087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

Resubmissions

27-07-2023 13:26

230727-qpsyyafd4s 7

Analysis

max time kernel
2542293s
max time network
155s
platform
android_x64
resource
android-x64-arm64-20230621-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
submitted
27-07-2023 13:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NA_087fb94dc34cb66d30105933b_JC.apk
Size

2.8MB
MD5

5de11f47e6ac88c69c3f6b5e517bf6db
SHA1

ed3ae75e03e88d6397f22e311b9c5fd4f6628c37
SHA256

087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c
SHA512

d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a
SSDEEP

49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score

7^/10

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.fcm

Reads information about phone network operator.

com.drnull.fcm
1⤵
- Acquires the wake lock.
PID:4399

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index-dir/temp-index

Filesize
96B

MD5
4c66a67aed62cd0ef8fc0d780129c999

SHA1
e880502cf8771e142223efac73c6201661da93ef

SHA256
bce077c7a2910bb4e595f59ed6b59307a4992924e7ca5252a39659c4fd2ed9d4

SHA512
e7923ae7ce66ec3ce72ba29e7c73d1cf416b9af48a633333bf5961d814c49657dbf2b546bf029861231d2ce0b7d1b1fc7cd9de2081168790fc6658a1e50cfc32

Download Submit
/data/user/0/com.drnull.fcm/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/com.drnull.fcm/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
ff956818ac9196abd8ace69d84b60dcf

SHA1
99474a20dd07eebe54340a4ff42606deaed0c691

SHA256
61a6caf8862cc4097e00dd76ddd58a00a5e159481682f74167ad7cef5d547f47

SHA512
84ef164790df7c0956260266316532ea4b897f66e7a3d7692178fdd1d441d949bd2fb2185a250bf2a99b0afe0ea97a69c874dd8a9640c5fb7495f26c2e3b5b34

Download Submit
/data/user/0/com.drnull.fcm/app_webview/webview_data.lock

Filesize
20B

MD5
e7b1680b616fb5eb994bfd6b5b81fbb3

SHA1
dc116007d2552d8d98b5140f68b168bb9f5ad428

SHA256
3549df2a108bc6d89ee845ceebcb962ada631006c9d9a601593932f004436d7b

SHA512
d3dc7e887a06955c28dd9233a2df224c32824c807453338e8f21c03f7b4ee33d4775c3019fecd353dbd3e907fe084ea66777eaef1a245bff0fdbd6f22117c474

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
51704c10cd5ad696d863622d900d0554

SHA1
16330ea00fef7e1bed585e2610206b4066d8e1fc

SHA256
f607390019ae70bb7783779596297f7e731bbb224619d01f667123dd1c5c4286

SHA512
f5eadb23937cc226869a1c162f0c466577755043bca819532238ba468f059625bdc7044cbc45ca5ca660dbe3d0d99eb8c6238ce8d0d162677dba565d3643bbaf

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
22ff917c249e8afa945a43a9e84f0d31

SHA1
5a29dd5be0910a8d04684f0f7224cd15164e88d0

SHA256
4e925b79e9a200d6a5cb22b3573d624acc5ab842c0da97f5f759c5e317cff095

SHA512
57f91425759069428b79b73ee388221498888e42338f55204dea941d6adea35b1046a8dce2f299dc0d009257814a4428f5a16163c0af9bbb18f411996b8e0c52

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
07b67a5e0b2eed412e279ad22199d883

SHA1
bcc304b4e1d98a595c358a3e3ee40e29fbf31f0f

SHA256
2fe1617dc65b76652408fec0e8bc9fcf1154befc016ce681040acc156c75bd1d

SHA512
6f69213ee0269fc89645ac7876ae145cfc8e629cbc1b4e5f6d980e1ecc54fe035693bb85ac726dbf9f84ea61c750bd547ccf3ade63a6e4fbbb8cfeda3a90e82a

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

Filesize
144KB

MD5
c312bc157fbfcbc353c25f2608d06268

SHA1
741c55f9be5e74862531bf83b6348e97580bd696

SHA256
33c2b972e0ac9a29c5b7ee51bd93476ffb1dc973135efca92b78372ae9c951b4

SHA512
3a28eb7ee4c9ddb4c0c06f731ae93f1e3640df7861aea0a5489fb912b00a82187f1a41eecc450814e7460a2ac79e242db56b7d70a17f03e0616083b2efd7aa12

Download Submit
/data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

Filesize
1KB

MD5
4ca8e1aea8ec806140110c734ccd1d5a

SHA1
1e1b1394a917e4bec0e8c91108aa73991cc1b7a9

SHA256
f2508af634375332540cf79861effcc2d6953bda284fdcaac659251f544e0617

SHA512
4c00de8d8acddbdd96d6d80d1fda149f1072b6858f9b3fdf17433112573565452e00262e6f25bbc4427f9d3ad2bac9e641eb4c7da709fadcbc69f05ce82559cb

Download Submit
/data/user/0/com.drnull.fcm/files/null.txt

Filesize
10B

MD5
3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

SHA1
4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

SHA256
c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

SHA512
35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

Filesize
479B

MD5
f612d6cbf94e0316eb9a29a2eba7e7de

SHA1
8d80c31212d69c26bf914244c6074b25f7871d51

SHA256
1baa3c4e1ce626eb2d1242181dc88ffc3a5ac550d08c7bb5a139da6151dfebb0

SHA512
f9118777de92a84ef68d4592c36528215be731a388ae19c4040af5f2c1927097e1e373732d3f03ee4ff0d9a059f35b1952d7a8a6313b535f2e671ee786032849

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

Filesize
127B

MD5
f91224810b56339da45a7c7fe7630c89

SHA1
b58eadce84a9e719aaadaae3f7f8b091cecba046

SHA256
15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

SHA512
7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

Filesize
442B

MD5
f2ebfa663e2744566923e4f44a43f355

SHA1
a0e6e3dae7325fb3c80618e923c9b995e580fcae

SHA256
51d5d5c045eaf65c7e85de9eff2b1d8e0708013e503d08519e85ab141d1c3772

SHA512
29294d4b5529405a5722e59a91479fcfa96a5bfb544376e2960759788aa7e4a43b168f28b8dd52ff74ac8afdadff7ed82de778adc7dfc45f272fd25d3af92e48

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

Filesize
436B

MD5
b6700c7732df8be6c9afa701fa12ffca

SHA1
fae2ea2d337871325971600394581df3ef691dc2

SHA256
9fa9e75f70e7f942a9e8265948007f43f2ccb562f6dfb016e7fb9f4a74a624c9

SHA512
bbdbfaa2ac5913b494740f8c1401e7b8ae13d396cf4815207c836237f7bc0742da33a2e666690a04e0f6bd5afd37aab48bfb1151d976d8031489b9fb43fa8345

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

Filesize
137B

MD5
d6b32b6f7842c43a69d96e6bbc0f951e

SHA1
f09a77cc001d93e3386c5cd436a79ee29a46da6f

SHA256
5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

SHA512
e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

Filesize
183B

MD5
9d08052e4de9d7fb86fd7e2696ff5de6

SHA1
99954d29912ddc4412f1dc9d3e12bc8028721e1e

SHA256
74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

SHA512
ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads