Analysis

  • max time kernel
    2492207s
  • max time network
    45s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    26-07-2023 23:32

General

  • Target

    سهام من.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.drnull.fcm
    1⤵
      PID:4838

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

      Filesize

      96B

      MD5

      f3fc19954b57bb2c11cc3e643c4a668b

      SHA1

      7c6d4db4f2b925a2455c5e1a76ed008a91861155

      SHA256

      d39c691092e914530fe79541f2eec31e86bd9ba222139bbaf9b5cc506931bd50

      SHA512

      e571fedd5efc6242944c191551c5e93bc81a0d5174b75e080d1a275577e9ccb03e88f398d8a09f3a49e62ec298c1f9086a3332160e0cc0900f9fa44531b226ef

    • /data/user/0/com.drnull.fcm/app_webview/Web Data

      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

      Filesize

      1KB

      MD5

      6839de642cda6d2e234e219d93afcf12

      SHA1

      35282df4d92f366f5126dc5a47a255aa5c9f018c

      SHA256

      febe7893d10399111b2d1c91c3165ad9bd481189012b10491751769a0b4b5c3f

      SHA512

      db091ff40d3ae080beb1dd94144640d0f2f605cd23b271fdfd06c882e87d8a8ba5b6f909e74988a33589d4c052cffe227da7156e528b95a38a267cdf078e8b97

    • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

      Filesize

      36B

      MD5

      1f07b3d6c6a5ab645847d51df489b70e

      SHA1

      4e73374874133f60f0d5269a3e1f3d3734655e94

      SHA256

      07f7894024da688be2583dc1f9385891f75e2403af995db0c685aefa5d6cb312

      SHA512

      8a95d7d904c085c9d7d61dc3f613f9d643a5aff5891b3a18ac1adc26f89de3db802e3d77aeaf106b0c9d70ddaef2665659fb4f534e0f65103a5e6bb3e6861870

    • /data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      7dcf9aa0c418ae3008b5c6996dc8c2f8

      SHA1

      94df34efab9a037d36e84061e0a8828d56977ed8

      SHA256

      f9cce6995cb6fec68ca403d88151502a3264d0bc22c622c0154ad440f23dff29

      SHA512

      feb193e37e79e42379f689aecc730522325e7d79c86fc2433e8c96d3cfe0ec16f3594b6ec338377f2e9148e3d2a2046f962f754b178dd77617da9abd5f6159d6

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      74ecc2ff44128c010794e9d818a6ebe4

      SHA1

      685e15268bcdeb5208bb35c9282867700bb1fe0e

      SHA256

      ef44572cb34625b4b05fce7a9608c777d8b3e0e2e4148da8bf2623163dcf531b

      SHA512

      c5805fcf5a9b8eb28616c4ada32f0ee09f842e01a1599ba697f6e64fe26d799acc3c70f46f212a9a17b8ef697688265838204ca89f0459431375d6432cbc95f4

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

      Filesize

      144KB

      MD5

      f6c37e95b4340a500a6ff05bf31283ea

      SHA1

      440b0b85e789dd14b1b5518b33fffa9b0d866638

      SHA256

      8970bcd1f35061d01effed08cb151a023d57ec60a92bdddbbde6dc669d004b79

      SHA512

      c7800a3883759e47ea23ba2091757306e69da96b37fd247c8bc27662fc4142b4a2c40c564b8415b07909ac5fd53cecc366f1d1ea33ae8901e8f3e462f178275b

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

      Filesize

      1KB

      MD5

      91a8a8ef1c3062136833b47edf98a327

      SHA1

      1fe3ac0986cb7224fb5f26b1069ce6000f50cf5f

      SHA256

      6b60085df6a3c83b366d9fd6978f9942620d2151d8053d8fb4316b6d8ec57ee3

      SHA512

      c253824290418f7ae936f5ade7a75f65f6938c41f1eed26b85c74344b2a88b2ff6e760edbeda123960ddafbab2a460dd73c133c21a862f138d58214ef9e6b396

    • /data/user/0/com.drnull.fcm/files/null.txt

      Filesize

      10B

      MD5

      3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

      SHA1

      4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

      SHA256

      c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

      SHA512

      35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

    • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

      Filesize

      479B

      MD5

      9d31af6f6f3746d9d3ea73efab6c0819

      SHA1

      4d2ff8c2777c6ab02c83cee7252bbc88541ba5c0

      SHA256

      af762c2787cf41aae791481d7fe4d45cc198a5bddf97dbc6584f7e2c17bc7992

      SHA512

      29874d6e63c886071e92fe6f9ef4f65d5ab87e66297cfb77d10235cfbea823e663ec7c1403d693ea03f9f424a07c2090f69c38821bb40881d6deef78d35a13f9

    • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      127B

      MD5

      f91224810b56339da45a7c7fe7630c89

      SHA1

      b58eadce84a9e719aaadaae3f7f8b091cecba046

      SHA256

      15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

      SHA512

      7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      137B

      MD5

      d6b32b6f7842c43a69d96e6bbc0f951e

      SHA1

      f09a77cc001d93e3386c5cd436a79ee29a46da6f

      SHA256

      5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

      SHA512

      e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      183B

      MD5

      9d08052e4de9d7fb86fd7e2696ff5de6

      SHA1

      99954d29912ddc4412f1dc9d3e12bc8028721e1e

      SHA256

      74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

      SHA512

      ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e