irata | c4b0ab9adf2c65fa49d9d0674b8fa3881c84dafca85dcaba9399b5b6323479ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4b0ab9adf2c65fa49d9d0674b8fa3881c84dafca85dcaba9399b5b6323479ab_JC.apk
Size

5.2MB
Sample

231010-wsczsahd83
MD5

255ce0818900538dd0f3f41b1e71dbb6
SHA1

04b23e8eb3d0431254def7a72af3486caeb45a56
SHA256

c4b0ab9adf2c65fa49d9d0674b8fa3881c84dafca85dcaba9399b5b6323479ab
SHA512

23205c001e17c4721db5d290077cd2709a18982e4e37d8c2a0ee79e73b583283374255fdfd4ce09f1d9569136d3bd2cb198f2998aaf364daf88550d64079e567
SSDEEP

98304:KviBHsLZhAN9tfrqmfP+A4ZREIlrUVLeVOHTr3H1eIc7nUQbAc71b:UiBMLZw9nPT4ZRZtWLxtpetpb

Score

10^/10

irata android ransomware

Malware Config

Targets

- Target
  
  c4b0ab9adf2c65fa49d9d0674b8fa3881c84dafca85dcaba9399b5b6323479ab_JC.apk
- Size
  
  5.2MB
- MD5
  
  255ce0818900538dd0f3f41b1e71dbb6
- SHA1
  
  04b23e8eb3d0431254def7a72af3486caeb45a56
- SHA256
  
  c4b0ab9adf2c65fa49d9d0674b8fa3881c84dafca85dcaba9399b5b6323479ab
- SHA512
  
  23205c001e17c4721db5d290077cd2709a18982e4e37d8c2a0ee79e73b583283374255fdfd4ce09f1d9569136d3bd2cb198f2998aaf364daf88550d64079e567
- SSDEEP
  
  98304:KviBHsLZhAN9tfrqmfP+A4ZREIlrUVLeVOHTr3H1eIc7nUQbAc71b:UiBMLZw9nPT4ZRZtWLxtpetpb
Score

6^/10

ransomware
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3