Resubmissions
08/11/2022, 11:34
221108-npjddsfhgp1008/11/2022, 11:33
221108-npafgsfhfp1026/08/2022, 06:04
220826-gsvr9sgchl804/03/2022, 09:45
220304-lq3gjsfggl7Analysis
- max time kernel
1460053s - max time network
135s - platform
android_x64 - resource
android-x64-20220823-en - resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system - submitted
08/11/2022, 11:33
Behavioral task
behavioral1
Sample
Powerful Cleaner Antivirus_v1.9.apk
Resource
android-x86-arm-20220823-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Powerful Cleaner Antivirus_v1.9.apk
Resource
android-x64-20220823-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Powerful Cleaner Antivirus_v1.9.apk
Resource
android-x64-arm64-20220823-en
2 signatures
150 seconds
General
- Target Powerful Cleaner Antivirus_v1.9.apk
- Size 14.1MB
- Sample221108-npafgsfhfp
- SHA256 d05fb8c6899c96d1519e46eaea848ead6a17c7ddd0e20228e83c1aa9f264011d
- MD5 60d9c2095ed150373a6b1fa0221d016e
- SHA1 e09fd3dc9e6090aaafde5fadb9390646b633aabf
- SHA512 76f3acdb856752fba8de87a9cc5dae337591b2ead6248879993da533f9ec0c227998df516622aec192a419721909526728c8d8ac35b3a654eb93762996cf3816
- SSDEEP 393216:j9XnFH5macX7X52NWdXJq2TNhMXw6zpMrfum7h:J1ZqgY5D2qh
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.pagnotto28.sellsourcecode.supercleaner
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db
- Size 96KB
- SHA256 571b88a361bb76c138735b0075244fd9b9771c4bc08f319646ea7741598e8e58
- MD5 cce64bc09d490f85dd9f84de886f2866
- SHA1 722cc19a2a98f20e99155c814344d15d9856bc0b
- SHA512 cbcdae16807c0bae6b157bec001281a8921820c7d9ab10ed1c54eac99dd4da4441cf76822b142ad8a2c0c41ae2051ef3d1984e6700ab57f5fb99ee7d32bdf0e6
- SSDEEP 96:9WF7WFH0H0kP/DyE/DyCV/DyCV/Dy4YG3a:+BRxe
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db-journal
- Size 1KB
- SHA256 00cd2c2abd32bb5603f125f4690aa2f598f164858ef8740335aff2341b7ac000
- MD5 99d35c5567af31841d1d39aba6ac6a3d
- SHA1 9dfdc71689534186b98a1daeb568379ed08c6ee7
- SHA512 718313122ca2b75af56b36b3ec4cf860614cc6758e88454d3ca2dcfc8b9b61082e582008a3cec1f19d7aac355d6e5c6dd0960682e1840b62bb3b835ddd447de5
- MD5 SHA1 SHA512
- Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb
- Size 8KB
- SHA256 63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
- MD5 b6ca8b30661a7844ed292db75a29a953
- SHA1 8e0d397ab1f2ced1f143829084c3f53333743bdd
- SHA512 d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb
- SSDEEP 3:lSWFN3sl+ltlsleo/NlllSWFN3sl+ltlsleo/Nll:l9Fys1ED9Fys1E
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-journal
- Size 1KB
- SHA256 aa2b9200fb7bbd0480452314b3a8f07adcacd87a3f20390a69781cc61576605e
- MD5 4896b0b3295e4318251eae82c9b98f02
- SHA1 d7f5f97fa7db6646bfb3e9e299bdb4060f34fa2b
- SHA512 f3dd853eade85877a0ab03236eb29e821d50b41b53e51e286d6f97a8bfba83a6406baf4e7cd660c3876c03076534de028d7bced7081b90c719deba35a5383fe7
- MD5 SHA1 SHA512
- Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-shm
- Size 16B
- SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
- MD5 4ae71336e44bf9bf79d2752e234818a5
- SHA1 e129f27c5103bc5cc44bcdf0a15e160d445066ff
- SHA512 0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
- MD5 SHA1 SHA512
- Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-wal
- Size 217KB
- SHA256 678889bd47760548e49dae29cad8862e02527c711e7bae0050bc4a5db272f624
- MD5 4fc7d6c6f0c49d51d0c110a7a27cc8a3
- SHA1 80d5a00e1668b7c292cc67a679985fb5bb9fbe74
- SHA512 bfe32e43978d342c08148b0dcccff4a7ee57273e01e4d92d8448144b74942ddc1c505df0214851e0eb35942c81da1ba7a9a5814b7925057c68b6d8a2590f0c4e
- SSDEEP 384:+ZSVdjnHt9Mpf8UzSQTD8q0E9VdjnHt9Mpf8UzSQTD8q0E3Hk96P:KuHMCUzSQTD8OhHMCUzSQTD8OX
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/shared_prefs/com.pagnotto28.sellsourcecode.supercleaner_preferences.xml
- Size 129B
- SHA256 7016e9b46bd2bee949dfbe28f3ca917d93723b3c77d06ef55ccdbffb4c5a41a2
- MD5 2473b6851719343579106e703952e36b
- SHA1 9c6b103f661d2ad71f3f969f023ebb9331230f25
- SHA512 5e3286ba8be31d8de226d536ecf539a745105a23dadffe187f688be680c10efc885c031906db657ff9479fe9c491c943d3203c51b34f9b1e5786b671e26043a8
- MD5 SHA1 SHA512