Resubmissions

27-07-2023 13:26

230727-qpsyyafd4s 7

Analysis

  • max time kernel
    2542273s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    27-07-2023 13:26

General

  • Target

    NA_087fb94dc34cb66d30105933b_JC.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.fcm
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4055

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    1dfe8663b01a58bc212b52030b2f5c90

    SHA1

    2c6112289ed429c2f3464b1ebfd76bd7a58b3f64

    SHA256

    19e66ec22015a702e0d7ed6d8f5ba3e8a07d5721e11edf175c085e7ab2b4aa88

    SHA512

    7039d9be1fa1f2f26339cbcf847cc9daa8d4c183eff39ed33d06f78f8c37686a79e34ee5451925ca49fcc4d1e9486e174da001093e612787f7ac8f89f51eefcc

  • /data/user/0/com.drnull.fcm/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    c515e213dbdd1c1381161cef9a78f788

    SHA1

    4bfe864dbccef0a1353f90342aa14a2e0e7f67ba

    SHA256

    f24997d9ed43873b74bf8a38fee741e4f61e1c27ec92204e5535d20500cc54f6

    SHA512

    26851d896c0b3ac4719bb5339e15bac4b16d2d96c65e5a75e1f632dcffbc2ab27abe8203197afbf71371c90c42cb1924edd2fe93f632f7002ee27a9b6a6a5d05

  • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

    Filesize

    36B

    MD5

    2c3503117d27f6570f0a655c46cd70e8

    SHA1

    38fdfcbab85b081bcce89bef16f08ef3a75467aa

    SHA256

    1ec4db681a697d06a6c3bfdd7026b07549379c85b5b872a10a81bd25f4c728ba

    SHA512

    aabfd5dffec67f5b3640e91b4a445e0dae8e7dfd5d7026b39d90335f2367fac2a3e43f83b7f2fbcc46079fda3a1bab060c1864ee11ef65ec682ff928d5044191

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

    Filesize

    524B

    MD5

    8216461a42e2b7f9319904381f63931c

    SHA1

    41cf07d8e6a62bb6f1762fd0d3864dc3bd6d2e4a

    SHA256

    9cb6e866bc3230d90b05956b87cbb9480a2cac842778295ff2c86c4cad417781

    SHA512

    b1ea6f9d8ec65f223180e39c831a45f53a017423535fbfec5e6a401e78652335155ed8866e115b89fe03da60fbf85da69d2468d7f23f3c13c05754030347b64b

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    63405a7b604e1d91848b4fa63137d4b8

    SHA1

    f406bc612ab7eabda147a91d344b2e9a691996b1

    SHA256

    bc2b3788ff299fefce7ddfe53e4c4ef8a24ac4341d30e86db34db2b5c1b7655b

    SHA512

    af9b3a4deb2313d7008f1311bf1a205b4e466b66b6d21bd09601b5ac07247a882ee5a7945d28fd0469379852bffd5d8e90cc1e94f66efedf2c3c58e544aa3acc

  • /data/user/0/com.drnull.fcm/files/null.txt

    Filesize

    10B

    MD5

    3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

    SHA1

    4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

    SHA256

    c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

    SHA512

    35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

  • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    127B

    MD5

    f91224810b56339da45a7c7fe7630c89

    SHA1

    b58eadce84a9e719aaadaae3f7f8b091cecba046

    SHA256

    15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

    SHA512

    7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    442B

    MD5

    ddc48ba600f68e331dc23905527e8a92

    SHA1

    3e8f201c56a3af7e9f73aec4dc6953da726655cd

    SHA256

    40c161fd86483dee989c0797484191c887becaa5ab790c3e7820b535e8046cc2

    SHA512

    59f8610c71dfb9946b1d65a91f59f5fbfdab7bb9dab878943c3cd8cf9dcbd8c8521c111cb80c79f20cc98b7707c1b59e2aad09f20f82b8e56dbeac8a962e483b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    436B

    MD5

    2a0b212121699b554f6f4e85d2e02f77

    SHA1

    97aaed6348b7f6d9f307c6fd4e1b0533eec8a88d

    SHA256

    cb811f56335cd078eeead95e53191e0a13c5d913ffaf46e0a38ae88260d02a70

    SHA512

    bfea5b6a4ec8e6bca2efa1f9d87870804a4e4ab352dd2ba4d09c531f3fc27274a8b2d2c694a4078f9ee1ebe3a6f5c42e3abe38a8c9308128e4fa28d9b0695dc4

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    116B

    MD5

    df7085c1f112d1197a6da8936d47e7b2

    SHA1

    9e6e22bcd8c8da80e40d40a25a9dbfc3227bb443

    SHA256

    c32144358dd9313dbe279605a3658a01cfd0b9a8d993000954456166b982746f

    SHA512

    0ad3f44d3266a951da8f333a82bf9135d31b614659ac83ed44d95062476548d5a47abd12326fd63088eabb8d977a3b39c12679f107f3e6d08ef370656955fca3