Analysis

  • max time kernel
    2692899s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    29-07-2023 07:16

General

  • Target

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.fcm
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4098

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    7f56e89465203f9262e2832964547ce4

    SHA1

    de9853fbbc8ef2c4ae6578114ed3eeeef7a00db7

    SHA256

    65f16cf1c877d9918f0a975dc0e0424576c9c30f84f90e820a6a7ddc5e69b58d

    SHA512

    702fa79607219eea1b13496d1dd52d66449e851937e5abb807bf00af3f0d42cdbcfeceb787825f12afedacf6625ac9cdaaa6b48ec609b1f2ca18a8c1e654a0b6

  • /data/user/0/com.drnull.fcm/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    a47f478192b76c8af101af6373871064

    SHA1

    08aad0a47b7182f34f57b24853bfecabeaab8b3e

    SHA256

    0f611dad49bc7d7ec25241483fd936d59c809a47bac2bf0779e08e7977eb10ad

    SHA512

    af2c545893251c44c8627ff4dfdfad46268aa97d87aee723c23464a239b43595c06330b5be9ac9a6e502efd671b56b5c50759ba8df4d348f916a7323509c6763

  • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

    Filesize

    36B

    MD5

    be6984bf1932b2297ef6806ada5c0c77

    SHA1

    f9772fadcb1c5f6ebcfa0d1cf0aae399c7cc7ee1

    SHA256

    76704bf6fa7c7740d475d4613b4b7495595513d87043201b235e5edd056644cf

    SHA512

    6215dcd6a6b0e82a6c97f97a5d274a63a13e45a07fa7dc5ed85ff73090d8fb708494ff7add6b247ea335334229a75df42a81ff12f600a5beb01fd927d46fc751

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

    Filesize

    524B

    MD5

    ee8d78f9692e06a326c6afb831158afa

    SHA1

    fcc99e19f501b8dcce26d5cb7b1c5d603f3065c0

    SHA256

    5281078aabba7a49151b9e55945aac48a7a92050c33a87dbc3d8d6c57b4ba809

    SHA512

    69ff52503da01c816bcb95835dab30ff57d46fa483c87e59e4999d3fd74af46d33f1a7e7aa6dd361a129859ec56eedf1c76321f1fffaad5c3ba67b7e5a50cb0b

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    3f122322c1f5f765b0cc6912a7d77171

    SHA1

    725001c72a63a2ec8ee1953eda1edea4615408f8

    SHA256

    af4eb41a0c45cf9cdd5c4fed28d1cc87d29223443581cf3da631bf8c50f1d2ff

    SHA512

    98f33d7b640572a316b70ca566ac41b0cc1ee69b18d70c170ece847c051d467b936acea2b15795785d64110b992b6c957ac47ca578d449b3b5a5bd522adedaa3

  • /data/user/0/com.drnull.fcm/files/null.txt

    Filesize

    10B

    MD5

    3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

    SHA1

    4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

    SHA256

    c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

    SHA512

    35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

  • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

    Filesize

    479B

    MD5

    3c8ef59b60f8184b7b2ced7667ca798b

    SHA1

    47e6f46eb4a6fb77341a9fa83efa8a5d06f1c116

    SHA256

    741bb2d1b54f56b2eec12d70779d3053864c628d627a5bda9de87204eab41dca

    SHA512

    a51b284145916810435edd6ed4fb8d3f516c9b5d807cee71794b242d6c61f30cd2406a3087ed20e19e9573a7f089963d51c19a63d6e8bf495801bb0cedd0d625

  • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    127B

    MD5

    f91224810b56339da45a7c7fe7630c89

    SHA1

    b58eadce84a9e719aaadaae3f7f8b091cecba046

    SHA256

    15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

    SHA512

    7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    442B

    MD5

    9adf1821ed073e4f289c34ea770a3746

    SHA1

    aa7e62038a147a6942ce96d862626390e894c4db

    SHA256

    4bcdf93ef69a3183b65a532d7b769546a2834b5c724c9469d532c55b05760b71

    SHA512

    de43de9706b7c74133f76dc836fa17d9f9c4531357eb7ba4ff7b96c49f6324ffb32d4818fd31f16fa129da982769097fb5c0737c8b485633286674664fa33d52

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    436B

    MD5

    74d78a23bd621284e50b3fa910a42a6e

    SHA1

    29807ea4e9b64765ada2dbcc95a47713da5a4917

    SHA256

    003bca43e0d548b98a44bc1548db6740fc7f2bd4109f30e54b94be46389c3a29

    SHA512

    4a4e6363d18970b96b5dc2bf779a9611ab91795e12a38935afc0d194986bb3a1ff6707007e6f8e7b9e6309a960bb1c6d75329b6bec0452ba26380beae1c5d18f

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    116B

    MD5

    df7085c1f112d1197a6da8936d47e7b2

    SHA1

    9e6e22bcd8c8da80e40d40a25a9dbfc3227bb443

    SHA256

    c32144358dd9313dbe279605a3658a01cfd0b9a8d993000954456166b982746f

    SHA512

    0ad3f44d3266a951da8f333a82bf9135d31b614659ac83ed44d95062476548d5a47abd12326fd63088eabb8d977a3b39c12679f107f3e6d08ef370656955fca3