Analysis
-
max time kernel
2826012s -
max time network
159s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
24-11-2022 08:01
Behavioral task
behavioral1
Sample
SharkBot.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
SharkBot.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
SharkBot.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
SharkBot.apk
-
Size
14.1MB
-
MD5
1f32aa3ad68eac774cfcaeb0cd84de4d
-
SHA1
512f378b8821064d5b48ceb0624dd17eca673667
-
SHA256
a56dacc093823dc1d266d68ddfba04b2265e613dcc4b69f350873b485b9e1f1c
-
SHA512
ad66808102f0af441ffe7f18da3daed094d860930a70bb67e164d984b693b95f98fb51eff192404aac6c605e6a7351286b9e866f2d3567ce64ad0c2d0652db69
-
SSDEEP
393216:lNIvvMaH5macX7X52NWdXJq2TNhUXwplpMrfum77:lNs0aZqgY5rNq7
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
Processes:
com.abbondioendrizzi.antivirus.supercleanerdescription ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.abbondioendrizzi.antivirus.supercleaner -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.abbondioendrizzi.antivirus.supercleanerdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.abbondioendrizzi.antivirus.supercleaner
Processes
-
com.abbondioendrizzi.antivirus.supercleaner1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Uses Crypto APIs (Might try to encrypt user data).
PID:4029
-
com.abbondioendrizzi.antivirus.supercleaner:BackgroundService1⤵PID:4192
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD5c6d99db2361f3b25bcbbbd6ef47b0252
SHA136d77389f907a57c1f778a5ea825320853393f2a
SHA256cb14d7fefe24ab786a12688fe2c3fd130b584c015424f24aeeeb1347140ee460
SHA512b66fdf47c94a87c981c884208f9b98fd2cbf4d9a640005307220996fb58b9376cd5e631c9ccc3396edfedb03f8b0545a981037dfaf5bb53c27e0481bb0df8c30
-
Filesize
524B
MD5ca359ac3ea98f42e824441483ce9dead
SHA1040fba422606d33f2418b5c85d7645cd40708aac
SHA2565a666e7a2b8f9d6fd0bc9b3942136fe93863157225b080146067c5bdd486f262
SHA512eff96b86817733e6e5c3ef3f0b70532b036b5e17678f4d1251ca950012d8080defbe72ffb307d551f2a312ca94894d876a50d19cba909a1add4b982ccb9e3fb9
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
40KB
MD5f00456741155a04281ea66c62246b6d3
SHA18fff2aff9961b98700c95834633ac9fd2ed0ae66
SHA256eb5562856b98acbbfa0c19b11b8b0d4fa3a7fa4ba7882d33fffc5f1f23782e91
SHA512eb9f2ab10ebdbf30b05b206a0d078fe553c67a535a20fb6b3962b1ea3f9464a33c875359a311d7948d15c33b512b9c6ec6f4c5468dd48ac7df92c8c79da33a19
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD5f9c9e5af481c37f9e14bb4e97b926731
SHA142a7468c4cd5c20b2c2e3431d6dde81396faa434
SHA256b6cc0e33489dfbc45c6d0d3af0f33c3af7e5d05ce52a589cb9fd6068508a683d
SHA5124cfbcf15161e5d602aad8b9dc7adc283b19347fa958bafaadd41d7ba8f0724d78aa4a8697450eb33d57d98d9805a0c183600fb4a795262489c99f1e5f78b88e1
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
108KB
MD5d65d7aa1b0485c1bc68acce7b2d2502a
SHA1e70f148e54d8100515302a13a0d22965339edb76
SHA2565456ce574bc394cbff6d4fcc20ed2a353b225680f99680b78b6a6deabdfdcfea
SHA5123a6f6d1a1280fde49a509db1a0a90761d314d1124e3fd0ce55b96dee94ddfac15431e74909d7757bf3b2e7bfd619fd502f736e1ccb91cbf1ca6b3f0b4c4a3e76
-
/data/user/0/com.abbondioendrizzi.antivirus.supercleaner/shared_prefs/com.abbondioendrizzi.antivirus.supercleaner_preferences.xml
Filesize129B
MD56920556a6b8eec98f0c6186f16a98a47
SHA1405a79e8df746d977f8679a90c209e5bf3612383
SHA25640b9db3c3d10b7b0dfd637e9fb56dc8da3f0429b17133ffcbfd75883b5038c16
SHA5121f0faacfa13f34815f831a3f201323967f457cbd775bc41c18977a86ce50942a701b79edec513ec110dc6e8e09ebb4df49b0915d2c02b37beeb26c53d7cfd70a