Analysis

  • max time kernel
    4105739s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    03-10-2023 08:47

General

  • Target

    app.apk

  • Size

    2.9MB

  • MD5

    ef98a185b442632e92794408386f8c1e

  • SHA1

    5aed3b3bf3ac05896e768df743e5909bceb84dac

  • SHA256

    675378259a72ba94b4379a206e1a782655ac553fd2cb083a8a34044c90258299

  • SHA512

    adf8c7ed543e1ede766b9fd04c3ac4dc7632198393defb35448a21b5606e533669fa8ed5b2e80e1c7af19b15ff1ee0b21e70a1c000ab224c7de3cce3bcd1613e

  • SSDEEP

    49152:uQBCb1RZV4srLznsEKoz6MLv2nkpXKkZNjU9aBn3ej9p+ugLCrgpWt5g:uHbjxvsEKoz6MLwktKyNU9al3wgLCrg7

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4170
  • com.drnull.v3:remote
    1⤵
      PID:4304

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      0d35a4b3aa3be228a620b650fe6507c6

      SHA1

      c5e107d6b392fabda0ef6ad8659e702893157a5f

      SHA256

      271605f4273c62add8dcf9ea6de919313ba742961103091335bce4725a953310

      SHA512

      c700f6879d9b554d32e31c617be1d3db8ab7bb3c928e63c46c79ff0e24a60144656b1df3556419e4d4c26b6bd977061b6690c5312d6205d86c000f369c5539c0

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-wal

      Filesize

      68KB

      MD5

      f8848f5c06f16a578262ef94a4c175dc

      SHA1

      a3f97cb0731b755bf54fa95788d3a16c74ca9a0e

      SHA256

      58cf2e25144fffd19257b5c479b611e220336e17d81f1e6e4020e20c65ed5ffe

      SHA512

      a6a03ad89a227bca6c4a54b5f78cc682900a25091ab353fb32beb40523c0dc7737f782d4465c632998cae4eb4efc40ef9a08d760b3338504da2e88e497bd1672

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      c86a115788bb9f3375484366031437e6

      SHA1

      7689d3320e461ba3ba951c072f01f3ce4c852d69

      SHA256

      0e7be9701f172ad129e56cd626c8aa1ddab1db138cf5adade5209ef30466c975

      SHA512

      bde18138bef30c51e81148cd9c10db73f8f0d9ddaf5f63ee871fbc908048fd6adc5c9c105bd46486f3296274ba93449f11b999dd230684e221ca1db7208e41c3

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      b10c45bf331226756a3ed3770ce3c974

      SHA1

      6e73b57ae5a4262cb380dcb271f7dc18176066f0

      SHA256

      f04e46e3d05518e9b5e197c466687e751d9b3bbba52efe011da2e8b563629461

      SHA512

      42a20319e9e1845bda65c0561b573066a0274dc70a9145b063da6ec18064d0366e5edc45cda08e242a2fc6a7ca91d78a5b66e8a12b724e35e2a479ea6289e017

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7345e3f2774d9df1cd7e69776d8c4276

      SHA1

      94659a9f249e40ed91bc13c6d492d2bc2b8a8a08

      SHA256

      453c388e13011aeabd372a8513a07af5d3a9428b573abb0e5435e73ee4ffa843

      SHA512

      30325ae8930f70bbf345339d744b0eb78c423994d828d4dc517d90d32f9d3fde5a369edde4ac8204ab838e742c559f127107c512b6624d2936dabad4137a8f4c

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      dddd695a27f9e0dd2241331b4f7e537f

      SHA1

      531ad313fbc666399e589839ca7ff2b5186d2bd3

      SHA256

      5fb06f7d039cab32913fd0f3ad355e854970752fd676f48e4ef51ae1a8a3b060

      SHA512

      bc9b3dc167bab6816e8f5100b0cc1ec706e61b6c85972cf06d354b98b2482cd6869d8c8dd785d67d4ade1be11ca3aa41728c647a2f37562fd77b7358e4562c97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      9efa296354357938672a655f8f6ff95f

      SHA1

      a77b73af35bd0616d03069c0fd08b25857ee42b6

      SHA256

      af3349eb186d3f69c2a13b6c6f48ccd2df37dd1b2ad0115fd563cf4d2996b587

      SHA512

      d2f7e231d41f62f28fb0ccdf9f86e7af1544354d78e30ecd7bdffd1260919ee5a73d2d0661d4303ab9338beb3b22aedbe10e721a7700bf58ca5abd17991e53bc

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      0c62fff059bf54fa3baa963b25c4fa8a

      SHA1

      c9bf71429364568cffa77a88a0002c2b6eebfcc8

      SHA256

      73ec2eae66bb7ddc5e5d98acd6434c315a4403376304247c8004becaf3657867

      SHA512

      11f9b98750d602dce6aac58de21bf7c1b69409232d93cf3703df3c450f27a17778ca3c91a5d287b8ba64effebb10b2522d7c4a01e50053463aa6d450e4202c1f

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      04993647769f1696b7301d3358bd35db

      SHA1

      b67ee90b65d1121dd3572a8ceb62e9bf0544b3c8

      SHA256

      6ab992ff5fc88b81134face92f3cf9d1992658e684dd3a4c286265a7a251e02e

      SHA512

      bda0eb7e97b5b94f7cedf8735cf041c8fc09b6dfb9ae10acbce2541130393e557399436ea577d5258db8d8274576c25974c588a085eca2955efd3c07be19527a

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      2bf821906a3aa10c3d253ccee85cd0f7

      SHA1

      25f52234d0b03eba295b9f279a219b536428b313

      SHA256

      2c6ac16fd1c76644700f5c42008bc58507c205d5cb05a8e2c8a7ff076f4deab1

      SHA512

      6f45ed0fc50e24cf0e68d8e188971bd293b3cdd7cfa2cff81127052eae22633201bc45ea4702e6a6f672fb614a49d2c93c3011e8790b477704a1ae790cc33df0

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      4766a4bb95643a37f304752a3590dd4b

      SHA1

      2270a9361521a0c550a198b6703e9d6b0faf2ffb

      SHA256

      0971c66482c500f916883a7b01e336f51df3ec66c9cc52b5b60a3270600dcb82

      SHA512

      ab68e13b3cd354ce6b119e642226db2e66f4f80e81d5f71558d548c2a6ffe6057117d31b2699cd885babdad821bbf4955379d78890ad6a81caf92282ec1dd8d9

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      d2b38504f0ea87ee77fc6e4a8b6a9c45

      SHA1

      fd217fb3b9bd8741ed6a1c4a596395d5da64f7bd

      SHA256

      0064bdac7c3a240eee477e1cae8908083ba62c5141cc8daaba9baeb8eec8b923

      SHA512

      28c1de1b03028f0dd65a5c6cd752d3793d26eec81002bf3a729b319b39e9100b66d1098bfe9d8c28af027ab1c2728c076d415cdea6505e99adffcc4b31119fba

    • /data/data/com.drnull.v3/files/PersistedInstallation2224078151216537648tmp

      Filesize

      90B

      MD5

      9a58226a2698fa48acb121707c6f3876

      SHA1

      eec2e16c53aeabbfe9b8fca1d702647b97e6a2be

      SHA256

      eb9b326acdfe08077d7dc6daf119c539861e58dec65626a915ae4528f19643c2

      SHA512

      cc908855e23d81f2f542e9116f496d55a4e4e93b3cc5f6dc108cf2b5edbd70b1884e283fa17071b8e24f450d579f87f96150a3e4f06052a5a4ff7cc59427d7e9

    • /data/data/com.drnull.v3/files/PersistedInstallation8417658920659134755tmp

      Filesize

      569B

      MD5

      af502e8a137aa0538221667c3ea28922

      SHA1

      346c722977ac33f73297a41e833b0b1f2aa927b7

      SHA256

      773ef7f1bc272699342647dc3002d80ec5b76b2c2c7e6ed0eb33a41decd1a39b

      SHA512

      8da671211b53f2de5296d9cebda04f5ab4c88c1fb741aa7f04e81e1a3d9e6490fbe44e892408dd950b105c2005108c8d36f85e2ab5a6bf968b499ac7ff5c14f4

    • /data/data/com.drnull.v3/files/addr

      Filesize

      62B

      MD5

      fc5970479cab12a01e46d7384b5dc7f8

      SHA1

      45526b882e90ec5810a20783b9cf966465967e79

      SHA256

      f570d7a650da95850390ec0fa636e204dc9306b8b370993321b478d444f0c557

      SHA512

      09eab1dd13d04eda1374e6771ef0a7529ca9db5163b05b0f4b1ad87a2f6042ddc290b050cc859231cadac7be9cfeeb7e46482cc5fb3fffec71dabefe025ec1a8