Resubmissions

13/07/2023, 03:04

230713-dkrtvsfb82 9

13/07/2023, 01:29

230713-bwnkgaga91 9

Analysis

  • max time kernel
    1295440s
  • max time network
    66s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    13/07/2023, 03:04

General

  • Target

    Necrophonic_1.16_116_65d4fe.apk

  • Size

    70.8MB

  • MD5

    10ec96c7280671d947b8ad7d28eddb9d

  • SHA1

    e88f98f75672bf03f713dfdde90923b38b9200d7

  • SHA256

    65d4fedf33f83a6f9e1f3e17d29d527019efa1dfd0f3cb0c7bc3be1694b9a418

  • SHA512

    ef3312a8855b0803d0fda3b834822091ad54d2b0d9dfd1854302b78dcddbab66f1cecb15497c8e5cc4ba00957a90fdd2335c932436321d590792646bb688e662

  • SSDEEP

    1572864:VnwaCvk+6eD65FMbCcoc3doEpCi7aVuu+BfP18oAvth6ohJ8wjIC9/MfOF:VnwaCcvyHbCcocJpFa4fPOvth6qJ5ICh

Score
9/10

Malware Config

Signatures

  • Renames multiple (53) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

Processes

  • com.chillseekers.Necrophonic
    1⤵
      PID:4099

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/Metadata/global-metadata.dat

      Filesize

      2.3MB

      MD5

      bc1636aca0908440fbb9bf3b97077027

      SHA1

      1f8af80ee5d4b0505d4a1d2ce3832e91221bc475

      SHA256

      f9d881f073be2fb3df1582e9b674b6625870044da567e981ef116d832819fa39

      SHA512

      93dc7da3f6ab901b98091824aa14378b03b34169ca31db88a965256f308521c9dd063a274ddbb2cba204ccb08eb8cda705aafe38dd36656cdde6641284935624

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/Resources/mscorlib.dll-resources.dat

      Filesize

      329KB

      MD5

      21d06dbc8af6432b2b49536ed30609af

      SHA1

      11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d

      SHA256

      c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f

      SHA512

      2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/2.0/Browsers/Compat.browser

      Filesize

      1KB

      MD5

      0d831c1264b5b32a39fa347de368fe48

      SHA1

      187dff516f9448e63ea5078190b3347922c4b3eb

      SHA256

      8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

      SHA512

      4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx

      Filesize

      59KB

      MD5

      f7be9f1841ff92f9d4040aed832e0c79

      SHA1

      b3e4b508aab3cf201c06892713b43ddb0c43b7ae

      SHA256

      751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

      SHA512

      380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/2.0/machine.config

      Filesize

      28KB

      MD5

      cad24142abba464dd90777c3d347ef88

      SHA1

      d8db7111fce5a08d8b7c9a6e1e0ad2fbf34cfe12

      SHA256

      edc5bcf685d930a607bc097927260a3f9ac7f52dd809db68158298bfd934b7ce

      SHA512

      5d3ee2ee7921c95cc30790ae670fcadcf091d4fa1b9b5e1b9c7500c67230abe25467236ed160c51aa662e764ccea10e4955887359a65b09432b727abf27f8454

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/2.0/settings.map

      Filesize

      2KB

      MD5

      22c818a23169e12bd3c8587b6394c731

      SHA1

      dd2be2dbccd34736719301aee92429d4258ea5a0

      SHA256

      49c6160f9d54af4270a3b4e997fc4a8301f79b9e2070118fa46ddbcbbc44f9a2

      SHA512

      c1352e817e01277413a1790a94a4f979dc1b8333874fef28d735441c034c97bf8ce501fd9cd04c47d25541a0c1d54fcd4dd3bee9ac3e8fbde83ada9a1d2662d7

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/2.0/web.config

      Filesize

      11KB

      MD5

      2b6303c4f12762b71051db6e947f90a4

      SHA1

      a4d7e05516f63d6ab67327b299d4fb2852cb840b

      SHA256

      3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc

      SHA512

      80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.0/Browsers/Compat.browser

      Filesize

      1KB

      MD5

      0d831c1264b5b32a39fa347de368fe48

      SHA1

      187dff516f9448e63ea5078190b3347922c4b3eb

      SHA256

      8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

      SHA512

      4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx

      Filesize

      59KB

      MD5

      f7be9f1841ff92f9d4040aed832e0c79

      SHA1

      b3e4b508aab3cf201c06892713b43ddb0c43b7ae

      SHA256

      751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

      SHA512

      380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.0/machine.config

      Filesize

      32KB

      MD5

      24c866ce8037fcdca2287234eddff637

      SHA1

      9245befcd116458e9619694f1a785c50fa61b58e

      SHA256

      6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664

      SHA512

      f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.0/settings.map

      Filesize

      2KB

      MD5

      ba17ade8a8e3ee221377534c8136f617

      SHA1

      8e17e2aec423a8e6fb43e8cbe6215040217bb8a3

      SHA256

      ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8

      SHA512

      c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.0/web.config

      Filesize

      18KB

      MD5

      b127480ee9f0b8dab6a3f73ad79dd332

      SHA1

      7d776d730cbd253564713f36573dd8366782788c

      SHA256

      f1a6416eeedd9d040387fd85dcf7d6e074b6644c6829d08be220ff9fc32efb31

      SHA512

      00ddca43ad38127cf71477810c46617fc2ccdc33f197e26ba761151107eff701fec2caa51e43575fb5b4fbc11f640f525ba70b6b3e97811cecabc63773492401

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.5/Browsers/Compat.browser

      Filesize

      1KB

      MD5

      0d831c1264b5b32a39fa347de368fe48

      SHA1

      187dff516f9448e63ea5078190b3347922c4b3eb

      SHA256

      8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

      SHA512

      4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx

      Filesize

      59KB

      MD5

      f7be9f1841ff92f9d4040aed832e0c79

      SHA1

      b3e4b508aab3cf201c06892713b43ddb0c43b7ae

      SHA256

      751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

      SHA512

      380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.5/machine.config

      Filesize

      33KB

      MD5

      0869544722561f5aff0eefc83fc7b001

      SHA1

      1e118f4b5c1c6a7b1858e3fccb1b1d1095561976

      SHA256

      ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6

      SHA512

      ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.5/settings.map

      Filesize

      2KB

      MD5

      ba17ade8a8e3ee221377534c8136f617

      SHA1

      8e17e2aec423a8e6fb43e8cbe6215040217bb8a3

      SHA256

      ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8

      SHA512

      c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/4.5/web.config

      Filesize

      18KB

      MD5

      08101241b15b53ef0ab908f6d388881f

      SHA1

      ea3e2ad6d71d483c54b12852dcbdcd0baa569988

      SHA256

      15a2c7a9242bf54d3ccb3e07fa6d8f84ba8b303d8877243787a1103009941bdb

      SHA512

      a1ee7f17bb069ac42483d1f98ca839ff1bd06f3fc15cd379dff4aca3732a5dac24dc17e15acc8f8fa39e60e186219f4fd70664f9ea284002274a4ff8609791ed

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/browscap.ini

      Filesize

      304KB

      MD5

      378be809df7d15aac75a175693e25fbb

      SHA1

      2d5454e161de8a5b65910f27bd70d9d0ad8fa476

      SHA256

      4ddd50f31fb968f30bedefc253a46dc3f2890192d05cdaa9e0a64a056eee807e

      SHA512

      d0d181e806cbd2c016eb0a8786f7d9db877463eaac0195db4e891be111c9ed87491a1abcfa0d9ed7c2743e004e1f4a3f4789333d0b535e63358c672ae833c363

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/config

      Filesize

      3KB

      MD5

      f668921198511d792d68c113b6ab0ab1

      SHA1

      fed4bb12f1995486f96683a867bd5b69f9f64757

      SHA256

      f23ecc36be723349a2226cbe50b92cd3587dbba52e046b96c700c0e0d5c22d58

      SHA512

      d9baad51bb6313e340d13e9d23fb0002293fc5c4cd668615c34c977a8c31e8cb08b3b76ca3eafc6034a889e26622d240c56c9c1980f2b8fd3107edfa0fdbe1f0

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/mconfig/config.xml

      Filesize

      25KB

      MD5

      f34b330f20dce1bdcce9058fca287099

      SHA1

      936520d5bb5c00a1985d7a4c4f0ef763a9031862

      SHA256

      0c56e34c69124510fa8c19e7b4c2ca6c1c4ff460ae19f798dd0ca035809e396d

      SHA512

      d6d4a8321eb44c117755a41a2590296be86a0568d27a5347f9d7f32f2d151d8f7e169675c83faed2dab5ad0f8d81858f8cd1167e439cd4bff7e68c243e3544fd

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/etc/mono/registry/last-btime

      Filesize

      3B

      MD5

      eb844645e8e61de0a4cf4b991e65e63e

      SHA1

      5031aaf7e6de72cb3e0d03005007ef58cc368b8a

      SHA256

      ee3aa64bb94a50845d5024cd4bd20202a4567aed5cd5328c0d97e9920775fc28

      SHA512

      2a9a07515af006a6877718b1069c4923ebca4ac59d66e32d4ba6ad041cbce653dfc3926dea262bcae183453f533a8754a3706c6b5b60e0d83a7f73db3f19998c

    • /storage/emulated/0/Android/data/com.chillseekers.Necrophonic/files/il2cpp/unity.ver

      Filesize

      8B

      MD5

      0770b9e4236ffb9147cee7619835c385

      SHA1

      c0de43cde4f12eea59f32ca9bcc10ba31a3f72f1

      SHA256

      80035c5ff74c1ecbbc9568362063d88084941acaf91ae97d9761c079bebbff13

      SHA512

      7b6bd5bacbe4b34607c757172caea0a47760a523e224f263cbcdb1bd65edf1c9bf753b80d2b23b0d6823029b4017653e3efb0c03b93d7b878b1d9ecc903200cb