Analysis

  • max time kernel
    2698776s
  • max time network
    314s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230621-enlocale:en-usos:android-11-x64system
  • submitted
    29-07-2023 08:49

General

  • Target

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c.apk

  • Size

    2.8MB

  • MD5

    5de11f47e6ac88c69c3f6b5e517bf6db

  • SHA1

    ed3ae75e03e88d6397f22e311b9c5fd4f6628c37

  • SHA256

    087fb94dc34cb66d30105933b33ab6517996e8dfd07fac4fa17e47900d3cd33c

  • SHA512

    d5c678b63bd301b6f1dab5381226008e7af5d6e2455e6a13df25a2c41c2700bfedcf938f952ddfd14b3cb6b26e45cc63ff5278acef5e0b26f6b11db712701d4a

  • SSDEEP

    49152:JnK/2fSEKmzO1kkDwVqoqEKHUlTH5d2ofrHX9ZlO82zbXVfIDvm3l:xAmSGzxkDQWEJd2ofrHX9ZlO82zbFg7q

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.drnull.fcm
    1⤵
    • Acquires the wake lock.
    PID:4378

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.drnull.fcm/app_webview/Default/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    392fe65965e67096b67ddf28187790e2

    SHA1

    95b82d6f2d6bd81a4f8c24e39cace8093303031e

    SHA256

    9d02ca6574078167084bf02de062be2c24d4e3650ae55759be985cf29400d1dc

    SHA512

    164a79f40676cc2b6068e1dc3728f557bc90e3fc0f990a85e36a42fa1bd81a804c7a2414bdd44ebcece80a7b44de5cd7cc3dd7ba373af5bb4c3ebf4284f73d98

  • /data/user/0/com.drnull.fcm/app_webview/Default/Web Data

    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

  • /data/user/0/com.drnull.fcm/app_webview/Default/Web Data-journal

    Filesize

    2KB

    MD5

    e6a7df81fddb7b833d3d9d61a37ffb48

    SHA1

    118a3bbf7967e2dd1b3ec33a4e47070487ee2451

    SHA256

    eae34e112867f9e724fad82ffcf7179a15f4e950da8a185a0001698f94fc28e5

    SHA512

    dd151a1cfd1b4a38fe062f59bcd114dc033ac4a73931a2a3e9b063db9bcfd3fdf7debb5f10ed930d69326bd9ab813d412297fa623112f057b0e5ecf760300579

  • /data/user/0/com.drnull.fcm/app_webview/webview_data.lock

    Filesize

    20B

    MD5

    fa09d1f4138e5c39c3b2ddc2387e8c17

    SHA1

    b333056873481a7b9dd81d8d4e23211ba5fc1f87

    SHA256

    772dc2d57f38c78af947580057fb34c0cb388f0f9ec251ef1e8f85481c239afc

    SHA512

    56d2cc69f454a416080c41aa92d0f5cd80e97c317e09831b37e2b791aceef94ddebee0aaf3219d8e54aa4b447e265470f037f3638462aaa9d1c14ad2156c7780

  • /data/user/0/com.drnull.fcm/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    c04ba822fb511544af80181ffab167d2

    SHA1

    8b3f7b587e916cb1bb663aa8cf84baadfdcff85e

    SHA256

    a33f04eb5120beb1c003b5d780636de2dd36e2cf9759dc5df51e7ffe620a07c8

    SHA512

    350d7226f0ef9b64f9b2a7305482d7fde933c26f3412120fac3544343637b009a2a1a927a12c92a85cf71d4e2eccf3f6127c08d4f5e9aff6be1e33edc3c07a37

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    ea4a9e6d0c52e7e6238471e1026bdbfa

    SHA1

    6f91d3098470e24430c50f633792ecd5f3909cad

    SHA256

    115068a491a16c489e07a364e254dfd3b9d2942e26aff00c711a9902bf461b2f

    SHA512

    d3c5f097bae131d3eb73840cbb4b6265fa87bcfacbe73df3f27f67f08a6943b6962bf52a51885e45ec49d660d20782d04a7e4b424a2f4f78e922d0fe677fd6f5

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.drnull.fcm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

    Filesize

    96B

    MD5

    1f15b9a2fb4e3eeb6245a5300d8bad64

    SHA1

    649d99351088066d30455e2ed89d6a2fc47c0339

    SHA256

    a488cfb10db9f8541c29290b91ac75409b52b2b015bbb3ca73097c876eeab71e

    SHA512

    be6f1af022f902ba6607f5df9dd6b912eda8fc8ec35cbcd0e1759eb9381e4e71dac185e1fc924c7bd43b1b6cc0d0e6950fa90a4a7ec6b74c2c3fcc1db7826043

  • /data/user/0/com.drnull.fcm/cache/WebView/font_unique_name_table.pb

    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events

    Filesize

    144KB

    MD5

    2e614eb1922f5b2598b2600913952b49

    SHA1

    cb764c43841e521d192a09ab81a328a756336b0b

    SHA256

    29d776a3e8551622ec27d29793589997c9e8a3d00c38a9e9046124037cfa3aa5

    SHA512

    a674f97460219bef64dad8a0410c2d64448b888d5adbcd834d96d79eaf261d4e1b7f9cfb277735582fdf7ee492b3c444f6ca54fb6cc6dc4bdb8ea15f132cf716

  • /data/user/0/com.drnull.fcm/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    d4dfbaa4b9ed559d381eca79618a20ef

    SHA1

    02fd1b52c62d3db8eb48321293eedbfc534ebba4

    SHA256

    8a0f844e4ee781cabd4da604bdeeef4c502d52747c3ed62d8b32eee6a8f7b139

    SHA512

    61804aa0cd4010a00ebde90fd4504206575917d969abadf5b348fbd7dd62aa115c5f075b2f650328dca2629cdbe381d8da1fec2a31c99399ca57075a3aba85e9

  • /data/user/0/com.drnull.fcm/files/null.txt

    Filesize

    10B

    MD5

    3e0b3a3e90cc4a1f5abbf3fd1a38c2b7

    SHA1

    4a6e2bbb5082ec5509f1c0f63b918066525c8e4f

    SHA256

    c683491047fc62ebf0a7b3e81d5eee6d8e1f58cf474c32a23c32669b9dec0568

    SHA512

    35959f8f785d47d68f31c71b89d891dbb9bfa8be8397c59c9c3a1376de4e2fb1906dfce123eea1582cd283924c5cb16362fce2b1b2ff2e10e431d3ff1a096c8c

  • /data/user/0/com.drnull.fcm/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NzIzMTkyMzk3NzE6YW5kcm9pZDozMTc3MmVkNjEwYThlNWU0YzEyMTdl.xml

    Filesize

    479B

    MD5

    c1a67adf835bb47aa035576e8d8448ab

    SHA1

    2eec649e03e3d22575e7727219d619229c8c63bb

    SHA256

    1ff031afa34d2a533d129f91027d942b57435befa50f195b182bcfe8466690bb

    SHA512

    829e7294076b7569a13d18ac6f7ef15b86b13f93d03cf6b0b5dc3920253fdbd0d0a9f001b675333bea6246f4683c9661082a234cb5f903197be0342272df69a6

  • /data/user/0/com.drnull.fcm/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    127B

    MD5

    f91224810b56339da45a7c7fe7630c89

    SHA1

    b58eadce84a9e719aaadaae3f7f8b091cecba046

    SHA256

    15c165b5b8b9ad6f5a8916fca45e2d4417402e35bdd83bb8eebc6b0a0e8a24c1

    SHA512

    7b7d460e011945d45b069fcf8891bc3e4e61b0d5cf7e96e28b658cf1499fd353e9fffa7a6923684859342d4e8ae0136267fc1dfad4a0bb0a56ac261c6350ca9b

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    442B

    MD5

    2a304e812690a42f7663f05432052519

    SHA1

    2870308d94d0996b59a9518d92995eab2c0e62ba

    SHA256

    05bae58e5a4951363cbb1057bdcb2f2125f3ac5283177f60c794cce3e347fd7e

    SHA512

    b6099a38a31a29591e144cfa42963f16b557112be8a81e0d22f1ce7dc36f55c89804809f609fa7a6cc1d93b36e2002bdf1e55d6cf8703599ea8131384410ed46

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    436B

    MD5

    0aa19a56dd736854e1348a68a21e0fef

    SHA1

    046d4d5d7a365ed23491564326f4ba6f03126c15

    SHA256

    7ac3a5725fbf23998306a9a0b21a0ad9443b3cf0987b9f368945d33d3065c128

    SHA512

    1f1a065594f3f8c15a8a74394df8776daa74faf644debcca6bb1e419c609267d319346746ff56222d55925aeb38b448af19204b77494196ac35bc91d4f04a8e9

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    137B

    MD5

    d6b32b6f7842c43a69d96e6bbc0f951e

    SHA1

    f09a77cc001d93e3386c5cd436a79ee29a46da6f

    SHA256

    5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75

    SHA512

    e15f4e2d36a163ee62904a7d8e07ff792adde9992607f82b663df8047483283334eb2d7d6643aaca4395e11e9c1ffc51f8b3cad45b19922f31bdccdcd898ee56

  • /data/user/0/com.drnull.fcm/shared_prefs/com.google.firebase.messaging.xml

    Filesize

    183B

    MD5

    9d08052e4de9d7fb86fd7e2696ff5de6

    SHA1

    99954d29912ddc4412f1dc9d3e12bc8028721e1e

    SHA256

    74abc9484fe0d9466cacd839a68b563859b8394b4f42b37d876b47fb77f9e4ad

    SHA512

    ea8a27eef31eff3e1e0be8d7d21d989d2d8a91528e151071df87b8b6e9ee078cac0a261d5e0ac31e630e07d2c7db1861395687cea1f4508184cbf081671db05e