96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
19-05-2024 22:05

Target

96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4.apk
Size

4.6MB
MD5

8690d615d64773dca6f6300372b8a24d
SHA1

0f6ddb687581fa33f484808b18608ec93e47cd9c
SHA256

96120d1868c5471d7f9728411f244f0cdbc0e279cdee6f6705f772661c1305c4
SHA512

a0b541f0175d7c2352008e096ccbee09e8f86d44a910098aea28b7935067ebf255562cc4e2303aadc844e36d7ed6a687b719fb4e0ab1dc5ab1f0f3af28dc6e50
SSDEEP

98304:+98LUAzwcqAW2yvV5etZNEzoPM2Ro6xrOcBCWlPS2ulNQu:+98L55W2yvV5etZqK5oer34WlPS2u/Qu

Score

4^/10

impact

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.essay.existently

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.essay.existently

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.essay.existently

com.essay.existently
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4643

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact