Overview

overview

7

Static

static

7

Virus Clea...re.apk

android-9-x86

1

ad_load_anim.json

windows7-x64

3

ad_load_anim.json

windows10-2004-x64

3

audience_network.dex

windows7-x64

3

audience_network.dex

windows10-2004-x64

3

avlsdk.zip

windows7-x64

1

avlsdk.zip

windows10-2004-x64

1

av/avl/and...ds.avl

windows7-x64

3

av/avl/and...ds.avl

windows10-2004-x64

3

av/avl/and...mc.avl

windows7-x64

3

av/avl/and...mc.avl

windows10-2004-x64

3

av/avl/and...pn.avl

windows7-x64

3

av/avl/and...pn.avl

windows10-2004-x64

3

av/avl/and...ic.avl

windows7-x64

3

av/avl/and...ic.avl

windows10-2004-x64

3

av/avl/and...es.avl

windows7-x64

3

av/avl/and...es.avl

windows10-2004-x64

3

av/avl/and...hc.avl

windows7-x64

3

av/avl/and...hc.avl

windows10-2004-x64

3

av/avl/and...ui.avl

windows7-x64

3

av/avl/and...ui.avl

windows10-2004-x64

3

av/avl/and...kw.avl

windows7-x64

3

av/avl/and...kw.avl

windows10-2004-x64

3

av/avl/and...pc.avl

windows7-x64

3

av/avl/and...pc.avl

windows10-2004-x64

3

av/avl/and...df.avl

windows7-x64

3

av/avl/and...df.avl

windows10-2004-x64

3

av/avl/and...pd.avl

windows7-x64

3

av/avl/and...pd.avl

windows10-2004-x64

3

av/avl/and...pg.avl

windows7-x64

3

av/avl/and...pg.avl

windows10-2004-x64

3

av/avl/and...re.avl

windows7-x64

3

Resubmissions

16/08/2023, 14:02

230816-rch4msbc46 7

16/08/2023, 13:59

230816-radq5sda9s 7

14/08/2023, 11:26

230814-nj7tssdf5w 7

14/08/2023, 11:25

230814-njhvnsbf54 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Virus Cleaner, Antivirus Clean_1.1.37_Apkpure.apk

  • Size

    20.6MB

  • MD5

    740d38c0098ab06d877d1d65f3b1ac29

  • SHA1

    c8fe89335435734583d1a1496ca4953892b32e4a

  • SHA256

    fbb4569e38230578b68b9a4b06e9e933b5e6ad4697e75248753cc319a35e7599

  • SHA512

    484ec93e08273a9bddc663755928f2a7ac5e96043e7aefa16e61329d50690b3be128210246315a2bf1fc392fce5fd07e6e981cc2b672b9b920ac3357715eedb7

  • SSDEEP

    393216:1egY7EtaZhPnEZVeZuxPZcNGgCSKP320LFpJtkewJ8r4f/cLejNSi1+eahZGI06c:1e7EtcqbPMjKPLleRN3RXPI4

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • Virus Cleaner, Antivirus Clean_1.1.37_Apkpure.apk
    .apk android arch:arm arch:arm64

    phone.antivirus.virus.cleaner.junk.clean.speed.booster.master

    phone.cleaner.activity.ActivitySplash


  • ad_load_anim.json
  • audience_network.dex
    .dex
  • avlsdk
    .zip
  • av/avl/android/avlpk_ads.avl
  • av/avl/android/avlpk_amc.avl
  • av/avl/android/avlpk_apn.avl
  • av/avl/android/avlpk_basic.avl
  • av/avl/android/avlpk_des.avl
  • av/avl/android/avlpk_dhc.avl
  • av/avl/android/avlpk_herui.avl
  • av/avl/android/avlpk_kw.avl
  • av/avl/android/avlpk_opc.avl
  • av/avl/android/avlpk_opc_scdf.avl
  • av/avl/android/avlpk_opd.avl
  • av/avl/android/avlpk_opg.avl
  • av/avl/android/avlpk_pornware.avl
  • av/avl/android/avlpk_sfmf.avl
  • av/avl/android/avlpk_sgnl.avl
  • av/avl/android/avlpk_sign.avl
  • av/avl/android/avlpk_white.avl
  • av/avl/conf/avllib.conf
  • av/avl/conf/liscense.conf
  • av/kw/common/en/behavior.des
  • av/kw/common/en/common.des
  • av/kw/common/en/recommend.des
  • av/kw/common/zh/behavior.des
  • av/kw/common/zh/common.des
  • av/kw/common/zh/recommend.des
  • sdk_conf/sdk.conf
  • sdk_conf/version.conf
  • tt_mime_type.pro
  • tt_na.czl
  • tt_nd
    .elf linux x86

Android Permissions

Virus Cleaner, Antivirus Clean_1.1.37_Apkpure.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.PACKAGE_USAGE_STATS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_PACKAGE_SIZE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

phone.antivirus.virus.cleaner.junk.clean.speed.booster.master.permission.ANTI_VIRUS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE