Analysis

  • max time kernel
    2826012s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 08:01

General

  • Target

    SharkBot.apk

  • Size

    14.1MB

  • MD5

    1f32aa3ad68eac774cfcaeb0cd84de4d

  • SHA1

    512f378b8821064d5b48ceb0624dd17eca673667

  • SHA256

    a56dacc093823dc1d266d68ddfba04b2265e613dcc4b69f350873b485b9e1f1c

  • SHA512

    ad66808102f0af441ffe7f18da3daed094d860930a70bb67e164d984b693b95f98fb51eff192404aac6c605e6a7351286b9e866f2d3567ce64ad0c2d0652db69

  • SSDEEP

    393216:lNIvvMaH5macX7X52NWdXJq2TNhUXwplpMrfum77:lNs0aZqgY5rNq7

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.abbondioendrizzi.antivirus.supercleaner
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4029
  • com.abbondioendrizzi.antivirus.supercleaner:BackgroundService
    1⤵
      PID:4192

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/databases/dbytes.db

      Filesize

      24KB

      MD5

      c6d99db2361f3b25bcbbbd6ef47b0252

      SHA1

      36d77389f907a57c1f778a5ea825320853393f2a

      SHA256

      cb14d7fefe24ab786a12688fe2c3fd130b584c015424f24aeeeb1347140ee460

      SHA512

      b66fdf47c94a87c981c884208f9b98fd2cbf4d9a640005307220996fb58b9376cd5e631c9ccc3396edfedb03f8b0545a981037dfaf5bb53c27e0481bb0df8c30

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/databases/dbytes.db-journal

      Filesize

      524B

      MD5

      ca359ac3ea98f42e824441483ce9dead

      SHA1

      040fba422606d33f2418b5c85d7645cd40708aac

      SHA256

      5a666e7a2b8f9d6fd0bc9b3942136fe93863157225b080146067c5bdd486f262

      SHA512

      eff96b86817733e6e5c3ef3f0b70532b036b5e17678f4d1251ca950012d8080defbe72ffb307d551f2a312ca94894d876a50d19cba909a1add4b982ccb9e3fb9

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/databases/dbytes.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/databases/dbytes.db-wal

      Filesize

      40KB

      MD5

      f00456741155a04281ea66c62246b6d3

      SHA1

      8fff2aff9961b98700c95834633ac9fd2ed0ae66

      SHA256

      eb5562856b98acbbfa0c19b11b8b0d4fa3a7fa4ba7882d33fffc5f1f23782e91

      SHA512

      eb9f2ab10ebdbf30b05b206a0d078fe553c67a535a20fb6b3962b1ea3f9464a33c875359a311d7948d15c33b512b9c6ec6f4c5468dd48ac7df92c8c79da33a19

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/no_backup/androidx.work.workdb

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/no_backup/androidx.work.workdb-journal

      Filesize

      524B

      MD5

      f9c9e5af481c37f9e14bb4e97b926731

      SHA1

      42a7468c4cd5c20b2c2e3431d6dde81396faa434

      SHA256

      b6cc0e33489dfbc45c6d0d3af0f33c3af7e5d05ce52a589cb9fd6068508a683d

      SHA512

      4cfbcf15161e5d602aad8b9dc7adc283b19347fa958bafaadd41d7ba8f0724d78aa4a8697450eb33d57d98d9805a0c183600fb4a795262489c99f1e5f78b88e1

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/no_backup/androidx.work.workdb-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/no_backup/androidx.work.workdb-wal

      Filesize

      108KB

      MD5

      d65d7aa1b0485c1bc68acce7b2d2502a

      SHA1

      e70f148e54d8100515302a13a0d22965339edb76

      SHA256

      5456ce574bc394cbff6d4fcc20ed2a353b225680f99680b78b6a6deabdfdcfea

      SHA512

      3a6f6d1a1280fde49a509db1a0a90761d314d1124e3fd0ce55b96dee94ddfac15431e74909d7757bf3b2e7bfd619fd502f736e1ccb91cbf1ca6b3f0b4c4a3e76

    • /data/user/0/com.abbondioendrizzi.antivirus.supercleaner/shared_prefs/com.abbondioendrizzi.antivirus.supercleaner_preferences.xml

      Filesize

      129B

      MD5

      6920556a6b8eec98f0c6186f16a98a47

      SHA1

      405a79e8df746d977f8679a90c209e5bf3612383

      SHA256

      40b9db3c3d10b7b0dfd637e9fb56dc8da3f0429b17133ffcbfd75883b5038c16

      SHA512

      1f0faacfa13f34815f831a3f201323967f457cbd775bc41c18977a86ce50942a701b79edec513ec110dc6e8e09ebb4df49b0915d2c02b37beeb26c53d7cfd70a