Analysis

  • max time kernel
    2314545s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 00:17

General

  • Target

    72f3547d6ebdce78347b4e28a9b9a547d5edcf1cce2f3e1aa0f70b66c6b79d83.apk

  • Size

    2.2MB

  • MD5

    3c6c007e1e25192a23c2d790a37c307c

  • SHA1

    b1b6845460586ff3a48b6ffb46a8208b8ff87828

  • SHA256

    72f3547d6ebdce78347b4e28a9b9a547d5edcf1cce2f3e1aa0f70b66c6b79d83

  • SHA512

    a8f55157f6cbaeafe4431487a38d600e59c04b43c70ab93089ce861807d4a9346c9956eeb7d4b43df3c02efe58703c725ee55b03e328969a4d46d27b3d5c22a4

  • SSDEEP

    49152:453GNnayBBuCwML2CsZDggdgr08PvfRgP8WvkZ3Knh:45snRuCwPbmRPvGPXvkZ3Kh

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.erenalp54.screencleaner
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4582

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.erenalp54.screencleaner/cache/ads241661956659910700.jar

          Filesize

          2KB

          MD5

          d80f6d032778b02d10a9c9a2f1a24714

          SHA1

          e34d4ea9618b1b499b65032723ea029ab3998500

          SHA256

          ee2de01a238f9e1834f9f9934dd1f5b267bdf9747965641d2fd636d740041f9b

          SHA512

          34fa52d41831142f86999ac407aafeb2b69bb4cd45ada9f739be84c80deb0414d11d6784f385eec287e4f6b5bdf29ba1c9a6a77c07707d66a73c60eb389136e1

        • /data/user/0/com.erenalp54.screencleaner/cache/ads241661956659910700.jar

          Filesize

          4KB

          MD5

          12670a32ad1380c9021a9e74aa5f2281

          SHA1

          7e8caf0c7a4d78452efb90958e8ce1aae5148e44

          SHA256

          f3c142f78cadcb57d7da3d8e4dc5f8c7b05377417c639059910696c844afc1f9

          SHA512

          1277dde373cab02d5df62732834adb79f8dbf1d1a9ac56b5b348e354317fadc24fe20b5ebdd1ecc28f8fc98dcdff807d2839bef75ef7d871e976e68a95851b06

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext

          Filesize

          28KB

          MD5

          f32910e9746ab1bec8c8002ddf3aff5e

          SHA1

          79e7f2c25194d27ebdc0eb2d55310190ede9b4c2

          SHA256

          8b45beeeaf7293973086113463ab237066eeb139ea91e74e5038e67b304cf8ae

          SHA512

          1ecef4445bd513cfc1180ea20063713ac5167fb0e4aae55f916890d9b0ebabbe60b073da583b1c9d4a743a8ec3587caf02ebc13dc829146afcdbfd3eafe783d5

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext

          Filesize

          28KB

          MD5

          623236080e17ca7f975c708b92c37e16

          SHA1

          d913e825d4af73a9bee16f030ae960acf7b25c18

          SHA256

          308da6fecd1c9e103970c7913574ddca2752717d1b73fcc667a0811c5f2789cf

          SHA512

          8d7034306dc0934b871694112243a105c2e784fbf0786419f816a2ff966c2f357df9691494a9273952af915a1e28b18ce393508f8d0a523cbaa232317571469c

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext

          Filesize

          28KB

          MD5

          40d8d7b39bfbf2219e9653ce98e1229b

          SHA1

          05205cdd8d3dbb73aa1dc895055872bc8357cb4c

          SHA256

          f41a01741560924afe58b606827a98bde2431ad740d01fea32eb7161d878f45a

          SHA512

          7c37500ea19515a5a001dd6233b73542e601a425edaa01128930e20879badc7f49ac2353a05f244e2f4200497fade8c122a8e7fb921d1937a5645f3ff504c879

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext

          Filesize

          28KB

          MD5

          064388b843c852fbe2fe06973f1b7cbd

          SHA1

          9af4f96d978ecc0f11a20344b1abb5bce5cb7670

          SHA256

          764d6e3ad3953c5dbeef78ef066b2cd94fe3176f131719cf0b7bdadbef36f69b

          SHA512

          125faab1cd1697dbb065edae3915e20c3d819ee8ad0a85e5d194a22e18d900a241c24e7cb1613012128ab738c66cc033d6f7c8d8cdf76e71c10300fa9bba4c62

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext

          Filesize

          12KB

          MD5

          f41f531c07d4141546a531ff9caffdcd

          SHA1

          9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

          SHA256

          bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

          SHA512

          e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext-journal

          Filesize

          16KB

          MD5

          d284fa384bba44cf992cef22074031f5

          SHA1

          6c173ac8fb0197c4103360148440838bc152b15b

          SHA256

          98eb420742cf7a0594ef5122c12cdaefa61ea2e47e4190c34fef86d7501b6dcb

          SHA512

          92ccda83d6a8f175c24e1b78e3bc4a55a5e02596ac45dc791445fdf7f339d9bb50e3dcef2a7afcb9414fc3b5d8d2e45f8f246fce67a4a0d409e4b62c3ef9adcb

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext-journal

          Filesize

          12KB

          MD5

          ca51f9a95f722e8f82658e1b51593120

          SHA1

          57d5325a1cbd4830051a8abe450ff130d3a32cbb

          SHA256

          d7bf16c86ede5816cb2f0b0664a4fe9cc4c7c513de6db4db8e8561605ab1f853

          SHA512

          ec0388006d0bf77c4dc83e0569de297ef62b7d8f160b1266e49519e9047e8f91375522c1dd8f47f028b0d63f61023d2dbbb28344a4539d8cf4173f495aed9ee8

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext-journal

          Filesize

          16KB

          MD5

          c2a5ffb9bf436b1c6d743e88e54e940f

          SHA1

          380d797afed55d6b8c192cb87117c990f9847a48

          SHA256

          ddfcbde4f5fe8fe6f17909d47391ce4ed30b9813d749be85346040a3944e3a26

          SHA512

          36f8964201fd88a48a90da1b248e11016ba8e3b475ae760b8be1fb3950a734990691e7216b3ce33d65a07460420bf97c44d8606bc7fb164ffb3e9e52b9818829

        • /data/user/0/com.erenalp54.screencleaner/databases/tapcontext-journal

          Filesize

          512B

          MD5

          f90087085743b5597e7dce43b12de760

          SHA1

          457c7dc53b2f5b79ea252009433f582497296216

          SHA256

          726728e49f66ea81e48cfab48b442962696a614d587acc0fd984e77ccc9e3837

          SHA512

          b6468721c0ce5c5b091e61baa4302d28e71e9c151d00f4a4c2d02232da1ed1157313e666477b732a68d753213cbbb9c7ad2dd28d174fcc960f2d5c9580f8ddda

        • /data/user/0/com.erenalp54.screencleaner/files/eula.zip

          Filesize

          11KB

          MD5

          7ecd824858cb8ae5d498ca7acb272508

          SHA1

          eb01238575aa58bfc5899e87ee502a5c538ecba3

          SHA256

          f7c6cd4eca98e4c17d4a54a978aa6df3ce3de3a18214de04ab7f51b2b7f82d73

          SHA512

          440241b2e632d776f913d6ecbc2575def6b8954894f47e531f630c2c1f92dba2967c237fe2be91d4096d7ffb2f2b7d11d46117702a752c8cfdd2969573d936f1

        • /data/user/0/com.erenalp54.screencleaner/files/log_stack.dat

          Filesize

          1KB

          MD5

          6bb0e77f1c0613ac2f7ccb5dac0b53e5

          SHA1

          bc249b95e0699d922d9d8bdd15e5a8b2beae33ca

          SHA256

          4f0e429754c8b15cfce399d44ab779dee47b136d9cdc547f5a3710b4552d6afe

          SHA512

          e02f92d1f01ded024f96ad7f322b9d9666c6e6bfa76e5fc80f9b21d52d031c54fe2fcbdfbea55d95c813bc5f467a827420fc29d0646f91892b45b4a62ea73a9a

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall.zip

          Filesize

          155KB

          MD5

          15ff9d47bca2c6a43c58de54a8584a47

          SHA1

          c15085113dc4713f79c9ddb86a9f8a3b1413681c

          SHA256

          3fbbb2fc914803073ab81533e9dd128a38d7abc461f8a17c70962f59d836e226

          SHA512

          79b2f389f7805c23ec25f59f564c412724de3737652350dbc7caa47d7be3382db7268578f286e2f260f038007a4aff7e4ac91a08a56202a091293a72c5769366

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/css/main.css

          Filesize

          8KB

          MD5

          1a5f7a80b92cee57c24e38a4b586ad62

          SHA1

          de37c97d10d9345c7c8a5282d94becb140540889

          SHA256

          c8f450b916778e9caa8f85369ae960c316716699cc06f51528bfd7428c5e7352

          SHA512

          f3fbd0053cdd4b64cb304caeb91ddd5d00f473a0e41b74777072d44fea139124402c6bfb472d5526f207ac2a68afdaab73c0524b2801cbd38842dd42c4d18278

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/fonts/Roboto-Bold-webfont.ttf

          Filesize

          25KB

          MD5

          5d1aba20e25af8bca71b420c7de37d46

          SHA1

          540882ca0ecc4862d9d82b85c417498eb5b51fc6

          SHA256

          ecb3a1671a94b9671d1336fd46d00f9dd279cf83084cdad5d1aed2d35f233522

          SHA512

          aa15a6c4356268f9f134ffba218c138a76ef6e8dd2db1f9a39400c51fec100390ac45fbd84056819aa8c44b2eb3d16881e0981e2bb44902e30802ec8a51b9918

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/fonts/Roboto-Regular-webfont.ttf

          Filesize

          25KB

          MD5

          4e03528f1f48da3726edb5ada9fe4636

          SHA1

          b818e0acfc74ecf7701940240b6c31a2319af217

          SHA256

          b12cc7b6bc437f7dd5408f65538df2e068890da80d37771031bc6a63f4dfd734

          SHA512

          3680400b45a02a719ec526391c22c8a66fb1e9b0c8d15ebee78bc9475ae8a1ee7be89a853f9d5a11e741d5297efe5b9b6ceaaff39413515588f306b36971fdb3

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/downloadbutton.png

          Filesize

          9KB

          MD5

          407ffdfcc533caffe20ae7bde64d470f

          SHA1

          94691c69e3688a0afe991461f1b9bb06b8a63407

          SHA256

          5f05f515a59fa67ed46576fec844fb0bf052798ef185237b254048449526b74e

          SHA512

          b73242ba58f19c45d9f3e0d4f669670f3028e8e722eb074cb1f3415e1920bd1e0d49123c646c02cd14d2fa708f6c06e37e015e94c4c350a1a671bad3c0799eb3

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/fruiteninja.png

          Filesize

          23KB

          MD5

          124f9955436bdb9ec6c2ae5fb155b630

          SHA1

          b8b24b70eb024d8451fad9acff8343eb973a8bfa

          SHA256

          b0156487c63223edc2314a1899f4609fdf699150070c38c3c7fd5037744d399a

          SHA512

          b0a73e52848ba9598080c93f14b1d702ce1fc28bff374cad4b2bbf95e636867da0efb274ae69bb81e2510b4fd3c3f327af607da9e7f282130a90377db30ba422

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/headerbg.jpg

          Filesize

          3KB

          MD5

          328ac1a461f85f8f4669930544ca24cf

          SHA1

          5712ee563972e3b9ad02cc01bc16fe3d76bbed33

          SHA256

          350f7fc30ace8a6e09b448da4d418cf70d6a907d755f51e89e759fc02fba7d3f

          SHA512

          a36b800352fa148e84c82c661343b8965d7b5891314029ae5cbd3cdc4e7f327df26084f09c81a27b4f754c5747b8683c5d7adf122497647a6bf72f84f5e43f15

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/logo.png

          Filesize

          8KB

          MD5

          7f5bb650b8c535f2150080aef5d4360d

          SHA1

          8941de259ea709db0c10716269a802d5b29a3b77

          SHA256

          4b5f5157f6242f771751f0a657edf29b0ca97d5b80fe28ea8832cb14340e0413

          SHA512

          4149480c49e009a360d2f3251d3b78828e25a17346dd1b9b32d9f727d7b6aa365b2425dc375ed9eb2b079930bca0060d77bd8149de1da3db907e0e9bef2245df

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/powered.png

          Filesize

          3KB

          MD5

          5b00e825e6935d570fe69ab1ecb3a302

          SHA1

          d2c149612a07e5843471e0fb2d35e22e0174ef33

          SHA256

          971d89d9395b39805ed7f93efd6fd4dca829e8d83101469ae9a583639098c171

          SHA512

          bd2313bd3bc424e03409efe93b70179a473fef1aed29264d7a92f03d35dcb12222ee92d44f77e7e55b46a87c566f631b505cbce167b193644fb2086640f1e649

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/stars.png

          Filesize

          4KB

          MD5

          d845939a9fa291f47967ddea2c445d0c

          SHA1

          457ec0ea2fbd175978168c1baa665a852b1e548c

          SHA256

          e0054877849410017bc8dbe6876b7d52c1b30b586e9dc1670793f49d7195c8a6

          SHA512

          81cfad467b2b7e9f5bdbe496ad417d0eeae666ce1a69c124fd8b38818939db7c20c33f1e6f7a6b0b07e24278e33f4d18d75f246a429608afd79edaceb6441517

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/superfast.png

          Filesize

          12KB

          MD5

          636ddd62ae3c6c2112bb9399d0687a2b

          SHA1

          40af7218e081459b98234abde1e319f4b0491416

          SHA256

          84d9d9a214c3ae88e0b572a599baaa169a7a81144943d70d3a05e5ce6887e098

          SHA512

          d2a65ef3b66585548208de4dee1348b0eaa598384541581927193a5338a8e21a681048384f77de8a2499856c329596ca6f20f463058a686bb23f534685f7bfad

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/talkingginger.png

          Filesize

          22KB

          MD5

          1f5d1af203903f37a7edb3d1e12a4f27

          SHA1

          12c5bbf79791aa547faea7741cd3cc7c2fe84ae8

          SHA256

          ce663ea588ccb9e04688b34df5564afaf7804d51ff659fb7eb82628898682d48

          SHA512

          1b483b6db65c934110289635c5ee084421b742a63bf02d297dc129c6c89b2dfd3387e6479c26e06ff93b8eb71862fbd916df57bcbaf75f63466693a7dcee0ff3

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/img/twitter.png

          Filesize

          4KB

          MD5

          f7910379d8e262bbf618c8d0f0589412

          SHA1

          a9807369073f64122c875be12cc2a21a0b7e3f07

          SHA256

          dc3bf1d445278e7c2226e3cc02fcc61691eaa9a5bd5b9208edaa7acd8c7b2a77

          SHA512

          01248e5a1b3961c4cb905b69daa52e3577c88ef8608742941b8840a57b2c680d08b66d5f1e7abfddb813ac23869f3a17fe7d722079ea1791490151f5c6beb8e8

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/index.html

          Filesize

          1KB

          MD5

          7653713e9115bd5640d8c18d49c4ead5

          SHA1

          1008b30abead1945f2fdb4f8acf106bddb8c314b

          SHA256

          b87f7697bfdc20197afe2b9b5950f52230b9465b37d8ffb77a9092661d91bc2f

          SHA512

          7bc988e32393c548f0c7ac6858fe13665ca835c1b2b2165b7a652e6bbdf6669acfae1f8e69ac03b646a6286640daef8dbd6b552883806e3df3890a5c5710c05f

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/js/main.js

          Filesize

          1KB

          MD5

          788fcbbf403fb5fd860e9677f301052f

          SHA1

          595ce1dc8fa3e909e24451bb30441ac983a09893

          SHA256

          ee7d3e02a08257f8e9df5cb62282014812aad14caff3e9d7df2a3f33eed28751

          SHA512

          fe97cae087e32bcf04b3c8c07801bf06ca004104f2ba9d8a4ece658df847e0011f017e212b15aef062e42b3c33827521636ceb684784677aff17a5856dfa9a0b

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/js/vendor/jquery-1.8.3.min.js

          Filesize

          86KB

          MD5

          bc9f49d3cb3ce631515986cc56c770d0

          SHA1

          830241909982e3084684ad4856838b00262309ba

          SHA256

          678b685960003a523b9cd4674f2e6a892e8ae8c1d753c96f9fc79cf0e5cfa228

          SHA512

          8b045428bb4fff03b81b5456349f6a5a093762fd2508de454ae2224cc09cff8f883b7de835b3bdcaea0e0e0212a48f54d3709764b3ae18a9ec7f0c313a68a626

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall_feed_json.json

          Filesize

          1KB

          MD5

          af0218d581da8f5062ccdbacedeaa69d

          SHA1

          e70643530639fbeb49327bb768ba7297bb7e525b

          SHA256

          d7f41426355991a86510d3d4086451818ed1d88886a3a1701cc8325f13e16a9a

          SHA512

          1787de705f6078f82c72bbd1927ecfc17c563ceea6c8ab80a7c5227d126ea51145aebb6b0708b6b299f13082d95687e5e134b1c6e5acfa0f96568b0f2261cf64

        • /data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall_flow.html

          Filesize

          708B

          MD5

          24874e584dcd80c9ce530a3257e1321d

          SHA1

          faa6f64ad2d1366b6bc42bf64defb294b653c047

          SHA256

          5c8c4e3129dbe8258b5440a9bdef666e65088654ad8fa42c0f48693b30c4213f

          SHA512

          1b755d50395792f9aa82c8daf78e2cf7cf158cb428b557931589e513d8569e18afdbcdffa4c2cff874ce5000b66e9f24fda57104853bead1e4678d859a462529

        • /storage/emulated/0/.tapcontext

          Filesize

          20B

          MD5

          43b8178d07625ecd992fe743620d4499

          SHA1

          ab319433e59a4df80f630c22b1286d2cef660277

          SHA256

          cd842a10ce6f9f092368b978704512b5ab81a576f2bd129c7123da9f676216b6

          SHA512

          da8e5caf9ff74dd0742066245af09f1b8af4834bbc458873e0c8f32c24bcc3dd3705b7ffa4f53fd9116b0861c2dfef491f2c44b35e52354025370fd94e0eb386