Analysis
-
max time kernel
2314545s -
max time network
151s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
20/12/2023, 00:17
Static task
static1
Behavioral task
behavioral1
Sample
72f3547d6ebdce78347b4e28a9b9a547d5edcf1cce2f3e1aa0f70b66c6b79d83.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
72f3547d6ebdce78347b4e28a9b9a547d5edcf1cce2f3e1aa0f70b66c6b79d83.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
72f3547d6ebdce78347b4e28a9b9a547d5edcf1cce2f3e1aa0f70b66c6b79d83.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
72f3547d6ebdce78347b4e28a9b9a547d5edcf1cce2f3e1aa0f70b66c6b79d83.apk
-
Size
2.2MB
-
MD5
3c6c007e1e25192a23c2d790a37c307c
-
SHA1
b1b6845460586ff3a48b6ffb46a8208b8ff87828
-
SHA256
72f3547d6ebdce78347b4e28a9b9a547d5edcf1cce2f3e1aa0f70b66c6b79d83
-
SHA512
a8f55157f6cbaeafe4431487a38d600e59c04b43c70ab93089ce861807d4a9346c9956eeb7d4b43df3c02efe58703c725ee55b03e328969a4d46d27b3d5c22a4
-
SSDEEP
49152:453GNnayBBuCwML2CsZDggdgr08PvfRgP8WvkZ3Knh:45snRuCwPbmRPvGPXvkZ3Kh
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.erenalp54.screencleaner/cache/ads241661956659910700.jar 4582 com.erenalp54.screencleaner -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.erenalp54.screencleaner
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD5d80f6d032778b02d10a9c9a2f1a24714
SHA1e34d4ea9618b1b499b65032723ea029ab3998500
SHA256ee2de01a238f9e1834f9f9934dd1f5b267bdf9747965641d2fd636d740041f9b
SHA51234fa52d41831142f86999ac407aafeb2b69bb4cd45ada9f739be84c80deb0414d11d6784f385eec287e4f6b5bdf29ba1c9a6a77c07707d66a73c60eb389136e1
-
Filesize
4KB
MD512670a32ad1380c9021a9e74aa5f2281
SHA17e8caf0c7a4d78452efb90958e8ce1aae5148e44
SHA256f3c142f78cadcb57d7da3d8e4dc5f8c7b05377417c639059910696c844afc1f9
SHA5121277dde373cab02d5df62732834adb79f8dbf1d1a9ac56b5b348e354317fadc24fe20b5ebdd1ecc28f8fc98dcdff807d2839bef75ef7d871e976e68a95851b06
-
Filesize
28KB
MD5f32910e9746ab1bec8c8002ddf3aff5e
SHA179e7f2c25194d27ebdc0eb2d55310190ede9b4c2
SHA2568b45beeeaf7293973086113463ab237066eeb139ea91e74e5038e67b304cf8ae
SHA5121ecef4445bd513cfc1180ea20063713ac5167fb0e4aae55f916890d9b0ebabbe60b073da583b1c9d4a743a8ec3587caf02ebc13dc829146afcdbfd3eafe783d5
-
Filesize
28KB
MD5623236080e17ca7f975c708b92c37e16
SHA1d913e825d4af73a9bee16f030ae960acf7b25c18
SHA256308da6fecd1c9e103970c7913574ddca2752717d1b73fcc667a0811c5f2789cf
SHA5128d7034306dc0934b871694112243a105c2e784fbf0786419f816a2ff966c2f357df9691494a9273952af915a1e28b18ce393508f8d0a523cbaa232317571469c
-
Filesize
28KB
MD540d8d7b39bfbf2219e9653ce98e1229b
SHA105205cdd8d3dbb73aa1dc895055872bc8357cb4c
SHA256f41a01741560924afe58b606827a98bde2431ad740d01fea32eb7161d878f45a
SHA5127c37500ea19515a5a001dd6233b73542e601a425edaa01128930e20879badc7f49ac2353a05f244e2f4200497fade8c122a8e7fb921d1937a5645f3ff504c879
-
Filesize
28KB
MD5064388b843c852fbe2fe06973f1b7cbd
SHA19af4f96d978ecc0f11a20344b1abb5bce5cb7670
SHA256764d6e3ad3953c5dbeef78ef066b2cd94fe3176f131719cf0b7bdadbef36f69b
SHA512125faab1cd1697dbb065edae3915e20c3d819ee8ad0a85e5d194a22e18d900a241c24e7cb1613012128ab738c66cc033d6f7c8d8cdf76e71c10300fa9bba4c62
-
Filesize
12KB
MD5f41f531c07d4141546a531ff9caffdcd
SHA19dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5
SHA256bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646
SHA512e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4
-
Filesize
16KB
MD5d284fa384bba44cf992cef22074031f5
SHA16c173ac8fb0197c4103360148440838bc152b15b
SHA25698eb420742cf7a0594ef5122c12cdaefa61ea2e47e4190c34fef86d7501b6dcb
SHA51292ccda83d6a8f175c24e1b78e3bc4a55a5e02596ac45dc791445fdf7f339d9bb50e3dcef2a7afcb9414fc3b5d8d2e45f8f246fce67a4a0d409e4b62c3ef9adcb
-
Filesize
12KB
MD5ca51f9a95f722e8f82658e1b51593120
SHA157d5325a1cbd4830051a8abe450ff130d3a32cbb
SHA256d7bf16c86ede5816cb2f0b0664a4fe9cc4c7c513de6db4db8e8561605ab1f853
SHA512ec0388006d0bf77c4dc83e0569de297ef62b7d8f160b1266e49519e9047e8f91375522c1dd8f47f028b0d63f61023d2dbbb28344a4539d8cf4173f495aed9ee8
-
Filesize
16KB
MD5c2a5ffb9bf436b1c6d743e88e54e940f
SHA1380d797afed55d6b8c192cb87117c990f9847a48
SHA256ddfcbde4f5fe8fe6f17909d47391ce4ed30b9813d749be85346040a3944e3a26
SHA51236f8964201fd88a48a90da1b248e11016ba8e3b475ae760b8be1fb3950a734990691e7216b3ce33d65a07460420bf97c44d8606bc7fb164ffb3e9e52b9818829
-
Filesize
512B
MD5f90087085743b5597e7dce43b12de760
SHA1457c7dc53b2f5b79ea252009433f582497296216
SHA256726728e49f66ea81e48cfab48b442962696a614d587acc0fd984e77ccc9e3837
SHA512b6468721c0ce5c5b091e61baa4302d28e71e9c151d00f4a4c2d02232da1ed1157313e666477b732a68d753213cbbb9c7ad2dd28d174fcc960f2d5c9580f8ddda
-
Filesize
11KB
MD57ecd824858cb8ae5d498ca7acb272508
SHA1eb01238575aa58bfc5899e87ee502a5c538ecba3
SHA256f7c6cd4eca98e4c17d4a54a978aa6df3ce3de3a18214de04ab7f51b2b7f82d73
SHA512440241b2e632d776f913d6ecbc2575def6b8954894f47e531f630c2c1f92dba2967c237fe2be91d4096d7ffb2f2b7d11d46117702a752c8cfdd2969573d936f1
-
Filesize
1KB
MD56bb0e77f1c0613ac2f7ccb5dac0b53e5
SHA1bc249b95e0699d922d9d8bdd15e5a8b2beae33ca
SHA2564f0e429754c8b15cfce399d44ab779dee47b136d9cdc547f5a3710b4552d6afe
SHA512e02f92d1f01ded024f96ad7f322b9d9666c6e6bfa76e5fc80f9b21d52d031c54fe2fcbdfbea55d95c813bc5f467a827420fc29d0646f91892b45b4a62ea73a9a
-
Filesize
155KB
MD515ff9d47bca2c6a43c58de54a8584a47
SHA1c15085113dc4713f79c9ddb86a9f8a3b1413681c
SHA2563fbbb2fc914803073ab81533e9dd128a38d7abc461f8a17c70962f59d836e226
SHA51279b2f389f7805c23ec25f59f564c412724de3737652350dbc7caa47d7be3382db7268578f286e2f260f038007a4aff7e4ac91a08a56202a091293a72c5769366
-
Filesize
8KB
MD51a5f7a80b92cee57c24e38a4b586ad62
SHA1de37c97d10d9345c7c8a5282d94becb140540889
SHA256c8f450b916778e9caa8f85369ae960c316716699cc06f51528bfd7428c5e7352
SHA512f3fbd0053cdd4b64cb304caeb91ddd5d00f473a0e41b74777072d44fea139124402c6bfb472d5526f207ac2a68afdaab73c0524b2801cbd38842dd42c4d18278
-
/data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/fonts/Roboto-Bold-webfont.ttf
Filesize25KB
MD55d1aba20e25af8bca71b420c7de37d46
SHA1540882ca0ecc4862d9d82b85c417498eb5b51fc6
SHA256ecb3a1671a94b9671d1336fd46d00f9dd279cf83084cdad5d1aed2d35f233522
SHA512aa15a6c4356268f9f134ffba218c138a76ef6e8dd2db1f9a39400c51fec100390ac45fbd84056819aa8c44b2eb3d16881e0981e2bb44902e30802ec8a51b9918
-
/data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/fonts/Roboto-Regular-webfont.ttf
Filesize25KB
MD54e03528f1f48da3726edb5ada9fe4636
SHA1b818e0acfc74ecf7701940240b6c31a2319af217
SHA256b12cc7b6bc437f7dd5408f65538df2e068890da80d37771031bc6a63f4dfd734
SHA5123680400b45a02a719ec526391c22c8a66fb1e9b0c8d15ebee78bc9475ae8a1ee7be89a853f9d5a11e741d5297efe5b9b6ceaaff39413515588f306b36971fdb3
-
Filesize
9KB
MD5407ffdfcc533caffe20ae7bde64d470f
SHA194691c69e3688a0afe991461f1b9bb06b8a63407
SHA2565f05f515a59fa67ed46576fec844fb0bf052798ef185237b254048449526b74e
SHA512b73242ba58f19c45d9f3e0d4f669670f3028e8e722eb074cb1f3415e1920bd1e0d49123c646c02cd14d2fa708f6c06e37e015e94c4c350a1a671bad3c0799eb3
-
Filesize
23KB
MD5124f9955436bdb9ec6c2ae5fb155b630
SHA1b8b24b70eb024d8451fad9acff8343eb973a8bfa
SHA256b0156487c63223edc2314a1899f4609fdf699150070c38c3c7fd5037744d399a
SHA512b0a73e52848ba9598080c93f14b1d702ce1fc28bff374cad4b2bbf95e636867da0efb274ae69bb81e2510b4fd3c3f327af607da9e7f282130a90377db30ba422
-
Filesize
3KB
MD5328ac1a461f85f8f4669930544ca24cf
SHA15712ee563972e3b9ad02cc01bc16fe3d76bbed33
SHA256350f7fc30ace8a6e09b448da4d418cf70d6a907d755f51e89e759fc02fba7d3f
SHA512a36b800352fa148e84c82c661343b8965d7b5891314029ae5cbd3cdc4e7f327df26084f09c81a27b4f754c5747b8683c5d7adf122497647a6bf72f84f5e43f15
-
Filesize
8KB
MD57f5bb650b8c535f2150080aef5d4360d
SHA18941de259ea709db0c10716269a802d5b29a3b77
SHA2564b5f5157f6242f771751f0a657edf29b0ca97d5b80fe28ea8832cb14340e0413
SHA5124149480c49e009a360d2f3251d3b78828e25a17346dd1b9b32d9f727d7b6aa365b2425dc375ed9eb2b079930bca0060d77bd8149de1da3db907e0e9bef2245df
-
Filesize
3KB
MD55b00e825e6935d570fe69ab1ecb3a302
SHA1d2c149612a07e5843471e0fb2d35e22e0174ef33
SHA256971d89d9395b39805ed7f93efd6fd4dca829e8d83101469ae9a583639098c171
SHA512bd2313bd3bc424e03409efe93b70179a473fef1aed29264d7a92f03d35dcb12222ee92d44f77e7e55b46a87c566f631b505cbce167b193644fb2086640f1e649
-
Filesize
4KB
MD5d845939a9fa291f47967ddea2c445d0c
SHA1457ec0ea2fbd175978168c1baa665a852b1e548c
SHA256e0054877849410017bc8dbe6876b7d52c1b30b586e9dc1670793f49d7195c8a6
SHA51281cfad467b2b7e9f5bdbe496ad417d0eeae666ce1a69c124fd8b38818939db7c20c33f1e6f7a6b0b07e24278e33f4d18d75f246a429608afd79edaceb6441517
-
Filesize
12KB
MD5636ddd62ae3c6c2112bb9399d0687a2b
SHA140af7218e081459b98234abde1e319f4b0491416
SHA25684d9d9a214c3ae88e0b572a599baaa169a7a81144943d70d3a05e5ce6887e098
SHA512d2a65ef3b66585548208de4dee1348b0eaa598384541581927193a5338a8e21a681048384f77de8a2499856c329596ca6f20f463058a686bb23f534685f7bfad
-
Filesize
22KB
MD51f5d1af203903f37a7edb3d1e12a4f27
SHA112c5bbf79791aa547faea7741cd3cc7c2fe84ae8
SHA256ce663ea588ccb9e04688b34df5564afaf7804d51ff659fb7eb82628898682d48
SHA5121b483b6db65c934110289635c5ee084421b742a63bf02d297dc129c6c89b2dfd3387e6479c26e06ff93b8eb71862fbd916df57bcbaf75f63466693a7dcee0ff3
-
Filesize
4KB
MD5f7910379d8e262bbf618c8d0f0589412
SHA1a9807369073f64122c875be12cc2a21a0b7e3f07
SHA256dc3bf1d445278e7c2226e3cc02fcc61691eaa9a5bd5b9208edaa7acd8c7b2a77
SHA51201248e5a1b3961c4cb905b69daa52e3577c88ef8608742941b8840a57b2c680d08b66d5f1e7abfddb813ac23869f3a17fe7d722079ea1791490151f5c6beb8e8
-
Filesize
1KB
MD57653713e9115bd5640d8c18d49c4ead5
SHA11008b30abead1945f2fdb4f8acf106bddb8c314b
SHA256b87f7697bfdc20197afe2b9b5950f52230b9465b37d8ffb77a9092661d91bc2f
SHA5127bc988e32393c548f0c7ac6858fe13665ca835c1b2b2165b7a652e6bbdf6669acfae1f8e69ac03b646a6286640daef8dbd6b552883806e3df3890a5c5710c05f
-
Filesize
1KB
MD5788fcbbf403fb5fd860e9677f301052f
SHA1595ce1dc8fa3e909e24451bb30441ac983a09893
SHA256ee7d3e02a08257f8e9df5cb62282014812aad14caff3e9d7df2a3f33eed28751
SHA512fe97cae087e32bcf04b3c8c07801bf06ca004104f2ba9d8a4ece658df847e0011f017e212b15aef062e42b3c33827521636ceb684784677aff17a5856dfa9a0b
-
/data/user/0/com.erenalp54.screencleaner/files/offerwall_assets/offerwall/js/vendor/jquery-1.8.3.min.js
Filesize86KB
MD5bc9f49d3cb3ce631515986cc56c770d0
SHA1830241909982e3084684ad4856838b00262309ba
SHA256678b685960003a523b9cd4674f2e6a892e8ae8c1d753c96f9fc79cf0e5cfa228
SHA5128b045428bb4fff03b81b5456349f6a5a093762fd2508de454ae2224cc09cff8f883b7de835b3bdcaea0e0e0212a48f54d3709764b3ae18a9ec7f0c313a68a626
-
Filesize
1KB
MD5af0218d581da8f5062ccdbacedeaa69d
SHA1e70643530639fbeb49327bb768ba7297bb7e525b
SHA256d7f41426355991a86510d3d4086451818ed1d88886a3a1701cc8325f13e16a9a
SHA5121787de705f6078f82c72bbd1927ecfc17c563ceea6c8ab80a7c5227d126ea51145aebb6b0708b6b299f13082d95687e5e134b1c6e5acfa0f96568b0f2261cf64
-
Filesize
708B
MD524874e584dcd80c9ce530a3257e1321d
SHA1faa6f64ad2d1366b6bc42bf64defb294b653c047
SHA2565c8c4e3129dbe8258b5440a9bdef666e65088654ad8fa42c0f48693b30c4213f
SHA5121b755d50395792f9aa82c8daf78e2cf7cf158cb428b557931589e513d8569e18afdbcdffa4c2cff874ce5000b66e9f24fda57104853bead1e4678d859a462529
-
Filesize
20B
MD543b8178d07625ecd992fe743620d4499
SHA1ab319433e59a4df80f630c22b1286d2cef660277
SHA256cd842a10ce6f9f092368b978704512b5ab81a576f2bd129c7123da9f676216b6
SHA512da8e5caf9ff74dd0742066245af09f1b8af4834bbc458873e0c8f32c24bcc3dd3705b7ffa4f53fd9116b0861c2dfef491f2c44b35e52354025370fd94e0eb386