Analysis

  • max time kernel
    2615286s
  • max time network
    91s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    28-07-2023 09:42

General

  • Target

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.drnull.fcm
    1⤵
      PID:4850

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

      Filesize

      96B

      MD5

      44edc669705c99452278c4e6aa888aae

      SHA1

      24a6021b242882b1fd8d7d348fc104f4f75ef055

      SHA256

      6c31729caee7edf6c963801a8be0436fdcc0b21ee5538bb87310ec56e06e3b6f

      SHA512

      a19a7b73ff74b9e21e8b6a2e9470794544cf5bfef712a5f8bdee94dcc2f5a50b7b2caa65dd6e2b3f2651783cdd3e305caba24eac0d96d79a48d67a34b8106317

    • /data/user/0/com.drnull.fcm/app_webview/Web Data

      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

      Filesize

      1KB

      MD5

      3b9efa71f25d10552bd0540f220b6062

      SHA1

      ef7f1270d508271a663034c9ec1f004f8cce2176

      SHA256

      6f4bd66ac7975247cde5e10f82bf1037011d599fd070db6515d0274cfac94ea5

      SHA512

      b499e5a9906a761cecf93876f84dc30fbd5be87894e91526c419a785c60f041a0aeaf433753966ccd16711cfd131b7deac4de2ce572990ffdcd1238d0e2480e6

    • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

      Filesize

      36B

      MD5

      d155402736040da57db6a106d2dd2a9d

      SHA1

      8379ecb693f7aff3fe0ec34352efc0ee59255804

      SHA256

      1875e12e90e76e9df80e2025ddbff8f7e3ffbf3367ec5ef982f01372f09b610e

      SHA512

      bdedc168bfa92b22612def5a9922760aaa0097d74af4f8c018e09874830af492cc98de258aafec5c123005274d73f879fda7f4e08cd69e2e45c42e0943e14ed9

    • /data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      4668142582b45d614d0ccec59d534a3f

      SHA1

      b7df63256801bc6cb03a7f055fd08bc4394a6c66

      SHA256

      cd16895cbac342a4179aad42d0077476e80308f91e8891374707161e9b9a4b84

      SHA512

      7e5d3f533dc34134fd3c2b1a5afaa9bca3e4cdf0a8d3f86bd3cab3da55317aa6b325c6c443fcd718d15e0efa338d9f8f7c7d4d5bad92f755bd76213f89d5edad

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      4f7412f084be981df31fc994b1b866a6

      SHA1

      89544292ff77c0eb459d235581bc144c6e869a03

      SHA256

      4c31534580facbe662f035f794cb98488c56239e078b7f73cd3f360959ea9359

      SHA512

      987fc640ce37a6a7d68220226b884044db02256c1ed2cb6932741ace8a6c9e32f442e9bb21e7d60be7f51d81643bc8abb88ec1a94043b7b88d36ecde71d468e7

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

      Filesize

      144KB

      MD5

      d28df0206fceae99fce74d8b3f05a946

      SHA1

      235365323ed4f23985ece5b4faaa6746d4efe26c

      SHA256

      c130dfc94db09ebe63a96086778c53e03138df75e38898993837d83ca2fe4905

      SHA512

      704becebe2094478ceb7dfbad620d35337e30834d6693a2ccb6165143b2241dab2fec0eb688f748c1661e7f27bf45d7f403cfdd2616fe7bfcd8000272e03e709

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

      Filesize

      1KB

      MD5

      469af1d4bf05c683c2b86ac265602ee4

      SHA1

      2e79d7b96dfc6822714e170c706a375cf85e1063

      SHA256

      66e0db8c190d74c2ae17efe8c34d736add2d70514dc950d35a53177c7e3f2a85

      SHA512

      743863de374ab1fd89b09fdf425e7dd28b305db25876990ec5f177216d8ee3cec6efe1a41a0954ca0ace92c0d3a11f5377f3695720ad8f7271e4b83ce9ab2ed5

    • /data/user/0/com.drnull.fcm/files/null.txt

      Filesize

      10B

      MD5

      3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

      SHA1

      4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

      SHA256

      c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

      SHA512

      35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

    • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

      Filesize

      479B

      MD5

      e2bc404e57f3600b7334aeeee29bc839

      SHA1

      b6ccf7fc86913a07c3041945f0f7d86928f21ac3

      SHA256

      c6f683223a634d1ee188976821d3a256c84c67cfddc549f159cd82c6d1c7b023

      SHA512

      40f613630d99c644be71cb2c167ee4ce8e78278f7791797ffe64a1444e86f831e11de3ba2163506f52e7d94e9c198918366a78b3520b66030ea31278b6c42eb2

    • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      127B

      MD5

      f91224810b56339da45a7c7fe7630c89

      SHA1

      b58eadce84a9e719aaadaae3f7f8b091cecba046

      SHA256

      15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

      SHA512

      7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      137B

      MD5

      d6b32b6f7842c43a69d96e6bbc0f951e

      SHA1

      f09a77cc001d93e3386c5cd436a79ee29a46da6f

      SHA256

      5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

      SHA512

      e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      183B

      MD5

      9d08052e4de9d7fb86fd7e2696ff5de6

      SHA1

      99954d29912ddc4412f1dc9d3e12bc8028721e1e

      SHA256

      74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

      SHA512

      ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e