Resubmissions

08/11/2022, 11:34

221108-npjddsfhgp10

08/11/2022, 11:33

221108-npafgsfhfp10

26/08/2022, 06:04

220826-gsvr9sgchl8

04/03/2022, 09:45

220304-lq3gjsfggl7

Analysis

  • max time kernel
    1460053s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    08/11/2022, 11:33

General

  • Target
    Powerful Cleaner Antivirus_v1.9.apk
  • Size 14.1MB
  • Sample221108-npafgsfhfp
  • SHA256 d05fb8c6899c96d1519e46eaea848ead6a17c7ddd0e20228e83c1aa9f264011d
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.pagnotto28.sellsourcecode.supercleaner
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4832
  • com.pagnotto28.sellsourcecode.supercleaner:BackgroundService
    1⤵
      PID:5144

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          dbytes.db

          • Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db
          • Size 96KB
          • SHA256 571b88a361bb76c138735b0075244fd9b9771c4bc08f319646ea7741598e8e58
          • MD5 SHA1 SHA512 SSDEEP

          dbytes.db-journal

          • Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db-journal
          • Size 1KB
          • SHA256 00cd2c2abd32bb5603f125f4690aa2f598f164858ef8740335aff2341b7ac000
          • MD5 SHA1 SHA512

          androidx.work.workdb

          • Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb
          • Size 8KB
          • SHA256 63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
          • MD5 SHA1 SHA512 SSDEEP

          androidx.work.workdb-journal

          • Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-journal
          • Size 1KB
          • SHA256 aa2b9200fb7bbd0480452314b3a8f07adcacd87a3f20390a69781cc61576605e
          • MD5 SHA1 SHA512

          androidx.work.workdb-shm

          • Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-shm
          • Size 16B
          • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
          • MD5 SHA1 SHA512

          androidx.work.workdb-wal

          • Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-wal
          • Size 217KB
          • SHA256 678889bd47760548e49dae29cad8862e02527c711e7bae0050bc4a5db272f624
          • MD5 SHA1 SHA512 SSDEEP

          com.pagnotto28.sellsourcecode.supercleaner_preferences.xml

          • Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/shared_prefs/com.pagnotto28.sellsourcecode.supercleaner_preferences.xml
          • Size 129B
          • SHA256 7016e9b46bd2bee949dfbe28f3ca917d93723b3c77d06ef55ccdbffb4c5a41a2
          • MD5 SHA1 SHA512