Analysis
-
max time kernel
2492204s -
max time network
133s -
platform
android_x86 -
resource
android-x86-arm-20230621-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system -
submitted
26-07-2023 23:32
Static task
static1
Behavioral task
behavioral1
Sample
سهام من.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
سهام من.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral3
Sample
سهام من.apk
Resource
android-x64-arm64-20230621-en
General
-
Target
سهام من.apk
-
Size
2.8MB
-
MD5
5de11f47e6ac88c69c3f6b5e517bf6db
-
SHA1
ed3ae75e03e88d6397f22e311b9c5fd4f6628c37
-
SHA256
087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c
-
SHA512
d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a
-
SSDEEP
49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.drnull.fcm -
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.drnull.fcm
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20B
MD593027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
Filesize
48B
MD572c10a8b85bacf1625183a1804f7a5b4
SHA1fca8e003e922a95ecf413ef9502555059b3ec4cd
SHA256d88918b460d06c17edf5297f74f77ca209c0cebf487a6ca409942e605913134c
SHA5120ebccecacd4b468e81ec457e268717dbb2d98bf04367c2849cf5e227f7a1541fd76264d9139c6a92ed0c93cfae440af3accae089eb2547dda78a3880f38e3dda
-
Filesize
104KB
MD5dc79f9ce5f3ab5270b33e61119dfc959
SHA11844bf222a5144b513dcf2fb50a18c011701c647
SHA25647e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
SHA51218b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e
-
Filesize
1KB
MD5e1383066c091618b6acf25e9bad188ae
SHA1fa2b6c95358f3df406cee33adac1f7b54c946c03
SHA256d99608838eda17791f4a3f9f2dc479ffd18a6d3ee3f545e0e3686d04aa47edb1
SHA512dd16279b51dd80fd561a95657fd14619a705a3f5a0e6bdd4ecdafdf97753ebcc1344897d37d01e5a26062c1d24b786dbddc26392ab786d71d8ca2cb0401e5975
-
Filesize
36B
MD5df772168bfc79a5ad9e4d82b364180e5
SHA1c646a39ef44461e66c227c5e94339bcec331473e
SHA256e28813ed9816e5caa3d1b9714eccfe66b46ca55bede732715be34832dbfe80d3
SHA5126a549d6d798ce2c72c91c627af8ef7daf1f9396ccd28a4680aec639bb0653624268b9a06abf7b78b1cbca290025429001bdaeaa9d80ed61d8b3b954d51115f48
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD5131885596e3a9eceb56b4ddd1c51c1f3
SHA1e47993a718b5e09d656dc13391c3bb6a72805ff2
SHA256c6bc9d0a794813e24c77a7a19038fedd2d8c27dd8786fb020335d2ff23722c64
SHA5123722bc8bcb5ab26d3af4f13b4fe83d52b27f3c4ab882649c8bbcc35177811808c5651941a1b980c24f8e0bdb72e7a421e0cf3826d9f147158970ba8420f6fd53
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
68KB
MD5ebaf237d685a71e3893083903082feac
SHA1b271bab54b734125b540073e2095539b859b084b
SHA2568bbec8668db93028c5a0a5446b6ce07bb4513bd6fbdd302c736367c4e54a0247
SHA512c277fe98a362fdc2e1fca4b6c09bf93bc8552d93ab302ca7a30af7a22441aae45cbb5a9de4f1675f895fd917c5d763a69358c55b2fef0726082fdf3ccb59d0a3
-
Filesize
10B
MD53e0b3a3e90cc4a1f5abbf3fd1a38c2b7
SHA14a6e2bbb5082ec5509f1c0f63b918066525c8e4f
SHA256c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568
SHA51235959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c
-
/data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml
Filesize479B
MD50f3e88bc0fd72979124053aa43e06d61
SHA1e98127b842b31463558468359493c15b3814c7b5
SHA256e1163261edc51b71df8a72f2dbda985b393bc7aadb866a1b0d7b1ce6d3ff6c5b
SHA512da9b25f46dda7c263291fa45c6e236557acd2503ece9e829bc6ff78f200525c02009cca7c612f45a4b0f2df182ec011743f03f54d66d6ea71503195f5e24b5b6
-
Filesize
127B
MD521223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
Filesize
127B
MD5f91224810b56339da45a7c7fe7630c89
SHA1b58eadce84a9e719aaadaae3f7f8b091cecba046
SHA25615c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1
SHA5127b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b
-
Filesize
442B
MD52b834ce16bdad02fd19d58f34d4a11ca
SHA1d42e53bede5541f4f6a74d019fb3e7a122ad268f
SHA256b8d6a6caef3f42a7c8ef73cdce2f5414fb0667929055745e1752f0d0be30acf8
SHA512b444bf2440703c83ad0125204e9a286232fa0172179d72e3e7aeda725790d3e2bd246f8da08a5da1fb254da9111f8ef9345cd1451086830e9c32bf2c5c03eec5
-
Filesize
436B
MD52ceae8f271985e7ed422b1470108fdd3
SHA1ca99d9bcb31f97ddc6a77d536174e177c3a7368f
SHA256dc226a014003bd7b108f957e9e02ee8082c702b62af145468d06ccd9816c7fee
SHA5126fbf0922a10a859e5fa6229cbcf670711122c71df7e056c9352dfd13d21acf83cb653a7cd43651cea3bfdb7801366bd74b9ade6bdf64d331ad90fde242891b16
-
Filesize
116B
MD5df7085c1f112d1197a6da8936d47e7b2
SHA19e6e22bcd8c8da80e40d40a25a9dbfc3227bb443
SHA256c32144358dd9313dbe279605a3658a01cfd0b9a8d993000954456166b982746f
SHA5120ad3f44d3266a951da8f333a82bf9135d31b614659ac83ed44d95062476548d5a47abd12326fd63088eabb8d977a3b39c12679f107f3e6d08ef370656955fca3