Analysis

  • max time kernel
    2692900s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    29-07-2023 07:16

General

  • Target

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.drnull.fcm
    1⤵
    • Acquires the wake lock.
    PID:4372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    f3c8a68e2ca63bd6dbde1eab56e3d1e8

    SHA1

    5864c841398366dd7c20b6a88aabf84a30ceb439

    SHA256

    3f0ae5429f54d6f7a3094c21d0e872042e0debaa7375149486b9e8df0b9f6903

    SHA512

    9abc6b0915e5f94fc5919fcb5d176386ea4e66b9c49563bf87a86d1938f1a92ad05cdb6d2a3144f092af7ee946d06e3f6c583b880e2d84f7b705e87dc6409cd5

  • /data/user/0/com.drnull.fcm/app_webview/Default/Web Data

    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

  • /data/user/0/com.drnull.fcm/app_webview/Default/Web Data-journal

    Filesize

    2KB

    MD5

    9251cd440ea0df14c9060b3494434f2a

    SHA1

    e163e7e5c4dc46cc9ee519a39f3e082d4670079d

    SHA256

    d36b50d3588b2b71e61630c67434df8b70e2305eeefc14a4d8e84a8fa87c45f5

    SHA512

    e3dcd484f747aa1a6ec90f47a8f1005e05e203733409e03166b9d44144509456f827bb0e85f4086156b64055f386d350a8309e61875b026105f2fe33ed50afbe

  • /data/user/0/com.drnull.fcm/app_webview/webview_data.lock

    Filesize

    20B

    MD5

    a2f4e8669e4c1a89d9b687ed3473fbdb

    SHA1

    ebbf2c294e1b81ab99864cffcc6ad4b53d830476

    SHA256

    8859c2def66bc0b1c8c5769d7a6af12dd382084ca8d088d73921d9ff012f6e37

    SHA512

    d69f4faeb458289e4b7643d857ee48dc3e321bf858f140842d7128b190150860d86f23649a0c637bb4851aa3073b62e07c7a8b5259ce4cfd1922b0cd66e93470

  • /data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    7a3585cc97ee0033a84b9be7c58172c5

    SHA1

    ea1fc6c2c5db896d00a3dd64a50fcddf43b6bf60

    SHA256

    f3f639f46985a54a9903bd48d5602efa1ad40c02e04a0fab86a11c8eaebfdd8a

    SHA512

    4952018f6906faa6e7375686cc65c411f303e05a068ba4949d26d50a8511267450b8f43d9d5d452bf3a26b4122909a27c5c85534b0fd021135650891a4b776fd

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    de6852670ed12730476c352d6572ab29

    SHA1

    f5425a6f6c546198ec83b7d42df0cd9ebb39bf16

    SHA256

    5ab72c903fa91d310c8c878eda3bbfc01e527267f3131a2142b50dc4596f08d9

    SHA512

    4ee0e8ab5d3d9861d247371ba0c031842a5d6b40afe21b783fb3a804aee38fce873b1a1ec6f5238ef727a94823e3ed39ac2ae1abe7975b86e7fd4d864b7087f4

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

    Filesize

    96B

    MD5

    1d53649b4ea95ae6d2fdf10c33c21673

    SHA1

    cc5acc461316704a3afe1bc3f420b143bd4c6e0c

    SHA256

    d65afff125590fb22cc63f7b621e8aa12502401b96085bf4278036abdd36cca7

    SHA512

    4e6d9be4582bc617ad7feb5061da72d4059cce8f9eef66a2e0c4ad7122ab2d9423e159bc27123a25c651d5629b94d47e0c96e59a848daca857f8a2410921f5f0

  • /data/user/0/com.drnull.fcm/cache/WebView/font_unique_name_table.pb

    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

    Filesize

    144KB

    MD5

    9f8244df248f9decaacee6edf83a3842

    SHA1

    95b0da4055f6a4b05b1ef8ccb78b25c4f3bab88c

    SHA256

    5af6dd6f54f1e32959607dbc407c3cf1cc3bc2a510331430d2e6aaecfda80ebe

    SHA512

    ce94afdcdf76e533d4bd3e7e3d716b41a8f34a3be29fb3ffa324ca61dc82cc7d65071db58e38240aad69814002a873582564608d73c62c03d37331320bf5bedb

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    b357272a58de9770bf21150bb5bd73c9

    SHA1

    298f345d22984d411411fec35c52c3e0c2e4df09

    SHA256

    3fa33d05973978b34d179ff91fac8748c043669bf9df519acc3144b6b4f3259f

    SHA512

    96ab4e2817e5425c64c509f435ace8f126bf5a9e481ee7e998602553c1e58d20f2e2b60c05ccca7d5250eb7950026cdb1c871890e4fe9de0b2589d8ae066cb47

  • /data/user/0/com.drnull.fcm/files/null.txt

    Filesize

    10B

    MD5

    3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

    SHA1

    4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

    SHA256

    c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

    SHA512

    35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

  • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    127B

    MD5

    f91224810b56339da45a7c7fe7630c89

    SHA1

    b58eadce84a9e719aaadaae3f7f8b091cecba046

    SHA256

    15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

    SHA512

    7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    442B

    MD5

    55850eee653ced5d8c83853bdfe7c4a5

    SHA1

    df902a080736530fbb005c6125d6b2e4b7df1ff2

    SHA256

    acb42535f2aa4481a1eb26bccdc12aa16ff5c90c849ea1fccf05028bd5bbdcc1

    SHA512

    dfcd4eb63432999e6f3e1fbe21191f1fc91f860901ab9614572aab40c998639ad5378062d5f348f3ffee6c2a6bcb5ea72b55551762383c6c75d78b35a59ec5f8

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    436B

    MD5

    d03a4cdbdf8076dbecf9f77b8a7f96ea

    SHA1

    36c991d7faaf1492b1ad2769c96533ffb1e663d1

    SHA256

    c8d39c368f62515c7b465c6e0026388881501d1c810b480537f5ce766da37025

    SHA512

    31eea415a1a74fc6575491301f78443986521390944ffd99509e7c080dbc408dd9f8811f59e4d2cfdf9844ec53ad1ccdb430dd991fdc4a1cfce631e90f88c527

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    137B

    MD5

    d6b32b6f7842c43a69d96e6bbc0f951e

    SHA1

    f09a77cc001d93e3386c5cd436a79ee29a46da6f

    SHA256

    5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

    SHA512

    e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    183B

    MD5

    9d08052e4de9d7fb86fd7e2696ff5de6

    SHA1

    99954d29912ddc4412f1dc9d3e12bc8028721e1e

    SHA256

    74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

    SHA512

    ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e