Analysis

  • max time kernel
    3624253s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22/01/2023, 05:47

General

  • Target
    com.skyclean.clearlite_211_apksos.com.apk
  • Size 3.9MB
  • Sample230122-ggvywsfd55
  • SHA256 8c2e3c0c7fd591f1377e9318fbcfbcae85db4875a2f405b99da46edf9b70eefc
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Reads information about phone network operator.

Processes

  • com.skyclean.clearlite
    1⤵
      PID:4293

    Network

          MITRE ATT&CK Enterprise v6

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          index

          • Path /data/user/0/com.skyclean.clearlite/app_webview/Default/GPUCache/index
          • Size 48B
          • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.skyclean.clearlite/app_webview/Default/GPUCache/index-dir/temp-index
          • Size 96B
          • SHA256 1d1d06ca08282071657db8f4053b76979c2fbe5debfd5e4fa7522f1bb1a519ca
          • MD5 SHA1 SHA512

          Web Data

          • Path /data/user/0/com.skyclean.clearlite/app_webview/Default/Web Data
          • Size 120KB
          • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
          • MD5 SHA1 SHA512 SSDEEP

          Web Data-journal

          • Path /data/user/0/com.skyclean.clearlite/app_webview/Default/Web Data-journal
          • Size 2KB
          • SHA256 8352b89c0b47183367ec2904bf429319f589c9154df01f7581c3ad4d91968a38
          • MD5 SHA1 SHA512

          webview_data.lock

          • Path /data/user/0/com.skyclean.clearlite/app_webview/webview_data.lock
          • Size 28B
          • SHA256 ca41131da6c3ca2dbba989589f9989aa067bd121edf651cbb58f65d0be8c16a1
          • MD5 SHA1 SHA512

          settings.dat

          • Path /data/user/0/com.skyclean.clearlite/cache/WebView/Crashpad/settings.dat
          • Size 40B
          • SHA256 a868889d7b165eea1e303d08774cd026212617a2b4f07c6dc405550fb278a42a
          • MD5 SHA1 SHA512

          index

          • Path /data/user/0/com.skyclean.clearlite/cache/WebView/Default/HTTP Cache/Code Cache/js/index
          • Size 48B
          • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.skyclean.clearlite/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
          • Size 96B
          • SHA256 d51e9a79ce37c526e985db84117ddd578c591de1efcc7b0fd37d584cee3d9136
          • MD5 SHA1 SHA512

          index

          • Path /data/user/0/com.skyclean.clearlite/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
          • Size 48B
          • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.skyclean.clearlite/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
          • Size 96B
          • SHA256 640e8aeb5f53f1d4d637e2895124fa50c20f7571141a5b9edeeb82c58b6f750e
          • MD5 SHA1 SHA512

          font_unique_name_table.pb

          • Path /data/user/0/com.skyclean.clearlite/cache/WebView/font_unique_name_table.pb
          • Size 57KB
          • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
          • MD5 SHA1 SHA512 SSDEEP

          UnityAdsStorage-private-data.json

          • Path /data/user/0/com.skyclean.clearlite/files/UnityAdsStorage-private-data.json
          • Size 2B
          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
          • MD5 SHA1 SHA512

          UnityAdsStorage-public-data.json

          • Path /data/user/0/com.skyclean.clearlite/files/UnityAdsStorage-public-data.json
          • Size 2B
          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
          • MD5 SHA1 SHA512

          WebViewChromiumPrefs.xml

          • Path /data/user/0/com.skyclean.clearlite/shared_prefs/WebViewChromiumPrefs.xml
          • Size 127B
          • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
          • MD5 SHA1 SHA512

          UnityAdsTest.txt

          • Path /storage/emulated/0/Android/data/com.skyclean.clearlite/cache/UnityAdsCache/UnityAdsTest.txt
          • Size 4B
          • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
          • MD5 SHA1 SHA512

          UnityAdsTest.txt

          • Path /storage/emulated/0/Android/data/com.skyclean.clearlite/cache/UnityAdsCache/UnityAdsTest.txt
          • Size 4B
          • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
          • MD5 SHA1 SHA512

          UnityAdsWebApp.html

          • Path /storage/emulated/0/Android/data/com.skyclean.clearlite/cache/UnityAdsCache/UnityAdsWebApp.html
          • Size 1.8MB
          • SHA256 a1508dd6363c9eda0757890b6f6d800a01a9520354074da1eb15b5142ecbe354
          • MD5 SHA1 SHA512 SSDEEP