Analysis

  • max time kernel
    2826074s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 08:02

General

  • Target

    SharkBot (4).apk

  • Size

    13.5MB

  • MD5

    fbbce12a67330ab04ae6f774e71a8f24

  • SHA1

    54334b07761041f00953cb0048a5b1ef96b6fdc1

  • SHA256

    7f55dddcfad05403f71580ec2e5acafdc8c9555e72f724eb1f9e37bf09b8cc0c

  • SHA512

    e1dfe3a9c023290de819aa93e2835cca1acaeada3959c99efce2eac4cea8e734e7ce6aaf019002c49d31d1ea1215c753304e7ce8da383e5243681953d0017c5d

  • SSDEEP

    393216:BH5macX7X52NWdXJq2TNhMfw6zpMrfum7H:BZqgY5b2qH

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.pagnotto28.sellsourcecode.supercleaner
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4082
  • com.pagnotto28.sellsourcecode.supercleaner:BackgroundService
    1⤵
      PID:4256

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db

      Filesize

      24KB

      MD5

      fc3a462b3e8349864e468fe56957a47e

      SHA1

      bcd659b6087dac691e2a3ca3b702220bdb156204

      SHA256

      cb037a59f65e25b20f7812ba538ee4b0115dd3e42f428b40632c4405578214b6

      SHA512

      ef97f7e8cd7bcc8c84da04a7a4a42bd6cf97859725bf50cc0b09a066f9350cdbd2ab7084a27640a260cd4f0669c41fb97b0b561d3fcb9649b77722d41cd9264d

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db-journal

      Filesize

      524B

      MD5

      15a39d4b899f7fc32407d6e2903c3e13

      SHA1

      79910a8a3d7a5c804cf04f818f8cb6bb9c4e70fd

      SHA256

      093ff6b01f9534d9d4507536b456b2aab911cb6ed3dcce00dd07c91fa6bd57ac

      SHA512

      7525d46500474dc5926812a324850134bbc2269fb0084f0ed6daa8d29e4a6161807779aaf9f3ae0ab712219392f2509fc783ac45d7d842bf6cb0548af67294de

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/databases/dbytes.db-wal

      Filesize

      40KB

      MD5

      fa4b961374d4022bf70b80416e56960a

      SHA1

      281735e89106a3e03341c026390bb5dfb50f0842

      SHA256

      0cd6805074e561c5515f69b72d3b83650ab0fb999dc8381d696214796d8610a7

      SHA512

      197a746f252acff4c6f1a5c75976db67e0e6e45804a41cd3378ff577350f692f6ce9aa3e37298d9e8fb28a1c729894930e9eaf5fca49c7faeb7fcf85f9e41dd1

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-journal

      Filesize

      524B

      MD5

      5f7468d8e095d9cee7bd378f738cefe1

      SHA1

      dc7afccd8ace8ee082b7ef65b52811605985a34c

      SHA256

      eac8831fd8974ad1d0883fc38d6c8d3d7c89485d4d491c55ec121f49206e9205

      SHA512

      0f6cedbe0d765aed0c30fc0b262f0260aba5bae8e817a9d772739a9e1ac161b0ca4bc1ee425c40de2a14f552af2d0d3fafccf9cd85d4a6ba8f58ca19698bfd5b

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/no_backup/androidx.work.workdb-wal

      Filesize

      108KB

      MD5

      5c1d9e96287cb5f956763540b089784f

      SHA1

      641f89cc51bb3ca67aadb0d067ff4a02f9806af2

      SHA256

      e0250612a86623b7e7b5b7405406b59bc75196672efcfca7ac4d949fc7ad2745

      SHA512

      db05cce5fe3dc0737a6a8370ba58a25e0c605fc7847fb8c66d048cf433e29d0aba516a38c7a68018c1c3ccd5c2e5e088e74f05f63fecfa6a05dfc5ab29b8cd28

    • /data/user/0/com.pagnotto28.sellsourcecode.supercleaner/shared_prefs/com.pagnotto28.sellsourcecode.supercleaner_preferences.xml

      Filesize

      129B

      MD5

      0ce217d3ad165ac0a8ce22a2e574e3a6

      SHA1

      357433e4aff1d9043a2469a89330eeee22c9ef18

      SHA256

      0572c47febddb9f04322d53e8f0921cdf6f5661e0665a28eb5774f8adb6cd444

      SHA512

      85b0e189f4526656f90791d034bd88c75101c32641e793821e81e624682bb037f4a92f9ebc60f2c1717ad11c884fffef38bf58d333395186bacfdfa3a997059a