Analysis

  • max time kernel
    499781s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    11/10/2023, 06:17

General

  • Target

    da649245ac128a4bd87811e7a8a83609244925ecbee3f919d1c2da047aec860b_JC.apk

  • Size

    2.9MB

  • MD5

    2b429cc2c9445ec8780693cb55074b29

  • SHA1

    1321ed34b77470e913fca0704c996690a0696685

  • SHA256

    da649245ac128a4bd87811e7a8a83609244925ecbee3f919d1c2da047aec860b

  • SHA512

    f77ecb9dd5be32f7ad0f0d0df45584f46035656c8ae03a4535a00bf8a1fc668aac83271bb4dc85ce07c9c83b54dd6ad1e16a6cecae815854a89af721f070ba7e

  • SSDEEP

    49152:M4B0V/VIhnTmohRtrTtSVOGqe0uX3fBZ9p+8gLCrgcORr5:MQS+Tmort1SMG2uX3jgLCrgcM

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    PID:4664
  • com.drnull.v3:remote
    1⤵
      PID:4843

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

            Filesize

            56KB

            MD5

            b5ec18f74c775d8c0eef8597c9abeea9

            SHA1

            7ea835ab3ca73fbb83d210e66ac15efd544ce171

            SHA256

            3f436723ba8d48048de7cbbfdf943f83aa991bf418b975ea85a2fc1e6674c6af

            SHA512

            1cc49a441cf498cb47ece5f2a0837d13a61f8e483d5dec38e9f81e4f481b8089d621ef64943aa33180c8d4c29debcfbe40876f4d925ccbd3178194b85b712edb

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

            Filesize

            512B

            MD5

            1b819e401cb2a17a604076f9ea16029c

            SHA1

            4b9c1df35df97bd1e7ecaec68232ff386b5dac25

            SHA256

            8a45887ba4e17eb532e786a817ec8ba8df5491435f3b167855bc51ec0af99990

            SHA512

            741a0c318c7bfe35511dbedbe25561a32a6fd9a43c79871a5f2ec493c5b621c28be26af86079abf3f85e3995ec426a6f4e45f15c2aeb4dde098cca2ef76ba817

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

            Filesize

            8KB

            MD5

            c324dd0330ba2c203dc42f4389af5e90

            SHA1

            0d04cab9e1a6e5a6deb337ae41779ea3ca8b5751

            SHA256

            d688d83f8b056f24828928be2eac7481eda7a76d070dcf23ac381f468f30140b

            SHA512

            000c84b7400048d1a0c45544a9bafe9745e7c661d76b07d55cbb70e98201644ddf51da6f352d8b76f89f0ce2c3c921b08431b08f44313a8afadfd4428d855a0f

          • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

            Filesize

            8KB

            MD5

            0ec0baaedee930c40853511ccbbe7abe

            SHA1

            c78363dc607a69c18caf9d179fef32832a85eccc

            SHA256

            33d462e3fd6d3f82792ad3369ea629f8f8f01bd89e4603e65e2a4a8615e37ce4

            SHA512

            14f459017908658f6bb7d56a2fce3d8e33a56f19d703302d52fe14281f5bc8346a52a0b41d77e6f6a21f96cbe6ed01e40a2afa8350ea1a64495d5f313e972bcf

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            d9cf75fdd1c2292d986f6c3d5d60f2c8

            SHA1

            07ecb1d3a26d952ae5fecf54f36699ab498510b1

            SHA256

            2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

            SHA512

            442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            67acd68dadbb1a45f3a6e35763317130

            SHA1

            27d5a78c9595d9bffe9232a967b987e7dcd28b15

            SHA256

            48d5af4dc7d94904f74cdddfaa4ef9b1ebfec2b1d0aee78b74f7940aaca9d5a5

            SHA512

            16791d2aee6c2e1f521469e38cd0f957e958db0c8367980746a033540aaf9055ef1f0c736b28bb073a95234e48321ce0dc68f6289151eff6265f42ce28372170

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            94e82bbf520feed3211631c04f3881b0

            SHA1

            1eafbcedae66e19337b4db9ef42c95f87ae27ce7

            SHA256

            9e69f0e8e194ae03a915dff7470d41c374768cf1d86d13aa27b4be6276aab5d7

            SHA512

            069409540c1392b89e6771fd9bd09abbb8864856d8142ef7ce78706278e7a732e351bbdc6dcfa298a08a00b0cc32027c90d6aea4fdfbdd1685fcc1b082217fc6

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            e7338240eeda2857c87a75c1041eb3a8

            SHA1

            aa3e06cedf216183c1a29a707c03ef8dc52ba3f7

            SHA256

            4f0e75348ea5c0046ceca354b52c96c65efc94d7d03e3af4868994487210718a

            SHA512

            7897e283508b2781beffcb97e494b7b018dbbe01916b5bade3e31b036cb27aa078d2b8927ad820926a5e5cff409bfd034b06582f4f9263d47c8727a76aecb17d

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            db68f26dd49759d58020259b72ae0e78

            SHA1

            45671bfdec2b9e3ecaa6765a1be07582f7c9c630

            SHA256

            a1729e4215682dd9f1310c9274fd42b6241405ed6565986a343f4d790f2e9643

            SHA512

            c39bda0cbd1c5a196514ba2c433c839094898e184c1d6a9cd8c23e515f789eeb6bd602397b1e8085b550a9c376960ef8252ae4f90e4b0f44450d162e002c29dc

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            818548be1885386cc995f564f36a8e8e

            SHA1

            008b0c602ed55b1122dadfb3a20db517d55c10b3

            SHA256

            b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d

            SHA512

            47840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            9f714af1e434329973adad5ce07c3cbe

            SHA1

            7003239abed2c7570030cd5d840b4080843672ad

            SHA256

            db7b0039743dd0dae91aa42243e411fbb44252612891ddb52b6b1c079524f2e1

            SHA512

            ea346b48f60a503579075abf5dbf6680cfad9cc116ddf63cb10603997f1bfe13a44ed9c79ae4e85a49aa6d38bcfcf2c8ed8f13bf1d822fbe138b7a749ba84e4b

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            dde77bd30cfa95746a7dfabb4e141daf

            SHA1

            e19d459576c12b9665f326e5edd9071ebc1ce845

            SHA256

            ab39209aa6321d22a5c4b528306f81b33c046f5213fb624d9cff607dcafa15d8

            SHA512

            6f4086c1e349282870e2ca004458732dc3c540c1b197df3c7ec2cfcb3bea89b6416cae0f942e3d70d7e1cc4052886be41ce3649f27bbd8347f277fb885adc199

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            4KB

            MD5

            df89ac3c60e9b5c771ef75b2a93607e8

            SHA1

            a0fcb407ac6e9777e2062f211d22b17f5704267d

            SHA256

            21345b973a9b02de2c42706809ea29689b541c37355f23bee87f2aaa608fbb18

            SHA512

            4353ce78864c60985f5b3beb8be1945d0887d81a7e58ef584017d6a483a5e3d80fe07759fd888bba441f466ff629c064244ebec9a08c6d6c0926dc1d5deb18ce

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            eca859cdc0b6a18107a5f4d0b5d86127

            SHA1

            61af225e78562f0d837f9675b87e2ef45993a0ce

            SHA256

            13ebf66cf21e149a86a4148cdc62af3fb830cfeb117fb4d9b14b10b8f0380f8b

            SHA512

            a474498173e09c21695bad953e0473133f021db9ea93467b4ce06b110213b1522e49cef8ce93043941513399b2aa04c26afe2b7c71f7ec89bd62a43752438670

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            090af11533f5a6865821ab497c849ab1

            SHA1

            304634f83d9b31917e080215862a0c3b5d816976

            SHA256

            1f221fea2731a817612f444dc50debb371105d673c1c777d7fd1615efce42f47

            SHA512

            803aa5b87184aa4890553ab33aaa8c3aecc112f56849ef4c0e7d80bd42f9dec2989ade2daeca5a8626b1f776d379d0badaea093ebe147bb6ddc9113f699d2a7f

          • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            f6cc3faa27d9818b36e5e01118fddafb

            SHA1

            d0a61e0467d497a6320c5fd5c5ff5410029e3223

            SHA256

            f1477117c9dcedaab44f5783b0ac0bb7d77c938bfd20e56dc73d5c7f64e1dd00

            SHA512

            fadf40902f86baae5b32e755795d639ac8261344abb1ac0d1dccff77881ed7b4ac85fb171e5b24104bf99adf399ffb0563260aee9a43b2fac215e9db23e8e1e1

          • /data/data/com.drnull.v3/files/PersistedInstallation226007062608677229tmp

            Filesize

            90B

            MD5

            e790ea2dc22fec61f14518a9b1836378

            SHA1

            716746ef144af8b39f9489cbb87213e2ea4e265e

            SHA256

            15ceb11454e342dbaafe7b072b0306c32bb84d7b81ef6c103697d614c70e6e8d

            SHA512

            07b6f9467585cb675b496031366519df59d73bdefa09ff88daf947ae98ce09bb6a96e0da2ee452618dcda5c01d591f1fc3925de0cc7caec785a959410299d410

          • /data/data/com.drnull.v3/files/PersistedInstallation8264628393340926195tmp

            Filesize

            569B

            MD5

            223b063bd80c2fc2054c7abf2c5c76fe

            SHA1

            e28ae1fd3efad605b3e5dbca6327cb5a0baeb7f7

            SHA256

            c736d652e6b916a9eef7ace41685af6d47167113934d8be0712705130fb942bb

            SHA512

            7967a52b6cb8d7f47d66071ac8c761d36184234a78f9117ff1410fd730db75645afdbf4f50f92ba218fe7e7a46ab92eb81363c36a3b4a4117795b016c57d899a

          • /data/data/com.drnull.v3/files/addr

            Filesize

            57B

            MD5

            9d09e63153c46b4a2954f73b814f3892

            SHA1

            946e091fcd55ccdf4cff92d8930dd727b8211dda

            SHA256

            d16714d343b4fe0d8375df0b945f49e220cd959059c47d5686f30d7b4620221f

            SHA512

            8edffa2f6f44c2217287e413ac15f523cec8bcf9d6dea0d28079b608b9677608fcc3152071d29cf720c519e4903da18f716b20e2cc844cf24438318fe7c9edf5