Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    463031s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    10/10/2023, 21:06

General

  • Target

    app.apk

  • Size

    3.0MB

  • MD5

    3d37015a7929562b54993d406e720bae

  • SHA1

    1e58a57756a51da823ee46b2dcea3060840a6b4d

  • SHA256

    7e867a85cbf47370f0130ad7f22f848fd32d398ee0966341ad7f72924d88782b

  • SHA512

    6f18b06daa30385159c1d4648a3bd4b2a9a4ecf610e2c3cd26045137678ea96dc0d2149543c2b562e353bbbd16587ac2a8879d420a86475f90b03b0814cc6baa

  • SSDEEP

    49152:UT33kWJCTOgLCrgP+vSeXTuHOne8tf/S7h5luA2g9lKDusc:UT33k6gLCrgPiSeaHOnzoh5kA2MKysc

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4161
  • com.drnull.v3:remote
    1⤵
      PID:4292

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      933b67bd1419f279ab755f386902be40

      SHA1

      e8a88ee4acd4d445fee0ab21f23095f169a7dda0

      SHA256

      865487132386ef195bd5c4469186bafcdb5d40b4952570bd9add78d35c81830b

      SHA512

      7c81f1720231b93c8734f6c34a1f031a9d962d74f5e729c9898c5ede147a33cf1d81b44ace8b9120594e6ad8d22d0d7dc29c1846f458179da11527771ef33f4d

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-wal

      Filesize

      68KB

      MD5

      1abef8cd0728fa71561dee513313dfce

      SHA1

      f054636937c4e4c896c5a75b1c592faac82dd5a4

      SHA256

      f440c9f547ab8fb528ac41632a64b03de1bb6ea91934e63f32611b0c4bd44325

      SHA512

      955b4d976a6eec427e8d2b9f7d9bce4d7a136d88e703a09cfa5af500c157c3d80cc43722f821c6e0e1e1bcb2b7e3abb13105802a42093706535ddddb14573ea4

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      e49a8270f2aabb14506d3055bb19f2e8

      SHA1

      23622e49f85e6701376d5596875e4d43bf83fb1e

      SHA256

      94a557cf46bcc820b2e67480952ee34cb0a5a2647c32a4cc861650a5d123255f

      SHA512

      4c6372264d95ede66ef37d9b3d35d635a65f0162ac8f6d9eac956209aa46498a8448cb1d0e0854e4804109ceca9bf6af53644b26fb8822d91b1552f7d58afc36

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      4338fbfcf84111b1214a7e666498c591

      SHA1

      ef4412cecd43a0d6c3e6850252303fec555e5dc9

      SHA256

      bacd7fe591e052fc658fc96af5e7cced8d00a9a48fe63a94385a54851acd1bcb

      SHA512

      38c820172bc5877ae007f26ec0517ea1f6cddcd4e5efd4d61432eed7eed2f961ae04b6fa94751bb67e60eaff9e7107258414673b171ba605f10954b99c6ec8cc

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      8b03fe47192323b539680a7c130354f1

      SHA1

      504fed43783736aca89779bba15e56429ee3cd93

      SHA256

      8e4889d7ad4b9116dd1051656716498a5031a03b6a0328ae4d96372ef28da848

      SHA512

      19f86603e3ddf3e10e5f1d3f1a1f238880ab37646a88d46828567911983ee9b32d153477b409204e0d0f999168cd2a1030d54d527707e86ab0a82dc21eec77ce

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      dddd695a27f9e0dd2241331b4f7e537f

      SHA1

      531ad313fbc666399e589839ca7ff2b5186d2bd3

      SHA256

      5fb06f7d039cab32913fd0f3ad355e854970752fd676f48e4ef51ae1a8a3b060

      SHA512

      bc9b3dc167bab6816e8f5100b0cc1ec706e61b6c85972cf06d354b98b2482cd6869d8c8dd785d67d4ade1be11ca3aa41728c647a2f37562fd77b7358e4562c97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      860ba774f892b2a3a8e46da1e51a4cce

      SHA1

      453d29883cef97092aceb5d1eca95fcb92b0135d

      SHA256

      a701cae530d4bd955aecde150ab628110aefa751a035f390ccdb863a5a8601bf

      SHA512

      76d4c922244e93de3eaee256405a90f07e48c1b82c12ddf6e99e4202d492683234887f393e1de30d363d6cc7084e2ba80b9151090e41b7d998d50a6067061f0b

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      44a1482afb97532fe0e06262ad86717a

      SHA1

      980f936dab1e4d23300184ea8d6b3a58f49b3331

      SHA256

      efdb1bddc5936a1504075ab8f60ccbd9b9b3d59577abc1ef2ceb3ca6eb90bb71

      SHA512

      f072e5b54249c8b1e2efd55fa41895c07ff81aade9296ef2d03e9bbeaedf8012a8bb3513ef6185e1f1b740dfaa94d629617cb7bb2f4c56633e6292a58f6f4048

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      50847e8e4db7a111194d481d017ff101

      SHA1

      5b9983c560d227f3d072fd819a7cd671ba0387fc

      SHA256

      274bb765f610adff3bb1ee0b571a0039200da33ca5f9e918b7971a831d65e982

      SHA512

      5ac41dce5a2ce0d2faf9cff2837e69d7a47f55f9e8b7569c0c966932d3ad0da931991df183bc7384005e7a3dea5daecf4d2b19baef2dc07688bdc0ae1ae47e33

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      5af4afdea151a56a7fe7c5bc8c379f1c

      SHA1

      ffdac1663abb05c84d8e12da444c1b81cb22f60b

      SHA256

      598854205ef44be63342cf840806ca300746780a5579060a065bb3aeb930d6b9

      SHA512

      733e58ccce3c362694bb624a2946716cef82ade9bdca2673ff72aa7d094ee2d908fb6bdbc6ace37f8cf1b4ca2aeb3f30be85c13ddc1716345ee3a99f8e3a9793

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      615a219c593a8c5dff6930fd783eff95

      SHA1

      6cd3f2d7475e9c0c914d6314cec11231de9035af

      SHA256

      6e14a1aab0cff3538ee2b1beba7454871ce2f33b403f1b333722e4956ba32afa

      SHA512

      b691fa330c8666dbab39b486e1b1b3fe8659349d04caad8d6a849afe773099ff652ca79c8d138763f31b63fb8ef977609fa3293f0211277a99e00ebde4e81079

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      ae5869a2ac112b863fea317ba0e1a8c4

      SHA1

      545b8610365e889f4a3de064d3096a82e6eaf405

      SHA256

      2fb6833841cfadf5dca8aebce8ef1fc167b0dbf1d53b68de4dff4082a50c160c

      SHA512

      a8828565f23c3d900878d18bc189c53bbcfed6d24e64b7b169a9a08722717024c43af9eebc70b62845e9aaca6834325a5eb2849b0c9fcb8ea05381af19740e4e

    • /data/data/com.drnull.v3/files/PersistedInstallation367609966377141012tmp

      Filesize

      90B

      MD5

      f01e82fdecd52869e9b489d29684c0da

      SHA1

      dd670830c0ebf929f16e9f98e7e1357adc964823

      SHA256

      a96ecbcd012245f00a2ea092f97883a704daca5747ee87a1c45b8d5aa30068b7

      SHA512

      14ba2e8ec6e2d5b4ed679bdbd81a781d4cff607bc8c3830835e4b590a823bde161832d51527f753f2d538189524b476df58dbfdabc3d73b4a7ac90c63620feae

    • /data/data/com.drnull.v3/files/PersistedInstallation3865721856527219631tmp

      Filesize

      567B

      MD5

      c1baa43cabe44c00a0c1178076f8717c

      SHA1

      7cd9cd3e09e9d21eba6bc95e6b0a86186e79a3a4

      SHA256

      db4a7cd297a5daa5f059fe828338a47adb7f2cb65a639021a7046a8c956a5053

      SHA512

      baf366aa667900682fefa086edab947bf48bf0840e0871e4e7301a19dd1cc0f5f47d955dfc3eb0fa51996b1e674cf47bba47a002feb4d6aa98b515bd11fb6f74

    • /data/data/com.drnull.v3/files/addr

      Filesize

      60B

      MD5

      cc05049ad2473071cea7e12fab62bba3

      SHA1

      352ce76a9b3877b1dec85c028893862fbb7ae32f

      SHA256

      583d6ed570adb450edd3343a43d7e9d5dfa289de555fa6e198eec3aee3542ff7

      SHA512

      05bd117edb054269d31108608606ad31a385d71e9aebf495f8a5558b7270326ac00a1c4cae69df85a2546d849aa69469dc1359586d6ee108886432f4ab22552f