Overview

overview

7

Static

static

7

sportsfire...1).apk

android-9-x86

7

sportsfire...1).apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    sportsfire1.0.5 (1).apk

  • Size

    13.5MB

  • Sample

    231012-ppq9nscc38

  • MD5

    b6fde0b885f3a6bfc1f30d1510ca487b

  • SHA1

    e580f5acabfdc7ec2fe2206d6b732500143c37c4

  • SHA256

    bddc0edd8a79c6ae0919cd52e038717066880d4dbbd0596c6023cedb0ea12018

  • SHA512

    52963aa087a511f10226c45a07b850eeea96255cd8d710cf3d22c0faf33efe107e9a169318a4f9068bee7406c5fe157ee9e5e24bd2995dfb1109215822451ae1

  • SSDEEP

    196608:lSXWiBe/AJWTZ3FfaPnPJq7eSbDmdKsBuDYAICzTnbGSAt5J87Hrrx+R5QeqFTKu:lSXU/A43bidKqu1j6S4J8zAhqqy

Score
7/10
androidevasionransomware

Malware Config

Targets

    • Target

      sportsfire1.0.5 (1).apk

    • Size

      13.5MB

    • MD5

      b6fde0b885f3a6bfc1f30d1510ca487b

    • SHA1

      e580f5acabfdc7ec2fe2206d6b732500143c37c4

    • SHA256

      bddc0edd8a79c6ae0919cd52e038717066880d4dbbd0596c6023cedb0ea12018

    • SHA512

      52963aa087a511f10226c45a07b850eeea96255cd8d710cf3d22c0faf33efe107e9a169318a4f9068bee7406c5fe157ee9e5e24bd2995dfb1109215822451ae1

    • SSDEEP

      196608:lSXWiBe/AJWTZ3FfaPnPJq7eSbDmdKsBuDYAICzTnbGSAt5J87Hrrx+R5QeqFTKu:lSXU/A43bidKqu1j6S4J8zAhqqy

    Score
    7/10
    evasionransomware

    • Acquires the wake lock.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks