Analysis
-
max time kernel
1077969s -
max time network
317s -
platform
android_x64 -
resource
android-x64-arm64 -
submitted
24-06-2021 22:53
Static task
static1
Behavioral task
behavioral1
Sample
AdGuard-Premium-v3.6.apk
Resource
android-x64-arm64
General
-
Target
AdGuard-Premium-v3.6.apk
-
Size
34.2MB
-
MD5
6f9536e4c3d9b0062676378d10885f6b
-
SHA1
4d3115b770b5db98cd9ff7a1f27c57e1350329c9
-
SHA256
c6e9fafd9a7f3283b2ac59a14a014561e9a7d50975f8a0ab888f701d8c04d4c1
-
SHA512
79a2668054f7cadebd80f13c35f0828508da5da1eaf434c94476254283256b9ab63140122cbb6ef51615db2bdcc9c706b3db76bbdc22814254ac144e65635ff6
Malware Config
Signatures
-
Uses reflection 64 IoCs
Processes:
com.adguard.androiddescription pid process Acesses field com.adguard.android.filtering.api.UserscriptMeta.name 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.description 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.version 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.updateURL 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.downloadURL 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.homepageURL 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.match 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.include 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Acesses field com.adguard.android.filtering.api.UserscriptMeta.name 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android Invokes method com.adguard.android.filtering.api.UserscriptMeta.add 4210 com.adguard.android
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.adguard.android/cache/e.idMD5
f4508650f0af7f0a76fbc89d570f618b
SHA18dff3cb08207f57b5039dd326b8ff0bfba4015ed
SHA2566ccb30d8e7e8f2fefee723d657c304409e55c32626e265d7db9ba4d18ca3c86a
SHA512e1e4f4cac1b1fd2e70edabf812a9dfc09ef8b6ec5d9f17d9306d43191a4e9aa551b74b0e6fed27e32855526469e0abb12e8e0c1afcbbefe91550b16c432ab6d7
-
/data/user/0/com.adguard.android/cache/sentry/.sentry-native/d7a3487a-c7a8-44e2-073a-c3e493af8826.run.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.adguard.android/databases/adguard.dbMD5
de78d9ed54131fd2fea192c712413460
SHA1f97b3b4864bff18f1fa347a1c370337ebfff8e09
SHA25621c811fcea573f008f14ca5d346a796c9e6f2de9d166c1d9faaa035191423e64
SHA5123e22f86b8dca00a7977cf851895f49593c3eeef0b401de3aff367a856d731f9c307c845f47ebeb378b8665c2892396171a77b26fa93a217795ce984b708b882b
-
/data/user/0/com.adguard.android/databases/adguard.db-journalMD5
c9dab51a71cb0ad5e110c3f02021a121
SHA1f62aaeeda21dcbfb9be4c56db3f43a9b295caa4e
SHA2569cb4916afb77746ea59fdb6856b88d944e32a48cd519acc359aa32f7c7af2cc0
SHA5124bd067939bbf17d5523ca0a0c73d557fc9e76d8a27c812e7b785be9df988bcb9ddf395c8d631934041d552fdfabfcc478df5ca5d9203984a9e2d1d666ee36c0e
-
/data/user/0/com.adguard.android/databases/androidx.work.workdbMD5
7e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
/data/user/0/com.adguard.android/databases/androidx.work.workdb-journalMD5
7d0bdb651cb33370c6a70aec88f3993c
SHA12a2362aed57fdada857a048fbdb4cb9dd63026a0
SHA256d092ef235aef73b0868d7b4f70c8a7f401784861fc34a6d0285577e37a71ecfa
SHA5123d2b5521aedd474bd49f38c009c8d02ed80257725a3161557ea86c74d615d94d665360dc218fcdaaabef608e20b57fc921f691db9516cac088d7d2ebf3a160df
-
/data/user/0/com.adguard.android/databases/androidx.work.workdb-shmMD5
22c44ab526e8230ed25ee2e8e3c5a097
SHA11e223503c4fc2f8709477a34ed4f1c070be06c18
SHA25675f25efbeb8860ba480b4375315a990c7d9d9479412be52e559762623ca5dd53
SHA512b6c44c41b8a68bebf7c551dbad7fe46fce3a7defecf5a760dd2e274584cf6c988876abe9a08d46de7c4eb25b18609b42a36957e9128cf5c05e8a82c797294dc0
-
/data/user/0/com.adguard.android/databases/androidx.work.workdb-walMD5
be4151a70da1c95d9703e87023c14d9b
SHA16a7f46bb0de81f77a4ccc79d8f9cc1e4dd7effb7
SHA2563a14e95f3e9573f133c465ccd92e0db3dc44fc0a6543ae0d80b93b7e77047418
SHA5125550266ab6ff9bf119187f5769d5585fb8ed1ae35a59b0b3809cf08f81860fb03c123c84bfa092d812e77f02b8573d5537daef33b031b3a9191e404e96b101a5
-
/data/user/0/com.adguard.android/files/adguard-core/gm.dbMD5
ec271de5219708f5ae8ae37b6a6d307f
SHA19823eeb9c5117ff59ffd1bf72734ab9631bdf173
SHA2568a480efe143074faae0be5ceeeff877e262982b0ad9cb08d7bae0963b87f63e0
SHA512c9b7df2e2a8fd050d0129224bd4b347f82890aea56e6748abade421bfe0b952c368e0d85710cf23658b2149cee512b80822339fcfae93de4283eff246f760fd1
-
/data/user/0/com.adguard.android/files/adguard-core/gm.db-journalMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.adguard.android/files/adguard-core/versionMD5
c4ca4238a0b923820dcc509a6f75849b
SHA1356a192b7913b04c54574d18c28d46e6395428ab
SHA2566b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA5124dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
-
/data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.metaMD5
770f677efc53a02cdb169475d5e62b0d
SHA164b7ac1588800bc15730296c38db8645afdad788
SHA25616830b9e5572a9e7d6c40faea7fec5fb141d3da8bb594e0a58b51ee7d18a76c5
SHA51206f49e99a55ccf0d9c2d484194db28086d709daf9ad1eda4526bccf41918aa12dafa63283d51269485c149b208f50da7fbe1ce2642edbcd1443180b4d61cab3d
-
/data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.sourceMD5
274616f2a7c83e5da3dea6b29cf40fdf
SHA13f50dc0f27a482e434e7fac25bd4a29d31362435
SHA2567fab80292baa7ce26e179378786bd01d9887785dfd9ff7c20ae4b67fdd0d7f6d
SHA512462bc45f3956ef4998bc6fb979217d37572047c509267316e7894ca67acbcd3e32948da883c8fc08b455f5ca051b85822a78e28206aa4b4108e41a5c7b012c3d
-
/data/user/0/com.adguard.android/files/userscripts/Disable AMP.metaMD5
53d32038f71686e3e153d066b9b4365a
SHA1f1f57703519678e338ec8571bc7901462df62bd3
SHA256d5a09715ea16fdae4195aedbe7687117ce8cf3e8fe668701e6d543f5b74ccdc8
SHA51231aad6afcc41822c5713ffae67f8b06d3a7b661c784ac04301adb800eccd8328f4b7239bf6aab72a5447b42f5a3316029411ee092dba7ee080573b960e319cfb
-
/data/user/0/com.adguard.android/files/userscripts/Disable AMP.sourceMD5
737775aaa7d13a389c27c4fb9d51689f
SHA1eeb6fcbf81f3a0b76edc4b63db10c004421ceaed
SHA2561969ab9a0badce06d282518b8c25f1a3e1e3d77cdaff0a631e04b2b886bf066c
SHA512af07f1f135c660357db3255deaa68458d4262837a7459566d0452a383a881cb4f42cf870ca1bf2ac313aae4d5f00a6a8f7760bec05c279153d54cd658aa07ef4
-
/data/user/0/com.adguard.android/shared_prefs/adguard_events.xmlMD5
f916374e2bc8d2a75b2050b9b99ba4be
SHA19938915486462212c011bb84fee777fcd6360ff0
SHA25645a621d603fa9e7d83d93937701641c0ad49848dd6e4cd84a32d017349057cd1
SHA512aa71f4cf34aec3822211944ca7a2c6e0163458c88ecd4c71f89a237b971737a5b4a0bc576bfa018508b870e86f26b22971115e95118774f4c91e156782703cfd
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
c2bf7b61386f0285c4c5304fd3b01960
SHA17ebee5304cb7f7bb6af3472892f1aacaffc54654
SHA25669a5b95f884cea06fdf14a6a45e0c86f24359b417a3b081e9e95a7a4082e15b9
SHA5122d2f64693ab0a7e4ffd1b96f02ac66a1e019868b20680d36eca2a9f12a9cb2a9b695f1e23e17374766cc02b5e97caabb8b5ad98bc7ed753e0a7898a10e5e0951
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
5b9e2d83c9070d490dc7787847007e43
SHA1aad33e381409c240017960220474d16a0d0942cb
SHA2566fcf1d35d1ad6208402e8174067bbcfc5e1f8251482c2eaaa281a254ccb9a188
SHA5123c711779b8a7ca07eea66aee662be6cc5d24b39552c9b56b110185684a821926575b958133d6b8bc041e7a576d059be3a8e8cf07a27e748c741b745d545de0f4
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
5ab954a915cc8456300910b7f722ac2f
SHA1bc1cab08b41c9c738297daaba8ff1ec81778df5d
SHA25678f3f9851d3b83b6ea5cd02654b614052c8765cae39e1e176519c0b815114458
SHA512a00ff7d105d1fdce9ec7422e33f67448b4cf79ed449da7414ed89c63fa52b9a04f1c3b873923e71247f3fb95d650f32a96e244fb0c2261941cf7ad203e281fc0
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
a6be746cbc13263202de45225104687b
SHA192ada566bab976b59234bfcaac75ae41e5b4e553
SHA2565d612bdb0f506746a01c8b7ad2e246789116e9ce32a3dd519007acdff35357e7
SHA512833e0cc3e86616fd524863f1428774a7175c8c275d571e384116ab86fab7430233ddc6fedda48faa0c20029d68eb7743d34b2f72215a0cafe396b253ade92d9a
-
/data/user/0/com.adguard.android/shared_prefs/androidx.work.util.id.xmlMD5
0979581cb6da986e18f740c9bb8e7187
SHA1312b60d9f58b2d05f4cfce0ce3b1c77b925eda3d
SHA25642410259fd9b18cbf3f48a970995c821f8cd763dc47563400b4653da18c2825d
SHA5128f36e5989ba2e4bacd7af21e414826c3a11abb552b9a705a9e910cb730070ba6867c7649242fca22868e7818cdf41e72cec6a6cc9ee5094d752eb507fabcba98
-
/data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xmlMD5
d292ef47187bc949f6769ea56b225eac
SHA1427002f334000f60c90f64dbc64d2676ab08fd20
SHA256aea65c8e5211c927a82200e76aa759af5610997dbb718a06db72a915da7d3a84
SHA5127d34a0ef918c02bea8f4e2feb615426f625c3fea6fd4cef121808d96a2d53919a87dd0eebb5652cbdb77ee16f5e3e22cbbe1a1f1fac90d170ed9c261743de63d
-
/data/user/0/com.adguard.android/shared_prefs/com.adguard.android_preferences.xmlMD5
ea1d3e261db5f1aee2de6281cf357eff
SHA133c7cae0bbf5419db8df02b0edafa0aa3d9c4540
SHA2566c6eb7478e622d73fde77447b6463482fca1da893ff529b3329a0915d90fe803
SHA512b7ee452d43e6b36d796e3499fda3822bf043818bc8406e72adacca3c5a45927315ff57421dcd4aee91de573c6a371aa88613a97c74e25b8bcbefc0eb398f8fa4
-
/storage/emulated/0/Android/data/com.adguard.android/cache/battery.datMD5
2e8d6e2fce2079805095550cfd60fadb
SHA1abfe4fb7f515be73505de0205cb2db087c7b4161
SHA2563c6dd9365d36a2ec9e16559c0d79e408321d367a2cf7c2c9e4761bd7b6f47fc8
SHA512144c52caa15d53ade825aba3ae22f7755ab9ac19800e841c1b18df5faf1c0d7d4ec4f1108e58dd2a69bb79406b5c904c355277c215cd2085254e064eed828424
-
/storage/emulated/0/Android/data/com.adguard.android/cache/log/adguard.logMD5
ab27ef428e0bbda49d59a0d52e36c7c2
SHA192ec3b936ebcb087b2fb8d68147b7a31ce1ba830
SHA2561113367213b4875dd0236ec19daa845094207df80c0783af7e35cd6eb3c50804
SHA51268e162859bf104d75419019a44e72d69db5f710ca27ae498ebf852c3317b87c8220a4540c15d48a9f37b36374f08b8b3ea6ab5b829a37aa86717ed5d1f55ee71