Analysis

  • max time kernel
    2692929s
  • max time network
    60s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    29-07-2023 07:16

General

  • Target

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.drnull.fcm
    1⤵
      PID:4847

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/app_webview/GPUCache/index-dir/temp-index

      Filesize

      96B

      MD5

      0539e7ca08300f85a3d85d02a52e9f61

      SHA1

      a76ef95f790b2895a6fad086448ececb04959d31

      SHA256

      77d4ffc8fe4d7beeff95e9f8ed5c52a65b467e2037a7c08c6e6c5b325ed82b88

      SHA512

      c1345fb397a639de067d6a2bea8ce518511d35ab6c60354799bed35d8640ee8b165ae0fbcafe8b339da3575db64841cbf72c95a31f245251608f168553412bdd

    • /data/user/0/com.drnull.fcm/app_webview/Web Data

      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/com.drnull.fcm/app_webview/Web Data-journal

      Filesize

      1KB

      MD5

      0692cdad8f8e44e5994d4adf29f591d7

      SHA1

      e25fc247e5900f61c9df41e650cfa02ac9347d7a

      SHA256

      e418011990e9c735a9ad61e88cbd9c2232c76fd286eab53b529334d05df24d49

      SHA512

      77b0c647b61b0f79dfcc6dd600241fcb481ccf3efdb16529017ef1effefa30811d2b567209944c9122232bad9bd0f093f00ac8d8119456a09537da85d1b6f5ae

    • /data/user/0/com.drnull.fcm/app_webview/metrics_guid

      Filesize

      36B

      MD5

      39d960e3d0f06473c6e2f547c8884c80

      SHA1

      a764ae637724441679ae515f93046f9ba249eba4

      SHA256

      a7178162cd997793fe4f1f0e2f9a76bf0b2c1462550bb0494017e5d3f9b1b204

      SHA512

      f35e36e0fb05bc0cfe0a8b4e41fe22f0bf80affc832f7065e87cb6dc7664bb16358309c4300e6b4952d376b70636a44b6306864d575de7dbb1786eba41489b8d

    • /data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

      Filesize

      40B

      MD5

      d853a19ed1f9849dbdca87e1d055e8b7

      SHA1

      e9ac194f538815b99ca97e7174fee1c4447d483a

      SHA256

      7309727e98b1511aab1aff79003f2008f0e4fbdc4ee157e9f71c34a14b165fb1

      SHA512

      fae7ce5f39bda0d8c1d49ca28a897e927e562a08a376cbd5ae301781247bfdefe0ee2d85bfd23fe6c80b71ff7b541b6ef2813c411ffb62791080e24058a1b11c

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index

      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.drnull.fcm/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

      Filesize

      96B

      MD5

      13602c64996e09c8cd3d6ab693e85b44

      SHA1

      964da5d317e6f99e46889c2fee1f3949c3599d64

      SHA256

      dde420a38e5980f7b72573c1a0ced241ff22bf8afe6b4c7f8bfb15330b786b80

      SHA512

      fc0105e1a54eb06170d8a92b8beafa145b425aba623f446b954254d11f199d1ebc101c700fcb113b9727b7aba56712ec61b0db7389afa50db2480be59a26c9f0

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

      Filesize

      144KB

      MD5

      1e5628b6017c6ce1c6c38f2a8f84f324

      SHA1

      5e74ea7e256be0b9d4cb737b01f8590fcb8f0ba9

      SHA256

      5497793d2638849d25e6030e59476f57abc36f8a3f4b993bd8eb406cd48dce9f

      SHA512

      2abb46de8180c0a479c4c6236ad1cc13da2caa5b69cad0fa3921a51e6ad873a9ad4e4f6d1c7ee55c5c6de4e3d37d2ad8d16881f1cee0323ddbe6b0b0bc55bb35

    • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

      Filesize

      1KB

      MD5

      2f2133896b9fc9e9e4b8b197548fc3e2

      SHA1

      e54367e5089f632b2077ea71cbb7166ba9d33777

      SHA256

      baad443118a5f9a16aaf916079d95668e005dcbd9a23b1078e7d097124d27c1f

      SHA512

      f99eb12cba598aa7b1db7cef9748566fd47fbc8d52112fe0c28f61e3453d2a17a2dc0195fe993a70b30861c2da1479eb21869636e83d8f7a3a36fe25d747134e

    • /data/user/0/com.drnull.fcm/files/null.txt

      Filesize

      10B

      MD5

      3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

      SHA1

      4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

      SHA256

      c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

      SHA512

      35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

    • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

      Filesize

      479B

      MD5

      5ada9cfa9d2cce769999a639015a5f24

      SHA1

      4656d29f4ae915ccf36175e3dc65e7f12e336621

      SHA256

      51ac9591a658c33c731438d5c914e2ad776ebf1e03c8a5f93de0f1135307b851

      SHA512

      c2c9e16a7bcc0cfaebc265f1a0d93bfb22e0e6eb6e176d27d55c799f889ddacae9d99996be00b7c6889750bec9f6bcf0a221c1f408b17d08877cd15dff33bab6

    • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      127B

      MD5

      f91224810b56339da45a7c7fe7630c89

      SHA1

      b58eadce84a9e719aaadaae3f7f8b091cecba046

      SHA256

      15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

      SHA512

      7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      442B

      MD5

      bcf88c3d90d035301dd95a2d56aa3289

      SHA1

      27fd7c65c0b31185a25b686a2fa95a677b49fb66

      SHA256

      6f2fc7ce0b44a73d9f933ca3581512e1daa44005b0f622869c5d8dd3dee5de98

      SHA512

      6e477f62fb8a333c523658920b9dc6fe72b4cdac3a0704018aa80980d7283dc106bf3c7eeaa5eaec9acce129017b1e9d1e94e937c3c7decc2e1b6e4d1b4ec3d1

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      436B

      MD5

      9a29c3d3391171c63b500cc44179c94e

      SHA1

      250493dea61316077052eea621096a619a3ae759

      SHA256

      8d287fecadd161dd2cfd7f80b985eb5b9e7051de4ab7e6918aa1dd601c1fc91a

      SHA512

      1f6ada8fc476af9dd82c0ef7e84054915669730538e448ee52fc603399bbf2b4f0c5414244bcb9e10f81e01b6ab83a7d4ca03adc6716fdd0475c987c8d1b49dd

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      137B

      MD5

      d6b32b6f7842c43a69d96e6bbc0f951e

      SHA1

      f09a77cc001d93e3386c5cd436a79ee29a46da6f

      SHA256

      5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

      SHA512

      e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

    • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

      Filesize

      183B

      MD5

      9d08052e4de9d7fb86fd7e2696ff5de6

      SHA1

      99954d29912ddc4412f1dc9d3e12bc8028721e1e

      SHA256

      74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

      SHA512

      ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e