Analysis

  • max time kernel
    3821438s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    30/09/2023, 01:48

General

  • Target

    d05567090f31d82f0681a40fa9234839.apk

  • Size

    2.9MB

  • MD5

    d05567090f31d82f0681a40fa9234839

  • SHA1

    72a0b853bb96370241fec49ea03339f57ac53065

  • SHA256

    c581d8331b961078f11f28ce45b0fc0244976a211f2471858e496ebab59b7e12

  • SHA512

    9f118df52da25892622eb4520165495f924afc4e35145967837bcb11d6179e3a86f7f3587b2a287218bc1d3ed44f109dd6bac1e87c98670f57657cf296e74c56

  • SSDEEP

    49152:4XpdDW2IHaNa79fxa/HPpv5rTtSVOGLJ7BM3fsP9p+8gLCrgcOR3m0+:4pv4ao79fxa/Rh1SMG9lM36gLCrgcmmp

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4166
  • com.drnull.v3:remote
    1⤵
      PID:4297

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      7fb39ec64f906782ad72f7af124fb66e

      SHA1

      817a878f6b75c85f0ae798cbfa937f45a535452a

      SHA256

      724febe1fcd6d5c1ed67d709da8b1d83f29f0e54d70dae4ab2526445365d4acb

      SHA512

      c27b1f9dee82693dcc097ec812f719aba88ecce5fdd4eaa8c36232dd6c72e50e43a9d0cd5131e7b785b39d232c2bf992829ec3c3dc78b71b257baab76df600e0

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-wal

      Filesize

      68KB

      MD5

      fe774b7b6e5e0edb8f9394f70940e57e

      SHA1

      d73e815b7659e79c4489ceedf40f30699ea6fca7

      SHA256

      5c06b4c0f172775c2b0f22706087fc295457a5b932634515b5651d7724c0e8fc

      SHA512

      25953a0764eed68e463c7faaae67bae612b0ed2e68f8e8b2f52024c2cdf7654c1cb861d4a8b5162675267801ebc08afc019d7a181cec314dba11367593f15b68

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      38a5e36097fff2e0258b75464e772e2f

      SHA1

      0fa6879498f96c4570b28bc219f521aced5fd39e

      SHA256

      2ce744bcf9a82d7b87eb412c3254d0a97328f2ae467db9830db90ed74fc56518

      SHA512

      cba6eb7205dd7ae3f38b6d75ed1eaca73f6237cd96977059b9cf05806958a7b001e220cd8a1166b0efcfabfa87fb77589a6796a4aeca7b42d77d9a75c1e1cac8

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d0fb8a397ca2a15a069a5742a7aec168

      SHA1

      9ddadaafa377c6314b1f214bc37dc954de96bf6b

      SHA256

      dabdd9d4022e312734204a5bc3ae426fbd5d0870e3d1ea12a1de2b9ead9e7ceb

      SHA512

      afab596586dc41529bb5a950fcf000d9f5d96b9174b1a3f95ab9646cc13dbf7719174f5af5a923819a87c7d1424c69f7dc5e18ed22e2aaa8f00c40ef17fac071

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      cb87da1fc3e17a1f6f85a318ade8e32b

      SHA1

      30071d179fc14bb0d2a64a77b8f60e849dc69de2

      SHA256

      92c5ca7da0d5dd9d46f486fefc2082771415327b9e41ed2f6b76376d15b642e7

      SHA512

      0701b818f8185c468f2b4ea41b80e1227dbcec9c56ad423864ac79b8b1c9c901c7200ef765e11dfed107b78415be07d494a916622e25f5151be4b4f25b598230

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      dddd695a27f9e0dd2241331b4f7e537f

      SHA1

      531ad313fbc666399e589839ca7ff2b5186d2bd3

      SHA256

      5fb06f7d039cab32913fd0f3ad355e854970752fd676f48e4ef51ae1a8a3b060

      SHA512

      bc9b3dc167bab6816e8f5100b0cc1ec706e61b6c85972cf06d354b98b2482cd6869d8c8dd785d67d4ade1be11ca3aa41728c647a2f37562fd77b7358e4562c97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      087a2d6d0b7e3f512f8c209930b41b64

      SHA1

      840b8cff61d3e4a903eff16c562187bac17090ba

      SHA256

      2320330ee7342370c86d686b53af3eabb1eeb5d814991768650fe7621e93c672

      SHA512

      bbe751614a1262e1fc25676b0ab79dd1316de6a7059095697cbdc23ef29fcb5d50d9d5f8bf34ae13138d1b61a8793a96b06b13dbd2f30ea372df9e984e335504

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      e4d45234a255c4d36c27b7a3bc2de446

      SHA1

      1f26a7c7203cbb1c885aea3d13cf72f5edd808c8

      SHA256

      9ed9fc466109289525bebb6c60871dbf96f9c7e87e158c59a25416853b8ede59

      SHA512

      2f609c02ba5d3d34f65c2df287935825c6a4d3b4e4ba48fd9f67abbb1ca2d2e58b8dedeed149f34ad981e44da1b69883d7767624c22775a9b4ff464c55e07b6e

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      cc81ec81b14a1edff516d55d8dfc928d

      SHA1

      6265aa81efc0d69901a9b519ef4c08a60b74aabc

      SHA256

      a953ce9b7363785cbb9590b6d28ee88872217a5b305c48991efe040b6a1ce056

      SHA512

      56fb45f5fc11e443007d4889c052d1c1323e47d34851b8fef66ce51a85c4a869718e5c90a988f9b105b8504c641323fb97cd32566c8c079e4d89395eaf867f9c

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      771ebe3d73ffdf56d42409b73534134f

      SHA1

      81b070e9a25ac4f0129a9c7d94d96fa1ce364101

      SHA256

      bc9387df4e3d5cea5106995bb8e38aef418647874f4223af25ffff0344e22491

      SHA512

      cbffdb46bf04250dc64158d0dce4ed129041eb6584da41489b513e4a8163c2872a57b24e6315af746f3a0af784e65c1a605813151a75e8dbd6e4720cb837f0a9

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      83630b8f4e0bc4c373b2a996ed0aae4a

      SHA1

      72e8feabfdefb27b9fbb87f25fafabb0641d611e

      SHA256

      b70a72a5461b902f7356a83221879d8934d91b6438f0a51fd16e46d44921f1d3

      SHA512

      e51d9e67fc7d9bb11995ca3cab91b9ed17b7ab51af9dddfa8f590469c077a5bba7cde6065e831e18aa9ac1113d55982a86b3693f240b940f40af3d5a774500f4

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      90edcd1b2210aef3fccc8dc1b260dc17

      SHA1

      28c1ee929b04f629d5054d26d5779c645eed7109

      SHA256

      a10c2545295abb36234c00558d184f58b6917031603ab7de9c09d9bde1834984

      SHA512

      0d64c5b70fe767f0d1af01015b6ae7c3cc600be98393b821f50e8c4d703d3f74c4d663569ab75ff12382c0bb545b2597b59e7eb646b3f6ddca3cb81fa650d474

    • /data/data/com.drnull.v3/files/PersistedInstallation1965827991693097429tmp

      Filesize

      90B

      MD5

      8c0451de72ad70cb02f880acaeffe313

      SHA1

      4ac320344b60b354e2cfa8141d0870a5a637ef38

      SHA256

      e6bcff9509d021758da2f4b5ea867c22825143828ae7fd614ec8ff4d5df60298

      SHA512

      6ae7fb6f0c79cff0be211174fe883ff56eabb197d50f95b6d701761d38cc1331a3aff7bf3ababf1ecd81d6f80083a23ffffa9785d0279332e1d8d501acc3b39d

    • /data/data/com.drnull.v3/files/PersistedInstallation4822425716443264587tmp

      Filesize

      569B

      MD5

      ab119db0fb0f36643b451f7abf64f6c6

      SHA1

      823d826a1992f44829f41d193ca0a2b86706321b

      SHA256

      d3ec4b0640e9216826196ab7e7b43d7248a6579d8cfb4a7b19a517f8db44551c

      SHA512

      c67663d98df7d8352c609a6278cd07901ed19febb5b19bea2b84c8bc1862f7b5b3b4ad79d18b4cb57f81040f0176148a3128acc9d66c709809e29148eb4e7649

    • /data/data/com.drnull.v3/files/addr

      Filesize

      57B

      MD5

      5ec27fe944bf03a25fe125e828c06e1a

      SHA1

      8eb743e89edee340b6c34a905474a95adac710cd

      SHA256

      e26047973fc5412dfa0ae06848f692c039fe0697b2a17c8457a7413794af0d47

      SHA512

      c4060af199eaa9e78b7e91189cf8d525c79a5540b72723e587a4171b151f5e6faedba82b1c48d214c973c08a5c4adbc78a1b258c7240c1f7747632ea5129da27