Overview

overview

8

Static

static

6

Adguard_2.7.215.apk

android-9-x86

8

Analysis

  • max time kernel
    72s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20240506-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
  • submitted
    13-05-2024 12:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Adguard_2.7.215.apk

  • Size

    8.4MB

  • MD5

    ef5bd2cd0637e9939e9956b0c8e6b89c

  • SHA1

    2bcc7ad83c7a0e419200fe37c38bb9851047cb38

  • SHA256

    973fdd824febfc51daf5a910df2a374df9dd9690d89a667ebc51dd978ff32b1f

  • SHA512

    d0464ac3efe07a04fa489ee6a392252ebe141305b319e5abea1af3c3befd3b683970796f78fcf37258ada570212a87abd5dedd4e0fa0cbbcedf2edeb95deaf9e

  • SSDEEP

    196608:3Boh4SsQceCv2g9zQwMfvuPtlRNS4FEQUs1TueNBa9UyqvoQXF4Mn:Roh4SrE9zQwqvYtlRNS4Frnvh9/F/

Score
8/10
bankerdiscoveryevasionpersistence

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery

Processes

  • com.adguard.android
    1⤵
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:4296

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.adguard.android/databases/adguard.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit

  • /data/data/com.adguard.android/databases/adguard.db-journal
    Filesize

    512B

    MD5

    efc43acead8b4ddb7521cb523ed792a9

    SHA1

    f56f5161d56a729164b746fb7c37eebd02aef681

    SHA256

    61a709fb782b66b5ac7d4fdd5f97f3f7decfadd611f9fcaf6c7f718cfb85697d

    SHA512

    c1990d47625ec3859b8af1ecf98b5d6670ab0d28176e4afb177daae0101a8ddef5175ac17c9855e82e44bf0498165e6daccfa5481841886fdee0093679efb782

    Download Submit

  • /data/data/com.adguard.android/databases/adguard.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    Download Submit

  • /data/data/com.adguard.android/databases/adguard.db-wal
    Filesize

    96KB

    MD5

    f66cce76c4c307929222b3cef83e3944

    SHA1

    af8c9e2e688a5998d1a104e4f258d360ea9a4d2b

    SHA256

    8551f38e586cc418e481312c81f61db68e518b429dd812e5f618486ba36e9c5c

    SHA512

    f31bb51eef04f8fc4771b6309c5589aa1d72441b1cbb98418bdf906c01b8d0e203654420669f6b09b9944b3ec198750575da55dc74fbc1ec8ca496b81b407376

    Download Submit

  • /data/data/com.adguard.android/files/filter_11
    Filesize

    36KB

    MD5

    96b449645b877afab18dc16c23e49221

    SHA1

    f6bcb0aa6a9a6bd78402fe248b07e27e7a14e335

    SHA256

    78742dcc706efeed906b3e34e6f700bb505b704fa16fbd3f535fbba693c05c47

    SHA512

    0d26342866135c8739d709063b7a74713202d5563ac575633a02e0238179cf35a06cd9327d061fceaeaa28bc24503445e0e03ac99dd017a4e68ddecbe558e2dc

    Download Submit

  • /data/data/com.adguard.android/files/filter_2
    Filesize

    1.3MB

    MD5

    3e3374c12bacd2b0418447a242003f79

    SHA1

    06182b80232b9fe68ff4bff9bcc6717fbe600928

    SHA256

    2cb803f64754019df75cb896060ed7d4f6e19ddbe790ee5bb806c6d3e49ff498

    SHA512

    a449e7d0a5ee3041991e94864cefd6d3c1b177ba1e2389d98789fb00cb4abac33dee8bd5e64bc6b6939ce3e59b1b18bc24070d42a8167304f7888309cd4b8a24

    Download Submit

  • /data/data/com.adguard.android/files/filter_3
    Filesize

    113KB

    MD5

    54a4a934a13c9a4aa348bdb680c61c57

    SHA1

    4881f349fa157aa5ee737d4544bc2b04232fcd2c

    SHA256

    3bd2ebddb662f253ac67f36fb96086cb216ad63b80538ebb87c1a826207fc1ac

    SHA512

    2b962c0502bd74c73604102d6cb548dcbcaac8e42dcc1ea3993a6d43aa0b68ce484670e867e50ae974822d83344beceb4cdf5d82f8019c53abd94c58f1b07fea

    Download Submit

  • /data/data/com.adguard.android/files/filter_4
    Filesize

    65KB

    MD5

    f920729e9874a997d0c05379a94bf4e5

    SHA1

    4b2e118b3177cf980567ea6811a81e978a3cac9a

    SHA256

    17702bf69e653665bc6961a5838bd4a94be4762bba79e3494e85f96f0bdd1d03

    SHA512

    4955e8d17db4e1d794af36c22d5d159fc04a2c06234a0f3c37f897d292d397c3775d970cdbf66d51fa1e238ad1749e1532620d2f00c5b2b6e237eebb37ce635f

    Download Submit

  • /storage/emulated/0/Android/data/com.adguard.android/cache/log/adguard.log
    Filesize

    12KB

    MD5

    5ae22d7f92c7bead6e2243c9c7f44bdf

    SHA1

    6eba9dd08b7d66c78dcb23cd5f344c68b39ea9bd

    SHA256

    c1761a4c30f69423822bb3476b2337b6b5fbe5d805c16edf3cd7300a1699cf57

    SHA512

    8d40f10d6399cda6fd47e7c1a331668762de08c5bd1af80eb87e6b55a711fd29e4554e9f5d7cd6ae28d61a66e894a72facd8d380af9c89bd3bf2259122ff897b

    Download Submit