Analysis

  • max time kernel
    1024449s
  • max time network
    22s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    09-07-2023 23:49

General

  • Target

    AntivirusAI136_DZAPK.COM-1.apk

  • Size

    10.4MB

  • MD5

    2281a663acfc3e81cbdb7ede827c2d6d

  • SHA1

    9b13e7d7431a3847f9e1abb3cc793e498c4d86f1

  • SHA256

    44fd5e974fc5c7903d67233ba9e4718b7cc63627a28ba8fe1d2c7ef6eb5f74c4

  • SHA512

    89768d9beb8800a20d506cb40254df9a2259d334979db873d357604ca776b6a4c6fabd537ddf9c517eadb3607618f91b2f288ed66060348fb7037c29e3fd30ca

  • SSDEEP

    196608:LD6T4a110xIPoIeP/ShMIgHUkiBY8dG7iFnu6ToJ+Ov8e1I7ao:L+T4a1CiPMIgHjWvEAnMhs

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Processes

  • com.protectstar.antivirus
    1⤵
      PID:5017

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.protectstar.antivirus/databases/com.google.android.datatransport.events

      Filesize

      144KB

      MD5

      f5ab98aaae0654cfc42ec1e684d3954d

      SHA1

      c546ab1310c0ecf4676c9ed028fbeb6f521c510a

      SHA256

      fca6bae3005bba4ccac50baf74d860df7c7fd60cc561d00a919773242b289193

      SHA512

      52a95e242a6b9bce2a74c0ceb10bafc32a10d5df481f2906730d39c7b04916712d2620e94c5b5a20fffd3836c9f2dc840f40a869469bdb4d612e6b63a8f428d9

    • /data/user/0/com.protectstar.antivirus/databases/com.google.android.datatransport.events-journal

      Filesize

      1KB

      MD5

      986680999f5202192261541fcd224766

      SHA1

      525297605b08fe21a493fd941d59dbf9211011e4

      SHA256

      e6eea1670a2b55f637aa9a1274d8a5be79ef8ed0ab151a165c9c36cc3c6b88dc

      SHA512

      55dfd93992a4e32f3fbd87e7e38f37a86829ccbba5adc57cdf6fc31155099a8bac1eb0a571c85f4d7c64002f1e7575fb82d6a5c3498a5e4cb4dbb57ed4a89374

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/initialization_marker

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB47A0004B00011399F54646587BF8/keys

      Filesize

      15B

      MD5

      573f30909f4bf560971e1115453c34fc

      SHA1

      239ea999a5ff1fda1652483298fcea2627e76269

      SHA256

      b0c0f5f2345c11fcf39b8528bc21c9a0a767d5061bb2ed0d7ebcd0552d8fa847

      SHA512

      8cf5df41225b624953669de573c71b5fe87c63ac0c566d7a7b9674e5bd9c2c83cad46feec39841a724512098969f28bd86733f2ed00940364fa490c80ccfac91

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB47A0004B00011399F54646587BF8/report

      Filesize

      755B

      MD5

      c970ce779bf294c8a6c199eb0158d406

      SHA1

      746d2c24715ff3a1efc5071ff2733a819d0526e9

      SHA256

      06a141b79af647325f7f98bd8d5951b28c0d71a215aa2578bb4caca3a74eccf7

      SHA512

      c3a088dfa53ac2c00abd7fc5d6b7e7110c2bef4d7e87760daedbc8e4b0f126de6a3e6149cfa996f55999a58163c6ba2b3fee7bbf8e8df8bfa2ee8a5e256b9e64

    • /data/user/0/com.protectstar.antivirus/files/.com.google.firebase.crashlytics.files.v2:com.protectstar.antivirus/open-sessions/64AB47A0004B00011399F54646587BF8/start-time

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/PersistedInstallation3895949631539386402tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/PersistedInstallation3934562412804100933tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.protectstar.antivirus/origin.apk

      Filesize

      5.5MB

      MD5

      64bce546d5b79b78e6688420945edf87

      SHA1

      665cd42c9831d0510db5756c004911c5b71a99cb

      SHA256

      75078c407ef53a9433ecbdd76f49002a8a5bdc9df0da65ef0bc6040c6bce7dab

      SHA512

      20c50c51b18bc7f1f281ecdff81e1395ec82a22d12b4a28cb9bf69fee56cf0b7059939f0542c545e8419a32ce158a6300901944f50364f51be33a4995c2399c9

    • /data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml

      Filesize

      590B

      MD5

      a0002fed3bda8eef1e928f1b76cf5959

      SHA1

      ef7184e23716d6c33168268b484e369b0f669da2

      SHA256

      d1b9c0cc39e8c5e9ceaea3aa46639d0f7f4b6ef07c11b238c8768dad61ae34f0

      SHA512

      7d8c7adcbf42ada0d2ee52784bae57c481750000d60959907f267ee0b964c32c949f5023544cf45c7ccd61dd54212cb88917345ede834b372e86faa2648180ca

    • /data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml

      Filesize

      178B

      MD5

      c25434e6bf1da8ab4c8e68221b8a0c29

      SHA1

      adc28b4f061a9e993c94ec6ecec9214807db34af

      SHA256

      1fb66d60bde46eca227a551c4725b5d86a492c7f077ca2eb3448a23ae7d73807

      SHA512

      a7435f630758667f407ffc725c3bda50853338090c28a455550fb794e35f2168a0d0743dbc90d3ef6b48c9379165b236ab9b72e34ea09baa6fc31e6dcacb3617

    • /data/user/0/com.protectstar.antivirus/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMDc1MjQ2MjI0OTk5OmFuZHJvaWQ6ZGEwYjliODY5YTAyMjNhNjk2YTZjMg.xml

      Filesize

      536B

      MD5

      b862164de953102cbdb50ea24d3c41de

      SHA1

      e330928efe9505c0cdc4171364ccb6899d0cb657

      SHA256

      9646cf7e638f9d9fd330a36f175d582d3104eb0d14f279fdc2153fd4faf2e128

      SHA512

      dbf8e2f70be0bc915b3d832006bb3c36fceef0c2127900d136a594cab888a237151f51053c328c725dbaacacb26801fe721b649b9e1af8a2ce554d6317c1c285

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      180B

      MD5

      4468a30c5bdefb88bd93c1200f161a60

      SHA1

      17a49c3a7a5f43dfdc9635258b8e3093f793f2f0

      SHA256

      0c32a2f0e1123f6ef7419304dcea4d31bd10e1a4fa7669c271513af4c1fe58f7

      SHA512

      2270f8f352d2001b2d1dc1cdc10fb42a28786a50d70469e7191de2b85bd69cc8314c0b09b40a84bad64c35afbb5ae1392ed65338c58fda67b57f5114149234ec

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      301B

      MD5

      4785a995d14b46e3ef294449827851f0

      SHA1

      4a86b0c54456a709a3e08865500947ec49e005fe

      SHA256

      18fe173f2dfb9bd8f6bc08730cc0100f51684c846a9774732020f4ad96b4b524

      SHA512

      7388690a6a2760397815fe6855028a5698d3fc435e483fdaff3b2c932ae73c2123ff6c4c2c4b772f736dceb9215174e0eeb8d832abb30b1a1101c94fb0e87d06

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      456B

      MD5

      dad28080e8c4b1fe6b4bb7bb67a966c9

      SHA1

      71c0c8f905b113d06cd9188c2198a1709e2131db

      SHA256

      979f29e3aa17ace5114624f6cd965ea924a805f5185ba98f14c9c750fe38fa21

      SHA512

      5f88f08b0c9a43adca558911a8bd30688a802799ee192877647aabaa6a99bc26255a07888532618d0055936dc30c6485ecd37229c87ac71dfc166472ae62368e

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      456B

      MD5

      0608770691dfcbfd51f889ddb83c21e5

      SHA1

      609ea9136eb8bb4ae623e5a3ffe26a0bda2cf077

      SHA256

      4600d250567ab48eaf2eb76cd39ddf60cd5e38b696aea250093e62e23aacf2bc

      SHA512

      d86d02a0cbc055d4ca2b3a583a312c7ced20755938cb4174017b6109b30a304187c66aabde496dfa4157bda5b3951d5de49b8bec14705e88529ca84aa03ea8f6

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.firebase.crashlytics.xml

      Filesize

      311B

      MD5

      453280bb1227ec60bb263513ff798896

      SHA1

      28b7763f79700e1d35f3477740aa6c916aa399fa

      SHA256

      d2aac21ddb648d84ad51b85011ae018e5861d9deba148090cd6f5415b861159c

      SHA512

      fdf6cf39e4a196d45fd54cab2ced57b0ec93f24fa5e01dc2d269c8c34bc9ce1f5c5a8414d2834a97fa6ccb2e1340331faa5024f35ebf771a347e4b83035cdc64

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.firebase.crashlytics.xml

      Filesize

      235B

      MD5

      2c914075cc7d96623928ac9bc3a07757

      SHA1

      2f3a822dc1bf484f02023e852198159d882b6104

      SHA256

      b74b303e5f67548dd5116a34e587697b0049273800ba04fe7c5f611277193734

      SHA512

      aa17141aee21f05913de80cb73497a828d9a7e2b6e99907cf8e1111b481b0ae102d120e94d930b2a581a8777f9b1464d9edd560c9b4cd67e6c9c09dc692dd6e3

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      137B

      MD5

      d6b32b6f7842c43a69d96e6bbc0f951e

      SHA1

      f09a77cc001d93e3386c5cd436a79ee29a46da6f

      SHA256

      5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

      SHA512

      e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

    • /data/user/0/com.protectstar.antivirus/shared_prefs/com.protectstar.antivirus_preferences.xml

      Filesize

      194B

      MD5

      c78c495cf44504f575a670dc6bafda86

      SHA1

      77355bef2e78059d7a321dae6c6a56670bae772f

      SHA256

      645640a89ddef96bd44650003d2906d1395e1c59949afc10365d4affafac2831

      SHA512

      b166a79883696f8ce4c51132c4adf08ea99a7f6cd13c9ff55fc7026a6480bde3b9be64de96bdd51284974b1675ac9b46f528602b05de0e86b1d363b6a525a3b3