Analysis

  • max time kernel
    3624184s
  • max time network
    136s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22/01/2023, 05:47

General

  • Target
    com.skyclean.clearlite_211_apksos.com.apk
  • Size 3.9MB
  • Sample230122-ggvywsfd55
  • SHA256 8c2e3c0c7fd591f1377e9318fbcfbcae85db4875a2f405b99da46edf9b70eefc
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Reads information about phone network operator.

Processes

  • com.skyclean.clearlite
    1⤵
    • Loads dropped Dex/Jar
    PID:4784

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • Path /data/user/0/com.skyclean.clearlite/[email protected]
        • Size 13KB
        • SHA256 dca2d34d6881cfa25c089d49e7f0e4b4fed7851e8443eae4ac3ddf9b4fa5107b
        • MD5 SHA1 SHA512 SSDEEP

        index

        • Path /data/user/0/com.skyclean.clearlite/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.skyclean.clearlite/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 5a28243eff163d05a39dbf4145344859bf8bbe7541a88263d54a14c7cc2abe55
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.skyclean.clearlite/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.skyclean.clearlite/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 31fd0fdd53e319d272ab318ce69d885bcce0124a344248a63a30b5c727e1130a
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.skyclean.clearlite/app_webview/metrics_guid
        • Size 36B
        • SHA256 47815a6a4f11e4b7466352664b6eb35936458cdfe65844f43e123c4f368fe02b
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.skyclean.clearlite/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 7ff6071f71a55b7892d9da1c3c7f2ffa7ca8ff3497358f738aa48196f2c2eb6e
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.skyclean.clearlite/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.skyclean.clearlite/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 00e4ba063fce4580db4b2bdccb94c1609bc9192c4153f2baf8ae9d88fc1077c7
        • MD5 SHA1 SHA512

        UnityAdsStorage-private-data.json

        • Path /data/user/0/com.skyclean.clearlite/files/UnityAdsStorage-private-data.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512

        UnityAdsStorage-public-data.json

        • Path /data/user/0/com.skyclean.clearlite/files/UnityAdsStorage-public-data.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512

        zzxqmsm

        • Path /data/user/0/com.skyclean.clearlite/files/zzxqmsm
        • Size 26KB
        • SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
        • MD5 SHA1 SHA512 SSDEEP

        zzxqmsm

        • Path /data/user/0/com.skyclean.clearlite/files/zzxqmsm
        • Size 26KB
        • SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
        • MD5 SHA1 SHA512 SSDEEP

        zzxqmsm

        • Path /data/user/0/com.skyclean.clearlite/files/zzxqmsm
        • Size 26KB
        • SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
        • MD5 SHA1 SHA512 SSDEEP

        zzxqmsm

        • Path /data/user/0/com.skyclean.clearlite/files/zzxqmsm
        • Size 26KB
        • SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
        • MD5 SHA1 SHA512 SSDEEP

        zzxqmsm

        • Path /data/user/0/com.skyclean.clearlite/files/zzxqmsm
        • Size 26KB
        • SHA256 5b8461ad3722b20598638abab3ec9f9c743b1feb0c848ed84ee7e1d34f28270f
        • MD5 SHA1 SHA512 SSDEEP
        • Path /data/user/0/com.skyclean.clearlite/oat/x86_64/[email protected]
        • Size 254B
        • SHA256 ae3d1a73a8a931397176a997d09b8fcebe88f593b5adbe9d94a251a06cf62d37
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.skyclean.clearlite/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512

        UnityAdsCache-ce34c2087c2fca509099ddac149d36e21a1f48b4ee06a95637ef8b15c5f7aa32.mp4

        • Path /storage/emulated/0/Android/data/com.skyclean.clearlite/cache/UnityAdsCache/UnityAdsCache-ce34c2087c2fca509099ddac149d36e21a1f48b4ee06a95637ef8b15c5f7aa32.mp4
        • Size 6.9MB
        • SHA256 450c7dc90542186953a1a242524874c90d211121f804d02746d3eb44546721e8
        • MD5 SHA1 SHA512 SSDEEP

        UnityAdsTest.txt

        • Path /storage/emulated/0/Android/data/com.skyclean.clearlite/cache/UnityAdsCache/UnityAdsTest.txt
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512

        UnityAdsTest.txt

        • Path /storage/emulated/0/Android/data/com.skyclean.clearlite/cache/UnityAdsCache/UnityAdsTest.txt
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512

        UnityAdsWebApp.html

        • Path /storage/emulated/0/Android/data/com.skyclean.clearlite/cache/UnityAdsCache/UnityAdsWebApp.html
        • Size 1.8MB
        • SHA256 a1508dd6363c9eda0757890b6f6d800a01a9520354074da1eb15b5142ecbe354
        • MD5 SHA1 SHA512 SSDEEP