b9b2d06aa0cf07cb5e7f70904c233a43be54f9ab13237167fb59186260bebf1f

Analysis

max time kernel
149s
max time network
150s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
27/03/2025, 04:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b9b2d06aa0cf07cb5e7f70904c233a43be54f9ab13237167fb59186260bebf1f.apk
Size

3.1MB
MD5

9bc00cfa7f990865001d3268674013d4
SHA1

de79b2f51bbf64ec55514b9807613ccbb66209a8
SHA256

b9b2d06aa0cf07cb5e7f70904c233a43be54f9ab13237167fb59186260bebf1f
SHA512

3f6e931933d17d16ab2b550571b88ade708558c6386fe247655ddbae9bd475c84dc7f02958c56f1beda98bcebe616efef8649e9ab6677cf6060f6a8c4a863e4b
SSDEEP

98304:G8JUSpNFhibK2PstkhthZDKkX9yEpGTg6axiREIq47zlDZFPKa:G8JUUibK2Pokh7ZDKkykxYREIqqFb

Score

8^/10

evasion ransomware stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4218	com.my.redbloker

Changes the wallpaper (common with ransomware activity) 1 IoCs

ransomware

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	com.my.redbloker

com.my.redbloker
1⤵
- Removes its main activity from the application launcher
- Changes the wallpaper (common with ransomware activity)
PID:4218
- logcat -c
  2⤵
  PID:4249

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/system/users/0/wallpaper_orig

Filesize
132KB

MD5
1e7a20e7abe0974b313d24d7697984b9

SHA1
6d34cdfd7f96b08b22608cc41289a2c3a093b0e2

SHA256
4aa59a8942658cceb5e000b985f6259c703ede05621b81ea9e5effa5aba727d0

SHA512
cb02e26bb97939ba43fd2e484151e0f0d9ed63bcc152429141d9adf80d4358f33b3c34c4c21f2a615281852ac4b7a7d9ee7a879bd2c51f0a087a4e34cf9b4101

Download Submit