Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    4105743s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    03/10/2023, 08:47

General

  • Target

    app.apk

  • Size

    2.9MB

  • MD5

    ef98a185b442632e92794408386f8c1e

  • SHA1

    5aed3b3bf3ac05896e768df743e5909bceb84dac

  • SHA256

    675378259a72ba94b4379a206e1a782655ac553fd2cb083a8a34044c90258299

  • SHA512

    adf8c7ed543e1ede766b9fd04c3ac4dc7632198393defb35448a21b5606e533669fa8ed5b2e80e1c7af19b15ff1ee0b21e70a1c000ab224c7de3cce3bcd1613e

  • SSDEEP

    49152:uQBCb1RZV4srLznsEKoz6MLv2nkpXKkZNjU9aBn3ej9p+ugLCrgpWt5g:uHbjxvsEKoz6MLwktKyNU9al3wgLCrg7

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4971
  • com.drnull.v3:remote
    1⤵
      PID:5102

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

      Filesize

      56KB

      MD5

      11938cc77131e8cacbcd21a6a10c7222

      SHA1

      f1084539811d064d36babbfd1645ebcde3c02766

      SHA256

      8f7f0eed333bd0489109eeea4300362d3e82897b48e2f0410bcb5a5048027bf9

      SHA512

      05f08f51a4fc560d32fd1c6da235ef8e922674d6d983f4ce9f91081a5a6b0cf02d2bd9303521c1aa86ec9b5f462b122bc6d54681f7a8fc89bdc24a3f46721b23

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      873bb98b657b0494634cb629ef3b32d4

      SHA1

      f136270885664e20771b1351b811b7de8c9409e2

      SHA256

      f9d97a7afba0c8d80e2cb9fa351607ebcaf43bc315db3dd734434e0c9ffba91e

      SHA512

      9817f125a80c0d0e288b935cf13e5fbab6e149eafe34918f1c2f20cd2c3759173ef5bd64751f909f2a641ad715dd0d97c8b5828d567d3ee95c894d4d18e85aa2

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      8KB

      MD5

      3fbbd9a150fc2e76271ed07dca50a267

      SHA1

      4416385b24a7e1d5465b1837b73a42f2eb348164

      SHA256

      bc98a4da32847ff9322fd1982f53ab4a36b21666ec31e36d73374b05397f400e

      SHA512

      1541b45cde8bacb7f61f5863efeb0dd0e7b31c760f0060d0cef60413416b4a45c3292c2f5dbc4a0e5c2afa28aac4783cf838f74a56e98967e47348173c74b28d

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      8KB

      MD5

      641fa263bd98be5b21ea87454df0b1c9

      SHA1

      2cc296c1181c3346b42a3cd9b71566f9d1a12c13

      SHA256

      5bc8f7233e95cd1026dc4fbae3ba6d135f6fd2471fab876be30376a46753720d

      SHA512

      818b281156245801ea07b1bbbd8a082be1621bee6ad9b80149ff9630c185225e4e01b776a2ee3e81f6985455281e4c3d8130ec2d5dc8e413aeb8f8e93eecc3ee

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      0578a69fa073480c8dc7c9b6348099ab

      SHA1

      ca1d1402831d449ba5bdce51e32047a25038a0af

      SHA256

      d9c7297e25921f785569eafa1a472c76437869860a78d42a4516b60aec17de63

      SHA512

      2dd641c6f2fc29c6d5ce2ac7557c257e4fded486dde1bf58afb2dce2537b25c374036714e8084cdd8937dc53f6283fa565bb89026656923e712cfafad0eccb32

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      1015854b5db7b0d877ee8b0a83221345

      SHA1

      036ca47073019fe5abee6a6807c500a4faf70e12

      SHA256

      d60e366a12c6786e345136ce2fa31795a1136f31c0ce22ed95bf5004aba080cb

      SHA512

      ef39ea066942387167c43da39eec67335bf82af7bbf87da51c6989fe3747d1fe5f9e992dd105c30414375cd02b07cfd60c1c977072b9a8ac464a0320d17f2afc

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      a33e7a3c3c59e7369ca557f656b2ec5b

      SHA1

      aefb2b66b2ad0f7027ca512c84b0073df6581a58

      SHA256

      45d90b37a10d2ea8401f09a0ea49e78e6de8b05eb05a6aa7db2982e16e4b8a18

      SHA512

      0382c6259925d4fe117408c350b693511bbdea45a0d8d4d30b36dcc842e7b94160c35fa11a5d0baf9b925585ff29ceb717a54eb9a5a52245a1ade8691b27818a

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      acd7b692111a87c26190dc5e07076d44

      SHA1

      7578cb5da5ca6871d15559398a3161ecc598f5d2

      SHA256

      e09289f3661c8f74960a6245675066a6a8555fb5778a4d4a29edfac6f16acbb8

      SHA512

      9f9b41f3de7757ffd6c4e48695f46b0537e9b86372a6fb8cbcb5ced05dedc81badaf218bcb414ed2ff0fbd4ed13d4d7bc0bd5c022ad3b7b37c87b0d94ce7eb97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      6b8d28e4a41e016d504b01bee53c4db9

      SHA1

      17b8b4de8c04c384bf75681a07ce7f41a770300f

      SHA256

      2800dafd5a357c1b1331844a6a4d3f601f40d2e2029433b3ef1dc203728a5e72

      SHA512

      540899b1216dae092a268bc800a35673b8d8328f440575594bbf26d5f668ae93d272121b2c0496de0fe2be3d58c6f06b3e68ee0dbf91ce978de79b1440dacc26

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      ae5da8f56519c46eb8486fbad28ee8ed

      SHA1

      64a449cca60c712718d64381262c4eee6be72898

      SHA256

      70220465fa0e15fd92ef8ec2691b458d64aa13dd20233cd887139b2f8900ae47

      SHA512

      c85cb6420fe2cd986486fbc2d4a2994c8ba80bf0313036eabd4f224147860b14e215763a9cf598358766028ea914d61b986d042eb1084e595af383f2013dc2a1

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      7b4ce52bfc3b2105b40e61560595a2ad

      SHA1

      31b3fbc249afbe8b7511b897a47fe85e2d694a59

      SHA256

      161bc7b5961d43e0364ae5cc8bc02212209a39edd6e84d1ee5e93f13498a23bb

      SHA512

      8f621d983bfffba397b0ee074a24acdfbcf6b684e91b4d7b78ea1cacd641f014c31fa89b99b1304a42c786d35e5b9c780a48699e7cb28e074f7f5aa11eb379b4

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      c7562757abaf817c66a2ed42319b42ba

      SHA1

      9609ccb0167c7e745d18c50f1c431f60699cefa5

      SHA256

      fb83f94ddcb7f7b594c332a8c01ec00c7f4b90ed1cb7a7fddbf6e03c281816f4

      SHA512

      8fce9e7559c360045b07b31c567337eb555a39de90ab92f9d05c97fc6bb48de7c08f3b6fd0b49cfe1be5d7917bae0f023a25d659963300b3ec8cb7100965595d

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      b28e5a3c50e6a0d387045c8ef1309f42

      SHA1

      0c6ba870a3d525398e344223c19cedc4bfadd177

      SHA256

      9d3b9f18a39f23b4be66548405e13a804427babd3bd73947891146c1d7104a81

      SHA512

      3afa8e5da127d7d12ed88ff08e8230fb1f6c409a067801660b4571298a79d952dde925bde9833580ba0631c96d2cf179c454a9f5d76cef259f9a63d839c82838

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      68bf179691bb87694b557fa2dfe67c11

      SHA1

      cbdece92af984ba4309b26a432a88d21ccabd17b

      SHA256

      f8ed4c136035f5858b741d8316a24018aece33684a5501b7a182353790c791c2

      SHA512

      c92b31bacd10464708f77fc656bc81ba5b7df3ae3cd559db9f045649f64119749c0bd97258648e32fe9dcd2fda094f84906523252de9069ece5c0c36119d7d6d

    • /data/data/com.drnull.v3/files/PersistedInstallation69503745891971182tmp

      Filesize

      90B

      MD5

      133a70b238aa242f684f0b3b4058a156

      SHA1

      fd5bdf585df06757569cbaf4755432b8181b2fd5

      SHA256

      b7eef5287f64d75e324ab8ff9cd60a2a130a64be17e795319807ca3767cd4cb9

      SHA512

      d3c38e50def9c27f1a659cbf8be2bace19acd34c10a6ae6403633d0cfa419158847c18ef94b5f382010874602b5ab6e055983b6faae2cca1751f97f29b343631

    • /data/data/com.drnull.v3/files/addr

      Filesize

      62B

      MD5

      fc5970479cab12a01e46d7384b5dc7f8

      SHA1

      45526b882e90ec5810a20783b9cf966465967e79

      SHA256

      f570d7a650da95850390ec0fa636e204dc9306b8b370993321b478d444f0c557

      SHA512

      09eab1dd13d04eda1374e6771ef0a7529ca9db5163b05b0f4b1ad87a2f6042ddc290b050cc859231cadac7be9cfeeb7e46482cc5fb3fffec71dabefe025ec1a8