Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    463046s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    10/10/2023, 21:06

General

  • Target

    app.apk

  • Size

    3.0MB

  • MD5

    3d37015a7929562b54993d406e720bae

  • SHA1

    1e58a57756a51da823ee46b2dcea3060840a6b4d

  • SHA256

    7e867a85cbf47370f0130ad7f22f848fd32d398ee0966341ad7f72924d88782b

  • SHA512

    6f18b06daa30385159c1d4648a3bd4b2a9a4ecf610e2c3cd26045137678ea96dc0d2149543c2b562e353bbbd16587ac2a8879d420a86475f90b03b0814cc6baa

  • SSDEEP

    49152:UT33kWJCTOgLCrgP+vSeXTuHOne8tf/S7h5luA2g9lKDusc:UT33k6gLCrgPiSeaHOnzoh5kA2MKysc

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:5001
  • com.drnull.v3:remote
    1⤵
      PID:5133

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

      Filesize

      56KB

      MD5

      558fea96768322be4e2904a7c76d1fb7

      SHA1

      f5b84631286c45ec45899432dd87c27a82449458

      SHA256

      6bae5e05864f1edcc5dbffa76cc636bb3c2593a669c3bfcf5eef715246b35aad

      SHA512

      993f3ddc93def1051cd961c117611984a5eaeb65998fb78210ba40868a99de788c31498ddc144ed776c17ed03910835e3593cf5fc3cd0911e4867f29b2dc6705

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      91fcff3bfa26b0701fd42d8141fd81d1

      SHA1

      20cf7690256d300eca18bba076d2ae915fe49234

      SHA256

      6392cfd65b9890c2047b4f5ef5a9aa6bf5cf414d7bd0ad982fc04b02c2876343

      SHA512

      2d7e0b92be7aa5409cd542f8c7ecad4f0d159c33c555b403bda89afbff011f39c4ba1a7e2b1583e227b042ca17c40c83a15007a60826e442dcea50eece10843f

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      8KB

      MD5

      de5c68c6bce1356bac45b2fc79f42ebb

      SHA1

      30d642949be4cbece151702ea6a85516b3377cd3

      SHA256

      5cd7cfc3eeb8368c626b63de5f8f6f94eebc6f7a04f04e6a18629a3ded741f02

      SHA512

      8e9a472ddc549d06fe44e01b8bfc5a43340a5bc6d201429f9b392aab2d910279d88c69d03e120b30699eac230ed51693a5f6593edc0ee9ea7d326c771d1ecbef

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      8KB

      MD5

      675f2f77028cedcc44e1f095b71bf42f

      SHA1

      0232de4ea278091eddff4fdef9da7fcd3f3fb3f6

      SHA256

      408f8284eb0b8a407731c66c356494969721a40c3e930b7dc3cfd57986045eda

      SHA512

      700b78d2fa816d6b3bca35e635a5a9b0989d0a8d43d7915b023c29974e3b1a1079f39bbc131bbe9a8d248cfd5c2fcef26b8bc606c958da1bb7381f23ae7eb322

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      8c417fd349ec6ced2a57ab1e84ff87f5

      SHA1

      d8239d79611c34997f80e7524f107ffb9a8ff074

      SHA256

      51d979d56bfe984e37d73428c0bbbe9280aafb47902b89e8c6899b736f006883

      SHA512

      2a067dc14ba6aac8bb5d16ef1c022b910aabbde6bc592203264a61b0244edfc2538472ea53dc0457a0c37741b893654db47e2d884a552beeb09cf7ef76e34977

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d8a0022fea8aaf648626bdc0db2e02bb

      SHA1

      6249e0401bb9083d5c50a1c27c3539c55c3a4f9d

      SHA256

      b8951cb846892e27a1872c259d67f7f3e7d692aa5bcb79a61781c7cda29afad9

      SHA512

      b78b3433c56b9d1e8bb3088f0629293138540cd085e770c4015d2a9a6f2e0ddff84ae2db582aa088ef446c4c30423221aa68a03beb3560a9b1d69bb2dfd28d6e

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      0bcceefe6fcd1e2b79ffae1d1b17cf87

      SHA1

      a1f8f4e483af757cbcceb9034e8b36decc19f26f

      SHA256

      00719b54e060c62fa2ee889a914f7204fd8d355b0fbf0c9d87007f4705ac256e

      SHA512

      ccc654705996ca16a639a4343450295c381bdebee935c7bc2b44878b851b6bc3cbc624248c6422c36790092716d7a59b7ee1be0a8a4daa9d04356da4df7c3a9a

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      acd7b692111a87c26190dc5e07076d44

      SHA1

      7578cb5da5ca6871d15559398a3161ecc598f5d2

      SHA256

      e09289f3661c8f74960a6245675066a6a8555fb5778a4d4a29edfac6f16acbb8

      SHA512

      9f9b41f3de7757ffd6c4e48695f46b0537e9b86372a6fb8cbcb5ced05dedc81badaf218bcb414ed2ff0fbd4ed13d4d7bc0bd5c022ad3b7b37c87b0d94ce7eb97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      945cb927173c5b98c79dd0a80b39ab6f

      SHA1

      c05d5e13c7b4d686b0ca54961499d685477fa5a5

      SHA256

      7b60e55a069d1ce2f0cf6d0bf126400269ee5b2caca1de55f483361b59981469

      SHA512

      121fd85c561c304387a69cb3fcbc2b09e947816acc8bada3cbfc88839718d62c1c123bb2fb078986371fb98ea937986b63282aef2c86a4da676b601842cd31f3

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      75d964279222947b4d2c1ea08a9ab1da

      SHA1

      7af5d720a4bb2ee89a655f85ea64a260b704820d

      SHA256

      29b36ce7032a080313fe73b4a1006aab7c039244dd96be0c98d201862072d356

      SHA512

      ca0ac6dd5bc9895e43e301d5e00d34a63e25efbe1028e7262e58d071a9d648a3ee2094ffe1c8745f994c5dd9d234c333db95b6d4518a3570e87bdfb9e7dfa069

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      25444b197f46912ab2c1b77da9e07dbe

      SHA1

      5d5a568c0efdd60ced12bf648214a6c51bb66a2f

      SHA256

      825ae45678a4c922ec2b96d3da55fca47a28fbf4e0a324a80e92645cd4743d66

      SHA512

      3a0371a0a58739be980076425dbc5e3d78dbe6463060f542bc9fca2d0df8b5dfdcd7ff5a7e8fbd322284227802d4d89af4c8ed96940f1510f9286ec8b95fae5a

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      eb72077ef0e6470d680722c9cb7c80ac

      SHA1

      dabc5d357f2673f463b26c38aa69557ab915a287

      SHA256

      09065cf95bbb8101c3d4611334e6dbd591a36925c1e3acdc131f1bb1755e1798

      SHA512

      ac1ca0fcb3a6cc81e2acbfab98b9ec388331e8ba2b9940a1ac4ee13a36b606278d09f66dd1b5b5256fb01a295cd75c7e23c6d7395e5accd2fe5aa01d9401df9a

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      124fefa79485a12e7027679f7ceb294d

      SHA1

      3bd0edc10cc3a3e5e49095ba8ea9f52447c3ef32

      SHA256

      8a0262ee26c8094515fe03ba792bca14c15412a21537b944984320c12d901cac

      SHA512

      4d0e689ca25188a86a9e4c252ed41a29231548bfd1470b548fa659afe1743cd8dd1b82c94e2eab01eb5daef95f7d5becdcc61c96ecd2eeecef4f92c85b15e3d7

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      e0b48d474c07c43b1f57a5cbe5bea8eb

      SHA1

      844ba45b4abb7c70b2833ef19e23b6644a43dd54

      SHA256

      0e941e68aeb789f41e62197febeec4b5216c85cdc9ef60d152ad9d0f15b4a22b

      SHA512

      435c5b980b0cb41946268eb248790d0f19cf0a0f2717dcd5e62ba99d98d596023e1e7fffbde3becc6baad7cd18b4e4d3ed8713aaacac1006fbcd44fb3c407c11

    • /data/data/com.drnull.v3/files/PersistedInstallation1579875010335481198tmp

      Filesize

      90B

      MD5

      7e11e146b12ef6ab06a253a9afe0f710

      SHA1

      3d0e47b6dbc7bc538bee9ee2f6601e09c0bafb29

      SHA256

      a594f80a92784bb843519c6de118187780d719006d1d9401e866f3034a68eed3

      SHA512

      d8850967c60c0a05f90cd520c1b420b44986c7eb317b40d4fd16cb75e81023022837e567f17b1c0d158beacb2fb2d564d13dd72a51d2863586d7b074eda4a12b

    • /data/data/com.drnull.v3/files/PersistedInstallation8798767005063937218tmp

      Filesize

      569B

      MD5

      d589a68e11b09ad74eb04707591cc91d

      SHA1

      8daf8a05c3bba535b3aef9b55474aa0a02503f71

      SHA256

      bb62ba8b49f344a2be780306760d6523ddfb6460e9808ec6d5a3017de134bd62

      SHA512

      5a9b394589eac6bbabfc3af32c29cc87cd049e275c51359dafb6f319e7f4319f46e6c5527a257a22152602e32347c2816fd06ad38fb3a525114090bd5180cc78

    • /data/data/com.drnull.v3/files/addr

      Filesize

      60B

      MD5

      74d79c6df1e153e241c5a3e5786922ce

      SHA1

      5c254a35982975a4bdd56f2b02c79319524bf59e

      SHA256

      507da8bf7613913ecb894b6b16f9ce710678d1abbd91767c7f40861408ce7006

      SHA512

      02912750aa06ba355b29647ba98f3ab0855a31bd07de7e811cdbff8e2dcd20c617ba19747997c3d49f0ba1c95fded662bae970935e202575ff75046eadad41d3