Resubmissions

28/03/2025, 16:50

250328-vcrmkazry6 6

25/03/2025, 03:16

250325-dsvkqatmt4 6

Analysis

  • max time kernel
    299s
  • max time network
    299s
  • platform
    android-10_x64
  • resource
    android-x64-20240910-en
  • resource tags

    arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
  • submitted
    28/03/2025, 16:50

General

  • Target

    02ddbc3f2bf43e829b32ccda91d36e191f88558243e2cc24bdc1ab9d240db996.apk

  • Size

    872KB

  • MD5

    a1352d6cc8cc327189648cbb5c277d46

  • SHA1

    229f23ae0a9e8751efc51d73b2b7c4a0d60b7bfd

  • SHA256

    02ddbc3f2bf43e829b32ccda91d36e191f88558243e2cc24bdc1ab9d240db996

  • SHA512

    d7b2ee5be11de8b311c722899fe4f80ef41b2fd21b29d91da828ad9a3f5fb404e4b80fe506c8c9c920787d0d9b7ff363ca6586e5a69b234cf5ecd11f878e0dc6

  • SSDEEP

    24576:PfQz5dOLA9/4maqeYfE7yRRR+8dYyXoG2bSuASEC:QoA9/JTeYfE7yRmoXoG2bn

Score
5/10

Malware Config

Signatures

  • Changes the wallpaper (common with ransomware activity) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.my.newproject101
    1⤵
    • Changes the wallpaper (common with ransomware activity)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5061

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/system/users/0/wallpaper_orig

    Filesize

    737KB

    MD5

    98cc20079319caff33ee6f1ffa2e9df8

    SHA1

    0ff6d694f7368dfeea2930d40ba9adf9acaf21ce

    SHA256

    c033d6283321a7291f17c4d5851d3b12382a405bb03314aeb9c062bf0b7aecee

    SHA512

    666274a274ebfce602b3baea6f51d7589d8ccbe3e066dfb77bb01ca851571304e52d238837c258fdb6995e4d3b3e5b62d126b74c6077c87c1b6a21c6d9cc09f2

  • /storage/emulated/0/Alarms/READ_ME.txt

    Filesize

    1KB

    MD5

    1429a9d1daf014a3fbd3347c0a060dc1

    SHA1

    3fcc3796ad24826236133f81c0da7de978fc4562

    SHA256

    4753444d365582234ffe4f5216cbb7421f7b18fc0854e656b4e8293239836772

    SHA512

    34399a4bc31d0ba0fd73941277c926d9c04e6431a8f9ee9eea6914f1679ce263bd9fe1c180fad5648159bc3a08bd1703be1d07b35cf007e76c71032a4b462d96

  • /storage/emulated/0/Android/data/com.google.android.googlequicksearchbox/files/pending_blobs/brain_en_uk_201709_arm32_release_signed

    Filesize

    5.3MB

    MD5

    58a5189d4c693cc046b03d9a69d17ed1

    SHA1

    435a89268a4cfd9c8ef1596986d6e3043de19f35

    SHA256

    3bc07e41599624eeceb342c4d697c75a860fd1dbad4998795e254914ba3bdbcd

    SHA512

    2dbb48e43eb1559308762bd0ed2e825cec404fad3e00eaecb95a805225890b1861a1a765b8bb9a2587ececb2fc1f62a238fd95faecace35bdd67a9121145aeb4

  • /storage/emulated/0/Android/obb/.nomedia

    Filesize

    16B

    MD5

    aadafaa0fd30515038d090dc380d1787

    SHA1

    a20a9b9d744b16dd39c2e02d548f5de5371b16fa

    SHA256

    2b0b5895c5b4a6407e9f83c33b00aa88e1eb304feaf9bd6827e0e930774eb0cb

    SHA512

    16f496f7ca0f06b3582311ee477a78b429852593cdc5f48f9cd58f3861a698ca0aa039a76322b0eb5a5e031a35f61a0684d746c1e476e9e53fdbd167a893ff72