General

  • Target

    bazaar.apk

  • Size

    24.1MB

  • Sample

    230529-b5zn4ahe9s

  • MD5

    bb8cdc5cdce38d20c0e544d879d204dd

  • SHA1

    3135a5c7ef4f417315b334579222941e0d9d61d7

  • SHA256

    0de30e4e774dacd189d3ec473177ccdab4ac0a701b3beb7f14104c6b63d2a453

  • SHA512

    48cf8782e04f3bdc4c27044394c12851c05e0242225eb727d80bea2b9f9951541ae55d5c024e706eb0609fdc2dbeeb51047fa73586f2a2b658b20ff524ce3180

  • SSDEEP

    786432:rsMNsFNzN/zPt5WNC0eEyEgC8TNOFApN+F:oMY1t5INByE6N5pN+F

Score
9/10

Malware Config

Targets

    • Target

      bazaar.apk

    • Size

      24.1MB

    • MD5

      bb8cdc5cdce38d20c0e544d879d204dd

    • SHA1

      3135a5c7ef4f417315b334579222941e0d9d61d7

    • SHA256

      0de30e4e774dacd189d3ec473177ccdab4ac0a701b3beb7f14104c6b63d2a453

    • SHA512

      48cf8782e04f3bdc4c27044394c12851c05e0242225eb727d80bea2b9f9951541ae55d5c024e706eb0609fdc2dbeeb51047fa73586f2a2b658b20ff524ce3180

    • SSDEEP

      786432:rsMNsFNzN/zPt5WNC0eEyEgC8TNOFApN+F:oMY1t5INByE6N5pN+F

    Score
    9/10
    • Renames multiple (216) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks