02ddbc3f2bf43e829b32ccda91d36e191f88558243e2cc24bdc1ab9d240db996

Resubmissions

28/03/2025, 16:50

250328-vcrmkazry6 6

25/03/2025, 03:16

250325-dsvkqatmt4 6

Analysis

max time kernel
149s
max time network
145s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
25/03/2025, 03:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

02ddbc3f2bf43e829b32ccda91d36e191f88558243e2cc24bdc1ab9d240db996.apk
Size

872KB
MD5

a1352d6cc8cc327189648cbb5c277d46
SHA1

229f23ae0a9e8751efc51d73b2b7c4a0d60b7bfd
SHA256

02ddbc3f2bf43e829b32ccda91d36e191f88558243e2cc24bdc1ab9d240db996
SHA512

d7b2ee5be11de8b311c722899fe4f80ef41b2fd21b29d91da828ad9a3f5fb404e4b80fe506c8c9c920787d0d9b7ff363ca6586e5a69b234cf5ecd11f878e0dc6
SSDEEP

24576:PfQz5dOLA9/4maqeYfE7yRRR+8dYyXoG2bSuASEC:QoA9/JTeYfE7yRmoXoG2bn

Score

5^/10

impact ransomware

Malware Config

Signatures

Changes the wallpaper (common with ransomware activity) 1 IoCs

ransomware

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	com.my.newproject101

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.my.newproject101

com.my.newproject101
1⤵
- Changes the wallpaper (common with ransomware activity)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4383

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact