f45dcbd13c47c789a90d8e0728abb588ab63ab0911530fec579cb18100a21f40

Sharing

Copy URL

Twitter E-mail

General

Target

worldbox-mod-0.22.9-theworldboxapk.com.apk
Size

132.1MB
Sample

230707-czgrrsgb4v
MD5

a762c7ba0bcd64eda439362b19da7b9c
SHA1

242112d39c7da28bd21934ba8e4460f4feb4cade
SHA256

f45dcbd13c47c789a90d8e0728abb588ab63ab0911530fec579cb18100a21f40
SHA512

c8bc458c3148c31e9e85f5d8f69cf7ccb0349ca3a43048cd027c109c22001015667a0266adbedd235e50bc039162d2fcb63282e44648009af07d1db39fd063da
SSDEEP

3145728:j2lowd6wPydgYznn+dK7d+xyEhkdXVPH728a2xE+5z:jOFd6wPy60n17d+MEydlPC8aEx

Score

9^/10

android ransomware

Malware Config

Targets

- Target
  
  worldbox-mod-0.22.9-theworldboxapk.com.apk
- Size
  
  132.1MB
- MD5
  
  a762c7ba0bcd64eda439362b19da7b9c
- SHA1
  
  242112d39c7da28bd21934ba8e4460f4feb4cade
- SHA256
  
  f45dcbd13c47c789a90d8e0728abb588ab63ab0911530fec579cb18100a21f40
- SHA512
  
  c8bc458c3148c31e9e85f5d8f69cf7ccb0349ca3a43048cd027c109c22001015667a0266adbedd235e50bc039162d2fcb63282e44648009af07d1db39fd063da
- SSDEEP
  
  3145728:j2lowd6wPydgYznn+dK7d+xyEhkdXVPH728a2xE+5z:jOFd6wPy60n17d+MEydlPC8aEx
Score

9^/10

ransomware
- Renames multiple (53) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
behavioral1
- Target
  
  DefaultWsdlHelpGenerator.aspx
- Size
  
  59KB
- MD5
  
  f7be9f1841ff92f9d4040aed832e0c79
- SHA1
  
  b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA256
  
  751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- SHA512
  
  380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP
  
  768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
Score

1^/10
behavioral2 behavioral3
- Target
  
  machine.config
- Size
  
  33KB
- MD5
  
  0869544722561f5aff0eefc83fc7b001
- SHA1
  
  1e118f4b5c1c6a7b1858e3fccb1b1d1095561976
- SHA256
  
  ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
- SHA512
  
  ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2
- SSDEEP
  
  384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuh:dkn
Score

1^/10
behavioral4 behavioral5
- Target
  
  settings.map
- Size
  
  2KB
- MD5
  
  ba17ade8a8e3ee221377534c8136f617
- SHA1
  
  8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
- SHA256
  
  ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
- SHA512
  
  c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297
Score

1^/10
behavioral6 behavioral7
- Target
  
  web.config
- Size
  
  18KB
- MD5
  
  08101241b15b53ef0ab908f6d388881f
- SHA1
  
  ea3e2ad6d71d483c54b12852dcbdcd0baa569988
- SHA256
  
  15a2c7a9242bf54d3ccb3e07fa6d8f84ba8b303d8877243787a1103009941bdb
- SHA512
  
  a1ee7f17bb069ac42483d1f98ca839ff1bd06f3fc15cd379dff4aca3732a5dac24dc17e15acc8f8fa39e60e186219f4fd70664f9ea284002274a4ff8609791ed
- SSDEEP
  
  384:lJJuAr8F1mJ1ayCk5+HK5YaW41DBWTwa6st/tlLvSqwwU4FVXaS7L3nHIXYFXc//:jbpJi91Xbi
Score

1^/10
behavioral8 behavioral9

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Renames multiple (53) files with added filename extension

Loads dropped Dex/Jar

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9