Resubmissions
08-11-2022 11:34
221108-npjddsfhgp 1008-11-2022 11:33
221108-npafgsfhfp 1026-08-2022 06:04
220826-gsvr9sgchl 804-03-2022 09:45
220304-lq3gjsfggl 7Analysis
-
max time kernel
1460069s -
max time network
176s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
-
submitted
08-11-2022 11:34
General
-
Target
Powerful Cleaner Antivirus_v1.9.apk
-
Size
14.1MB
-
MD5
60d9c2095ed150373a6b1fa0221d016e
-
SHA1
e09fd3dc9e6090aaafde5fadb9390646b633aabf
-
SHA256
d05fb8c6899c96d1519e46eaea848ead6a17c7ddd0e20228e83c1aa9f264011d
-
SHA512
76f3acdb856752fba8de87a9cc5dae337591b2ead6248879993da533f9ec0c227998df516622aec192a419721909526728c8d8ac35b3a654eb93762996cf3816
-
SSDEEP
393216:j9XnFH5macX7X52NWdXJq2TNhMXw6zpMrfum7h:J1ZqgY5D2qh
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.pagnotto28.sellsourcecode.supercleaner1⤵
- Uses Crypto APIs (Might try to encrypt user data).
-
com.pagnotto28.sellsourcecode.supercleaner:BackgroundService1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.dbFilesize
96KB
MD554c2432de3f81a6933f38235184120fb
SHA1f644a3d61aa30474fdedff3686ca0f309d903602
SHA256e9b7c1632ed39ddbb93f3de819140f5b0b6d5a485e94b10dfaf2fc88a9a13099
SHA512eac3aed5e0df5e35b5500ab3f9baff5c782b7ecbe163512933ed658d404b2e702b4b64ff16fd33e194c73e958a3191eb8aeaec4ecce4922b376e4fb038fbb5c1
-
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db-journalFilesize
1KB
MD53c47da97708e96380a23e50722dab2db
SHA1627b588c01abd8d69cd913513d9b660139b8b701
SHA2560b2a12b9c898425a889146522fdfccb5f72ea1d1ceba20ec85ec412681c8cadb
SHA5122e2fad7176fd5208e763150d181fba2f4f09ef5909483bdef93d6839f605e461bfbaa2c7db3882dd123ffa32bad733cbaedb51a8f8d13fcc1c3876c3e4bae1dd
-
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdbFilesize
8KB
MD5b6ca8b30661a7844ed292db75a29a953
SHA18e0d397ab1f2ced1f143829084c3f53333743bdd
SHA25663a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
SHA512d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb
-
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-journalFilesize
1KB
MD574a63bf21202af86ff0e3d2e0252f762
SHA1b09ee9cedcd83f7db57ef6f78daa563d9a80ae2a
SHA2566da84ee73afab39a71107fb975dd0c9b9f03ad3d3807334f9f4a63fbb108aee2
SHA51257f05b17508a3a0ca955abe036036403e9b9d22d50c76ba34963d56cde216518bcc272f25f816f01251fba02fe7f0f4ec3c2b6169f9bce875f103869c9118ffc
-
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-shmFilesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-walFilesize
217KB
MD55a108841d0e8fc0a8497ad879e8775f8
SHA1757ee411b890dcf4211226deaa481693de9232ea
SHA2566c4caf8db329201ccc1ce95bb927299096e902fedf45863103837fdcc862e3bf
SHA51258a7302215b06297b1f1b4398cdef5834ec777547b6b58b25882edd5f7e9b8699e94f7cd4073d19baa573c660ca37f2a82a90920c7c7dba49e1555dd1b279a9c
-
/data/user/0/com.pagnotto28.sellsourcecode.supercleaner/shared_prefs/com.pagnotto28.sellsourcecode.supercleaner_preferences.xmlFilesize
129B
MD54b84d6d5a90beb2931f157c8be6e8159
SHA1353a5176d857ed52397da82486e24e9ea5ef9312
SHA256ad635ef03801b4e37335ea04ae7f2ad451827a5f48de390b5a16b772e0f2b150
SHA512b85d7669739bccef7190b06046892dcfc55241ffecc1d3b7b6fa2cb1d6e953a699070d78eb85420e227760c17b979cf5bc61a98bd2616b3c38e9fc64da7f8a54