irata | abf7f807dafa04d517a562f1beab15bd77f584f399b48e7f371a7fef42bf9882 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abf7f807dafa04d517a562f1beab15bd77f584f399b48e7f371a7fef42bf9882_JC.apk
Size

3.0MB
Sample

231011-gqde7sde2z
MD5

2f34af0337a3b85310a6026c74fb89e2
SHA1

09da0f8c05ff3e7314063a07bfe7616dbef39692
SHA256

abf7f807dafa04d517a562f1beab15bd77f584f399b48e7f371a7fef42bf9882
SHA512

c1dd30b110d43c11a551bcd9d0fc2ba5e9f3bcd94eded0080a201b5b7ce6c0ba43a7e73faa041a15bacd6aa347b58873cd9f5d51940d64d521ff2d5f550756e2
SSDEEP

49152:thCx/vtCQk3pmjS5/Xv9L7gtSMr9VVkqAjSqz5sMh+JjhwHZ6Hqy5E8lHs/Ip7f/:tE7Ymj2vFwLq/S25sMhsF2Qqy5Ll1h

Score

10^/10

irata android ransomware

Malware Config

Targets

- Target
  
  abf7f807dafa04d517a562f1beab15bd77f584f399b48e7f371a7fef42bf9882_JC.apk
- Size
  
  3.0MB
- MD5
  
  2f34af0337a3b85310a6026c74fb89e2
- SHA1
  
  09da0f8c05ff3e7314063a07bfe7616dbef39692
- SHA256
  
  abf7f807dafa04d517a562f1beab15bd77f584f399b48e7f371a7fef42bf9882
- SHA512
  
  c1dd30b110d43c11a551bcd9d0fc2ba5e9f3bcd94eded0080a201b5b7ce6c0ba43a7e73faa041a15bacd6aa347b58873cd9f5d51940d64d521ff2d5f550756e2
- SSDEEP
  
  49152:thCx/vtCQk3pmjS5/Xv9L7gtSMr9VVkqAjSqz5sMh+JjhwHZ6Hqy5E8lHs/Ip7f/:tE7Ymj2vFwLq/S25sMhsF2Qqy5Ll1h
Score

6^/10

ransomware
- Reads information about phone network operator.
- Uses Crypto APIs (Might try to encrypt user data).
  ransomware
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3