Overview
overview
10Static
static
7AntivirusA...-1.apk
android-9-x86
10AntivirusA...-1.apk
android-11-x64
7disclosure.html
windows7-x64
1disclosure.html
windows10-2004-x64
1myps_policy.html
windows7-x64
1myps_policy.html
windows10-2004-x64
1origin.apk
android-9-x86
origin.apk
android-10-x64
origin.apk
android-11-x64
disclosure.html
windows7-x64
1disclosure.html
windows10-2004-x64
1myps_policy.html
windows7-x64
1myps_policy.html
windows10-2004-x64
1policy.html
windows7-x64
1policy.html
windows10-2004-x64
1vpnservice.html
windows7-x64
1vpnservice.html
windows10-2004-x64
1policy.html
windows7-x64
1policy.html
windows10-2004-x64
5vpnservice.html
windows7-x64
1vpnservice.html
windows10-2004-x64
1Analysis
-
max time kernel
1024325s -
max time network
147s -
platform
android_x64 -
resource
android-x64-arm64-20230621-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system -
submitted
09-07-2023 23:46
Static task
static1
Behavioral task
behavioral1
Sample
AntivirusAI136_DZAPK.COM-1.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
AntivirusAI136_DZAPK.COM-1.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral3
Sample
disclosure.html
Resource
win7-20230703-en
Behavioral task
behavioral4
Sample
disclosure.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
myps_policy.html
Resource
win7-20230703-en
Behavioral task
behavioral6
Sample
myps_policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
origin.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral8
Sample
origin.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral9
Sample
origin.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral10
Sample
disclosure.html
Resource
win7-20230703-en
Behavioral task
behavioral11
Sample
disclosure.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
myps_policy.html
Resource
win7-20230703-en
Behavioral task
behavioral13
Sample
myps_policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
policy.html
Resource
win7-20230703-en
Behavioral task
behavioral15
Sample
policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
vpnservice.html
Resource
win7-20230703-en
Behavioral task
behavioral17
Sample
vpnservice.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
policy.html
Resource
win7-20230703-en
Behavioral task
behavioral19
Sample
policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
vpnservice.html
Resource
win7-20230703-en
Behavioral task
behavioral21
Sample
vpnservice.html
Resource
win10v2004-20230703-en
General
-
Target
AntivirusAI136_DZAPK.COM-1.apk
-
Size
10.4MB
-
MD5
2281a663acfc3e81cbdb7ede827c2d6d
-
SHA1
9b13e7d7431a3847f9e1abb3cc793e498c4d86f1
-
SHA256
44fd5e974fc5c7903d67233ba9e4718b7cc63627a28ba8fe1d2c7ef6eb5f74c4
-
SHA512
89768d9beb8800a20d506cb40254df9a2259d334979db873d357604ca776b6a4c6fabd537ddf9c517eadb3607618f91b2f288ed66060348fb7037c29e3fd30ca
-
SSDEEP
196608:LD6T4a110xIPoIeP/ShMIgHUkiBY8dG7iFnu6ToJ+Ov8e1I7ao:L+T4a1CiPMIgHjWvEAnMhs
Malware Config
Signatures
-
Requests dangerous framework permissions 3 IoCs
Processes:
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to post notifications. android.permission.POST_NOTIFICATIONS
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
MD5336d8a8b2a6c45da2ccbc73d44d36ecd
SHA1afb5ef10727d8cd6038dd003a43549cad097e409
SHA256717dbe4450a892a85ead77788a7b0b5665bd09e25550fc4310a69c4d883bec67
SHA512744448a46bea634acae67550f0067ca899f8ed92a954c921e0940a3eeeecb9909cce1e4362835c70d1f0b390ac59b7c0e2b85df11ec6b46fd969345f8c6d7b2c
-
Filesize
1KB
MD5f4abfd6167189ee18377dc43c6d32479
SHA16470000c0e0c5c4bd41c4ce140144a6744debbbc
SHA256eaea2094ddaf24cf3bbcaee414a2969afe75d10413b1c922cc0c57ece4140ee5
SHA5126aeae51b741af592c2bc37d197208c90183908b6b0f6b2cf0154d0cad76db04b562af870f1b283f21bea16f42d5b4d8577df6e902ad6d4d1a9780599083d43b8
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/initialization_marker
MD5d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB46D50102000110DF8C90EAF6285A/keys
Filesize15B
MD5573f30909f4bf560971e1115453c34fc
SHA1239ea999a5ff1fda1652483298fcea2627e76269
SHA256b0c0f5f2345c11fcf39b8528bc21c9a0a767d5061bb2ed0d7ebcd0552d8fa847
SHA5128cf5df41225b624953669de573c71b5fe87c63ac0c566d7a7b9674e5bd9c2c83cad46feec39841a724512098969f28bd86733f2ed00940364fa490c80ccfac91
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB46D50102000110DF8C90EAF6285A/report
Filesize756B
MD5c44c6b65139d5ae468e3969c79e78d6f
SHA1ed8ba87932925ef41ace20a3e2c44abee54e0717
SHA256ccc0a548d1ed7aa940202545574286adf4928efd1c0e031152b55d95f305f1de
SHA512644259219949426d18c584c1714af16a44bf099eb8abc5c5c7c14d88a0bcf6a4bd67aae40c01e0962e67d559cbb3477d5abc34449324869a047686b24caf8af5
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB46D50102000110DF8C90EAF6285A/start-time
MD5d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
5.5MB
MD564bce546d5b79b78e6688420945edf87
SHA1665cd42c9831d0510db5756c004911c5b71a99cb
SHA25675078c407ef53a9433ecbdd76f49002a8a5bdc9df0da65ef0bc6040c6bce7dab
SHA51220c50c51b18bc7f1f281ecdff81e1395ec82a22d12b4a28cb9bf69fee56cf0b7059939f0542c545e8419a32ce158a6300901944f50364f51be33a4995c2399c9
-
/data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml
Filesize124B
MD5f52868d7292bdd094c4ade2071b6c400
SHA15baf55ae8755aecf5f4d0d4041a0bf497845c780
SHA2567c73318ef7ab436c3eea58fbec4489c760e502aa65d5a3adb9da038de1229064
SHA51221726719c9ee240e3b32ff7cc86da71cf765719b08c205fa5dfdcfd8080899531d6aad6771947013280a01896d76185791c4fd3b96deb89916140375e677b0ba
-
/data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml
Filesize590B
MD54da82db7aca70113049c38ccbe98b31e
SHA14b3c96f36e4e214b2d3c81e77658015086a2163d
SHA2562fcf621bd44ce5c07660ef452a79c17426318869f162a1066b9375e0099bd6fa
SHA512199dfb4d756f46afb758ae655c1bb26dc4134a9982ee5621cb69cd8e6fe40ab947dc862f8da278f58f9aaf52992271019571454fa5e89ebe31b07808121ba102
-
Filesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
455B
MD5399c5c2b6b55c45140c8fc0cec19b7d3
SHA168278a8e1a8e72ecb39390ea249cb6a212ae7f1a
SHA256b15706f6fcd9ce8ada3d79238413702edc6fd43127957c3e27639b45e6653d6d
SHA5123aaf239db0b37b4b21c90d6c51e6fb592d88fd9f1382f73cd95d9d6c7f5228ebf76eaab9e43ab150e32df60911ad4777d3d9517fb33c5811a1db4aba54f4c096
-
Filesize
311B
MD51bea93baa71b4dc01caf54e0bd281749
SHA1560db9d02b83f0a69a5fa096eab91ed87436c21b
SHA25625bbe685165d82aa498eed523bbe6d91c8c6caf4b0f2d87b121963ee2b866ddc
SHA51215047ffbd72bfd2906253697feb6c35a413546453f455b12c8baf3c09c0c3e5b96952aba8df4f61462085b8c25b6286c80e3f3e6c6877a400ffefb2ff6912cb2
-
Filesize
235B
MD52dcd04ceca25097b2d39b086087ab2c4
SHA13f89bbf8a823ae87e431c6f2ea57ac7e67086c5f
SHA256dc86644cb136fcfd2879362456873c45506257edf358e798dbadfbcdc67ca537
SHA5122c06804090d7d360f32ab236dcb0f541e1a342f204d2615aad9571ae63ded175b2bac27ab3dc83a0de256a4f300ac5aaa02099b7b0933b46aacb976c7e8ffec1
-
Filesize
137B
MD5d6b32b6f7842c43a69d96e6bbc0f951e
SHA1f09a77cc001d93e3386c5cd436a79ee29a46da6f
SHA2565d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75
SHA512e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56
-
Filesize
194B
MD5c78c495cf44504f575a670dc6bafda86
SHA177355bef2e78059d7a321dae6c6a56670bae772f
SHA256645640a89ddef96bd44650003d2906d1395e1c59949afc10365d4affafac2831
SHA512b166a79883696f8ce4c51132c4adf08ea99a7f6cd13c9ff55fc7026a6480bde3b9be64de96bdd51284974b1675ac9b46f528602b05de0e86b1d363b6a525a3b3