481c2a6d5fda48b2b2ddaad00d753f9e6139be1c8bdb85db363cc0f0378ae68d

Analysis

max time kernel
3205546s
max time network
140s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
27/11/2022, 17:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

481c2a6d5fda48b2b2ddaad00d753f9e6139be1c8bdb85db363cc0f0378ae68d.apk
Size

2.2MB
MD5

a5b729ee633358e85b04a5f04e2d6d77
SHA1

97755dc62b83ed2d502df785d285d41ce50a6fcc
SHA256

481c2a6d5fda48b2b2ddaad00d753f9e6139be1c8bdb85db363cc0f0378ae68d
SHA512

11df4bf2a7072f9e8159740b8a7f22668568a1e3801b31f83c766b195b373d44ee6eede7961c4616133c6c8eb1bfdda8929b1859cb0f851f5ecd2b5ef85df162
SSDEEP

49152:bHnBUTICmtrZfqwegEI3bsqBXsmYlZSgtBN/28TsI6kebnjSGoMvEjYXdbpc3cyW:72UCmtrZfqw53bsGXNWEpQbVebnAMvEi

Score

8^/10

ransomware

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.google.video.sq

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.google.video.sq

com.google.video.sq
1⤵
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data).
PID:4099

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.google.video.sq/databases/access.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.google.video.sq/databases/access.db-journal

Filesize
524B

MD5
eca40c5ad1cb58f31a80ac26c0bba391

SHA1
01938b4d9e058d24bc2c16740710cfbf4a6e9784

SHA256
d2d20fa3c05530d0be48ccbabb9e87e99db2d00a3f33681f6ab7523b08c31b64

SHA512
5833ca55b1fea474bae298053cba9313a63d72302b736d5f3bf50537c8a5d143992d73871f8b61563e9d53873291c88f4211b01f804f6f0081d0da3734a48e62

Download Submit
/data/user/0/com.google.video.sq/databases/access.db-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.google.video.sq/databases/access.db-wal

Filesize
32KB

MD5
ba5aded0fb42d5e5ce340e78aac5d063

SHA1
89a257601f5b984e8fca65f8486b653367de6cd6

SHA256
347918eead1f6d0d0d8360fe6799b6abd9c263247219553121e0b153b2fdb7f1

SHA512
05691f63e4c905333804e1fb0cf9253da3cecee71b57e1c8b630f95076d4020f3f2f8cf0a03fa25e86813357425c7c17e2b312b0c4d75349920fce1b19e9e778

Download Submit
/data/user/0/com.google.video.sq/files/__local_stat_cache.json

Filesize
25B

MD5
2d805b13f2f28dc3ca9bbcc000f49bb5

SHA1
9eac165b4d81258fd3967cde5cc53b53b1dabcb1

SHA256
c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

SHA512
5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

Download Submit
/data/user/0/com.google.video.sq/shared_prefs/pay_xml.xml

Filesize
119B

MD5
56be6b759e25d6f84fad17cf6f0af4a0

SHA1
769b9b85217158e11ad1ac346537143f3b291384

SHA256
742af9555a7b1c52ff65092c7809add85e5f66dc01b337c7994b10149e9dfcc2

SHA512
591ab4bf27cf5b08b3cd5690e1c290f487d7e787f03c25e120f63aefa53d31de5df7a47ee342db5c2784da71fcdb862ad74eb68416e3fd54da9db5c4217ddf5d

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid

Filesize
89B

MD5
02f34924562bdaff03b03d8424762377

SHA1
b83de902ca056d7766a94ff53f0f5b30745feaf1

SHA256
9a488984c3b4b9e9d951e218ae555a811adfd27637a36a19d27c4787d790b194

SHA512
897e5bc35209dbd18088e9b55df86a53ce5fcf5e67220c50f9ed5992d0d645a64de228a17c41159307cbd9010b8a13ab5199bab8729967d88911ecfbec2beda8

Download Submit
/storage/emulated/0/plugin.apk

Filesize
334KB

MD5
c56d33b0275f169e091902a458e4d71c

SHA1
df3075754f2c04173daa69fa3146e1f06b847ac1

SHA256
62272dc9e592ca9752a66775ba2eb17839a7f0f1b3f47eb4a13f5419b40b1979

SHA512
94582c8ec7e1552067f45afce0a969425c346fae6e82e7a58a045b91a655679f1bfe0cb4a64821b2c37dbbe8aae5a0a7e99d2496560b09fd3135ddcb9d149e47

Download Submit