Overview
overview
6Static
static
6com.filecl...ro.apk
android-9-x86
com.filecl...ro.apk
android-10-x64
com.filecl...ro.apk
android-11-x64
lib/arm64-...ath.so
ubuntu-18.04-amd64
lib/arm64-...ath.so
debian-9-armhf
lib/arm64-...ath.so
debian-9-mips
lib/arm64-...ath.so
debian-9-mipsel
lib/arm64-...rol.so
ubuntu-18.04-amd64
lib/arm64-...rol.so
debian-9-armhf
lib/arm64-...rol.so
debian-9-mips
lib/arm64-...rol.so
debian-9-mipsel
lib/arm64-...age.so
ubuntu-18.04-amd64
lib/arm64-...age.so
debian-9-armhf
lib/arm64-...age.so
debian-9-mips
lib/arm64-...age.so
debian-9-mipsel
lib/arm64-...ner.so
ubuntu-18.04-amd64
lib/arm64-...ner.so
debian-9-armhf
lib/arm64-...ner.so
debian-9-mips
lib/arm64-...ner.so
debian-9-mipsel
lib/arm64-...ner.so
ubuntu-18.04-amd64
lib/arm64-...ner.so
debian-9-armhf
lib/arm64-...ner.so
debian-9-mips
lib/arm64-...ner.so
debian-9-mipsel
General
- Target File+Cleaner+Pro_1.0.8.xapk
- Size 20.7MB
- Sample260803-gl8esach46
- SHA256 fecb8fedf9ff14958a45077626ace3d82347ac5207c7c123aa4e19c355e28ebc
- MD5 11b56316b8c79adec9701856c22f1497
- SHA1 e5b49bd3e6e945c744878d574caf0e928febb057
- SHA512 8f5aea573c80eae0238a3090666d471bd3d093b4d695ea7914778537b4c66d3dcdf1df7a6b31010cc764c471410cb9fbf37cb96a5e46dbd9d0d85460e86f7690
- SSDEEP 393216:vJAsYEgLsWtEbn6uRN4KuII7wPEKKha5mhK1FgRqygsILHT2:v5YEgYWCbn60qIhWhNhoFgWNHT2
- TLSH T141271242EF5D202FD9E662792D3402232D671221B7C2F7EBAA10513D695B2E3CF55BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
com.fileclear.sag.npro.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
com.fileclear.sag.npro.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
com.fileclear.sag.npro.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral4
Sample
lib/arm64-v8a/libandroidx.graphics.path.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral5
Sample
lib/arm64-v8a/libandroidx.graphics.path.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral6
Sample
lib/arm64-v8a/libandroidx.graphics.path.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral7
Sample
lib/arm64-v8a/libandroidx.graphics.path.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral8
Sample
lib/arm64-v8a/libblwqwrol.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral9
Sample
lib/arm64-v8a/libblwqwrol.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral10
Sample
lib/arm64-v8a/libblwqwrol.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral11
Sample
lib/arm64-v8a/libblwqwrol.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral12
Sample
lib/arm64-v8a/libimage.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral13
Sample
lib/arm64-v8a/libimage.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral14
Sample
lib/arm64-v8a/libimage.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral15
Sample
lib/arm64-v8a/libimage.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral16
Sample
lib/arm64-v8a/libscanner.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral17
Sample
lib/arm64-v8a/libscanner.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral18
Sample
lib/arm64-v8a/libscanner.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral19
Sample
lib/arm64-v8a/libscanner.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral20
Sample
lib/arm64-v8a/libsigner.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral21
Sample
lib/arm64-v8a/libsigner.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral22
Sample
lib/arm64-v8a/libsigner.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral23
Sample
lib/arm64-v8a/libsigner.so
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target com.fileclear.sag.npro.apk
- Size 17.6MB
- SHA256 eaa9e2b2d3861a8abf14fa98ac67d5ebe572a82574d8ff388af169840abcf3a5
- MD5 2d8ffd934b7c249b4cb3cd6b0c6c6734
- SHA1 a98024e71c057827fc1311d0bcf0ece5324ad3a4
- SHA512 72e1016dd46bfe79a793a43535cab89fd443b464db33581cd0968e223926683a72112a7acb6a145fb837cafa0997b399ab65e58f9783a3cd1cffe53e84a79018
- SSDEEP 393216:fJAsYEgLsWtEbn6uRN4KuII7wPEKKha5mhK1FgRqyC:f5YEgYWCbn60qIhWhNhoFgg
- TLSH T1CC172397E36EA4AEC8F783764E345266506784714387E7E72D05B2392C6BAD49F08FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lib/arm64-v8a/libandroidx.graphics.path.so
- Size 9KB
- SHA256 41e9a793c43a0f4fddb19e33f346bace464f30f888ba7b9eaf96294ea115bfb6
- MD5 cc6cf9b4774c77480df5e6c368a44af9
- SHA1 d7c17fcb44b30a6efe89d436aa102abe52e008a6
- SHA512 be98315c6f4a6a6d6ecf923d85b313c72a1cc279cc833244a69cff4ffe65144ac841a840f1cdb38490955db9cd1f933158aa635b24a9bc5f9af14992fcb0eec0
- SSDEEP 96:9r86qKySYJ+DRDNQTOSPACisQL5Tipsv/zPQlque5XFAWar5kkm5Kci6hzjhj9AL:9r86qKFY8ov3is6y8zITeHTarmpKEx
- TLSH T18D22E89DD3BDDC72CCDC927D49DA0A33B636A40481E1CA8AA1185A5CBD033D4D725BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lib/arm64-v8a/libblwqwrol.so
- Size 1.9MB
- SHA256 17537f7ba1eb32e522930a0f5dc38706a2c301a7030d5d2315fb9a22dda3a73c
- MD5 5082221b6c705b6eabd8e403319f9e31
- SHA1 44fc804475b7656add8c085d56beed44994baa35
- SHA512 82cd14fe4b980742aec241b5a8502cc57cb9ff3ea40178e6800d75c0e8b1cbdfdef475d1b6f342766c22fc2bfc51e3b75ff1f455fb7ccbdc6a41d7a3c83a3c0c
- SSDEEP 24576:VOsl8g0F9xxPubF2NMCZKLINH3jgI6+1RtYVWGNmd73+CF4Ap79edGKXOVR2aX:VOsDixGbqs23jgIXUWGNmcpy9edGKX
- TLSH T1F3959E50AE95643BE6CE3671390647334E6127527FD4E0FDBBB50506E4AA2F3C6A3B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lib/arm64-v8a/libimage.so
- Size 6KB
- SHA256 97460633e2da2381ae63e0fb1ad2432f51330d07be493136f38be333bd5dda3f
- MD5 810ecaa4ed35247b120601151f3e5b7c
- SHA1 8cd1629f43c30346a690ead5bb5461640c238e45
- SHA512 be32cce5b3a0716000125d1fd487ed1c544b7267ce4db5208c6d5e3aebb5deff87e277bb2ac649a3bb722a4b7c6b9d155cee2cacca89ce869255082ac5c33bcf
- SSDEEP 96:H5eXAa7NIFU87wdr7Ro8VZfh34ccQ7stk9bAv:ZeXJNCZsdr7R/ZfhIctt
- TLSH T125D1D81BAB5EDEBBD89CA67485D60370B2799458D3738703DA14A360BC037C9CF21B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lib/arm64-v8a/libscanner.so
- Size 75KB
- SHA256 ce0582b71e4a9e4bdd366381a4f82c40226d6107112b505a2f834d9499ef403c
- MD5 0285b711b022b5f67779630b5a103088
- SHA1 71962b1ec01bf7512a999dbdbd1d8742014c56a9
- SHA512 ce82cb3e55912fd81d51706144561cc3dbfc5c964653ed15fe3554d05e3c2bca2f95c56c5c7c9df1ee2573c08a9c6ee6c53aacc0e6fe2bf1a200896de069323d
- SSDEEP 1536:NaoQ6Oq9/YPBMf6jNQSsvbSz6/yZo811cUuzMmYswt3Z5OEVhNnf/E:NaNOYPBMf6jN8EcbjwbzNnnE
- TLSH T16A730B6BFB959A16C3C4023C345B17E16733ED909F26AF43A5A97B0C7DF6B824C84648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target lib/arm64-v8a/libsigner.so
- Size 960KB
- SHA256 78b810ea00e54ef853f1798c3b72db2093e3f9376a2634e9c3c188ab6781ff8c
- MD5 f5f6c80dbdbd44bd5b69a562fcf24637
- SHA1 7f394d02f80a2c93c1c754bfd8b6642f3926d4f7
- SHA512 4811905d1256f6a24c3fd33f1ee0ccfa8cfc5f944d308d9ff11e4ce79edb387bd6e593784568153992d66e9e7749e9f36903864df8a450d737ba3e3c8de46bc6
- SSDEEP 24576:cMuxyYoeIoOmVeNyELVNXmA6X4Gw49KYawTib5:cjzoOOmkNyOVN3x+s
- TLSH T1C3255B084F9E243FFE80B57C8D6946817CAA5222FB407ED6D61148FD9B43BDAAD543B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10