arsink | 4f4076b404788e6c4110aa5a3275bcfccb2818c283f670f776f362869179bbdd | Triage™

Login
Reports

Overview

overview

Static

static

AyuGram (1).apk

android-9-x86

7

AyuGram (1).apk

android-10-x64

7

AyuGram (1).apk

android-11-x64

7

Blok-reklam.TPS.apk

android-9-x86

4

Blok-reklam.TPS.apk

android-10-x64

4

Blok-reklam.TPS.apk

android-11-x64

1

Granny001(...n).apk

android-9-x86

1

Granny001(...n).apk

android-10-x64

1

Granny001(...n).apk

android-11-x64

1

Vpn For Brawl.apk

android-9-x86

7

Vpn For Brawl.apk

android-10-x64

7

Vpn For Brawl.apk

android-11-x64

7

base (3) (1).apk

android-9-x86

5

base (3) (1).apk

android-10-x64

5

base (3) (1).apk

android-11-x64

5

base.apk

android-9-x86

4

base.apk

android-10-x64

4

base.apk

android-11-x64

1

播放標記 (1).apk

android-9-x86

1

播放標記 (1).apk

android-10-x64

1

播放標記 (1).apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Samples2.zip
Size 4.5MB
Sample260331-vr467sfv2y
SHA256 4f4076b404788e6c4110aa5a3275bcfccb2818c283f670f776f362869179bbdd
MD5 96c1532f23d541737e6dd803a57f2e6f
SHA1 13a89f8ebc537a4d4f4ba0d70fbfc335bf8037e3
SHA512 266abdf2ae8bc69c9e2873fd082e5220b84291f61e9736a86b59043b5546b8f92f8cfd5dc6e5ad96b6a25da571b394319ec30de6e99ba58be602d55b386a8818
SSDEEP 98304:ugCNc8MAN6dSK1l15k298FDHv8s1BT8iT4FEE+Kf58esaNS+Wz/:EdHNKSK1ziFosH8J+efNW/
TLSH
T1972633989292278289EF56308D86228773BFBB5F2700FA9C489C2D17CD5BEEF5714215
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

arsink slocker wipelock android collection impact persistence privilege_escalation ransomware

Static task

static1

10 signatures

wipelock slocker arsink

Behavioral task

behavioral1

Sample

AyuGram (1).apk

Resource

android-x86-arm-20260325-en

android-9-x86

2 signatures

30 seconds

collection impact privilege_escalation

Behavioral task

behavioral2

Sample

AyuGram (1).apk

Resource

android-x64-20260325-en

android-10-x64

1 signatures

30 seconds

Behavioral task

behavioral3

Sample

AyuGram (1).apk

Resource

android-x64-arm64-20260325-en

android-11-x64

2 signatures

30 seconds

collection impact privilege_escalation

Behavioral task

behavioral4

Sample

Blok-reklam.TPS.apk

Resource

android-x86-arm-20260325-en

android-9-x86

1 signatures

30 seconds

Behavioral task

behavioral5

Sample

Blok-reklam.TPS.apk

Resource

android-x64-20260325-en

android-10-x64

1 signatures

30 seconds

Behavioral task

behavioral6

Sample

Blok-reklam.TPS.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

30 seconds

Behavioral task

behavioral7

Sample

Granny001(Break-in).apk

Resource

android-x86-arm-20260325-en

android-9-x86

0 signatures

30 seconds

Behavioral task

behavioral8

Sample

Granny001(Break-in).apk

Resource

android-x64-20260325-en

android-10-x64

0 signatures

30 seconds

Behavioral task

behavioral9

Sample

Granny001(Break-in).apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

30 seconds

Behavioral task

behavioral10

Sample

Vpn For Brawl.apk

Resource

android-x86-arm-20260325-en

android-9-x86

2 signatures

30 seconds

collection impact privilege_escalation

Behavioral task

behavioral11

Sample

Vpn For Brawl.apk

Resource

android-x64-20260325-en

android-10-x64

1 signatures

30 seconds

Behavioral task

behavioral12

Sample

Vpn For Brawl.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

2 signatures

30 seconds

collection impact privilege_escalation

Behavioral task

behavioral13

Sample

base (3) (1).apk

Resource

android-x86-arm-20260325-en

android-9-x86

1 signatures

30 seconds

Behavioral task

behavioral14

Sample

base (3) (1).apk

Resource

android-x64-20260325-en

android-10-x64

1 signatures

30 seconds

Behavioral task

behavioral15

Sample

base (3) (1).apk

Resource

android-x64-arm64-20260325-en

android-11-x64

1 signatures

30 seconds

Behavioral task

behavioral16

Sample

base.apk

Resource

android-x86-arm-20260325-en

android-9-x86

1 signatures

30 seconds

Behavioral task

behavioral17

Sample

base.apk

Resource

android-x64-20260325-en

android-10-x64

1 signatures

30 seconds

Behavioral task

behavioral18

Sample

base.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

30 seconds

Behavioral task

behavioral19

Sample

播放標記 (1).apk

Resource

android-x86-arm-20260325-en

android-9-x86

0 signatures

30 seconds

Behavioral task

behavioral20

Sample

播放標記 (1).apk

Resource

android-x64-20260325-en

android-10-x64

0 signatures

30 seconds

Behavioral task

behavioral21

Sample

播放標記 (1).apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

30 seconds

Malware Config

Targets

- Target
  AyuGram (1).apk
- Size 533KB
- SHA256 fcee982b3d0e1601b40078d98df03503668aec7542721f921ae8248bc3cec3a1
- MD5 9f01767647e2e72f446d374bbcb20c53
- SHA1 f6b1adcd7723b525418a05bcede5c671366d7ab3
- SHA512 4b9dc2dc08f015ed96a3ce30978994314d3edca84348eb62e7cb65d4d5477f179c44c80cc0a67863bc119555d0217f57681d047ce98ec405bd5eeaf2da8280ed
- SSDEEP 12288:kjRH6+O//n3tKpSsM+1HA+x283ecVS3EVqPlR6i0Ci3jM34D9Z:kN6+ONjstg38OOS3EW6i0C+M3SZ
- TLSH
  T145C423A4D2EDF583C9BBA73487654247D53777A268201B0016DCB837E4AFB644F42B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection impact privilege_escalation
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral1 behavioral2 behavioral3
- Target
  Blok-reklam.TPS.apk
- Size 184KB
- SHA256 8ec195cd1f5c9f66c75000f26120832d7e1a9044fe3699d18d676bd5739b8518
- MD5 69119c73ed5417445b2d24952ff428e7
- SHA1 4694bc2e23eac8acbb501220c2a722ae6ce90610
- SHA512 45b25cddfb0424998714e65f1595fbfca89b70cc5a4abb7fae6297aaf9b811b03f46f8148f81af3b7311f352d3db6ed441186cfd612824b813fe3c75202678a0
- SSDEEP 3072:Yulq8duqQqj7yVtIw3Ng5kQi3PJg7u3sw6ou64UU/U7Xji02U9ziqJH6/h9uYL:YGQqPyVtT3Cu/RguZwxUUui02U9zbaJj
- TLSH
  T10D0412CC85F39622EED751FF113F197372E95B6AFF9BE10264075810C8A7A9E8465032
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

persistence
behavioral4 behavioral5 behavioral6
- Target
  Granny001(Break-in).apk
- Size 1.4MB
- SHA256 6d67d9b244b51c65774a6afe5301a7c9034a95dfcbc203020eeddc41906108e5
- MD5 7228120cb86f989dbbd1078794405b24
- SHA1 083dbbea867092618aa1e42a98c8f21abaa7f2da
- SHA512 6efe7d49697851c97770f315f4ad16a1f3293230997e3a85bcc1f3e5896d417e536f2f2c8a442092aa4f129ad7e765da5b66475b6fd0896afb292e0a9ce5916c
- SSDEEP 24576:ZaLDXHx6io2fOovDtn5F3B661pcmczOQ7acfIxfg/nk0frtcBtPYUgU:MHXw0Govhnr3B66Qrz97bf2g/nk0frtq
- TLSH
  T16265AD49F748A62FC9B341334A72166666974C4EAA42D74359A8720C1EB7EC04F9FFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  Vpn For Brawl.apk
- Size 548KB
- SHA256 8675b8bc5960da9a346476366fc9265de3fa9f9dda7bdcd293898af394996f05
- MD5 373ffe6af0fdd084b1eb262be4e0ba44
- SHA1 32348b21a46f32812665fbd2bd9d1789129afde8
- SHA512 63893eb79e043ca4fbf0b242357dfbf5142a17f3767428d10a053e9e0ee847314e1481a2db07010bb85deaa0f061b6491a071ed3f088520c8074578d26bc5e07
- SSDEEP 12288:9cVS3EVqPlR6i0Ci3jM34D9PwUwFFHi+UV/nBumiVxDTm+1hAovIR1s:9OS3EW6i0C+M3SPCFNi+UbumirDrqQIA
- TLSH
  T161C4235CD9FCB2C3D5EB6A305B28224ADA7B6365B0303F8519DC9824D0FBBD44A8136D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection impact privilege_escalation
- Reads the contacts stored on the device.
  collection
- Tries to add a device administrator.
  privilege_escalation impact
behavioral10 behavioral11 behavioral12
- Target
  base (3) (1).apk
- Size 1.5MB
- SHA256 a0c393f8a4c6d32de448742f0dd4e84c7bad87fcc3b3ec02b7a05ab1c1d87ba4
- MD5 30081dc00fcce8444da0e693d4b42e54
- SHA1 0378e9906f4e5672e902fabaa228920b09f7f23a
- SHA512 277825a81fc7a2ff52bbdc2c3a0b54786aa2e77908fa77e066ca85c65872a221b031ef7497883aef1503dc82de7fc30c771833f227550bd9e092ae13c5ffc121
- SSDEEP 49152:qaKZH+8ZkOPjRhLeUmIok1mbr21Rwhx4mP:GZeqjPT/mINmswhxJ
- TLSH
  T1A37523F33382EF58C015CAB8424E13D6EAD28EEC35B1DA45BD277E5429F1626F7A1600
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

ransomware
- Changes the wallpaper (common with ransomware activity)
  ransomware
behavioral13 behavioral14 behavioral15
- Target
  base.apk
- Size 192KB
- SHA256 5e22751a55c33930e45d1593870b0212b127b97525b58d5bd5f50ea40399696e
- MD5 77e41a7c8cd996d6c27762e5fc63ee76
- SHA1 9ee0686b13c8cbb848bdd99122deb77f8844b88c
- SHA512 25f8b31395dfc368a6c9a5ec4bcef20fd7c99c1eacf38ba8e65b656a78beb491d6e3d54aa11e686b1c9b21d25aed2e76ccee7a34da7c177c9c38615ca603af09
- SSDEEP 6144:kzpI6oQqPyVtT3Cu/RguZwxUUui02U9zbaJy:kzpI6oQqIz/RguQDuT26zT
- TLSH
  T1FC14124C58B69532EF47107E162F5867B2A599CFEFAAF314F4079C22C8B2E898474037
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

persistence
behavioral16 behavioral17 behavioral18
- Target
  播放標記 (1).apk
- Size 733KB
- SHA256 b478091f78b2d547a58ca5e8e7c25c21667a16e827e93c633d80031f1c07a835
- MD5 779534c9eb8b6305bfc4aa331b230876
- SHA1 39a54cc516e7194a20b72904c57f9363f619d555
- SHA512 f427d2422d1c4547acdd59be0b9f125dc70cfd36d63a9ea2d1a2dcf86d91f077d707b78a5c3686ff538ae2f4c663dac0761376d0ddc5f24e15e1a640ec50e92c
- SSDEEP 12288:uv6mS2Mf5BV6Yg+xE6XI+EurSP9HNwZXAY3+9ufJh0CuVhN4aDv:uvOzP6Y0WEmSP9HNmt+IunH
- TLSH
  T1ACF423C857D468F0D12FD6BF50EAA8245A9E3D9E88D9DBC434AEFB219FF1111388510E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20 behavioral21

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Tasks

static1

wipelockslockerarsink

behavioral1

collectionimpactprivilege_escalation

behavioral2

behavioral3

collectionimpactprivilege_escalation

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

collectionimpactprivilege_escalation

behavioral11

behavioral12

collectionimpactprivilege_escalation

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

© 2018-2026

Terms | Privacy