Overview

overview

7

Static

static

6

AdGuard-Pr...om.apk

android-11-x64

7

Analysis

  • max time kernel
    46s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    05/08/2026, 14:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AdGuard-Premium-v3.6.51_build_10000541-Mod_yxssp.com.apk
  • Size 34.9MB
  • Sample260805-rmffhabe93
  • SHA256 e8e8cb3ce0ada0f9850e1500becd739cbf276af60126df287628ad19dae06169
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
bankerdiscoveryexecutionpersistence

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.adguard.android
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    PID:4761

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        e.id
        • Path /data/user/0/com.adguard.android/cache/e.id
        • Size 49B
        • SHA256 64b6755ae43b4a3c6a66fbdce856b44850ae816ab6060e37ea81965380e017ca
        • MD5 SHA1 SHA512
        Submit Download

        adguard.db
        • Path /data/user/0/com.adguard.android/databases/adguard.db
        • Size 68KB
        • SHA256 1e5a837275c3b72dfc92b6507c22c00f4e4edfc09dfe342397c43ea6c85cf903
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        adguard.db-journal
        • Path /data/user/0/com.adguard.android/databases/adguard.db-journal
        • Size 512B
        • SHA256 6cb5237c2d752be454d388257ddf1314777cedec93a299183cee641cff388664
        • MD5 SHA1 SHA512
        Submit Download

        adguard.db-journal
        • Path /data/user/0/com.adguard.android/databases/adguard.db-journal
        • Size 8KB
        • SHA256 08a0088e1db0df0c264047113e0e11a8cc35908f8d9b44210b426b857df7d260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        adguard.db-journal
        • Path /data/user/0/com.adguard.android/databases/adguard.db-journal
        • Size 8KB
        • SHA256 6222dbb79d99b26e511b2bb8ff4fb0db7b2aec3936f570e238ba4ade50ade981
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.adguard.android/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.adguard.android/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 73246fbb3cec4559a5ddc470644a64bd69e3b7798043959e134ad4a23626b569
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.adguard.android/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.adguard.android/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 73cf21ddee5528a88777bf9449648e47cdbc0d0f17c90758ddcbb87162008f8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.adguard.android/databases/androidx.work.workdb-wal
        • Size 329KB
        • SHA256 ce246ac4e018586a70339cc40934fa6657f29f802a65fe24fb09d534de922029
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.adguard.android/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 979159d1f4d177d0c1f21b2ea18e58ef66ab0c4c153d2a6ff0c39bc36a21a733
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gm.db
        • Path /data/user/0/com.adguard.android/files/adguard-core/gm.db
        • Size 12KB
        • SHA256 8a480efe143074faae0be5ceeeff877e262982b0ad9cb08d7bae0963b87f63e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gm.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/gm.db-journal
        • Size 512B
        • SHA256 05607014f6a04ea0969210c2d84278d9602a6e2acbe8e308b0a1de1cb92e1de0
        • MD5 SHA1 SHA512
        Submit Download

        sfbr.db
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db
        • Size 44KB
        • SHA256 37f832633654734b82d8975c9970dd0e4cdd29e47c1bd2ed20d04300db318fd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db
        • Size 16KB
        • SHA256 f82e84353a599bf61ee0469545bfc4a026b30c5c659c0b5ab998582ad0c249f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db
        • Size 16KB
        • SHA256 dd84e24a1eb0570905e5844b244dacf4a5b3a7ef5831f3356822c0cba796a0ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db
        • Size 44KB
        • SHA256 3e99775f5a91f26fc9df1aa9745c982d685611531321f61bc556c9b5da30d7b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 512B
        • SHA256 3b94338bd3d75cd23dfafea435a010b2874c4343e548a397356e1512759f9804
        • MD5 SHA1 SHA512
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 4KB
        • SHA256 2f3b7ae9b6bbc5ad6e0efbeaaca853613ef8b2045f0c8ebe5f0221c77dc3d992
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 4KB
        • SHA256 67c5a7f0e5894aabaf0a89ee09faa159579e55a6b06b845edd0cacaa3eda8db1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 4KB
        • SHA256 814dabe359d6d3b75d010caf3d57f9bfd321f8af2e9084b43621795431769d27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 4KB
        • SHA256 2cb471cf389c58a1ab081e54813530682432e464533d9da545188ed5cf601091
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 4KB
        • SHA256 63e95fc3781a3feacebd8012f9cf0cf36de29df4adc52fb2f9deab1544b36e57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 4KB
        • SHA256 4f0e26dd7c656b91e953b06c04bea524223af14d0ec50009a2039bf6ed8c8be8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 8KB
        • SHA256 6621fc749f835a3b28a128be3781909f85957865361567534acfe1cec157136e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-journal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-journal
        • Size 4KB
        • SHA256 0b2ce2b538db03630c48f62ac93d52506af137ff4c788f2177a40cbfc9b07a11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-wal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-wal
        • Size 8KB
        • SHA256 b1061736fbe2760f8095c8bcffc48eeeace4133445687cefe8e0e0ad36644df3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-wal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-wal
        • Size 8KB
        • SHA256 12e25bda3028e834d279817d5932dcd947a5c0f276a83f4a64d1024464b6f9c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sfbr.db-wal
        • Path /data/user/0/com.adguard.android/files/adguard-core/sfbr.db-wal
        • Size 72KB
        • SHA256 2c46a3901a864867497ee2d3a9a6622d1c40a782e993498d029c08a576c0590d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        version
        • Path /data/user/0/com.adguard.android/files/adguard-core/version
        • Size 1B
        • SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
        • MD5 SHA1 SHA512
        Submit Download

        AdGuard Extra.meta
        • Path /data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.meta
        • Size 6KB
        • SHA256 16830b9e5572a9e7d6c40faea7fec5fb141d3da8bb594e0a58b51ee7d18a76c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AdGuard Extra.source
        • Path /data/user/0/com.adguard.android/files/userscripts/AdGuard Extra.source
        • Size 18KB
        • SHA256 7fab80292baa7ce26e179378786bd01d9887785dfd9ff7c20ae4b67fdd0d7f6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Disable AMP.meta
        • Path /data/user/0/com.adguard.android/files/userscripts/Disable AMP.meta
        • Size 4KB
        • SHA256 d5a09715ea16fdae4195aedbe7687117ce8cf3e8fe668701e6d543f5b74ccdc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Disable AMP.source
        • Path /data/user/0/com.adguard.android/files/userscripts/Disable AMP.source
        • Size 5KB
        • SHA256 1969ab9a0badce06d282518b8c25f1a3e1e3d77cdaff0a631e04b2b886bf066c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        battery.dat (deleted)
        • Path /storage/emulated/0/Android/data/com.adguard.android/cache/battery.dat (deleted)
        • Size 33B
        • SHA256 e44249c0463ceac066775f5b6b6b169cab18312750bd65ff619a4010e847b93d
        • MD5 SHA1 SHA512
        Submit Download

        adguard.log (deleted)
        • Path /storage/emulated/0/Android/data/com.adguard.android/cache/log/adguard.log (deleted)
        • Size 26KB
        • SHA256 f165ec19d6f08514d1e68d1d85c5a885507aa3ed614457d89421da7fde42100f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download