Overview

overview

10

Static

static

10

Bahamut.apk

android-9-x86

6

Bahamut.apk

android-10-x64

6

Analysis

  • max time kernel
    2661051s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    11/01/2023, 02:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Bahamut.apk
  • Size 29.1MB
  • Sample230111-cpffysac36
  • SHA256 a71290070f826292c0ce907f21280e46cb4b800163ca3b81301c75710387ff1b
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
ransomware

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.secure.vpn
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4764

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        rndseq
        • Path /data/user/0/com.secure.vpn/cache/rndseq
        • Size 48B
        • SHA256 cc1c37d9c27f734776fa8a50e9d5d8b17b312107c0a27565caf8504532e70e75
        • MD5 SHA1 SHA512
        Submit Download

        MonDB
        • Path /data/user/0/com.secure.vpn/databases/MonDB
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        MonDB-journal
        • Path /data/user/0/com.secure.vpn/databases/MonDB-journal
        • Size 524B
        • SHA256 9cf2cedf9e213e94774fc2366f9afa18cf57a5b01fdafd7933ccca87e62e716b
        • MD5 SHA1 SHA512
        Submit Download

        MonDB-shm
        • Path /data/user/0/com.secure.vpn/databases/MonDB-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512
        Submit Download

        MonDB-wal
        • Path /data/user/0/com.secure.vpn/databases/MonDB-wal
        • Size 386KB
        • SHA256 8d5bcc8488234ce083f62a2d0ed57f9ae274485e13ec72797a7868abed35337b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        anchorfree-ucr.db
        • Path /data/user/0/com.secure.vpn/databases/anchorfree-ucr.db
        • Size 36KB
        • SHA256 b9c395e649e48b2d55b972259b8c89dbcb81b34d2a7b568db9d440f1a30193b2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        anchorfree-ucr.db-journal
        • Path /data/user/0/com.secure.vpn/databases/anchorfree-ucr.db-journal
        • Size 524B
        • SHA256 9c35c853a325aad2f3b68736cc68f8265fd325457702cdd5c21d58c6953f20f5
        • MD5 SHA1 SHA512
        Submit Download

        key_value_store.db
        • Path /data/user/0/com.secure.vpn/databases/key_value_store.db
        • Size 300KB
        • SHA256 a817617ad31df0e23946518cafe95c8e7fd111bbfd3257c160d2fa5f1115e33d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        key_value_store.db-journal
        • Path /data/user/0/com.secure.vpn/databases/key_value_store.db-journal
        • Size 524B
        • SHA256 ea9723b1e961ba761a74923151fe0632acacec548afb860d65a7b7994e518601
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb-journal
        • Size 524B
        • SHA256 35f07007fb16faeb31be0ac3ceb101c7d89154a7cc40c91a4901360a08e5a68e
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.secure.vpn/no_backup/androidx.work.workdb-wal
        • Size 189KB
        • SHA256 9234c86e433da751368000944cfcb69ec1a14fb90e4f6b5db92868c53eabf70b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download