General

  • Target

    worldbox-mod-0.22.10-apkrom.apk

  • Size

    145.1MB

  • Sample

    240223-2xr76aba52

  • MD5

    834cfd5a18342d923835633c6fc3383b

  • SHA1

    3fea2f882a5c7e1e611ff2a9118821781de930d2

  • SHA256

    2cf0e4c3e90a87f0da047bf5c2baa206d7e41daf363dacc52c74410456d475cc

  • SHA512

    2ee44b0380cd1b9cf2c87dc40d72ed394ec7aa2ce7f5409dd02677b62c40101054d0d8cee8f00771979a4e219639cc374ec1b0cd1cc45c7a24c6eae315e8f78c

  • SSDEEP

    3145728:oGOewLwv00Q58AKWQzp7s+g+2lowd6wPydgpcZmmFsKmq4gsCDFWv:oG3cwM0Q58A1sOFd6wPy6pc5sKBJq

Score
9/10

Malware Config

Targets

    • Target

      worldbox-mod-0.22.10-apkrom.apk

    • Size

      145.1MB

    • MD5

      834cfd5a18342d923835633c6fc3383b

    • SHA1

      3fea2f882a5c7e1e611ff2a9118821781de930d2

    • SHA256

      2cf0e4c3e90a87f0da047bf5c2baa206d7e41daf363dacc52c74410456d475cc

    • SHA512

      2ee44b0380cd1b9cf2c87dc40d72ed394ec7aa2ce7f5409dd02677b62c40101054d0d8cee8f00771979a4e219639cc374ec1b0cd1cc45c7a24c6eae315e8f78c

    • SSDEEP

      3145728:oGOewLwv00Q58AKWQzp7s+g+2lowd6wPydgpcZmmFsKmq4gsCDFWv:oG3cwM0Q58A1sOFd6wPy6pc5sKBJq

    Score
    9/10
    • Renames multiple (66) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks