Overview

overview

7

Static

static

7

4290_ymusic.apk

android-9-x86

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4290_ymusic.apk

  • Size

    7.6MB

  • Sample

    230202-fmd2wsgh71

  • MD5

    636a8b982ad672755dae99ac2cb8410b

  • SHA1

    acad7f4140ea8ec970a8c4c91ef7ac5e61ecc1cc

  • SHA256

    9a381786ec0a941f2b94e46ee76f18f7851241ea18c13de49de763c183cbead5

  • SHA512

    d64e53013c3806ab1116e8bf91c412f5237fd288422bf57d5044590a1bfe5de918a004ad70d573ccdeecb5443d7315393f421dc487433f0b7e8d871fc1836a60

  • SSDEEP

    98304:/BfN/y0GQzzFAPMnCoMUq5F9y1zcWvmtM8QRKkz36stwDpx0E+sg6:/Bp3taMnCoMUq5FCzcW+a8CKstw1Asg6

Score
7/10
androidevasionransomware

Malware Config

Targets

    • Target

      4290_ymusic.apk

    • Size

      7.6MB

    • MD5

      636a8b982ad672755dae99ac2cb8410b

    • SHA1

      acad7f4140ea8ec970a8c4c91ef7ac5e61ecc1cc

    • SHA256

      9a381786ec0a941f2b94e46ee76f18f7851241ea18c13de49de763c183cbead5

    • SHA512

      d64e53013c3806ab1116e8bf91c412f5237fd288422bf57d5044590a1bfe5de918a004ad70d573ccdeecb5443d7315393f421dc487433f0b7e8d871fc1836a60

    • SSDEEP

      98304:/BfN/y0GQzzFAPMnCoMUq5F9y1zcWvmtM8QRKkz36stwDpx0E+sg6:/Bp3taMnCoMUq5FCzcW+a8CKstw1Asg6

    Score
    6/10
    evasionransomware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks