Overview
overview
10Static
static
7AntivirusA...-1.apk
android-9-x86
10AntivirusA...-1.apk
android-10-x64
7disclosure.html
windows7-x64
1disclosure.html
windows10-2004-x64
1myps_policy.html
windows7-x64
1myps_policy.html
windows10-2004-x64
1origin.apk
android-9-x86
origin.apk
android-10-x64
origin.apk
android-11-x64
disclosure.html
windows7-x64
1disclosure.html
windows10-2004-x64
5myps_policy.html
windows7-x64
1myps_policy.html
windows10-2004-x64
1policy.html
windows7-x64
1policy.html
windows10-2004-x64
1vpnservice.html
windows7-x64
1vpnservice.html
windows10-2004-x64
1policy.html
windows7-x64
1policy.html
windows10-2004-x64
1vpnservice.html
windows7-x64
1vpnservice.html
windows10-2004-x64
1Analysis
-
max time kernel
1024449s -
max time network
22s -
platform
android_x64 -
resource
android-x64-20230621-en -
resource tags
androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system -
submitted
09-07-2023 23:49
Static task
static1
Behavioral task
behavioral1
Sample
AntivirusAI136_DZAPK.COM-1.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
AntivirusAI136_DZAPK.COM-1.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
disclosure.html
Resource
win7-20230703-en
Behavioral task
behavioral4
Sample
disclosure.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
myps_policy.html
Resource
win7-20230703-en
Behavioral task
behavioral6
Sample
myps_policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
origin.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral8
Sample
origin.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral9
Sample
origin.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral10
Sample
disclosure.html
Resource
win7-20230703-en
Behavioral task
behavioral11
Sample
disclosure.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
myps_policy.html
Resource
win7-20230703-en
Behavioral task
behavioral13
Sample
myps_policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
policy.html
Resource
win7-20230703-en
Behavioral task
behavioral15
Sample
policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
vpnservice.html
Resource
win7-20230703-en
Behavioral task
behavioral17
Sample
vpnservice.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
policy.html
Resource
win7-20230703-en
Behavioral task
behavioral19
Sample
policy.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral20
Sample
vpnservice.html
Resource
win7-20230703-en
Behavioral task
behavioral21
Sample
vpnservice.html
Resource
win10v2004-20230703-en
General
-
Target
AntivirusAI136_DZAPK.COM-1.apk
-
Size
10.4MB
-
MD5
2281a663acfc3e81cbdb7ede827c2d6d
-
SHA1
9b13e7d7431a3847f9e1abb3cc793e498c4d86f1
-
SHA256
44fd5e974fc5c7903d67233ba9e4718b7cc63627a28ba8fe1d2c7ef6eb5f74c4
-
SHA512
89768d9beb8800a20d506cb40254df9a2259d334979db873d357604ca776b6a4c6fabd537ddf9c517eadb3607618f91b2f288ed66060348fb7037c29e3fd30ca
-
SSDEEP
196608:LD6T4a110xIPoIeP/ShMIgHUkiBY8dG7iFnu6ToJ+Ov8e1I7ao:L+T4a1CiPMIgHjWvEAnMhs
Malware Config
Signatures
-
Requests dangerous framework permissions 3 IoCs
Processes:
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to post notifications. android.permission.POST_NOTIFICATIONS
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
MD5f5ab98aaae0654cfc42ec1e684d3954d
SHA1c546ab1310c0ecf4676c9ed028fbeb6f521c510a
SHA256fca6bae3005bba4ccac50baf74d860df7c7fd60cc561d00a919773242b289193
SHA51252a95e242a6b9bce2a74c0ceb10bafc32a10d5df481f2906730d39c7b04916712d2620e94c5b5a20fffd3836c9f2dc840f40a869469bdb4d612e6b63a8f428d9
-
Filesize
1KB
MD5986680999f5202192261541fcd224766
SHA1525297605b08fe21a493fd941d59dbf9211011e4
SHA256e6eea1670a2b55f637aa9a1274d8a5be79ef8ed0ab151a165c9c36cc3c6b88dc
SHA51255dfd93992a4e32f3fbd87e7e38f37a86829ccbba5adc57cdf6fc31155099a8bac1eb0a571c85f4d7c64002f1e7575fb82d6a5c3498a5e4cb4dbb57ed4a89374
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/initialization_marker
MD5d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB47A0004B00011399F54646587BF8/keys
Filesize15B
MD5573f30909f4bf560971e1115453c34fc
SHA1239ea999a5ff1fda1652483298fcea2627e76269
SHA256b0c0f5f2345c11fcf39b8528bc21c9a0a767d5061bb2ed0d7ebcd0552d8fa847
SHA5128cf5df41225b624953669de573c71b5fe87c63ac0c566d7a7b9674e5bd9c2c83cad46feec39841a724512098969f28bd86733f2ed00940364fa490c80ccfac91
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB47A0004B00011399F54646587BF8/report
Filesize755B
MD5c970ce779bf294c8a6c199eb0158d406
SHA1746d2c24715ff3a1efc5071ff2733a819d0526e9
SHA25606a141b79af647325f7f98bd8d5951b28c0d71a215aa2578bb4caca3a74eccf7
SHA512c3a088dfa53ac2c00abd7fc5d6b7e7110c2bef4d7e87760daedbc8e4b0f126de6a3e6149cfa996f55999a58163c6ba2b3fee7bbf8e8df8bfa2ee8a5e256b9e64
-
/data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB47A0004B00011399F54646587BF8/start-time
MD5d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
5.5MB
MD564bce546d5b79b78e6688420945edf87
SHA1665cd42c9831d0510db5756c004911c5b71a99cb
SHA25675078c407ef53a9433ecbdd76f49002a8a5bdc9df0da65ef0bc6040c6bce7dab
SHA51220c50c51b18bc7f1f281ecdff81e1395ec82a22d12b4a28cb9bf69fee56cf0b7059939f0542c545e8419a32ce158a6300901944f50364f51be33a4995c2399c9
-
/data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml
Filesize590B
MD5a0002fed3bda8eef1e928f1b76cf5959
SHA1ef7184e23716d6c33168268b484e369b0f669da2
SHA256d1b9c0cc39e8c5e9ceaea3aa46639d0f7f4b6ef07c11b238c8768dad61ae34f0
SHA5127d8c7adcbf42ada0d2ee52784bae57c481750000d60959907f267ee0b964c32c949f5023544cf45c7ccd61dd54212cb88917345ede834b372e86faa2648180ca
-
/data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml
Filesize178B
MD5c25434e6bf1da8ab4c8e68221b8a0c29
SHA1adc28b4f061a9e993c94ec6ecec9214807db34af
SHA2561fb66d60bde46eca227a551c4725b5d86a492c7f077ca2eb3448a23ae7d73807
SHA512a7435f630758667f407ffc725c3bda50853338090c28a455550fb794e35f2168a0d0743dbc90d3ef6b48c9379165b236ab9b72e34ea09baa6fc31e6dcacb3617
-
/data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml
Filesize536B
MD5b862164de953102cbdb50ea24d3c41de
SHA1e330928efe9505c0cdc4171364ccb6899d0cb657
SHA2569646cf7e638f9d9fd330a36f175d582d3104eb0d14f279fdc2153fd4faf2e128
SHA512dbf8e2f70be0bc915b3d832006bb3c36fceef0c2127900d136a594cab888a237151f51053c328c725dbaacacb26801fe721b649b9e1af8a2ce554d6317c1c285
-
Filesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
180B
MD54468a30c5bdefb88bd93c1200f161a60
SHA117a49c3a7a5f43dfdc9635258b8e3093f793f2f0
SHA2560c32a2f0e1123f6ef7419304dcea4d31bd10e1a4fa7669c271513af4c1fe58f7
SHA5122270f8f352d2001b2d1dc1cdc10fb42a28786a50d70469e7191de2b85bd69cc8314c0b09b40a84bad64c35afbb5ae1392ed65338c58fda67b57f5114149234ec
-
Filesize
301B
MD54785a995d14b46e3ef294449827851f0
SHA14a86b0c54456a709a3e08865500947ec49e005fe
SHA25618fe173f2dfb9bd8f6bc08730cc0100f51684c846a9774732020f4ad96b4b524
SHA5127388690a6a2760397815fe6855028a5698d3fc435e483fdaff3b2c932ae73c2123ff6c4c2c4b772f736dceb9215174e0eeb8d832abb30b1a1101c94fb0e87d06
-
Filesize
456B
MD5dad28080e8c4b1fe6b4bb7bb67a966c9
SHA171c0c8f905b113d06cd9188c2198a1709e2131db
SHA256979f29e3aa17ace5114624f6cd965ea924a805f5185ba98f14c9c750fe38fa21
SHA5125f88f08b0c9a43adca558911a8bd30688a802799ee192877647aabaa6a99bc26255a07888532618d0055936dc30c6485ecd37229c87ac71dfc166472ae62368e
-
Filesize
456B
MD50608770691dfcbfd51f889ddb83c21e5
SHA1609ea9136eb8bb4ae623e5a3ffe26a0bda2cf077
SHA2564600d250567ab48eaf2eb76cd39ddf60cd5e38b696aea250093e62e23aacf2bc
SHA512d86d02a0cbc055d4ca2b3a583a312c7ced20755938cb4174017b6109b30a304187c66aabde496dfa4157bda5b3951d5de49b8bec14705e88529ca84aa03ea8f6
-
Filesize
311B
MD5453280bb1227ec60bb263513ff798896
SHA128b7763f79700e1d35f3477740aa6c916aa399fa
SHA256d2aac21ddb648d84ad51b85011ae018e5861d9deba148090cd6f5415b861159c
SHA512fdf6cf39e4a196d45fd54cab2ced57b0ec93f24fa5e01dc2d269c8c34bc9ce1f5c5a8414d2834a97fa6ccb2e1340331faa5024f35ebf771a347e4b83035cdc64
-
Filesize
235B
MD52c914075cc7d96623928ac9bc3a07757
SHA12f3a822dc1bf484f02023e852198159d882b6104
SHA256b74b303e5f67548dd5116a34e587697b0049273800ba04fe7c5f611277193734
SHA512aa17141aee21f05913de80cb73497a828d9a7e2b6e99907cf8e1111b481b0ae102d120e94d930b2a581a8777f9b1464d9edd560c9b4cd67e6c9c09dc692dd6e3
-
Filesize
137B
MD5d6b32b6f7842c43a69d96e6bbc0f951e
SHA1f09a77cc001d93e3386c5cd436a79ee29a46da6f
SHA2565d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75
SHA512e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56
-
Filesize
194B
MD5c78c495cf44504f575a670dc6bafda86
SHA177355bef2e78059d7a321dae6c6a56670bae772f
SHA256645640a89ddef96bd44650003d2906d1395e1c59949afc10365d4affafac2831
SHA512b166a79883696f8ce4c51132c4adf08ea99a7f6cd13c9ff55fc7026a6480bde3b9be64de96bdd51284974b1675ac9b46f528602b05de0e86b1d363b6a525a3b3