Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    537165s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    11/10/2023, 11:03

General

  • Target

    app.apk

  • Size

    4.1MB

  • MD5

    d02d659287fd132976c73b802cfc2d69

  • SHA1

    ccbf8eeac35664a7db010ae8b102e6cb419840c0

  • SHA256

    457b6a0f7dc8b6fa25162560be8c2905f45b3785b9ef3ac7f09cf0841fc65b23

  • SHA512

    7e12c9943df9022755d3725c254598aa15d5ce82eefb52c71f579ee753ce20a370ada501534833386f54f9b907d09158f284f8a228c2084c8cc659093ac6a920

  • SSDEEP

    98304:/ivCgpGk9exeuEgLCrgiY+Yk326jNImq6ILF7l:/i6sejyY+/GgNImAdl

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4181
  • com.drnull.v3:remote
    1⤵
      PID:4302

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      328acc2e9ce54cf117d6f8e84d493f4a

      SHA1

      d5f2317d3de528f2536f89a73e0e4aff3ed197cf

      SHA256

      7c30008d1a105635076c28feacd04f973aeb6e6f0b3de9851dd028a5f798f1c8

      SHA512

      4be6c3316c0d92791f2377372ebd26ca78af50230e189e5fec6978a4dec8e469b2ad2df72486f0ddfd92f9b002d2468f8ce01c7f41e26ce36ec39609749a2615

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-wal

      Filesize

      68KB

      MD5

      24f1b8b08628fbc87cd8e5bb281dd643

      SHA1

      94747e64dba1cf00261591af6da69bb6619f39b9

      SHA256

      656ee8c0588c4fab6fc450be26a4784baeda08b98ecc410fa48c158758879730

      SHA512

      b3a06e0cd6aeabf351df97c960eb455965b7999f2347a5ea684fe8ebf141021025e95c838c7bb7cc4dc8562e499d11b2e14057daf403725334a35947f61ad178

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      922a6b05ba6cf77ba9f2176c548b9ea6

      SHA1

      06964c023f428025b31b53b4e952304a50060cf3

      SHA256

      b3402c3304c843c1082d1d98eca99e4f9e137159cbcb6202e9d1ff80ba6ad8cd

      SHA512

      cbb7ec8eba4139b698e5b67d402b312ffd833b83125f5b97dbe3a500709b54fcd2edd6a4e9c648e778801b5ebc682a81bbc20f958850f0cb8da48010721b946d

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      65d5652eec07b00dc000ad928acdbde2

      SHA1

      ded95d876f2a8da9541c910b0c2967e24d127fef

      SHA256

      cc2d3ad0ec7e7444544fb22207ba8cd3c65093dfb86ba035ad7a73314d5eb2ba

      SHA512

      fcf27cf02d913246bd9aaa0c7a1239db020b97f70a8a3b9837ba3715707961f572a890d1203ce854f056f82cbe820c1fa120177f20123d6a618a21fa337a5f97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      033bb40822fe360432e96925f4999bc0

      SHA1

      4c4ecdb7059c77fe68474fca91155a68691f8593

      SHA256

      d35745bfa6010ef712dd788fa537d05d2a25b2fd6f690ac3e38ec05baee62095

      SHA512

      14dcf8c7f4172594e8fd0f9261f5ad2c7992a845db8e58c64e9cadf2f88f7d5e4b8e40d0afb0ce0217d18d3f209e4b4cf8bd66b69f3cca2cea1c92cf0ca30fcb

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      dddd695a27f9e0dd2241331b4f7e537f

      SHA1

      531ad313fbc666399e589839ca7ff2b5186d2bd3

      SHA256

      5fb06f7d039cab32913fd0f3ad355e854970752fd676f48e4ef51ae1a8a3b060

      SHA512

      bc9b3dc167bab6816e8f5100b0cc1ec706e61b6c85972cf06d354b98b2482cd6869d8c8dd785d67d4ade1be11ca3aa41728c647a2f37562fd77b7358e4562c97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      c509d37f3767288ca038ff35d30c563b

      SHA1

      f16a071b2123bf49992006cd6f30c5c43045854a

      SHA256

      b527c5594c6faa2f618ffcf1561557d6c7c4d9cd89bd14f8ece5a6f6055d2d5d

      SHA512

      d60c4cb6bf306ccfe7cb4752bdc8470d53032db3515869d0982f935e4119293a41b821952c260688e86fdba56cf77cf057596cbafb8274d6476773b9e40b6d76

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      29d7dc074a1201eae1aaceaa821d235c

      SHA1

      1f483a8805b1287e5f64152d378a5bb8e910c8b2

      SHA256

      4e434467bb37cbc44399312d9dc52fad1df742bad294c1623462b4539570642c

      SHA512

      61d65b1f0bac86e4e2188b960519783ae63c81586e732c1551108209966562421856f68b88c254a70a0345dc290c6fe6e5549a9025721b96fa3c0e5b8fc9f4b2

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      7036e22f0c1e34ae5df7de991e867d19

      SHA1

      e339a9b2425311fa6bc307f9b25c60e5b5dac909

      SHA256

      897a09add00b45170d52a5aa0944c1a1565b4810f4ea93dcf642c7abe34e1b5b

      SHA512

      a82b44e80b21a9f8ff0e9ec44f936d5ed51ddb81bfa00fa70331fd331c097d83a7d16808a351f32a8c71e1d3dd9c2a05b23fd56f3822853cb3773439f0bea76c

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      e6068ff109dfd7a5a352ec9adc3a8db7

      SHA1

      c32f765adb451e3d322523762e023d8a90c0e000

      SHA256

      fa8eec85672741a6be56949af19061422c23fe0477757a7b03b11cdd211b433e

      SHA512

      9cf5aedf9feca7801deb6f58e7993fc1a46aae57579db708b74ae3a499fbc3a0e2ebf8d5aeaedf259a504336693944fbc533d047dd37561b54255bf928239a27

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      4b6b80bb8c737a487619d1076526626e

      SHA1

      435fcd69d799a683e0bc90116a9ae6b12d39fa6e

      SHA256

      557ae0fd0487db1d873a0897ae8bdfd84d314165c85d640a4547ede5f537b96a

      SHA512

      177b68211d0f010c60195765d83519dcb86ed92d71678e364db61b8917472fdde46626af1f7e8d930a8b2e37b750cac09d2858a8e25861dbbea7612f23babdd5

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      52e2976c17f520ff43d0297103ce6b53

      SHA1

      dd5363638bb3ed17f2a687658f647fb314e8116f

      SHA256

      c0ce61a0336113dc1be461f061553996ce5ed95efab16b2acc6605552a8c9313

      SHA512

      1fbedf209f256ec14fa28ba12dae2423c222d197edd698f7e498305e843d1d7f4a48971fbd86431ce05a45ace7393c39b0ca84eb182c81ed6f15f4b4fbbac8a1

    • /data/data/com.drnull.v3/files/PersistedInstallation2118248839249785200tmp

      Filesize

      90B

      MD5

      227e1c261c0a2d1460c2ef5087ff4f93

      SHA1

      988ee1f5d21ee8941ca1c4e4d1483ecec5513ec7

      SHA256

      e09df6fee1ec8ec8db7e0f576b1c62993e16e7cbd338ad446a34e630f2663076

      SHA512

      43c860816c300e381c8d50d2fb6981717b05f618df010cd8634280fbdbe9fa731622f44177559e9564da084a53e8cd0def1cfed7ae80d944eb34a1ab86b3f6a6

    • /data/data/com.drnull.v3/files/PersistedInstallation4316989484680030127tmp

      Filesize

      569B

      MD5

      a7b4137e614b59a77b83821f2e6e8d2b

      SHA1

      c1015834f02e3005e934d1cf312fedd07afc7003

      SHA256

      0bedd382804e8d22eb058a599b7c542d2af246ea074356969577f9e94567eefd

      SHA512

      7c5894e3eb9cf731b97ea305fb3afb53832f300ff13187e346fd056c7a2b83528dc7bce2a4108ed19020e19ff85c0c14036822f85e649bc999f9d20b6db4ad1c

    • /data/data/com.drnull.v3/files/addr

      Filesize

      60B

      MD5

      8fa18ce9976c6ff9ca5658ef7e69c4f8

      SHA1

      b4ac152ad2a415369b529eb6cc6fd731eae7fbe7

      SHA256

      870ce96bfcf0027a8602de20e52e098877b671eeafa2019b4f0ab8117f59c529

      SHA512

      9497492988bedfb51c0175b440100b6696362b5a6ab13da6995c6cdaa758b8ce37ed9d7f4989e56ca767401d15fa1ceb23de73b3b78fc5964e1170e083259ad3