c05774fdb47c39b36a86e806ad9eec4eefc5c98619cf76c00e74dc7c7b7a4e99

Analysis

max time kernel
6s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
05-09-2024 22:02

Target

c05774fdb47c39b36a86e806ad9eec4eefc5c98619cf76c00e74dc7c7b7a4e99.apk
Size

4.6MB
MD5

1e8ed8905bd8964647452f8ba241ef4c
SHA1

30eab028035dea300198b49ce82fa0f2fe00f664
SHA256

c05774fdb47c39b36a86e806ad9eec4eefc5c98619cf76c00e74dc7c7b7a4e99
SHA512

eae04bf6bbd27c5a9fa6cbf9e7d0199de095c0908d5f9cea2ea49454a3454b22b9ed8cf46f720fea83f50172d8239bdabf20af0233680c4b95d43391ca2537cc
SSDEEP

98304:VpvvINX9beOJ7m8a7yLBMB566ng2HryD80QlCT:VVANH7m8awBM13mAZCT

Score

4^/10

impact

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.fiftythird.calomba

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.fiftythird.calomba

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.fiftythird.calomba

com.fiftythird.calomba
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4767

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact