Analysis

  • max time kernel
    559343s
  • max time network
    30s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    04-07-2023 14:37

General

  • Target

    AvastAntivirusv23120Premi.apk

  • Size

    65.3MB

  • MD5

    6040d190d3e727212e2b0e05fc3bb8f3

  • SHA1

    353a2dc5bf884514de54bdb86207d95ba0dbc7a6

  • SHA256

    60d0c496573649e19e44b94f7a78b0f4498acc06147f4956aaaac6a85c60d631

  • SHA512

    7e635f36f3003b9d3bfda3a61ca761f616bf16f7af1948aec625020bbbe1aa35c5826f43c423e0bcd4553eabb3a4aac61b397d5fb7c8de98478f7459c0cc5167

  • SSDEEP

    1572864:yHuCnZlosVzgcULCaqxku8vNPlM6m3iU8t1uyNWluGi0/4up7vRaoPMApn:muCZljS3LCB6FvRQQ1auGJ/l9hpn

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.avast.android.mobilesecurity
    1⤵
      PID:4326

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.avast.android.mobilesecurity/app_shepherd2/shepherd2.config

      Filesize

      11KB

      MD5

      43b8405dba62cd0ded0462a553d0d6c4

      SHA1

      dd67dfdcf5abd37e7a2ea08699a13466606f9031

      SHA256

      5d10f6d2939c7fefa137b81eb18cf0c990151acd40e4f66c30d96d5a57113dc6

      SHA512

      e8af867868a09eb7ba69cdfb16c6b241e47ad1826e7467d51272186b79bad30926e57a92a366af98235da373a18abb4358975777239711f20d97fa401250037b

    • /data/user/0/com.avast.android.mobilesecurity/databases/com.google.android.datatransport.events

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.avast.android.mobilesecurity/databases/com.google.android.datatransport.events-journal

      Filesize

      524B

      MD5

      d14aa222ff7f7961e24e857398cbd18d

      SHA1

      5fb012d0b501562fde3df0b92e94d77176c3294b

      SHA256

      8239d55cae4a3fedbd9bafe6050a553d28e396c0e262d565bae7bbcc92d3330b

      SHA512

      fb218b4ac6f483fcd9e776b7d19552a4fc0d86aba4ad307124d72358eb4fd937b685bbc1ac4f90e16e9132c8c2b011bafa4587a4d6473ea9ef081668ad451235

    • /data/user/0/com.avast.android.mobilesecurity/databases/com.google.android.datatransport.events-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.avast.android.mobilesecurity/databases/com.google.android.datatransport.events-wal

      Filesize

      68KB

      MD5

      b064943e3aad33651d25167d2c58df11

      SHA1

      a4e5c016641701a9ee7aaf2772f7daaa59d7d09a

      SHA256

      def60b0040a62aad855bcfd8f18681594bd7905c3c3e09af11da14ba279019dc

      SHA512

      4af3f47b47604db7ff2f56a5d92931cb3a52b36fc68980705507d386517b8d2db39ee8bf08a302213b81fff3daefe45bcc38af494b39fb52001445037a78c167

    • /data/user/0/com.avast.android.mobilesecurity/files/.com.google.firebase.crashlytics.files.v2:com.avast.android.mobilesecurity/com.crashlytics.settings.json

      Filesize

      727B

      MD5

      31dd0043c15ab93b7a578de8cacffaab

      SHA1

      48d75d6d9d92e7bd69d19a614028614994c65458

      SHA256

      3136969d33a965f0e2e343894f8352db263bb804668d6e6ca5c80c404812645d

      SHA512

      6ab3a00ce17d18d2f14ee5f417a44611324be7300d370324730821a20a8c12a52e73069b42344d12bb43897aa9475c1e7a86da2ff68da4fb77c54b0d45f8129a

    • /data/user/0/com.avast.android.mobilesecurity/files/.com.google.firebase.crashlytics.files.v2:com.avast.android.mobilesecurity/open-sessions/64A42ECE00A5000110E64EE37F0C6F16/report

      Filesize

      761B

      MD5

      c16649e2b858168ec56e88450b5e9091

      SHA1

      20c9dad85111721c5ee1c0e26c0ce2693745b1a4

      SHA256

      e03c6d461f63aee35e392db09ade87a25d6361fdb2e12a387e929c32d9485e67

      SHA512

      4872a3240960a02a4d32627b678149b175d24eff6109be98cfa36009b1a1c02016d62839b6ce7ed46fcd3af722aeb04740b5e6d82147470e40bcb1f7c6d693ca

    • /data/user/0/com.avast.android.mobilesecurity/files/.com.google.firebase.crashlytics.files.v2:com.avast.android.mobilesecurity/open-sessions/64A42ECE00A5000110E64EE37F0C6F16/user-data

      Filesize

      49B

      MD5

      f96060a956c01a51d48766d5a0551f93

      SHA1

      91650d5d73a9c2ab697348aee6dba827430752c9

      SHA256

      6c6c949131aa1e4d2c64549b51d28cacd98361b5e59556cc8bf049c9b0e48318

      SHA512

      30c775925ab151eddcd0c94546e310d4223679c3e20dbb6cbe883ea5956627f0000c280a3b193f38e407dcd0b458fcce7b661b71892027304f075b3b679bff82

    • /data/user/0/com.avast.android.mobilesecurity/files/.com.google.firebase.crashlytics.files.v2:com.avast.android.mobilesecurity/open-sessions/64A42ECE00A5000110E64EE37F0C6F16/userlog.tmp

      Filesize

      16B

      MD5

      c33583fae4e0b61cde1c5b9227963237

      SHA1

      fe2ebe4d27469af1460f7e852031a04208ef629b

      SHA256

      35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

      SHA512

      fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

    • /data/user/0/com.avast.android.mobilesecurity/files/campaign_keys

      Filesize

      2B

      MD5

      d751713988987e9331980363e24189ce

      SHA1

      97d170e1550eee4afc0af065b78cda302a97674c

      SHA256

      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

      SHA512

      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/BurgerMessages/Records/1688481486791f1222c53-85dc-421d-832c-d34f0be1be11

      Filesize

      229B

      MD5

      83a03317338801a3b8b41be523a6d09b

      SHA1

      0b7abe37bc0aef4cfc74dbde127aabc48fdcde3d

      SHA256

      6b23ca755ca2cb27cbfe15cf8011761106b43f7bef5b4437a64740b40df299bd

      SHA512

      8d967f35c253a27db142759234bb66b1174a74a0880724e0e12c61fdbe1177ac187662781fb05daaf728a9b56d8a46e8e47fe04a0f31d44ef48ded9efa3653e4

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/androidx.work.workdb

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/androidx.work.workdb-journal

      Filesize

      524B

      MD5

      8ced7211d50f7c7a31f0437e538c92c6

      SHA1

      ae81251784f48a8b1264304692998de6b317388b

      SHA256

      8ee0ace99ac42912bc75e00ffe27e2d23f8b5beb552950cbdb41667a3b6f70c4

      SHA512

      7eafc8ae43c5c4279a81544ac2ba60cb08bc5fbaf23fa6dd7ac0d8e0061b36d2433a6e88522cb9c04fe595110c395f777822b4aaa54b3d0dfb19e9784538cd86

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/androidx.work.workdb-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/androidx.work.workdb-wal

      Filesize

      378KB

      MD5

      985055221414ca3c1cb0d17324661433

      SHA1

      691124cb964d9932e052a4b8a8de650f26597ac6

      SHA256

      80efcb5c57d7f9d72faadd26d3fe15f3d8ce147fb856acbd4ab762d87bc7483d

      SHA512

      4f107272f176c1c35e6b53725420a52cc44c033e620308a57f2594a3e3c7b02eaa30e48638786c4bc781d409a7711ed2226438b026cf8f22dd90451b4110af33

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/campaigns_room.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/campaigns_room.db-journal

      Filesize

      524B

      MD5

      4359cf75b18a8739a5359cdb7569f048

      SHA1

      adf655ac39d39eccc482c6ad0d6c068f2b83014e

      SHA256

      d12bb2708fd9a4f6f9786341acdd0ec82ff13ce01bf03e35ec760ac0273be5ed

      SHA512

      785aad75a62428456e228d7b3a2f75fef0825f2e02ebe160b71fc72e446f2f817d601f2e885f5ac193edaeefe97a2f91b11e9e46fef02ac1c4f8f9cbbac6ec5e

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/campaigns_room.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/campaigns_room.db-wal

      Filesize

      60KB

      MD5

      eb3dec003b1f71a72ee4a906c38c1777

      SHA1

      3a57b7bc68fd01c7fcdd31b332569859e189927d

      SHA256

      81747091dbc5212154ab9724466689a0284a8647ce79dbdb4c66e8d50729d377

      SHA512

      2811962542e08717ebe3a2eff99d0f51c56e01170a13ff5429209c83fd15bb88fc98f208aa75e357d56bed020716f24b3fc96c60105590590aa2bbd37c915817

    • /data/user/0/com.avast.android.mobilesecurity/no_backup/collector-files/logcat.txt

      Filesize

      19KB

      MD5

      97ab130e3f03ac705970f56a521e068e

      SHA1

      82eb1c878d20b5d93e593c2fae0b51bc1fd85eab

      SHA256

      046957a39e0eaa22527a27f966bf84e6ba748d6ac856036baaa0415ae46e093c

      SHA512

      1767e8c60beb6d98d855bd607c44e108dcbe279c5f0ff7d04df50bf5bc96cdadf074128c57c8ff6a0237eaf34faed50ff7531a442896dd5b6463970c935e0c37

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToyNjc1MDUzNzcwNzM6YW5kcm9pZDpkN2E5ZWQxMjYzM2FlNDdh.xml

      Filesize

      797B

      MD5

      41a942ad7afe86e47748a43131067d3c

      SHA1

      7ee162c6989178a96a527425609708d9e1ff0727

      SHA256

      591e18d9d0bf50dde5ebab500b60523c5fef552171e34d22c65cb4471d9a1562

      SHA512

      32480e8330d02160dd849012395c1925460f5c4add15c9444ee667f42b7cc6fed973de5ee4aea48791fbc2ef72117465bddcada1987f257f40670e8df2cf6d66

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToyNjc1MDUzNzcwNzM6YW5kcm9pZDpkN2E5ZWQxMjYzM2FlNDdh.xml

      Filesize

      124B

      MD5

      e5f76fb966ff0229a6bcfa3037a728d5

      SHA1

      ff6aec64862612eb4ef093037b13ba17bf5a020f

      SHA256

      d4ee3b66a1ac4a6a951229768b07c11715b402e7c333918a4d6940f289cdd6b2

      SHA512

      381f5b5adce34cf094fa247538ca82b21f2c8c30cf340ce11258f248ebfd1fa98dffc4c8106c2aa628e9f442d69f74f8eb163f3a3eadddd2fe636d6dadbee100

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/apkmody.xml

      Filesize

      119B

      MD5

      c80ad78f84b91b208b1357e9219a3f50

      SHA1

      d58eba8592224906efc00c7a4326cdf9d3ca227a

      SHA256

      6b95beee3472e85a7f3a2e05a312ce6a05d5f3f1540dffd517f38901870be205

      SHA512

      41a942d20bf5425201722ffc573896e1048d887fd115470812c15ddb2d2ad719e65d507ef088e3166eac46857ecc5deecf675d0762962cc3cc8c762a2674ccc1

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/burger.xml

      Filesize

      119B

      MD5

      5e8b2b57b4c47be503f48cd42798266b

      SHA1

      b93acb3f05f86107f258fed64894793666096c6c

      SHA256

      4d26ad37c211d9d3a7e06380b5f3186e77c1d36cd04cf13d7f1297e2e5271aed

      SHA512

      75aa4739906a707f132152aedb2352a6d8c8dc84217f8f59b7ea8c37be2125f3e490d1a507455df8a15848399103bc211d2b3d2d5819fb630847529daeb510f5

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/burger.xml

      Filesize

      168B

      MD5

      99d9374407a34bcb7d06b5fcba4b46ed

      SHA1

      7dfcaca16dbf14dde039381a4f39e4c1b456201e

      SHA256

      828c7c6b5409426ece7d3d5c80025a60dd061062942f4c90a8bb6e30307f0365

      SHA512

      d5bd8a78c06ec6e0b88c9cd70f5edadec839093d2d8cb923dd8ea75b2fadc112fa8c8972a8e80ea455925b9fd20bb8e9023e541f005d523fd19d3a894d8fae53

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/campaigns.prefs.xml

      Filesize

      174B

      MD5

      f71164a130a2aa995a5771c02aa259b1

      SHA1

      115005ec0357847cff36f0a751d989fb0b71f269

      SHA256

      5424d0fd882dea200015108f33f35149963ec2bedaf3632a4b628207d7bb7add

      SHA512

      fb545605b0455a1494eca66bca338fa3372ab96aac1c960d0f5de2721c2ed2d2b390da0e338eab776a3924829233e283a17948dded407a9a5a25be4993b2ea70

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      427B

      MD5

      0a6c8c6b48bbbd99b2c23be31ad5f8eb

      SHA1

      a69b55b0a4017c4cf910f72aac73cbca75614cf9

      SHA256

      68fded69274d5f3a19d364a595dba6f4480139864d51396a6c59cfff36499cb6

      SHA512

      c805c34b9b371186b396377e53b5635381dfb06e9cd4a8b71e00b7eb59fbd223f5799774a20da6869c8828d996e5ef4405b2d30a4c6a4ef93ce7e333b147df4e

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      485B

      MD5

      c0848574f99400bed844dc6997bd5b25

      SHA1

      f5220cbbea82c2f0cb3af25581d6269166e52ccf

      SHA256

      f3eb9d15825b36d082d4d9d681e6cd3cad889ee029aedd5f7fdc784ab6caa9e5

      SHA512

      b8d5140e772940991bbea51fad8b682c985abafbad0ce6fc73a19a3896069bd1750aa59ae3bddc74c28f9dec20256cf50779cf07e438c3d57c8bde9f6d5dacde

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/com.google.firebase.crashlytics.xml

      Filesize

      333B

      MD5

      8487b3dffe7c9761a7f8de9cf480bcb4

      SHA1

      caa5fa020f60a460e731c4b1db4e9458afcd46f8

      SHA256

      2725ce47c86798fdd958133a039f95ccdbf45ffd6a088fe5c32ade2388235598

      SHA512

      55b033d3676e603510606904eb5a721771cda5447bb37119e8638624a3d5cbe86b2a83a467313546ee735d29f1fda19d6b1646ae7b69da89cef592dd780097c0

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/com.google.firebase.crashlytics.xml

      Filesize

      235B

      MD5

      2457ffb269b66b06b0603dbf4598899e

      SHA1

      979dfdb3636dfc763c1f3c645c95b1c4edf32e84

      SHA256

      807b62bf199b8d91461dac14fa59e246c14efd1c782f430bce3393cabe858626

      SHA512

      3e4f28c02232fda832ea064c00ec09e9e145bb46a4672cbf4f4247d2c2c98ebfa001c887c0c8ee52c42739ff015e6ddf072bb57e844e8dce3bfb0c784102f539

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/core_prefs.xml

      Filesize

      125B

      MD5

      6396d422a4a85772fb0c1be449cd0623

      SHA1

      2504248f6ca8ec0acdc7905d79c291c87a8065a7

      SHA256

      275d1e0f7a8288a5248561f76d567dbe76978af768f063545e893724ebb4da0a

      SHA512

      9b29b55c454c5ad4a777831c5fe73e20c76a624972db72cdbf700a18cbf558eb2545f8e97794505488fa73a6b603fe8dafa48234314ff76d1c7487cb31905b11

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/core_prefs.xml

      Filesize

      309B

      MD5

      b768eaf22ecd7471d2fe42b47fadc83b

      SHA1

      7f2fcdff6674b185a526d4a62efdd92b15891e08

      SHA256

      031b14e291f3d9e762c98b953875176722d7f351b0d1fbad15435aa2ae34ac9f

      SHA512

      28ab777bba532ab1a36a2182f8a1ce04db59fb61cc463e342b1fb103a759fc1bcb7c448459ea0b581e5392b13884e9fe7c8ab292bb0c0ef8ebfb0716ce0f68a1

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/shepherd2.xml

      Filesize

      140B

      MD5

      071a35b113a9841ada6ca4ab9cf33243

      SHA1

      7352e28e79d77c6cf40ffb93bc5fc86106911c77

      SHA256

      266d60ad04e025526df34c9b05d1a808e937798294cc8a47e8d815e0027e1049

      SHA512

      a25650a88837e29b81d9b4f7b5e9373842bfac2955fbf4de3354d4005d464952c062141f36c8f55bf9b7fda94c89f214ffae08bcc2e1434160bdec796fb5e072

    • /data/user/0/com.avast.android.mobilesecurity/shared_prefs/shepherd2.xml

      Filesize

      212B

      MD5

      a22c609bf7e51114b66ff95f2acd78d3

      SHA1

      28308a1e85822c3fdf9db5015db36e34137a9d8c

      SHA256

      a854c87b0f14e03570b839472c20295aafa244770ee8b2d4f50fda720b3dd868

      SHA512

      0c96dda9539e28523878b3931189c8e41e027baadd120cb9a4b66216a1c2871657e73902083e8bbd1eed20c751bba2b14d2e229a683962db8efe861bd336a661