Analysis

  • max time kernel
    1075248s
  • max time network
    41s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    24-06-2021 22:10

General

  • Target

    AdGuard-Premium-v3.6.apk

  • Size

    34.2MB

  • MD5

    6f9536e4c3d9b0062676378d10885f6b

  • SHA1

    4d3115b770b5db98cd9ff7a1f27c57e1350329c9

  • SHA256

    c6e9fafd9a7f3283b2ac59a14a014561e9a7d50975f8a0ab888f701d8c04d4c1

  • SHA512

    79a2668054f7cadebd80f13c35f0828508da5da1eaf434c94476254283256b9ab63140122cbb6ef51615db2bdcc9c706b3db76bbdc22814254ac144e65635ff6

Score
3/10

Malware Config

Signatures

  • Uses reflection 44 IoCs

Processes

  • com.adguard.android
    1⤵
    • Uses reflection
    PID:3642
    • com.adguard.android
      2⤵
        PID:3797
      • com.adguard.android
        2⤵
          PID:3814
        • com.adguard.android
          2⤵
            PID:3874
          • com.adguard.android
            2⤵
              PID:3895

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.adguard.android/cache/sentry/.sentry-native/130258c7-241e-4088-474e-853e90e0d3eb.run.lock
            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

          • /data/data/com.adguard.android/cache/sentry/.sentry-native/130258c7-241e-4088-474e-853e90e0d3eb.run/6949f74e-9b84-441d-ee7a-bb6d1e8eb0f0.envelope
            MD5

            2d4b6b7462cce03f13514da79ce764c0

            SHA1

            fc43695ac441c22cffa95e7f9e2affbe2f6edd07

            SHA256

            1acc44e0fbeaf47043d16c4838a4d9cc46da4c26c766776e1708cac1e5dab9ac

            SHA512

            a25c15ca7720f18fd609a8d94961112ef6eaf00591ca196fa49be226258c605f8325a76f12507b2b071a48b127a561c7cb60fdfab67a2f42b811aa18c9d7eb00

          • /data/data/com.adguard.android/cache/sentry/.sentry-native/130258c7-241e-4088-474e-853e90e0d3eb.run/e843c016-776a-4d4e-cf19-95194fcd5eb7.envelope
            MD5

            e7c7610e63ec7493d3d3664d777b8a64

            SHA1

            2324b35c1629430b676e63a14d5dd2cfdfb2461a

            SHA256

            c0c22b85f50ba72876b9d0ce031cced19634c2f5123b9f48ddc4e197fca1393d

            SHA512

            db0bd7866cebecae29daed685904642f765b3be5bf51e034c07627de064417d6ee8a58da0c3d93c8a73c4c0b8bb11ef65bce660d6591226a9a2febe3cf0b50e6

          • /data/data/com.adguard.android/cache/sentry/.sentry-native/last_crash
          • /data/user/0/com.adguard.android/cache/e.id
            MD5

            9af5267159847df1a77055d9ba08681e

            SHA1

            bb7c2aa3b7df1558310393d5c5e788e06fd7b8e7

            SHA256

            30c4cdd62a6da6b634b3ce788a6e7f1d0dc9466da98fcf4de07e427e4c44a1f2

            SHA512

            14451fb4409d0c0c12c1a33304746a030c8872945036b5f4dcc9b16d3f8781ece3bd9e849f1da745c8b088370b2a65a5f6f1a434ec0d5a1ae6e58ac26042a068

          • /data/user/0/com.adguard.android/databases/adguard.db
            MD5

            e2c7242e5fc4c16505cc341793a418fe

            SHA1

            45ba42de2ee9ffc7d8271c3b853e3bb006e21239

            SHA256

            3d5f473bc5915d648b960bc9eec88a96ac1aa158c84f55da0394577de7dc05b2

            SHA512

            166270a381f27422c0068433dbe4e70935332216f3d4466b0578049bbb819801f08e28cb8482442a3c5ee37614480e27645377ab8e74897de223b0c5c3507199

          • /data/user/0/com.adguard.android/databases/adguard.db-journal
            MD5

            4141833d43ecf12061dff865f4dca360

            SHA1

            57da200c2d3aa143ebc2d7f9a3a06498ab3c4799

            SHA256

            2a6e909c027b2e6aa8644a8cfa59c50ecbad772ba296331e5b92a6c9122c0e8a

            SHA512

            7494271e0f4fa8c90baa1cc84121888b346d81c6867fa9f648fe287390c31eebe3620c400c26d4c533ee486fcc3d4ba4b86dcbcd9b71dff50f11d96ba4b6d276

          • /data/user/0/com.adguard.android/databases/androidx.work.workdb
            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/user/0/com.adguard.android/databases/androidx.work.workdb-journal
            MD5

            d41d8cd98f00b204e9800998ecf8427e

            SHA1

            da39a3ee5e6b4b0d3255bfef95601890afd80709

            SHA256

            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

            SHA512

            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

          • /data/user/0/com.adguard.android/databases/androidx.work.workdb-shm
            MD5

            a4b145ca2f7d214a6f48064c8236ac89

            SHA1

            165a834cfe4bf0b5302e1ae6b2e5264b2a07b9b6

            SHA256

            15d406a4259a21310f835df5127a78e6cccb4913e813be525def77a8d00c229c

            SHA512

            0d4355b34dfcf8fd65d02ddf48d708d135fe53f41dc5aed6395d7076a8e4528238e75718fdd35e68da9e1130c49782f626e857632a52d0f4d85d6e062ed36d13

          • /data/user/0/com.adguard.android/databases/androidx.work.workdb-wal
            MD5

            41445e800dd8ca33ed1dfb8d27a9b01c

            SHA1

            3221d28ccbda16e0c8f305f31c10c664e3407e23

            SHA256

            a7bdfd8816108a0dc36b2439a763e54a20a16875974874595d4c933ead1a4e29

            SHA512

            e77c89798d25cc8db144979a43273b489c77d49125c73f95a14d88e0f9730a17927ce161c482ec39145fe59dc4bd053899f75f6031f28f00c19683e0beae86b0

          • /data/user/0/com.adguard.android/files/adguard-core/gm.db
            MD5

            ec271de5219708f5ae8ae37b6a6d307f

            SHA1

            9823eeb9c5117ff59ffd1bf72734ab9631bdf173

            SHA256

            8a480efe143074faae0be5ceeeff877e262982b0ad9cb08d7bae0963b87f63e0

            SHA512

            c9b7df2e2a8fd050d0129224bd4b347f82890aea56e6748abade421bfe0b952c368e0d85710cf23658b2149cee512b80822339fcfae93de4283eff246f760fd1

          • /data/user/0/com.adguard.android/files/adguard-core/gm.db-journal
            MD5

            5684dacc53dfa49638830717e5a106c8

            SHA1

            b5aba952188fa2a137dc460be4e1f7dd5a160195

            SHA256

            a618eb6e6c822c23b400e92a11700432d5147cca9bafcb378cbc368fae4719bc

            SHA512

            c39a40b75aed0460796318a8d6faa80703d804f8ecb8ffa0ba983bc021e2b18d01b9091e817a5e888e686b09ad88d807a8752b42f6c7cdb1e41152a86ab613e9

          • /data/user/0/com.adguard.android/files/adguard-core/version
            MD5

            c4ca4238a0b923820dcc509a6f75849b

            SHA1

            356a192b7913b04c54574d18c28d46e6395428ab

            SHA256

            6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

            SHA512

            4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

          • /data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.meta
            MD5

            770f677efc53a02cdb169475d5e62b0d

            SHA1

            64b7ac1588800bc15730296c38db8645afdad788

            SHA256

            16830b9e5572a9e7d6c40faea7fec5fb141d3da8bb594e0a58b51ee7d18a76c5

            SHA512

            06f49e99a55ccf0d9c2d484194db28086d709daf9ad1eda4526bccf41918aa12dafa63283d51269485c149b208f50da7fbe1ce2642edbcd1443180b4d61cab3d

          • /data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.source
            MD5

            274616f2a7c83e5da3dea6b29cf40fdf

            SHA1

            3f50dc0f27a482e434e7fac25bd4a29d31362435

            SHA256

            7fab80292baa7ce26e179378786bd01d9887785dfd9ff7c20ae4b67fdd0d7f6d

            SHA512

            462bc45f3956ef4998bc6fb979217d37572047c509267316e7894ca67acbcd3e32948da883c8fc08b455f5ca051b85822a78e28206aa4b4108e41a5c7b012c3d

          • /data/user/0/com.adguard.android/files/userscripts/Disable AMP.meta
            MD5

            53d32038f71686e3e153d066b9b4365a

            SHA1

            f1f57703519678e338ec8571bc7901462df62bd3

            SHA256

            d5a09715ea16fdae4195aedbe7687117ce8cf3e8fe668701e6d543f5b74ccdc8

            SHA512

            31aad6afcc41822c5713ffae67f8b06d3a7b661c784ac04301adb800eccd8328f4b7239bf6aab72a5447b42f5a3316029411ee092dba7ee080573b960e319cfb

          • /data/user/0/com.adguard.android/files/userscripts/Disable AMP.source
            MD5

            737775aaa7d13a389c27c4fb9d51689f

            SHA1

            eeb6fcbf81f3a0b76edc4b63db10c004421ceaed

            SHA256

            1969ab9a0badce06d282518b8c25f1a3e1e3d77cdaff0a631e04b2b886bf066c

            SHA512

            af07f1f135c660357db3255deaa68458d4262837a7459566d0452a383a881cb4f42cf870ca1bf2ac313aae4d5f00a6a8f7760bec05c279153d54cd658aa07ef4

          • /data/user/0/com.adguard.android/shared_prefs/adguard_events.xml
            MD5

            f916374e2bc8d2a75b2050b9b99ba4be

            SHA1

            9938915486462212c011bb84fee777fcd6360ff0

            SHA256

            45a621d603fa9e7d83d93937701641c0ad49848dd6e4cd84a32d017349057cd1

            SHA512

            aa71f4cf34aec3822211944ca7a2c6e0163458c88ecd4c71f89a237b971737a5b4a0bc576bfa018508b870e86f26b22971115e95118774f4c91e156782703cfd

          • /data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xml
            MD5

            c2bf7b61386f0285c4c5304fd3b01960

            SHA1

            7ebee5304cb7f7bb6af3472892f1aacaffc54654

            SHA256

            69a5b95f884cea06fdf14a6a45e0c86f24359b417a3b081e9e95a7a4082e15b9

            SHA512

            2d2f64693ab0a7e4ffd1b96f02ac66a1e019868b20680d36eca2a9f12a9cb2a9b695f1e23e17374766cc02b5e97caabb8b5ad98bc7ed753e0a7898a10e5e0951

          • /data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xml
            MD5

            5b9e2d83c9070d490dc7787847007e43

            SHA1

            aad33e381409c240017960220474d16a0d0942cb

            SHA256

            6fcf1d35d1ad6208402e8174067bbcfc5e1f8251482c2eaaa281a254ccb9a188

            SHA512

            3c711779b8a7ca07eea66aee662be6cc5d24b39552c9b56b110185684a821926575b958133d6b8bc041e7a576d059be3a8e8cf07a27e748c741b745d545de0f4

          • /data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xml
            MD5

            5ab954a915cc8456300910b7f722ac2f

            SHA1

            bc1cab08b41c9c738297daaba8ff1ec81778df5d

            SHA256

            78f3f9851d3b83b6ea5cd02654b614052c8765cae39e1e176519c0b815114458

            SHA512

            a00ff7d105d1fdce9ec7422e33f67448b4cf79ed449da7414ed89c63fa52b9a04f1c3b873923e71247f3fb95d650f32a96e244fb0c2261941cf7ad203e281fc0

          • /data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xml
            MD5

            a6be746cbc13263202de45225104687b

            SHA1

            92ada566bab976b59234bfcaac75ae41e5b4e553

            SHA256

            5d612bdb0f506746a01c8b7ad2e246789116e9ce32a3dd519007acdff35357e7

            SHA512

            833e0cc3e86616fd524863f1428774a7175c8c275d571e384116ab86fab7430233ddc6fedda48faa0c20029d68eb7743d34b2f72215a0cafe396b253ade92d9a

          • /data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xml
            MD5

            0979581cb6da986e18f740c9bb8e7187

            SHA1

            312b60d9f58b2d05f4cfce0ce3b1c77b925eda3d

            SHA256

            42410259fd9b18cbf3f48a970995c821f8cd763dc47563400b4653da18c2825d

            SHA512

            8f36e5989ba2e4bacd7af21e414826c3a11abb552b9a705a9e910cb730070ba6867c7649242fca22868e7818cdf41e72cec6a6cc9ee5094d752eb507fabcba98

          • /data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xml
            MD5

            1a89cf205a3e60782d4d8050435bf5eb

            SHA1

            7a295710627eda5182b8979e1eb3bdb99505d4c9

            SHA256

            7d7af5530a96e97a23206164474452b7d531399c88f9332def9fa505d6f103fc

            SHA512

            5177482c6e9ae8d97773f73c48c91fe2c38b00f56a4f3b8ca33448065278ba25416ccb2883f74945eebe32913e83e8d2d0ff9820a43af65725b7d647f36a96e1

          • /data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xml
            MD5

            8a90ee6f1f168450c9e9ef2c97fb7e23

            SHA1

            90937cee123bbc5f69b2dc09a68567e9973f20cb

            SHA256

            16e8d16ad746385bbb9aad18fcba3d3cb30e3e39f803f0cfa9f759dd0fd45567

            SHA512

            eaa1b9ffa66da44592f2fe8a0fe70ba63d39f6344a60b97c57bab83c27055ac2b31d0604a377afcb4fd57185862b4382c15e1e8fe2695e8ee3eadc0bb1f46308

          • /data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xml
            MD5

            c8d1dd42478a9653f4d2a1c10d7b4e12

            SHA1

            76c6ffa4fb0badee45cf91af324a4509d4d5197c

            SHA256

            ca5e576be93bbe3291defb1f43b0a0e8d5a7a04a1434fe3818ef748c4e0abbc6

            SHA512

            710cfd7ba08bab204b240aef96f63cc940bbf063ce546903731d0c6eaaad8c6195a3a5d877c487b982b7347f31040d8e0224312dbfa29ced2a6dc9415ceaf694

          • /data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xml
            MD5

            fe4ac6dd00fed7ca569e2680c24f350e

            SHA1

            4718cc045c42e887977a7588cc575e067d92916f

            SHA256

            86c1ce7349c1fa9dddf39501bf046ed8ee3087bc5d4ded99795eb188e78a6db6

            SHA512

            56e74b4d14c43a5cf800623512398ad19f3532ed2a5862ca48cb6a3e20d145c8b75d898a32444f19bf8cc1c12c63a71a39d134c5e26b3f11b3e3d3dbae1c26f7

          • /data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xml
            MD5

            a1601645ca79dddf82dcfba8b9581707

            SHA1

            793b0564ff144575c01c79952d3f53293326f8dd

            SHA256

            7d872c3b2429dbeae7b67eb0516d7f234d54e0262a9d558d82a0f2f05bcbaa36

            SHA512

            64d89cc1182d72376c14e573d880ae6802731e2199dcf2f1045ad6bef70034855aa05b16d0dcc9190ca75b1912d6107845e0be4c4ee6b2f6355e3c94115f1a24

          • /data/user/0/com.adguard.android/shared_prefs/material_showcaseview_prefs.xml
            MD5

            a828bc10adc2a4c56ca9622a6f569db3

            SHA1

            c61a31f901ae639b6ba6f498029920cc2738d064

            SHA256

            29b8fed0a9bb03f0ef3d6c345ff8e37abc9d4294ad19abd81218fa18148fac27

            SHA512

            00ecfc0d74c5738fe7b513fb1abebd24e32baac4f3a672ea7955b30996cbef2d2f8630f17415014859f2084dc1f9cb0b47ade14baf4186466e9e9a0611a7eda6

          • /data/user/0/com.adguard.android/shared_prefs/material_showcaseview_prefs.xml
            MD5

            3758308e9a52034f7ae39a348e24edb9

            SHA1

            08d67ce6217aafaf0267042c659c75d7b1238229

            SHA256

            6e8acfce000b922c1192e93507c465e17b2b415cc691cd5ec9f42302261117b2

            SHA512

            464392bf99fe31e796399ccbaff1da5d0c7acc83a8c876a8f7596d219764bf29568cbebfe2d6958ac9992cee3ef4d4c17aeeac3a7b03d52560d596077e7f12f2

          • /storage/emulated/0/Android/data/com.adguard.android/cache/battery.dat
            MD5

            5c14b45b0071d58b8e38a8eaff54aaf6

            SHA1

            60b43d96a3f07ed42b1a49c22e1fc5ab67e716ef

            SHA256

            d8207ca86f0c8dc85d9ab999815a1fdcc944e9a38bc2667a1beeec4819a2a5c8

            SHA512

            8750a79fb6bd3d71c5687135fa92bda5e569b89f28c45138ca93e4edf399d59e36b8374bd99de357a367c4874d5d3e0bc325a8d383c571b4f55428c57896a0ea

          • /storage/emulated/0/Android/data/com.adguard.android/cache/log/adguard.log
            MD5

            a81f2e17af047d6aae045833953b7ae1

            SHA1

            72f101d8ccd37c45b09f9984ed28f69b90190242

            SHA256

            4cf098387580967f485f3d14229969dac9256b7b10faff10a650a6928c5884d5

            SHA512

            8c2389daf45a2d6d8deb1d5024089905a9d0758399be060787b3a17d0a54f8a8892d87ed5eeae5d2a3c4805ea23f7ff3629eab6448736ab1854e6d4661f8fdb5