General

  • Target

    Temp Number Premium (aftabapks.com).apk

  • Size

    10.9MB

  • Sample

    230710-nxf81aah6z

  • MD5

    24fc34c7f1716ec46cf385aaaa50c851

  • SHA1

    1bc692f657a54793bcd5fd3d0fd9819be3dd5773

  • SHA256

    2bea08169dad3178edfa46b1e455699366309c5ff23484867d836f47082332c3

  • SHA512

    c6bd55c611b409b169afe3d7ae194e5a7dbd5d048b2b04cfe6bf371c9390cdd6a28fb5031dbe70fa34a126b23122b5f464f753e7d791e416a31ae82e71fcdff9

  • SSDEEP

    196608:krxU0JGkK+Wk8oHUxmV1Dl3pHv2xHbyNSc8qLuCessjFS1y1TjxfJtE86kSkIH:KS0Ukek8o0oLD3vZahs8TxfJtb6DX

Malware Config

Targets

    • Target

      Temp Number Premium (aftabapks.com).apk

    • Size

      10.9MB

    • MD5

      24fc34c7f1716ec46cf385aaaa50c851

    • SHA1

      1bc692f657a54793bcd5fd3d0fd9819be3dd5773

    • SHA256

      2bea08169dad3178edfa46b1e455699366309c5ff23484867d836f47082332c3

    • SHA512

      c6bd55c611b409b169afe3d7ae194e5a7dbd5d048b2b04cfe6bf371c9390cdd6a28fb5031dbe70fa34a126b23122b5f464f753e7d791e416a31ae82e71fcdff9

    • SSDEEP

      196608:krxU0JGkK+Wk8oHUxmV1Dl3pHv2xHbyNSc8qLuCessjFS1y1TjxfJtE86kSkIH:KS0Ukek8o0oLD3vZahs8TxfJtb6DX

    Score
    9/10
    • Renames multiple (78) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks