ad25e8ed5ef61ab3.apk
Size

319KB
MD5

2d919439f7e1195afde3b59660d40db3
SHA1

6ebf247925b2cf71e9b781a6108733320d576edf
SHA256

e8f116f00ea92c142d791aaef8d0f4bfc8db50115f124db2ad25e8ed5ef61ab3
SHA512

988408618e6c49d79a1734d111d31040d3ece98eb91a746a90ac4bd5c08cbe0db6a778cca013b1d1a95dcdd10ed8763cc47edef78ea109668014e8733c88656e
SSDEEP

6144:lEWdwVHCzV+dgMGXPCuQXGe8Zq3E+ynAaccu/Jl:lIHChy26dGpZq5Ou/Jl

Score

7^/10

evasion ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.bjoeajfpa.tkfp

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.bjoeajfpa.tkfp

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.bjoeajfpa.tkfp

com.bjoeajfpa.tkfp
1⤵
- Acquires the wake lock.
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4045

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.bjoeajfpa.tkfp/app_webview/GPUCache/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.bjoeajfpa.tkfp/app_webview/GPUCache/index-dir/temp-index

Filesize
48B

MD5
a74cf5e66a51449965d5b7ee2abaeccc

SHA1
0f19a14f0c056e3f111c02941260ce7ba1121d6c

SHA256
93c2b7b819745280559ae6b2319665f7711a8eea990896dc1251ab3190f1fc5e

SHA512
5e8c6b6c7ca12ce3f87e23430837776a4e8b101d9dd3c15234d656abad1ee9662a4d03adb596b3d5cbaf42d354d7b83065224567b65484b6920e55e0533d3b10

Download Submit
/data/user/0/com.bjoeajfpa.tkfp/app_webview/Web Data

Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.bjoeajfpa.tkfp/app_webview/Web Data-journal

Filesize
1KB

MD5
e373c8c3ddb28ee3795d6b961fa84919

SHA1
0779833eea14df96910f5c5aa4f229797e3b1a86

SHA256
ca5bdea1befb3729eaee2f2c5d16cb65c40c4d6b282748487dde8d9884ac935b

SHA512
f8fa092820ace613443aca05d9c922f04c1f3a3e4b41c437d9edfa8645ea7acb4afebddfc2cf477a653d8215a83a9771c5751ab673b1b93069779307e31f12af

Download Submit
/data/user/0/com.bjoeajfpa.tkfp/app_webview/metrics_guid

Filesize
36B

MD5
95cef00360de4983a1a59794ae630903

SHA1
1ee8953cc6cb496abb818d84234a201665a03f6e

SHA256
2865c743e7bea49d0c4fc27445f86cc52e8ce1ba08bf7b0ab28223572140fae5

SHA512
30636c579b6c4a61af4c316174a1ae61983988ee48362a0071e0a57c63f80571722c6e4a0f16a70e395be849007bb99e3a98a72121762aef06d95cec32d6384e

Download Submit
/data/user/0/com.bjoeajfpa.tkfp/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads