Analysis

  • max time kernel
    2492204s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    26-07-2023 23:32

General

  • Target

    سهام من.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.fcm
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4055

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    72c10a8b85bacf1625183a1804f7a5b4

    SHA1

    fca8e003e922a95ecf413ef9502555059b3ec4cd

    SHA256

    d88918b460d06c17edf5297f74f77ca209c0cebf487a6ca409942e605913134c

    SHA512

    0ebccecacd4b468e81ec457e268717dbb2d98bf04367c2849cf5e227f7a1541fd76264d9139c6a92ed0c93cfae440af3accae089eb2547dda78a3880f38e3dda

  • /data/user/0/com.drnull.fcm/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    e1383066c091618b6acf25e9bad188ae

    SHA1

    fa2b6c95358f3df406cee33adac1f7b54c946c03

    SHA256

    d99608838eda17791f4a3f9f2dc479ffd18a6d3ee3f545e0e3686d04aa47edb1

    SHA512

    dd16279b51dd80fd561a95657fd14619a705a3f5a0e6bdd4ecdafdf97753ebcc1344897d37d01e5a26062c1d24b786dbddc26392ab786d71d8ca2cb0401e5975

  • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

    Filesize

    36B

    MD5

    df772168bfc79a5ad9e4d82b364180e5

    SHA1

    c646a39ef44461e66c227c5e94339bcec331473e

    SHA256

    e28813ed9816e5caa3d1b9714eccfe66b46ca55bede732715be34832dbfe80d3

    SHA512

    6a549d6d798ce2c72c91c627af8ef7daf1f9396ccd28a4680aec639bb0653624268b9a06abf7b78b1cbca290025429001bdaeaa9d80ed61d8b3b954d51115f48

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

    Filesize

    524B

    MD5

    131885596e3a9eceb56b4ddd1c51c1f3

    SHA1

    e47993a718b5e09d656dc13391c3bb6a72805ff2

    SHA256

    c6bc9d0a794813e24c77a7a19038fedd2d8c27dd8786fb020335d2ff23722c64

    SHA512

    3722bc8bcb5ab26d3af4f13b4fe83d52b27f3c4ab882649c8bbcc35177811808c5651941a1b980c24f8e0bdb72e7a421e0cf3826d9f147158970ba8420f6fd53

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    ebaf237d685a71e3893083903082feac

    SHA1

    b271bab54b734125b540073e2095539b859b084b

    SHA256

    8bbec8668db93028c5a0a5446b6ce07bb4513bd6fbdd302c736367c4e54a0247

    SHA512

    c277fe98a362fdc2e1fca4b6c09bf93bc8552d93ab302ca7a30af7a22441aae45cbb5a9de4f1675f895fd917c5d763a69358c55b2fef0726082fdf3ccb59d0a3

  • /data/user/0/com.drnull.fcm/files/null.txt

    Filesize

    10B

    MD5

    3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

    SHA1

    4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

    SHA256

    c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

    SHA512

    35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

  • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

    Filesize

    479B

    MD5

    0f3e88bc0fd72979124053aa43e06d61

    SHA1

    e98127b842b31463558468359493c15b3814c7b5

    SHA256

    e1163261edc51b71df8a72f2dbda985b393bc7aadb866a1b0d7b1ce6d3ff6c5b

    SHA512

    da9b25f46dda7c263291fa45c6e236557acd2503ece9e829bc6ff78f200525c02009cca7c612f45a4b0f2df182ec011743f03f54d66d6ea71503195f5e24b5b6

  • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    127B

    MD5

    f91224810b56339da45a7c7fe7630c89

    SHA1

    b58eadce84a9e719aaadaae3f7f8b091cecba046

    SHA256

    15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

    SHA512

    7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    442B

    MD5

    2b834ce16bdad02fd19d58f34d4a11ca

    SHA1

    d42e53bede5541f4f6a74d019fb3e7a122ad268f

    SHA256

    b8d6a6caef3f42a7c8ef73cdce2f5414fb0667929055745e1752f0d0be30acf8

    SHA512

    b444bf2440703c83ad0125204e9a286232fa0172179d72e3e7aeda725790d3e2bd246f8da08a5da1fb254da9111f8ef9345cd1451086830e9c32bf2c5c03eec5

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    436B

    MD5

    2ceae8f271985e7ed422b1470108fdd3

    SHA1

    ca99d9bcb31f97ddc6a77d536174e177c3a7368f

    SHA256

    dc226a014003bd7b108f957e9e02ee8082c702b62af145468d06ccd9816c7fee

    SHA512

    6fbf0922a10a859e5fa6229cbcf670711122c71df7e056c9352dfd13d21acf83cb653a7cd43651cea3bfdb7801366bd74b9ade6bdf64d331ad90fde242891b16

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    116B

    MD5

    df7085c1f112d1197a6da8936d47e7b2

    SHA1

    9e6e22bcd8c8da80e40d40a25a9dbfc3227bb443

    SHA256

    c32144358dd9313dbe279605a3658a01cfd0b9a8d993000954456166b982746f

    SHA512

    0ad3f44d3266a951da8f333a82bf9135d31b614659ac83ed44d95062476548d5a47abd12326fd63088eabb8d977a3b39c12679f107f3e6d08ef370656955fca3