Analysis

  • max time kernel
    1024325s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    09-07-2023 23:46

General

  • Target

    AntivirusAI136_DZAPK.COM-1.apk

  • Size

    10.4MB

  • MD5

    2281a663acfc3e81cbdb7ede827c2d6d

  • SHA1

    9b13e7d7431a3847f9e1abb3cc793e498c4d86f1

  • SHA256

    44fd5e974fc5c7903d67233ba9e4718b7cc63627a28ba8fe1d2c7ef6eb5f74c4

  • SHA512

    89768d9beb8800a20d506cb40254df9a2259d334979db873d357604ca776b6a4c6fabd537ddf9c517eadb3607618f91b2f288ed66060348fb7037c29e3fd30ca

  • SSDEEP

    196608:LD6T4a110xIPoIeP/ShMIgHUkiBY8dG7iFnu6ToJ+Ov8e1I7ao:L+T4a1CiPMIgHjWvEAnMhs

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Processes

  • com.protectstar.antivirus
    1⤵
      PID:4319

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.protectstar.antivirus/databases/com.google.android.datatransport.events

      Filesize

      144KB

      MD5

      336d8a8b2a6c45da2ccbc73d44d36ecd

      SHA1

      afb5ef10727d8cd6038dd003a43549cad097e409

      SHA256

      717dbe4450a892a85ead77788a7b0b5665bd09e25550fc4310a69c4d883bec67

      SHA512

      744448a46bea634acae67550f0067ca899f8ed92a954c921e0940a3eeeecb9909cce1e4362835c70d1f0b390ac59b7c0e2b85df11ec6b46fd969345f8c6d7b2c

    • /data/user/0/com.protectstar.antivirus/databases/com.google.android.datatransport.events-journal

      Filesize

      1KB

      MD5

      f4abfd6167189ee18377dc43c6d32479

      SHA1

      6470000c0e0c5c4bd41c4ce140144a6744debbbc

      SHA256

      eaea2094ddaf24cf3bbcaee414a2969afe75d10413b1c922cc0c57ece4140ee5

      SHA512

      6aeae51b741af592c2bc37d197208c90183908b6b0f6b2cf0154d0cad76db04b562af870f1b283f21bea16f42d5b4d8577df6e902ad6d4d1a9780599083d43b8

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/initialization_marker

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB46D50102000110DF8C90EAF6285A/keys

      Filesize

      15B

      MD5

      573f30909f4bf560971e1115453c34fc

      SHA1

      239ea999a5ff1fda1652483298fcea2627e76269

      SHA256

      b0c0f5f2345c11fcf39b8528bc21c9a0a767d5061bb2ed0d7ebcd0552d8fa847

      SHA512

      8cf5df41225b624953669de573c71b5fe87c63ac0c566d7a7b9674e5bd9c2c83cad46feec39841a724512098969f28bd86733f2ed00940364fa490c80ccfac91

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB46D50102000110DF8C90EAF6285A/report

      Filesize

      756B

      MD5

      c44c6b65139d5ae468e3969c79e78d6f

      SHA1

      ed8ba87932925ef41ace20a3e2c44abee54e0717

      SHA256

      ccc0a548d1ed7aa940202545574286adf4928efd1c0e031152b55d95f305f1de

      SHA512

      644259219949426d18c584c1714af16a44bf099eb8abc5c5c7c14d88a0bcf6a4bd67aae40c01e0962e67d559cbb3477d5abc34449324869a047686b24caf8af5

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB46D50102000110DF8C90EAF6285A/start-time

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/PersistedInstallation728275781570726123tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/PersistedInstallation8659000623558783053tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/origin.apk

      Filesize

      5.5MB

      MD5

      64bce546d5b79b78e6688420945edf87

      SHA1

      665cd42c9831d0510db5756c004911c5b71a99cb

      SHA256

      75078c407ef53a9433ecbdd76f49002a8a5bdc9df0da65ef0bc6040c6bce7dab

      SHA512

      20c50c51b18bc7f1f281ecdff81e1395ec82a22d12b4a28cb9bf69fee56cf0b7059939f0542c545e8419a32ce158a6300901944f50364f51be33a4995c2399c9

    • /data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml

      Filesize

      124B

      MD5

      f52868d7292bdd094c4ade2071b6c400

      SHA1

      5baf55ae8755aecf5f4d0d4041a0bf497845c780

      SHA256

      7c73318ef7ab436c3eea58fbec4489c760e502aa65d5a3adb9da038de1229064

      SHA512

      21726719c9ee240e3b32ff7cc86da71cf765719b08c205fa5dfdcfd8080899531d6aad6771947013280a01896d76185791c4fd3b96deb89916140375e677b0ba

    • /data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml

      Filesize

      590B

      MD5

      4da82db7aca70113049c38ccbe98b31e

      SHA1

      4b3c96f36e4e214b2d3c81e77658015086a2163d

      SHA256

      2fcf621bd44ce5c07660ef452a79c17426318869f162a1066b9375e0099bd6fa

      SHA512

      199dfb4d756f46afb758ae655c1bb26dc4134a9982ee5621cb69cd8e6fe40ab947dc862f8da278f58f9aaf52992271019571454fa5e89ebe31b07808121ba102

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      455B

      MD5

      399c5c2b6b55c45140c8fc0cec19b7d3

      SHA1

      68278a8e1a8e72ecb39390ea249cb6a212ae7f1a

      SHA256

      b15706f6fcd9ce8ada3d79238413702edc6fd43127957c3e27639b45e6653d6d

      SHA512

      3aaf239db0b37b4b21c90d6c51e6fb592d88fd9f1382f73cd95d9d6c7f5228ebf76eaab9e43ab150e32df60911ad4777d3d9517fb33c5811a1db4aba54f4c096

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.firebase.crashlytics.xml

      Filesize

      311B

      MD5

      1bea93baa71b4dc01caf54e0bd281749

      SHA1

      560db9d02b83f0a69a5fa096eab91ed87436c21b

      SHA256

      25bbe685165d82aa498eed523bbe6d91c8c6caf4b0f2d87b121963ee2b866ddc

      SHA512

      15047ffbd72bfd2906253697feb6c35a413546453f455b12c8baf3c09c0c3e5b96952aba8df4f61462085b8c25b6286c80e3f3e6c6877a400ffefb2ff6912cb2

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.firebase.crashlytics.xml

      Filesize

      235B

      MD5

      2dcd04ceca25097b2d39b086087ab2c4

      SHA1

      3f89bbf8a823ae87e431c6f2ea57ac7e67086c5f

      SHA256

      dc86644cb136fcfd2879362456873c45506257edf358e798dbadfbcdc67ca537

      SHA512

      2c06804090d7d360f32ab236dcb0f541e1a342f204d2615aad9571ae63ded175b2bac27ab3dc83a0de256a4f300ac5aaa02099b7b0933b46aacb976c7e8ffec1

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      137B

      MD5

      d6b32b6f7842c43a69d96e6bbc0f951e

      SHA1

      f09a77cc001d93e3386c5cd436a79ee29a46da6f

      SHA256

      5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

      SHA512

      e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.protectstar.antivirus_preferences.xml

      Filesize

      194B

      MD5

      c78c495cf44504f575a670dc6bafda86

      SHA1

      77355bef2e78059d7a321dae6c6a56670bae772f

      SHA256

      645640a89ddef96bd44650003d2906d1395e1c59949afc10365d4affafac2831

      SHA512

      b166a79883696f8ce4c51132c4adf08ea99a7f6cd13c9ff55fc7026a6480bde3b9be64de96bdd51284974b1675ac9b46f528602b05de0e86b1d363b6a525a3b3