Overview

overview

10

Static

static

10

Bahamut.apk

android-9-x86

6

Bahamut.apk

android-10-x64

6

Analysis

  • max time kernel
    2657484s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    11/01/2023, 02:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Bahamut.apk
  • Size 29.1MB
  • Sample230111-cpffysac36
  • SHA256 a71290070f826292c0ce907f21280e46cb4b800163ca3b81301c75710387ff1b
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
ransomware

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.secure.vpn
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4051

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        rndseq
        • Path /data/user/0/com.secure.vpn/cache/rndseq
        • Size 48B
        • SHA256 80508ce48d06a92f94a5337d3819e7136387a4b7712925e28ae4aa06b5f69572
        • MD5 SHA1 SHA512
        Submit Download

        MonDB
        • Path /data/user/0/com.secure.vpn/databases/MonDB
        • Size 144KB
        • SHA256 293eacc3966b98ea379268e98a5b657f709b8d1465d7070f9c0ad4d9e2d4734a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        MonDB-journal
        • Path /data/user/0/com.secure.vpn/databases/MonDB-journal
        • Size 524B
        • SHA256 0a13cec143a93869b059e18511894ed71048751345fcb7503f4a7a0d428a1a6e
        • MD5 SHA1 SHA512
        Submit Download

        MonDB-shm
        • Path /data/user/0/com.secure.vpn/databases/MonDB-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512
        Submit Download

        MonDB-wal
        • Path /data/user/0/com.secure.vpn/databases/MonDB-wal
        • Size 410KB
        • SHA256 265f47da2091f25e83cf74c4182e2f29f25ba3e7bea7b11b2a8eb524869cfaaf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        anchorfree-ucr.db
        • Path /data/user/0/com.secure.vpn/databases/anchorfree-ucr.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        anchorfree-ucr.db-journal
        • Path /data/user/0/com.secure.vpn/databases/anchorfree-ucr.db-journal
        • Size 524B
        • SHA256 7e08c5876fd0429f3bbc83c3c3377fc8a21b1e1aa8cde48c41df7ee85b77d4f4
        • MD5 SHA1 SHA512
        Submit Download

        anchorfree-ucr.db-shm
        • Path /data/user/0/com.secure.vpn/databases/anchorfree-ucr.db-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512
        Submit Download

        anchorfree-ucr.db-wal
        • Path /data/user/0/com.secure.vpn/databases/anchorfree-ucr.db-wal
        • Size 32KB
        • SHA256 b57594f2c95901e1051c06be64caee83c5e43b0b86f7074dff22b68a16df1193
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        key_value_store.db
        • Path /data/user/0/com.secure.vpn/databases/key_value_store.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        key_value_store.db-journal
        • Path /data/user/0/com.secure.vpn/databases/key_value_store.db-journal
        • Size 524B
        • SHA256 4bb4c7c6fd46102cfd14e6d55922527e42b618fbe61400caf884fb3f3b875ccc
        • MD5 SHA1 SHA512
        Submit Download

        key_value_store.db-shm
        • Path /data/user/0/com.secure.vpn/databases/key_value_store.db-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512
        Submit Download

        key_value_store.db-wal
        • Path /data/user/0/com.secure.vpn/databases/key_value_store.db-wal
        • Size 209KB
        • SHA256 d2c931b5a1be42086ab954cbb6777addf3ae0ac210009541a44b34f42033be3d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb-journal
        • Size 524B
        • SHA256 58fa642312bbb10bed7f08df2baafeb141a48442a0ba162442969cd6222ec298
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb-wal
        • Size 189KB
        • SHA256 ae8f9210dbaf921d8f879b1694a42f1e3b3c8e53a357f4cfac772687a8c65910
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download