0cdb947e98b8b8743f2f21710b96235e673a0d79d8571776ed283023b2c3d9f9

Analysis

max time kernel
2615271s
max time network
145s
platform
android_x64
resource
android-x64-arm64-20230621-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
submitted
28-07-2023 09:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk
Size

2.8MB
MD5

5de11f47e6ac88c69c3f6b5e517bf6db
SHA1

ed3ae75e03e88d6397f22e311b9c5fd4f6628c37
SHA256

087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c
SHA512

d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a
SSDEEP

49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score

7^/10

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.fcm

Reads information about phone network operator.

com.drnull.fcm
1⤵
- Acquires the wake lock.
PID:4341

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index-dir/temp-index

Filesize
96B

MD5
88f4701e5d41bd4845c63b0afaaef902

SHA1
6cffa445f11d39dd89ca7e1064ee8639e206ffd2

SHA256
9c0881862db5b32b158ddfa4279bba53fdf2b00e3edff4e1e98cf103aea210ba

SHA512
c5650c2a336d8fa19eeddc0a769312169b653336622933f871e871bf3a8e4104438fc410d3c60e8292215a2f32436425c76d3dfa431da5e844f59d22e1d7f855

Download Submit
/data/user/0/com.drnull.fcm/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/com.drnull.fcm/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
32945d6a1778628a77cd1105c7ac44dd

SHA1
6984b257eeeaf154d5391f0de015a9e5d5a421f6

SHA256
e5fa0bf50ce0bbc96f3ea4de97f9dc87b57545a777ac9cc0297e1135652cb6cb

SHA512
1aa6b13886b99c52f79b317e1e8467b5a250a3b579c37ca0bcf7b9bcd30d257d74ccfdb492db97f57e0a6270c3d618ad009395e9340a93435e094ca9160a2e4e

Download Submit
/data/user/0/com.drnull.fcm/app_webview/webview_data.lock

Filesize
20B

MD5
dcc86e401f672993b1602423d05809bf

SHA1
20280ab40bf2d1bf14e6a574393cf82e46a84e2b

SHA256
5dbad91fdadfeb3e7182c49a285aca0f6e8fb33e27e2d638be7dd8c5ae9b5626

SHA512
72be3d589e99189be20cb40e412e46021c4cc006f5ca29150173aeb562be1d82179607167105fc8945ced9568cbe4de5e010f7508424594e244bc20c264e4bcd

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
92dddce2d2f2fc7865925a9b930acc1a

SHA1
2e6965b1e7ddc7e33221ef7cad2c745924ba22b0

SHA256
17c195f28219c923ffa04b125aaa3ac23a96289334edc4b7df73d8b08da9e27f

SHA512
de80413ef3e5195665105008a83bbd5f03627ad202560d2144ec60c1dc167cc8a9b2bdb49af1381dc46b7b41e215b102f829fdb689aca91ff8072097badf196e

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
12ed9d18908a3a0fccf689a9f8efa427

SHA1
1c82f5586235a5e87b99d51d64aa2d6853ab20ec

SHA256
7e9f745ce6d66dce11cce6d51c16598343813f98c3ba64485bdb7cbe3d7cf667

SHA512
c0ead710e645fa9eb24f67c1d298793bb7d49c1d0162cb645ba95e3e622ef90b9c382cb566a188131563ff08a114249c12e33d0afc8f227b18d69eccc238476f

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
1574c75a514140489b46616e4fdfbceb

SHA1
9089c128faed9fa3b330d2e18d3aef4e8f6caee2

SHA256
c96216171cf369e8b2c340c5018bb8b7065efaa0ca7ff5cb334708fbd1d147ff

SHA512
3612e084c678b80e5e19eac6e9869f7a2315cca33ecc63f4274f98122ec2d3ffa6b6066dfad7345e940c9cf9d2869a3ff8ff5015dc3c0895661e3005846b9269

Download Submit
/data/user/0/com.drnull.fcm/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

Filesize
144KB

MD5
3d0d8c832f589516e32b598883ad0ce9

SHA1
1f2bbb206dfa53a61007250f2992f51049262503

SHA256
8157fabee094fe1f27ff81c58d382071c4137a48db38ad17b99f3d2ea41e6521

SHA512
1bd8e337d5d520ada567cd1aa30e381ca30cf0baaa1486b90973e66c2e78bd4d3857c7a8a3e5f7f5584f85e159c6bf1cb1b7087860e7a4330cbdc98f99b31abe

Download Submit
/data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

Filesize
1KB

MD5
5d037e1f644cf31a81f9d3f622b816c3

SHA1
425bb3e6d40abe9dbeac87b9f549f351396e654a

SHA256
e94c460765c60c1d8e91e280275e05c5e61aa56ba7ee1e6b2b9c9c8fceb5a128

SHA512
5653f4fa2f4edd5d7ebd2d020a881466e439fc6e2860812d495574cb82c86e3a9f6e6b5ccc5f97dc1370b45cdc7b5e100cdfadb7a8acf8396290a5c5ba12180a

Download Submit
/data/user/0/com.drnull.fcm/files/null.txt

Filesize
10B

MD5
3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

SHA1
4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

SHA256
c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

SHA512
35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

Filesize
479B

MD5
7904b6066fb3bf7b23fab32f61507c9d

SHA1
a28c24307177d78865f70ce4517216cdc6e7cc24

SHA256
21d960429e91637bb4afcea24f2d7b0b60e3292ef51e984af31be890e38e7bba

SHA512
abd1cdf74ab45471a4a9d11dd356eebab710302b5ecd96f4575cb6e66b7fff31b83715d82d3613ca7d73362ce0580f58be966a9c8d220a754f6d0bbb1399f075

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

Filesize
127B

MD5
f91224810b56339da45a7c7fe7630c89

SHA1
b58eadce84a9e719aaadaae3f7f8b091cecba046

SHA256
15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

SHA512
7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

Filesize
442B

MD5
146bf7e85a83630505b5cd2204201651

SHA1
5d1663e9ea2b43a07bfe8cac048209f1432a7448

SHA256
b757db5b10a83b66d729f6ae053e373cbfdae4eeb2b05679864270ce2c6ccefe

SHA512
849dc9454624cc5d4230b6ad560cf48aa65f35e3140151f7e90021c4dd9eb00f6d31f39f8446fa15cf8377a682989599ed7f194e3ac8b84977638d47822ec3cf

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

Filesize
436B

MD5
d5a803f987e9a8408f6227c28a728841

SHA1
17f2054236f5ca34370faa3eedae6a32a9818c63

SHA256
f908cb4a026b630138492d0644680fbd15f5248d849775490ea7a9055971831d

SHA512
96119545afdb1c740c08eb11a6634d061224d1304917917caed35e2f6545f1520b75ba14f1c290d7cf9c4d4bee8e4a7f359f4b5939ef6eb69630ade46f1dd1f6

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

Filesize
137B

MD5
d6b32b6f7842c43a69d96e6bbc0f951e

SHA1
f09a77cc001d93e3386c5cd436a79ee29a46da6f

SHA256
5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

SHA512
e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

Download Submit
/data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

Filesize
183B

MD5
9d08052e4de9d7fb86fd7e2696ff5de6

SHA1
99954d29912ddc4412f1dc9d3e12bc8028721e1e

SHA256
74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

SHA512
ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads