Resubmissions

27-07-2023 13:26

230727-qpsyyafd4s 7

Analysis

  • max time kernel
    2542300s
  • max time network
    57s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    27-07-2023 13:26

General

  • Target

    NA_087fb94dc34cb66d30105933b_JC.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.drnull.fcm
    1⤵
      PID:4775

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

      Filesize

      96B

      MD5

      ef7f420d401f7da0d1aa842d5b11b49c

      SHA1

      db957664391c49e7d8030a412266edda697e7ec0

      SHA256

      075db69526048819c88659ee8d86565ce49012e6b0ff6064ace839770fd3231d

      SHA512

      7e032333c71ec4bb7f9fee2316296ad93d72e5fb6e2d4cef6452cc778f9a730979144b84b263ad33f3e2073f0d8b2b27a85d07c4eb027f8b7bb1dffd4fa499e0

    • /data/user/0/com.drnull.fcm/app_webview/Web Data

      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

      Filesize

      1KB

      MD5

      318d5765c79fe504a7a3c92e4cfae16f

      SHA1

      f884ec877cb3fd27e09d9a3c21b46a118116f030

      SHA256

      48610fa497d2d67d279e6523cea1b186e861b5354193bcbb8aec3be331b9caa0

      SHA512

      f8a3bb4795d9b3ca97ee495834f13c9f6108ce10c4a13a476f732a7b42782976c5986772501b91640d52c9580a195e93672cf1986b11071031b8a6ad690af8f1

    • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

      Filesize

      36B

      MD5

      cdebaef14aec1b03495890585acc38ce

      SHA1

      8bc3fff8440ae8ea73ca21179f090dfcb78c8382

      SHA256

      675e24452de671f45118b47b69f1015d4fd55fa9a6107963706df59e65b2543c

      SHA512

      6a39bef53e5fb235e993abbe447c87e55f4c5d199cf608e4531d532d09aa2a1dd6da69bc1fc442201fb5705983091b275741c9763acc4330676e4e34e3af1b30

    • /data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      d96ac61bc3b262e9761606fed5a6cd6c

      SHA1

      dc135325c93a9869935d4a5e48513581c2b75080

      SHA256

      1c1ed916f6f4eb1fd4d3879b0db6d6ec1ceddfcb3cae0dc02ca0300bfc47cfb1

      SHA512

      1872b5ada8a3a2695fbbab8ec467742c121931a354aadc8dcd2b76c2f751870671553f1f33b88cf0f28f1f2fdfdac7ddb8fdae8090ee429922ef621f2a7efc2e

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      dc65119374ee948ea78020bcf4fd2275

      SHA1

      73ff914e266b56be39ab00bf8cdd115ffb4ca50d

      SHA256

      96943b5cf0eff05bd58fb965e41119ac058b30e9e123e0038e08759279c44a66

      SHA512

      698e338066a1dee7eecdb634595d9d9dd203f7db633da0cf4f62eb553f5dd097b8cdc9c3a63ad669b031dc98c13007883a4d61273908ccf8cb6146893455e7f8

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

      Filesize

      144KB

      MD5

      6dd46ba54e72e81ddd95b4a706ba220a

      SHA1

      d5dd772ee377e378e75ba70ec8a480d54bd66060

      SHA256

      5a8b1b0efc63358443b9c9b1d30aa7a3d1ae16dd8121bd79a23c19cb9d1f6ac8

      SHA512

      712f83c30adae540ea0cd7361664e5c7ecb55488a6892d797a829f472a400ab7e2cec495e7b69a0b31c3f09034deb942251fd47cce30b549616e455df7661763

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

      Filesize

      1KB

      MD5

      4a9549936dbc7b745074ced871ca2512

      SHA1

      8b70195b65f4e94ceab7ec23157259e172a6e400

      SHA256

      c6aff39e27dea4dfcf1ede9462d603145aa5330f8c1018f29b8f49e9b9008950

      SHA512

      e0ef6c496904be35619f6cc6fc97d194e5d84e8e02d5a961bdb579c6a954393239bcb7c8705c499e359ecec529c4a460c7a481a791e449431417a22a280270f9

    • /data/user/0/com.drnull.fcm/files/null.txt

      Filesize

      10B

      MD5

      3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

      SHA1

      4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

      SHA256

      c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

      SHA512

      35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

    • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

      Filesize

      479B

      MD5

      b41d3daf84b79ca368e2bc3bbdeee376

      SHA1

      03ec3fda173dd66576eb8f09ec51922aff624572

      SHA256

      0c1d7aaead65b8d2033e1da8776a438b5c228bdbe47e576da2914a34fa75dcd2

      SHA512

      2abab520e6340e93232e436df83252a3ff20ec406b75f65a1268d4d065c47f738237ab24badbed7aa1cbada877fdb8b9910b7826b0ead6f3c573279827910e8f

    • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      127B

      MD5

      f91224810b56339da45a7c7fe7630c89

      SHA1

      b58eadce84a9e719aaadaae3f7f8b091cecba046

      SHA256

      15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

      SHA512

      7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      137B

      MD5

      d6b32b6f7842c43a69d96e6bbc0f951e

      SHA1

      f09a77cc001d93e3386c5cd436a79ee29a46da6f

      SHA256

      5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

      SHA512

      e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      183B

      MD5

      9d08052e4de9d7fb86fd7e2696ff5de6

      SHA1

      99954d29912ddc4412f1dc9d3e12bc8028721e1e

      SHA256

      74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

      SHA512

      ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e