General
- Target vanilla-ayuGram-full-universal-20260329.apk
- Size 160.8MB
- Sample260919-yc9d6abd64
- SHA256 01bb6ad06a274bfbe315286ffb0766cbed94060cd07c256e86c1284a135d43d3
Score
9/10
Malware Config
Targets
-
- Target vanilla-ayuGram-full-universal-20260329.apk
- Size 160.8MB
- SHA256 01bb6ad06a274bfbe315286ffb0766cbed94060cd07c256e86c1284a135d43d3
Score9/10-
Renames multiple (53) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Checks if the Android device is rooted.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads the contacts stored on the device.
-
Reads the content of photos stored on the user's device.
-
Acquires the wake lock
-
Queries information about active data network
-
Checks the presence of a debugger
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1Conceal Multimedia Files
1Discovery
Process Discovery
1System Information Discovery
1System Network Connections Discovery
1