Analysis

  • max time kernel
    487871s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    11/10/2023, 04:49

General

  • Target

    app.apk

  • Size

    3.9MB

  • MD5

    70f26c3f671e184e93be41d1667be678

  • SHA1

    4679a06a26ea214c69397f15fcbba36cc9ed5623

  • SHA256

    f56393fa50072784f053fee70898b54b4c28d4ce9cc1614cc3e6bee477e69e4d

  • SHA512

    fcbad2a3f97092ae25f056eda2980b86b5a8f30a9b9f9c2635042f69471abd27a0c7a21110799616b9fb883caccdf2609f76362c015f64d34f70a0485ab6cdf1

  • SSDEEP

    98304:Wx6woLwow43wmJMQu/1p/WTTeu1gLCrgr:Wx6wW/wWwOu+p0

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4187
  • com.drnull.v3:remote
    1⤵
      PID:4305

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

            Filesize

            512B

            MD5

            d54cb475a69391ec10024620a0f55f65

            SHA1

            dfcc46bbf133d0de5d48bf7546fe92824ec12b44

            SHA256

            3335ca7c680c9e54e8b8c1fc4f7f00797f441eaa52d1ee24477b32e2f184cd97

            SHA512

            6e50598f4ab7ffcca9cfa56383e0ea72cdd49ea378b577d7dd426bc2922fc7d897fa19afb6c5505b34996499f3a64efdfaaa9c83bfe6873f3f9aaa799bd86252

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-wal

            Filesize

            68KB

            MD5

            f5283134d9d881a4431535dc42bc0ef8

            SHA1

            8f2f9101c9ca175a33a953e38da5172e9662cced

            SHA256

            70cefcae9c38027d6beed8fce52789c348821b1c9dfab397070770215f78705e

            SHA512

            1fbbe5c1a6c4a8d9381918268bae743355d24dda33928a65214703a3da54defa54d95684ee6bf00db8ac243aca366ccf1bc04deb8d000da0645577b1e33106c2

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            12637c737a18e6ec8c7da894ea76c040

            SHA1

            a10ad3cef9c1655e64f78d07f833bad922b56611

            SHA256

            fb2720dc3dcbfb8faf8a5e39206b0a4030f1d5f2942252b3bc0d4dc405553d93

            SHA512

            ab8707e214dfa1e93815efa1be3bcb43a2bfb35e84281f2eec10d125a3795327752d3a42de70c9316602d4cf15a1cb74295cc62d35de97dda2087524bc28fa50

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            5cebfd66eb8c8acb671eb4fd2c568cea

            SHA1

            9a8020812f6012ef64a070e2540e99967309d52f

            SHA256

            e9ebcd91a9fd6c5b0caa42ac1ac58a4f7b5253f12941a033f5ddbdfc3729f856

            SHA512

            9bde523cb8e8e035fad1980b9474b893b74f76ce67de67ac71f006931322ded2ef272f363c5fe44a34711f1c73c517422a647f8c00e272146d1545d125cd21a2

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            fc3dfbfcfabaaac67bee9e7197de8ffa

            SHA1

            768ab52213b47c4c81834d8c649b686502468fef

            SHA256

            fad39e4ba385299ff80189067dd2f7a5c1fc0560b8dbee182e911d180233d2ff

            SHA512

            bcf78ed6371724036a64c6d6d6d8eccff1f51495d156e9927fdf8021573fd5de0d8f3ff1307ad746720c00e8f8e7bb7452803f355f5d952f9a12f97889f1566f

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            dddd695a27f9e0dd2241331b4f7e537f

            SHA1

            531ad313fbc666399e589839ca7ff2b5186d2bd3

            SHA256

            5fb06f7d039cab32913fd0f3ad355e854970752fd676f48e4ef51ae1a8a3b060

            SHA512

            bc9b3dc167bab6816e8f5100b0cc1ec706e61b6c85972cf06d354b98b2482cd6869d8c8dd785d67d4ade1be11ca3aa41728c647a2f37562fd77b7358e4562c97

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            7237409e0640cfab7bdbd429bf821a3b

            SHA1

            4c3da934842f8d4835dfe2a9c275a300e5123309

            SHA256

            5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

            SHA512

            c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            3e114e6e2213648a7fadd6f9ad9876e4

            SHA1

            54da4937726e3a60c6eae3f979f74c39a6dbb166

            SHA256

            a0679481591f83892ea17de7d7f47f27a3b06081e5b14ab0e9fee9128fa85056

            SHA512

            4ab99889883a7b94d4ffadc4be714e7bcfc6cca3c937c3af7ec377cf05c9007a679d655097060419662c3d1f30b0998896994f0e646b8e61f2eb698b847b4f44

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            36KB

            MD5

            36c07688fae6900b32e7e69f7c0dbfc6

            SHA1

            ade4df05f4e604520894d5ff20180107b8ced21b

            SHA256

            756e7d7f7368cc265d19d82091f14e6ac5185da158168c04f40fec151bf51da4

            SHA512

            182d3cf9b59fdbb4ba460a3d96a3ceeeaf487f9aba5d528fe17090cb3f063f8f5760ab4f82fac2b340039602929401e321d730a0a2f2798da903a03ab5c09630

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            3d44c3fd3d58a244e6bcc65d655bc516

            SHA1

            df57097a5daa95b74c4a62b2f5334b08b76a6a71

            SHA256

            a12cb6be431342699af98bb0ca32623f2fc57de079bfdbe33ac41f54ac9069c6

            SHA512

            3b15968ab19d4135ef9c688e934049e42bbec11345df73bbc1a5dd87d07c7a0407da38aed540c4f8bce8d70e72bea4b67d80062507f57ee7a71e0e4d2c68cdfa

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            8b11d8f4aeb3576172bfeb996b4bc7c1

            SHA1

            0c178049d5b7a672c4917b86ae82a1959e080a77

            SHA256

            88c99eda8d73e58d23c0facfa49d0844630d415884224e082764faa628bc3670

            SHA512

            06da38585055987babcbf55deb4d7d26a35cc82ded7ee729d9588282f4da40af4e96ac110a5c6f9a18e0c8191fe14b0f6c3206d944cc21faa51dcaeaff853a51

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            58299b397d8a22ca257f356a86dc6c69

            SHA1

            5268311ed05f166cd003e42e8a76509e534668f1

            SHA256

            fce748f59366b5ce2f2228e6249374fbf051419abf0206642a78b01be9ae18ef

            SHA512

            1b9cf4242b2ff64d357e9bd9fbb810f00c2057eed897db58a8c78017cfe6ce5dd70f7ad7bbba5f65c74322f67d2687db6e732268a5537c0356cfd7748362c562

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

            Filesize

            4KB

            MD5

            aae9e3fc7517dfd15a37bcd635f06ae7

            SHA1

            dc97ff2fac0bd18470daeabfd762d9060f8802bf

            SHA256

            8a199a3a6b7111941d2ffe78eef50a17558f4f83e7b4bc38b54148db581896c9

            SHA512

            26c77a33e1c278fa6c753fb80cfe06625e0543bbdbb05f0bb034f12a801e45520be3b18ca2a889eefbb7b6bfd5c64cf58639deddd950bc7a1abea4e82bc7f045

          • /data/data/com.drnull.v3/files/PersistedInstallation2509601920121006997tmp

            Filesize

            90B

            MD5

            6067b9b133d806e7b408e8b1785b1cd6

            SHA1

            537f03be1f71115f17826ebd98de0ca651e91e23

            SHA256

            036e12e4698aed456ed44c256d9cb5ef42c287cd2619423b5f52dc2daaed6309

            SHA512

            b8ff376f57985325987a286b9e597d68bfbfd9a9a5a4aaa4b21f79977ceab391478233e117713e6cb65971547e9032f571e8f1f989988f2d3a769268d4ffb003

          • /data/data/com.drnull.v3/files/PersistedInstallation2795196006829943tmp

            Filesize

            569B

            MD5

            3a7a2bc77edb8c2b5332d5eb4bf8df0d

            SHA1

            f5826ef2e8b05f5fd1215d6c22b034710a0ebe46

            SHA256

            ba8184d6851b109a2928ad236a528887deb0ac6a3943b6246213623a65fcf204

            SHA512

            c7dd90b9f133ca2f17252641074ff8062a1738da63b02d3022a03c7ff2bcd9d03adb8f61152810906f7c9ac63b852288c6de2ec6b5c488b9b9979f14f39082d1

          • /data/data/com.drnull.v3/files/addr

            Filesize

            62B

            MD5

            07e1f8ac100fac9388da89731af57684

            SHA1

            077371cb36976b4a46b8f9abc0c915d6d0ebbf07

            SHA256

            dc1aa47a64f8810ab17654f733273704799f6abdaedf50804141c2495139fb75

            SHA512

            bd2945ce5d9f4a30ad4a1743d4cd52137445514d9df9f9c895330916c5b1c9dd962b321db3f66d0793e045f3732781f7ae05ab88d70f37566c8111ee04817afe