Overview

overview

7

Static

static

7

سهام من.apk

android-9-x86

7

سهام من.apk

android-10-x64

6

سهام من.apk

android-11-x64

7

Analysis

  • max time kernel
    2492205s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    26-07-2023 23:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    سهام من.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.drnull.fcm
    1⤵
    • Acquires the wake lock.
    PID:4348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    ae992d21e6f4f9563f77455594c6e800

    SHA1

    9c9c0063b97b16c2302fd60bf99b95df4c5c3d24

    SHA256

    a44e5c6a84b7ad188541599571d384c5334baaba4444a0873aa8f6abfb0c3d8d

    SHA512

    8282f283bcb28f7826ca8c8216bae491b2f6c2de2b6a7726f08a0f2c84e8da88a2e964ce0f034a79893ec1b9b60ac579cf406997eda6417f034ac70c894b340b

    Download Submit

  • /data/user/0/com.drnull.fcm/app_webview/Default/Web Data
    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

    Download Submit

  • /data/user/0/com.drnull.fcm/app_webview/Default/Web Data-journal
    Filesize

    2KB

    MD5

    feed4e9f8c70b8150d51dadbbde3782a

    SHA1

    7ef7cad44f5e5c0f124bead5b772bc85748ccb16

    SHA256

    c436b2435777767bc1f8299e4f45195e0a83d4b5afffbbd982430842569fa861

    SHA512

    8248d4adc6b0f47e49fd601266e98a3bbe83eb2437ec928836bf1f08b798bce7126f437676fa91d34ac3ee7d0e2637abad674387eba83c1da82a0f9290104b3e

    Download Submit

  • /data/user/0/com.drnull.fcm/app_webview/webview_data.lock
    Filesize

    20B

    MD5

    fdd787881aaa74bfd80dc421e6b0adbf

    SHA1

    9c0c64fcee5ade099cdc6f034d008b1ef1df090a

    SHA256

    96bb4fef6b0d05d873ff6ce102b8c3b14c77a9a7a33e974e54a26607713cf39d

    SHA512

    9717d8cda95ca4fd711b6711c05cbea17df9fd6ec7fb51d2e1b7a445c92b37e70e2bc00ac8c359f54e3cf841a799c6686fe3fa9a3c52ce0ab6f3544bf38fea5c

    Download Submit

  • /data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    393bf01e5a7b440185dfd70762beaa41

    SHA1

    ae5cb65d89eca93b4e2c84bf084133b3bb29e935

    SHA256

    92614ead796b054456c0a91ed31c0e7f337616b433d5625bb9daa5c15ea5fc1d

    SHA512

    ff931659c7b35ddffea33121a6c81351032e1a5ceb2164e95d4ad05505158f1547dc0517ee184f25e5ad6e662448da94e72cef26e2ab8ebc411ad262cc7726bb

    Download Submit

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    5567b8e3c3dcd9009ee6cfadb3c0b241

    SHA1

    98b5e404cc6b244b2a2a1da63e1998889f7b622d

    SHA256

    0d79a7642adae91ad49bf624e9b314556ec17cc3ab2cc2ebcdacb387c6ae2e2e

    SHA512

    9661c195d3068d30e7c7288a5e4210ef6d48ccec32027ad225af0ba297050c94e4e2f4fcaa4c77753c6e5899c8857bf6ead0811f5839e060ac52834a93e952f9

    Download Submit

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
    Filesize

    96B

    MD5

    35c7ab4c5291036c23b99eb72141f7f5

    SHA1

    0a709260928c79e709d0e9ae163e5a97abc52477

    SHA256

    e3a7e4caac7cb4d5d543f4c287d13ed0a1b257bd89263b4aeeb873ce55605e64

    SHA512

    da4edca63a1573402db216c16fa9e3f86ca214accbdafc4e75f32a8488629d6e081eb50eb483f6b16538fec585d844accd27c886f11311a525a4d26c2d3ea0a2

    Download Submit

  • /data/user/0/com.drnull.fcm/cache/WebView/font_unique_name_table.pb
    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

    Download Submit

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events
    Filesize

    144KB

    MD5

    24f103146f9bbe5ef176f51081c53d41

    SHA1

    a241589b3ca78ace3d203ab2b57ec61eba6e4f87

    SHA256

    3710aff2d09c662d21bf5aa48fdfe9bb11287845d436fb90c316c42099b79753

    SHA512

    c3f8bd376cccfec0c93ba3fe1b3afd3aec4b3ac434dd7b87c5f3cc19bf7883b41b90085ddc35a888f9095ace200fc76fcc7d0156f1501071d7e7e7fc49d5f873

    Download Submit

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal
    Filesize

    1KB

    MD5

    b09f333a59f29ce5b842b0d95b7eb7af

    SHA1

    c4de3262866980e535013592c1e52bc22a466ce5

    SHA256

    d085568d1c703fe9acfaa547951e5d37bd7f8a9bb5c6936129781f1d8041b43a

    SHA512

    30d1cd2b3fd92dc509ef562ab4dbfd26a16239e2ef5ddce087c5f7ac99c45bf7930ab49003e084ccd2bde5b5f9ccf35d6ca9187ed003fbcc88f0f5624a6d0351

    Download Submit

  • /data/user/0/com.drnull.fcm/files/null.txt
    Filesize

    10B

    MD5

    3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

    SHA1

    4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

    SHA256

    c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

    SHA512

    35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

    Download Submit

  • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml
    Filesize

    479B

    MD5

    114944e4e5678cb14d9a264abdebe53f

    SHA1

    2ffff628e60c5fdd4b82cfa3b628adf9c313ac01

    SHA256

    26221708a072658ca880561caf9d2d347b38c51754556e288b8bc3f5af427686

    SHA512

    ffc3e69a12c41cc1b135e84ba7bc6a0448b71e9f80fc05b3d9b94ed270efd1101adff16467ef48538a450a5d1dcceb4d968164fc608b4cdf100b585d28546461

    Download Submit

  • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

    Download Submit

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    127B

    MD5

    f91224810b56339da45a7c7fe7630c89

    SHA1

    b58eadce84a9e719aaadaae3f7f8b091cecba046

    SHA256

    15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

    SHA512

    7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

    Download Submit

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml
    Filesize

    137B

    MD5

    d6b32b6f7842c43a69d96e6bbc0f951e

    SHA1

    f09a77cc001d93e3386c5cd436a79ee29a46da6f

    SHA256

    5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

    SHA512

    e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

    Download Submit

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml
    Filesize

    183B

    MD5

    9d08052e4de9d7fb86fd7e2696ff5de6

    SHA1

    99954d29912ddc4412f1dc9d3e12bc8028721e1e

    SHA256

    74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

    SHA512

    ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e

    Download Submit