sharkbot | Powerful Cleaner Antivirus_v1[.]9[.]apk

Resubmissions

08/11/2022, 11:34

221108-npjddsfhgp10

08/11/2022, 11:33

221108-npafgsfhfp10

26/08/2022, 06:04

220826-gsvr9sgchl8

04/03/2022, 09:45

220304-lq3gjsfggl7

Sharing

Copy URL Twitter E-mail

General

Target
Powerful Cleaner Antivirus_v1.9.apk
Size 14.1MB
Sample221108-npafgsfhfp
SHA256 d05fb8c6899c96d1519e46eaea848ead6a17c7ddd0e20228e83c1aa9f264011d
MD5 60d9c2095ed150373a6b1fa0221d016e
SHA1 e09fd3dc9e6090aaafde5fadb9390646b633aabf
SHA512 76f3acdb856752fba8de87a9cc5dae337591b2ead6248879993da533f9ec0c227998df516622aec192a419721909526728c8d8ac35b3a654eb93762996cf3816
SSDEEP 393216:j9XnFH5macX7X52NWdXJq2TNhMXw6zpMrfum7h:J1ZqgY5D2qh
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sharkbot

Malware Config

Extracted

Family

sharkbot

http://statscodicefiscale.xyz/stats/

Signatures

Sharkbot family
sharkbot

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

Powerful Cleaner Antivirus_v1.9.apk

.apk 14.1MB

Powerful Cleaner Antivirus_v1.9.apk

SHA256 d05fb8c6899c96d1519e46eaea848ead6a17c7ddd0e20228e83c1aa9f264011d
MD5 60d9c2095ed150373a6b1fa0221d016e
SHA1 e09fd3dc9e6090aaafde5fadb9390646b633aabf
SHA512 76f3acdb856752fba8de87a9cc5dae337591b2ead6248879993da533f9ec0c227998df516622aec192a419721909526728c8d8ac35b3a654eb93762996cf3816
SSDEEP 393216:j9XnFH5macX7X52NWdXJq2TNhMXw6zpMrfum7h:J1ZqgY5D2qh
MD5 SHA1 SHA512 SSDEEP

android

com.pagnotto28.sellsourcecode.supercleaner

com.pagnotto28.sellsourcecode.supercleaner.screen.splash.SplashActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.main.MainActivity

android.intent.action.MAIN

com.pagnotto28.sellsourcecode.supercleaner.screen.setting.SettingActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.phoneboost.PhoneBoostActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.result.ResultAcitvity

com.pagnotto28.sellsourcecode.supercleaner.screen.guildPermission.GuildPermissionActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.junkfile.JunkFileActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.listAppSelect.AppSelectActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.gameboost.GameBoostActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.appManager.AppManagerActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.smartCharger.SmartChargerBoostActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.smartCharger.SmartChargerActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.cleanNotification.NotificationCleanSettingActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.cleanNotification.NotificationCleanActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.cleanNotification.NotificationCleanGuildActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.antivirus.AntivirusActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.ExitActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.antivirus.ScanAppInstallActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.antivirus.ScanAppUninstallActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.notDissturb.NotDissturbActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.main.SplashLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.pwd.CreatePwdLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.lock.GestureSelfUnlockLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.lock.GestureUnlockLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.setting.LockSettingLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.lock.GestureCreateLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.main.MainLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.setting.SecuritySettingActivity

com.security.applock.ui.main.MainActivity

com.security.applock.ui.splash.SplashActivity

com.security.applock.ui.password.PasswordActivity

com.security.applock.ui.guildPermission.GuildPermissionActivity

com.security.applock.ui.forgotpassword.ForgotPasswordActivity

com.testapp.duplicatefileremover.NoFileActiviy

com.testapp.duplicatefileremover.DuplicateActivity

com.testapp.duplicatefileremover.SettingActivity

com.testapp.duplicatefileremover.MainActivity

com.testapp.duplicatefileremover.ResultActivity

com.pagnotto28.sellsourcecode.supercleaner.receiver.BatteryStatusReceiver

com.pagnotto28.sellsourcecode.supercleaner.receiver.PackageRecerver

com.pagnotto28.sellsourcecode.supercleaner.receiver.AlarmReceiver

com.app.action.alarmmanager

com.pagnotto28.sellsourcecode.supercleaner.lock.receiver.LockRestarterBroadcastReceiver

com.pagnotto28.sellsourcecode.supercleaner.lock.receiver.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

com.pagnotto28.sellsourcecode.supercleaner.receiver.AutoRebootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.SCREEN_ON android.net.wifi.WIFI_STATE_CHANGED android.net.wifi.STATE_CHANGE android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.ACTION_POWER_CONNECTED android.intent.action.QUICKBOOT_POWERON

com.security.applock.service.receiver.WatchmenReceiver

android.net.wifi.WIFI_STATE_CHANGED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT android.intent.action.MEDIA_MOUNTED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.QUICKBOOT_POWERON android.intent.action.SCREEN_ON android.intent.action.TIME_SET android.intent.action.BOOT_COMPLETED

com.security.applock.service.receiver.WidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE android.intent.action.SCREEN_ON android.intent.action.USER_PRESENT android.intent.action.SCREEN_ON android.intent.action.USER_PRESENT

com.security.applock.service.receiver.RestarterBroadcastReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Android Permissions

Powerful Cleaner Antivirus_v1.9.apk

Permissions

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CHANGE_WIFI_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREFGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SYNC_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WAKE_LOCK

android.permission.GET_PACKAGE_SIZE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.CAMERA

android.permission.USE_FINGERPRINT

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_NETWORK_STATE

android.permission.SET_WALLPAPER

android.permission.VIBRATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

Resubmissions

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

Powerful Cleaner Antivirus_v1.9.apk

com.pagnotto28.sellsourcecode.supercleaner.screen.splash.SplashActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.main.MainActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.setting.SettingActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.phoneboost.PhoneBoostActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.result.ResultAcitvity

com.pagnotto28.sellsourcecode.supercleaner.screen.guildPermission.GuildPermissionActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.junkfile.JunkFileActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.listAppSelect.AppSelectActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.gameboost.GameBoostActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.appManager.AppManagerActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.smartCharger.SmartChargerBoostActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.smartCharger.SmartChargerActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.cleanNotification.NotificationCleanSettingActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.cleanNotification.NotificationCleanActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.cleanNotification.NotificationCleanGuildActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.antivirus.AntivirusActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.ExitActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.antivirus.ScanAppInstallActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.antivirus.ScanAppUninstallActivity

com.pagnotto28.sellsourcecode.supercleaner.screen.notDissturb.NotDissturbActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.main.SplashLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.pwd.CreatePwdLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.lock.GestureSelfUnlockLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.lock.GestureUnlockLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.setting.LockSettingLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.lock.GestureCreateLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.main.MainLockActivity

com.pagnotto28.sellsourcecode.supercleaner.lock.activities.setting.SecuritySettingActivity

com.security.applock.ui.main.MainActivity

com.security.applock.ui.splash.SplashActivity

com.security.applock.ui.password.PasswordActivity

com.security.applock.ui.guildPermission.GuildPermissionActivity

com.security.applock.ui.forgotpassword.ForgotPasswordActivity

com.testapp.duplicatefileremover.NoFileActiviy

com.testapp.duplicatefileremover.DuplicateActivity

com.testapp.duplicatefileremover.SettingActivity

com.testapp.duplicatefileremover.MainActivity

com.testapp.duplicatefileremover.ResultActivity

com.pagnotto28.sellsourcecode.supercleaner.service.ForceStopAccessibility

com.pagnotto28.sellsourcecode.supercleaner.api.NotificationListener

com.pagnotto28.sellsourcecode.supercleaner.service.ServiceManager

com.pagnotto28.sellsourcecode.supercleaner.lock.services.LoadAppListService

com.pagnotto28.sellsourcecode.supercleaner.lock.services.LockService

com.security.applock.service.AntiTheftService

com.security.applock.service.KeepLiveService

com.security.applock.service.jobScheduler.JobSchedulerService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.pagnotto28.sellsourcecode.supercleaner.receiver.BatteryStatusReceiver

com.pagnotto28.sellsourcecode.supercleaner.receiver.PackageRecerver

com.pagnotto28.sellsourcecode.supercleaner.receiver.AlarmReceiver

com.pagnotto28.sellsourcecode.supercleaner.lock.receiver.LockRestarterBroadcastReceiver

com.pagnotto28.sellsourcecode.supercleaner.lock.receiver.BootBroadcastReceiver

com.pagnotto28.sellsourcecode.supercleaner.receiver.AutoRebootReceiver

com.security.applock.service.receiver.WatchmenReceiver

com.security.applock.service.receiver.WidgetReceiver

com.security.applock.service.receiver.RestarterBroadcastReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.core.content.FileProvider

androidx.work.impl.WorkManagerInitializer

androidx.lifecycle.ProcessLifecycleOwnerInitializer

Android Permissions

Powerful Cleaner Antivirus_v1.9.apk