Analysis

  • max time kernel
    4129535s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    03/10/2023, 15:23

General

  • Target

    eee99eb60ac8a96c365def05851cc62ac21e8286aa78b68e600bcea41439e33f_JC.apk

  • Size

    3.1MB

  • MD5

    2e91c389bbe8580fc81bf33b5f6fc218

  • SHA1

    c83d4809bfaf9308d679b742df8826d43cbea129

  • SHA256

    eee99eb60ac8a96c365def05851cc62ac21e8286aa78b68e600bcea41439e33f

  • SHA512

    ac8dbf24d19ae50bf4d2c8be54b574e374e58809e2e411854c0bed09da5f0a2764ba9fc2a03dde27142029a3a73a2f846a7141711a7fad5283164f25da003713

  • SSDEEP

    49152:AsMe1DzwEpQ7xAxm9YO+9yZNjU9WwFjnyryd79p+MgLCrgnDr/U:AsMqDkv7xAxmJ++NU9W+GrAgLCrgnk

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4165
  • com.drnull.v3:remote
    1⤵
      PID:4284

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

            Filesize

            512B

            MD5

            2dae4032b294081088317db6e899bdf8

            SHA1

            d7a73cc5c58fb1c606aab92bbf1b8e11c2fc5951

            SHA256

            be4e13c262c2537255015347e59e41d0f667b827c4345a9e54c50feefa559c05

            SHA512

            3bff8648eb00d2791daabbd251e6cd7354ae53122912eb39cf60f73f1631cd41289e4cf9cf1b3aa46c8a1480d15d760f55c989fdc5e3f0f12b66f07012758d6d

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-wal

            Filesize

            68KB

            MD5

            4fa2f02df26239efee91dde8fb12016b

            SHA1

            f6e2da8d75de0014efe6efbe2afc48c11de31ec6

            SHA256

            7cbc6aab44c64f2afb2aba974a2943b72317b5547fbd8c1420dd9b84801fde43

            SHA512

            0d8b7d9b7dcd247423f6f633db5861dafa488bd815d7401ea7d04a567dcb983572bc583422878e836e062093d6a2868ac26dc231824646d14ea33a5eecde1f5e

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            861141a39daac9257850b4342878c52b

            SHA1

            c6a4afa30ceb60c4e9bd3568af70b1bba78fc600

            SHA256

            8b5f6619623030b5f0f8f31ce76b8282154682f2901405f1dbfe7c05f254723d

            SHA512

            db5291c1a4d02592d95b8260e1664c30646a94b1f3204d6e7e98ee1d3a4325a852e3f6e541ae245eae5ba8ae445c3d6e9af01d76355c78ad9518ade83c1ed5b5

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            bcb8c46b427eed995bfd5eceb4008a78

            SHA1

            cf9392fcb60235cb3d5e543a370649cace239a5e

            SHA256

            f05dbe9944c1f883901dbc50002ddf6f94b999a7b4e80b531739e3ef4ba3e067

            SHA512

            7c466e4e78ebd94184041d3e2de0476863fe0db0b59ed311d09c74d1b3a66f9720849ce382e3e145352fa447c387def08cdfb4b24323648c03675ae10e4d3066

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            9c237a06f13ac9fdb488ce282dfb279a

            SHA1

            c0f7775fa03b20fece5e19910eb64f8293b7ddfb

            SHA256

            9e7411f5174d525f29341a0283051c9fc19a49f741e8f7eef139a440bc64bff0

            SHA512

            5d8c283c41db8da4da0ec016242c77207f8c160c70f82b301a7d1d4be3f1d1c1dd6ffb63671b408a0ddec0d9e20af766502970b10794688f81c5bf8601e4ce49

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            dddd695a27f9e0dd2241331b4f7e537f

            SHA1

            531ad313fbc666399e589839ca7ff2b5186d2bd3

            SHA256

            5fb06f7d039cab32913fd0f3ad355e854970752fd676f48e4ef51ae1a8a3b060

            SHA512

            bc9b3dc167bab6816e8f5100b0cc1ec706e61b6c85972cf06d354b98b2482cd6869d8c8dd785d67d4ade1be11ca3aa41728c647a2f37562fd77b7358e4562c97

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            7237409e0640cfab7bdbd429bf821a3b

            SHA1

            4c3da934842f8d4835dfe2a9c275a300e5123309

            SHA256

            5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

            SHA512

            c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            c8d4c325d23fa8576d7575606ef310b9

            SHA1

            d95f2ae8a19c2a79bcb95070ee641f012fa17a83

            SHA256

            aef486c829921602d704f846f3f351e4d86582355e26cd30fdd1e474b5f8769f

            SHA512

            79805a0304401c0653b9612e53609a86b6594f5cc570c4145a45ed01816360e10c1ad18ad333b9f192badd1f864987817231387130ac186c4fd560d187f72f8f

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            36KB

            MD5

            fd05ebdb47269d611e5d571d13753967

            SHA1

            6f5325d2212be618135de67725584a11afa10c62

            SHA256

            6edaa8aece0a48894db7d2fff956f5ee6e4b2e1aa04ba79ac6f550657bf416a6

            SHA512

            f2f6f1f89e158349039d094f3d492bb029628d97cf436157bf019a09159cd287a00bd9f2f0db14013546b5614aacd431b2ac1b99a62f69eb46baec7bd4f50f84

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            34b588451b868868768242d48c94cc5d

            SHA1

            ed09817f286bf639210a484080e557e67412358e

            SHA256

            6afcae1ff2ae77ca60f23ae3b0bff716777372209d4f81a44aa7ce90ea90c542

            SHA512

            7eb75796b5c52e038b62072ed1d8e3f6cabfcd7172b9b72eac6c97345e7309cd73201014b015d853d29ed9f219c15f9c57e778971fe0f117759d8895d419232a

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            80393a0b46653d414314ef601e40f183

            SHA1

            810b0597b6c954ca1370a8b906049a8ed7d3251e

            SHA256

            fcf6afc7194aaa32c593190d40f4f30b4084f31dea8a3682b16eb9e5f6e3cc53

            SHA512

            881f7ba8b01d7ddb9653b9c31d423e02c3274c7d82e3a4b98df0bbae6f2d9284e661e6662163b88bee0c3433eba62b28f472e62264f25e0041c4d1f7214ca9f5

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            f601ce827f47fb683a3ffdd8332853bd

            SHA1

            31767d5dc3847c36194e21dd23c9af187b3faff5

            SHA256

            f927df4c10a9f584a119fb7d0ead77327a59e25b249d5906aa4433a6848383bb

            SHA512

            8eae8653ee27f545188b8e6596027a35efc52ef509600821312ca35868c2db924cf58c3f7249b088acf6dc6e9a479107db3303a3997e261eacfcfc64629b283a

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            c8daf3bc406845bbc19d32968f46653c

            SHA1

            05535503c6fb3efae1545a4d32a2083723d35d31

            SHA256

            6cfbc5ca7c75c96efa417ddad31fd23e0cebefc17f5f9e987bbde94729150b37

            SHA512

            0fddc1870c947b9936c68190ac1a22e032ed3ece7e154beb026c918beaef246d071a1b4d1f70be005c354454dc55adff2af7b348c494af36d96f5ddc2e320fca

          • /data/data/com.drnull.v3/files/PersistedInstallation5074993816101741190tmp

            Filesize

            90B

            MD5

            c54fe2a23feed1b89c8c42764eaddd82

            SHA1

            5a2a1eb4a232db892a4230b76424d8369aa8a4de

            SHA256

            aef4247ffe41332067459b612f8c05cf1a83b9aab2d79f53687e485383f73417

            SHA512

            96ab3e49a18cf09a26d531b1755bc05b858f36276181ff446382e457b6a4bc57542e5f0ec5a5b3743e54232984903f7576ad6b956517eb409e3b492a5945d074

          • /data/data/com.drnull.v3/files/PersistedInstallation5243841295897981298tmp

            Filesize

            568B

            MD5

            4f5e18a663c2ee039539ce2f054774c8

            SHA1

            143dd155be067d2abe05bf301d83f630764cb280

            SHA256

            84c7a21dde434366818c35069b8a4b70758a5eb7a79edf0d1786489f6ca21bf7

            SHA512

            46b10544eb8bd13c84b8f822d985075f69692849a8ee8909286986452750cfc72a3b269b86553b24904a4ed9e19b9f5981bcddbdb4c7eb907d5e1e7058e6d694

          • /data/data/com.drnull.v3/files/addr

            Filesize

            62B

            MD5

            26badd64f43e2c78a418ac949a260cd0

            SHA1

            d9b67ffde13591c501caaf32365e1781ba6a8f2a

            SHA256

            f58addbbbf7aafa288839dc062a949d4746ba3c5af22fcd1545eb131abe8376e

            SHA512

            a421fe36733c0111dfc28816d99d8bc51ea3273f64198a6ca65960a40d6d0dba02bf432451c4d2a03ae8d1d8d21c1bf84a46bfa7ab9fa87b7f05811a0bfe6950