d05fb8c6899c96d1519e46eaea848ead6a17c7ddd0e20228e83c1aa9f264011d

Resubmissions

08-11-2022 11:34

221108-npjddsfhgp 10

08-11-2022 11:33

221108-npafgsfhfp 10

26-08-2022 06:04

220826-gsvr9sgchl 8

04-03-2022 09:45

220304-lq3gjsfggl 7

Analysis

max time kernel
1460069s
max time network
176s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
08-11-2022 11:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Powerful Cleaner Antivirus_v1.9.apk
Size

14.1MB
MD5

60d9c2095ed150373a6b1fa0221d016e
SHA1

e09fd3dc9e6090aaafde5fadb9390646b633aabf
SHA256

d05fb8c6899c96d1519e46eaea848ead6a17c7ddd0e20228e83c1aa9f264011d
SHA512

76f3acdb856752fba8de87a9cc5dae337591b2ead6248879993da533f9ec0c227998df516622aec192a419721909526728c8d8ac35b3a654eb93762996cf3816
SSDEEP

393216:j9XnFH5macX7X52NWdXJq2TNhMXw6zpMrfum7h:J1ZqgY5D2qh

Score

5^/10

ransomware

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.pagnotto28.sellsourcecode.supercleaner

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.pagnotto28.sellsourcecode.supercleaner

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.pagnotto28.sellsourcecode.supercleaner

com.pagnotto28.sellsourcecode.supercleaner
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4911

com.pagnotto28.sellsourcecode.supercleaner:BackgroundService
1⤵
PID:5075

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db

Filesize
96KB

MD5
54c2432de3f81a6933f38235184120fb

SHA1
f644a3d61aa30474fdedff3686ca0f309d903602

SHA256
e9b7c1632ed39ddbb93f3de819140f5b0b6d5a485e94b10dfaf2fc88a9a13099

SHA512
eac3aed5e0df5e35b5500ab3f9baff5c782b7ecbe163512933ed658d404b2e702b4b64ff16fd33e194c73e958a3191eb8aeaec4ecce4922b376e4fb038fbb5c1

Download Submit
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db-journal

Filesize
1KB

MD5
3c47da97708e96380a23e50722dab2db

SHA1
627b588c01abd8d69cd913513d9b660139b8b701

SHA256
0b2a12b9c898425a889146522fdfccb5f72ea1d1ceba20ec85ec412681c8cadb

SHA512
2e2fad7176fd5208e763150d181fba2f4f09ef5909483bdef93d6839f605e461bfbaa2c7db3882dd123ffa32bad733cbaedb51a8f8d13fcc1c3876c3e4bae1dd

Download Submit
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb

Filesize
8KB

MD5
b6ca8b30661a7844ed292db75a29a953

SHA1
8e0d397ab1f2ced1f143829084c3f53333743bdd

SHA256
63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

SHA512
d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

Download Submit
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-journal

Filesize
1KB

MD5
74a63bf21202af86ff0e3d2e0252f762

SHA1
b09ee9cedcd83f7db57ef6f78daa563d9a80ae2a

SHA256
6da84ee73afab39a71107fb975dd0c9b9f03ad3d3807334f9f4a63fbb108aee2

SHA512
57f05b17508a3a0ca955abe036036403e9b9d22d50c76ba34963d56cde216518bcc272f25f816f01251fba02fe7f0f4ec3c2b6169f9bce875f103869c9118ffc

Download Submit
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-shm

Filesize
16B

MD5
4ae71336e44bf9bf79d2752e234818a5

SHA1
e129f27c5103bc5cc44bcdf0a15e160d445066ff

SHA256
374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

SHA512
0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

Download Submit
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-wal

Filesize
217KB

MD5
5a108841d0e8fc0a8497ad879e8775f8

SHA1
757ee411b890dcf4211226deaa481693de9232ea

SHA256
6c4caf8db329201ccc1ce95bb927299096e902fedf45863103837fdcc862e3bf

SHA512
58a7302215b06297b1f1b4398cdef5834ec777547b6b58b25882edd5f7e9b8699e94f7cd4073d19baa573c660ca37f2a82a90920c7c7dba49e1555dd1b279a9c

Download Submit
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/shared_prefs/com.pagnotto28.sellsourcecode.supercleaner_preferences.xml

Filesize
129B

MD5
4b84d6d5a90beb2931f157c8be6e8159

SHA1
353a5176d857ed52397da82486e24e9ea5ef9312

SHA256
ad635ef03801b4e37335ea04ae7f2ad451827a5f48de390b5a16b772e0f2b150

SHA512
b85d7669739bccef7190b06046892dcfc55241ffecc1d3b7b6fa2cb1d6e953a699070d78eb85420e227760c17b979cf5bc61a98bd2616b3c38e9fc64da7f8a54

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads