Analysis

  • max time kernel
    2615270s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    28-07-2023 09:42

General

  • Target

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.fcm
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4059

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    cb14b37730df4be87ee451d7543e9f56

    SHA1

    41704890a30e3d93fee3a48e0c7c45de82c4fdd5

    SHA256

    17e4705f413ce7611e53263252db26db65dc12a9f9f736191ff9a8855158fa83

    SHA512

    eca34a028ef8e4e00ba4418e2cfab0a9d6478f3bb886456bef63bf932d330bae6480a1b042a56316471cd34398fdf0b4b3e59cc73b6aa987913b69846e7b5eec

  • /data/user/0/com.drnull.fcm/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    c14101d546a0ee9b68568656e06e5c59

    SHA1

    8d0d81ce16d914cde6656db5239ff433e4fbe33d

    SHA256

    41eee193cd14ab43d9cf08e914a9800d3509766dbbc0d33d30b837931727d892

    SHA512

    b787c535a19086d5924ad6e354570273caf383b2f6b5ff39ef237b95d5fccfa3922a90600f620046ad92a51408ce66f9076a9d4781afaec8ea2f74d9a6e46eb3

  • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

    Filesize

    36B

    MD5

    6658cea35b46e8d588baed7b0e7d7650

    SHA1

    16690b90d9a56d1cee27d5c6dd15a04f01641f4a

    SHA256

    5409fde6213d7bef094ee67ad9c4a292c9e1a69015696ea7c52a7a08f1bcb63d

    SHA512

    9f049e34f2d3fdb1ec74505c6717c95d1d2cd076805baefcc41de600cff2358e85144fbc63eaa4ac23313a42a0dc969b697bc6405f7c6ba9d0c3e407aae6266d

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

    Filesize

    524B

    MD5

    e2e5e104e1aea31deb8c9a4a4d09fd9c

    SHA1

    d593f5386a183a9ded308f8ccc42e6cc02f50223

    SHA256

    fdc4e53662211eb0ddbe93a844478d3ca7bc4c0c2bf13e61246034bde11bc0fb

    SHA512

    1650db476d9d3528c2fdd996615c4d70892d670aff1943dfd7081ecfe6535f9574609a449a3681ec3a874f15915250e19f375ea3735b68ca66db62d7735779ab

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    f57f9b4fb128de74e6d9f6bf0cbe94aa

    SHA1

    771c2a20e44a90dd3987a31a9db09d05979815b8

    SHA256

    9a12993c296a53e7d1ab756e6625e37a33919ee000d4e8778d8a17ef30f77cc7

    SHA512

    222d48f3ef85f820ed4a06c2581159ce90365ab84e73e7e4e4857827d1b02eb064f8384f91ae08ac7a0cfbd648488e67ab7957f6eb2c98f87a9f21b28987e651

  • /data/user/0/com.drnull.fcm/files/null.txt

    Filesize

    10B

    MD5

    3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

    SHA1

    4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

    SHA256

    c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

    SHA512

    35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

  • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

    Filesize

    479B

    MD5

    d892e7e4c6d9a629dd4a77d98539ef43

    SHA1

    ecb489665ccce4f888413ccd48f13328a0bfc5ff

    SHA256

    9604fcad062e2089d9a49dbc96a2c7bc124b6eb0a4f639b881597540d3ba581a

    SHA512

    75ee71fb3d6c5940c51ca0101712ddfc29fe4bc9e762871d1b8d859582dd73d25715e6f692020906a449325ec03da11bcc8c730dd0a1a002815d5b12d94545ce

  • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    127B

    MD5

    f91224810b56339da45a7c7fe7630c89

    SHA1

    b58eadce84a9e719aaadaae3f7f8b091cecba046

    SHA256

    15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

    SHA512

    7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    442B

    MD5

    e1c866bd4c2d3736d4c4fb4f9f99095c

    SHA1

    a560394c4eac65b7bb8b75988f2cf48a2e52a158

    SHA256

    d4c9ab0c0b027cd524143b3c7190750aecee9f356f2cb1e17281f103c45a0dbc

    SHA512

    04ef13ac48469cf242f6cce7c79007ae69ec894ac08245226c577f25dcfe0b633a831e68d8b2a2b8b35a609b44e634a832f277b75920b0c3e79ee160105e750a

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    436B

    MD5

    18e6530f7af3460b66b69ee395297824

    SHA1

    2cf1ea64f755ada6ef85ba5ccb8ce5b8020e6fd2

    SHA256

    15956b3be3076665756fa2e9aaa57c5523a78d0783d7defb5a2575c08ff5ff6a

    SHA512

    40cf41be5b74bea10ae2dcabd0236abbc324c21c5d491f6c93cb4dbebcb3b405fae0f4fb8f215f08db5288fbd8d896617feb0954c174f1c91f6737810c2bd272

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    116B

    MD5

    df7085c1f112d1197a6da8936d47e7b2

    SHA1

    9e6e22bcd8c8da80e40d40a25a9dbfc3227bb443

    SHA256

    c32144358dd9313dbe279605a3658a01cfd0b9a8d993000954456166b982746f

    SHA512

    0ad3f44d3266a951da8f333a82bf9135d31b614659ac83ed44d95062476548d5a47abd12326fd63088eabb8d977a3b39c12679f107f3e6d08ef370656955fca3