28fbeb8ccfa7f5806fe4a72937a5a2c58d9ffc7376d3767fd5b3f83bd5bbefae | Triage

Sharing

General

Target

YTMp3_YTMP3WEB_v4.6.1.apk
Size

40.9MB
Sample

230524-vazv6ade95
MD5

8fee3435687e126d1bd026e72f3f5f0a
SHA1

9eb48a3550c321358b92ad3154a9d8c635975582
SHA256

28fbeb8ccfa7f5806fe4a72937a5a2c58d9ffc7376d3767fd5b3f83bd5bbefae
SHA512

0bba4862d2f1b27dd2b9b3b7ed361aa218b20eaef5ff8579561b06f971c66bddde4eba132b155e0ed75394a4fa8150aa58cd952e69548d77f1c878f931b07e33
SSDEEP

786432:jpSToOpLGlCl/UdqmRptU5Pr8HVhslO+YO+ew3IBVI55Yf7DULB:EXRGlw/UsstuTa2OW9wYa5mMB

Score

9^/10

android evasion ransomware

Malware Config

Targets

- Target
  
  YTMp3_YTMP3WEB_v4.6.1.apk
- Size
  
  40.9MB
- MD5
  
  8fee3435687e126d1bd026e72f3f5f0a
- SHA1
  
  9eb48a3550c321358b92ad3154a9d8c635975582
- SHA256
  
  28fbeb8ccfa7f5806fe4a72937a5a2c58d9ffc7376d3767fd5b3f83bd5bbefae
- SHA512
  
  0bba4862d2f1b27dd2b9b3b7ed361aa218b20eaef5ff8579561b06f971c66bddde4eba132b155e0ed75394a4fa8150aa58cd952e69548d77f1c878f931b07e33
- SSDEEP
  
  786432:jpSToOpLGlCl/UdqmRptU5Pr8HVhslO+YO+ew3IBVI55Yf7DULB:EXRGlw/UsstuTa2OW9wYa5mMB
Score

9^/10

evasion ransomware
- Renames multiple (84) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Acquires the wake lock.
- Reads information about phone network operator.
- Removes a system notification.
  evasion
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1
- Target
  
  platform_download_use.html
- Size
  
  1KB
- MD5
  
  4f253cd880b635abcbbca45f0bc7474e
- SHA1
  
  d3882d88a15a8f583e9b4dc66ca61bb288b208a7
- SHA256
  
  83866a269795960108d52245c46c4782397950c6ed884eaf17fbad9db8b1c80d
- SHA512
  
  24cff276f419096f34e52f283b87551db58eb4d64e2977e23f12aed9f7bb2739550b603860d199b096a73baebb432310a29e3bf877822fa8847c16b8ff8ba8ca
Score

4^/10
behavioral2 behavioral3
- Target
  
  search_download_use.html
- Size
  
  1KB
- MD5
  
  37e7684c5ed67d4dbc24e5e91a56d54e
- SHA1
  
  10aa27c6e1f9f34077529f75cdff2fb19debb2e2
- SHA256
  
  87a9d44bb004b1f7e6242ee5cafca09066de91eed8aa2baf4796260644648dd8
- SHA512
  
  6d52193fc1050d98c867abdb07f367ab187175f566e0671183969379599ba6479160924be55518a77a75e6bf3dd17f3fe0505fff6f36950976ed5e8b8b2ea370
Score

4^/10
behavioral4 behavioral5

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionransomware

behavioral2

behavioral3

behavioral4

behavioral5