582e49883ee6aed53f5a7f423ac910c1b1f18f9eb19d07507c7b32d303d32c24

Analysis

max time kernel
1674320s
max time network
148s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
09/04/2023, 02:15

Target
kurulum.apk
Size 16.6MB
Sample230409-cpkexage97
SHA256 582e49883ee6aed53f5a7f423ac910c1b1f18f9eb19d07507c7b32d303d32c24
MD5 6414a1de0f410d94ea7e5f7d86d0cbee
SHA1 c3115a5b8817fcf40dc3603665d7f8da882b0a6d
SHA512 3efdfa9709a1f79d7656ccd392c62f4409ee3b2d28cb3d60d602207da4ee5fe8632e48d662961a6a793558554ea7971233ead04f59cd82200d61c97aa6ecec9e
SSDEEP 393216:DpdZiRCd5+GEg4/zvpdmt5yMGRo17nBYVqslAKa6SQBRn:3ZjJOzvpdmt5ERojOqslvhSun
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

ransomware

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.wzogle.zndroid.yacfup

com.wzogle.zndroid.yacfup
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4835

com.google.android.gms.appid.xml

Path /data/user/0/com.wzogle.zndroid.yacfup/shared_prefs/com.google.android.gms.appid.xml
Size 2KB
SHA256 3998f3e4aee698cfe289d60c4f5305079cad558784cd659448b63c09432362f4
MD5 320876ca19d7a7ca5f194e7918337778
SHA1 00fda0ee6b9f2d8622ad5e0d1bc3ec19792a0839
SHA512 e11d89c6dba99d9e9d26d34c76db9c28500d68defcc67c3d02eaf0d36ac33f547ece4bf9ba08f917ab76cd4f7cb98a3813186bf409d9d26b2af934446c9225f3
MD5 SHA1 SHA512

Submit Download

com.google.android.gms.appid.xml

Path /data/user/0/com.wzogle.zndroid.yacfup/shared_prefs/com.google.android.gms.appid.xml
Size 2KB
SHA256 7c1b6d8396e9b07ff1224f8ae4cf03402b284d19df01a7cc20a8871dd6b04b42
MD5 ae6a08e27747dfcab749f1e5f335acc2
SHA1 24858e0f319ec3c84035f025dcee76f36e8ffe41
SHA512 8911eb12b2f8294ed6f738c49ff741be5b4a021cf594abe825b58eceab956afcf16813749c917047582f1cffe84907e6ac449905df1e5e41ff3f2812c721190e
MD5 SHA1 SHA512

Submit Download