ec094715e8e9a5581a208cf5b506dc42fc78e5fba28a4395263a13e8b7e27b46

Analysis

user interaction
yes
max time kernel
30s
max time network
34s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
03/05/2026, 14:20

Target
Гена.apk
Size 2.1MB
Sample260503-rnvltaev5q
SHA256 ec094715e8e9a5581a208cf5b506dc42fc78e5fba28a4395263a13e8b7e27b46
MD5 7093eb6c90772d9e4c644ab3361209c3
SHA1 b164c1568d62b1deb5db21fcfc05b39daab81b09
SHA512 ff8278cdf2802a5243522c4d1b76d944a6a73a23b302905ec607fb1218a96f588396157e9bdd45439f672ccacb3b58234bf72900df195461b5c5655129d8c9e2
SSDEEP 49152:4Dy3stBIDy3stBP9Agn3jhgkPrh5TN57jVCjGnHp/GTTvTrha4:4D3jID3j93jG+h5T7VWGHNwrha4
TLSH
T1F6A5236FD24DDA63C052AB311A0B4694FC464FFD9E16FFE6B8A0F38049F9219B51B016
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

ransomware

Changes the wallpaper (common with ransomware activity) 1 IoCs

description	ioc	Process
Framework service call	android.app.IWallpaperManager.setWallpaper	com.gena.bykolxay

com.gena.bykolxay
1⤵
- Changes the wallpaper (common with ransomware activity)
PID:4756
- logcat -c
  2⤵
  PID:4826

wallpaper_orig

Path /data/system/users/0/wallpaper_orig
Size 279KB
SHA256 dee717ecf62287169352f2f3982fd6ac623d4c17c312582458fc57d2b1e17101
MD5 d8ea79ce296a8196c8e89fd4ba39ff6d
SHA1 a5ccb59fddde8a6601c4c350d7406011f3993627
SHA512 ccce753ebe4c34f31b22e53a1d83b61541a6cebeb99e7c49c2b4d29b8fd88251ac188b095b8e790183365f4a536ad7241269e5da8fe30c0b8107a5916d6744e9
SSDEEP 6144:/Qou6ATc9yrpOl2Glw2axsVOjdrEqIQNOU9IF3hez4sttnCXVv3Ce8Hy7:/w6AI9I0o2a4GRO8IN24kCXV/D7
TLSH
T1DB5423BDD0EA9717E0736342A81A59519A49C37CCD73A3F11C70E280837F4258A2F37A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download