Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    537191s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    11/10/2023, 11:03

General

  • Target

    app.apk

  • Size

    4.1MB

  • MD5

    d02d659287fd132976c73b802cfc2d69

  • SHA1

    ccbf8eeac35664a7db010ae8b102e6cb419840c0

  • SHA256

    457b6a0f7dc8b6fa25162560be8c2905f45b3785b9ef3ac7f09cf0841fc65b23

  • SHA512

    7e12c9943df9022755d3725c254598aa15d5ce82eefb52c71f579ee753ce20a370ada501534833386f54f9b907d09158f284f8a228c2084c8cc659093ac6a920

  • SSDEEP

    98304:/ivCgpGk9exeuEgLCrgiY+Yk326jNImq6ILF7l:/i6sejyY+/GgNImAdl

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.drnull.v3
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:5007
  • com.drnull.v3:remote
    1⤵
      PID:5141

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events

      Filesize

      56KB

      MD5

      b63bc78f9ca6832911f7d4432828d1da

      SHA1

      1c877520cd34add07e1840ef7a2a79262f5a9a17

      SHA256

      8162a122e4278048cdd4a99fabf24393ca7de8e232dc520365b24b923093c50f

      SHA512

      b468e1121c3d3877a40d511e17416ac9d4e92ac30cbc359718c4b603ac1368aa705b47b012b0896836fdffd810e8cac23dc105908adfa960991142b1eedba9cb

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      cb3109977090d74f64f24f38efbb61ff

      SHA1

      d0be4cefaf30a0c1f80cb373ea284a7cf5dd4e6e

      SHA256

      3b94e748ddbb5448041a0216d0a690ae201239020e8af563c0b5864f62fcae73

      SHA512

      7fcd73ecfecfbad3e1b40ec6431cd0dea0da735862ed2fb50ec768b5df3d0a37d0eb552213b8f7a28f8f80bcbfa1bf417c8de2befd3f9dbcc8095f5973cbda43

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      8KB

      MD5

      f373dac21c94f089f8d0de8c832325f2

      SHA1

      eeceb6077a4cd29e896f1573b23cf72c1bd0bc8b

      SHA256

      4105cc0a23694f9569b66677c2b4c4cf5d7ef86d269a8a10e580c2aaa9afdd55

      SHA512

      479a470ba0902731e9d11fa9ec86beee2f9178ba60f1c631041b014d4e54915519754539888e8a34cd6cd2612a8fe1107637cd36dd0c65e73ae9a379a2b48836

    • /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal

      Filesize

      8KB

      MD5

      61363d27419e201f57e97f643b2b42b9

      SHA1

      82c9ca5c4a7ab68517caa689199f91f3f75cb2aa

      SHA256

      548b01ace229ed07d4848f99df1b4f8afb73a45a7d89fcd998730798cc56685d

      SHA512

      a21f047d01c610dfb3c27bb1b81a14aa848d60a9ba4a1fccc0c5b7269d79c7621c3c612c43b33231a1efeae6b297e92b3ccd16f28ab0d558bf6e4cbe25d40079

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      a6124ed6587f2a32aadbf8ca15636c33

      SHA1

      33599c8d6ff4d5e61a81daef29ebd4ee4f8cc130

      SHA256

      7dd6b8d3f0639cb85087dde853dadb7e921b123884407569b0a2dd565b8ba6fd

      SHA512

      83c650442f66a40fc27b4b3f57900d858dce3b11d17ab30a53f58831a0662a3372c3a6948cc5415f7aae9b06c6c6e5b3da48e74497e42a58d390cef5ccd8372b

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      249e533ce115209e904a727d7539535b

      SHA1

      c96c29d88f77e26785ac0b6d851b9ee38bee08fa

      SHA256

      229f51477144fc2f54f2f853014c0441d69db6e7c9a0c5751276b35f163df074

      SHA512

      9f9d6fd9c398f6d9a0de4f6abc0c76974ec731ab59117543af70c80f256955c0718f922d16947f8893d30844c565c5e424ba4f9f26a4c52fccc957d6fef98894

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      53108bbae201c8bb4b63a17e42243b6b

      SHA1

      6a697369e42dcf7d8f9cf063b08841537b36cf74

      SHA256

      0d61ebadc528ecaa76dec87d4418f260a1ca176755455121dd1367df9ab0f285

      SHA512

      b08954c2d15c16a156ce271b21440796f4db287084dee68bc5ac3e1bae2cf005637cc8a0de4b1bc9553ccf70380ef8c2a98c49371e17220e93316099c9c9d7e4

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      acd7b692111a87c26190dc5e07076d44

      SHA1

      7578cb5da5ca6871d15559398a3161ecc598f5d2

      SHA256

      e09289f3661c8f74960a6245675066a6a8555fb5778a4d4a29edfac6f16acbb8

      SHA512

      9f9b41f3de7757ffd6c4e48695f46b0537e9b86372a6fb8cbcb5ced05dedc81badaf218bcb414ed2ff0fbd4ed13d4d7bc0bd5c022ad3b7b37c87b0d94ce7eb97

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      25f1dcea77ca0c6e2de8116e8560fdcf

      SHA1

      0a6164cb6087cdac8d60a9cbef28fcb1ec77ced8

      SHA256

      3b532be9742e64dfade90058eeaaae8746702c8e8661f8bdc38450b1e0f0ed4d

      SHA512

      cc19f385f6fc70bd710c7fb618d4cda37efcc50c83c76e3d5aef1d895718ce98e1d4bacf77beec8a4b040656f1afa3fc96d76bd8b98ccbbddd956fbc8ca78cea

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      0102652452b1908ed3243fddc546d5a4

      SHA1

      9cd7bb41e1fdd598af847c7ebf7021a63ea0bc48

      SHA256

      d0b540bd77e7092130ef104f2f68caf6b8af020c7de8193a89daaafdb738a7be

      SHA512

      1483dba75cc9eaf141d4f303f391d079aaf7c183441c271ad7eb9dfc6274c0649a791bd8a2d48d85dfa133eefe8333db58c3588fdb45dd4f0ac605593d483d56

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      434d086130b960182a535c6ec3256c46

      SHA1

      fcfc4368ff422e8765833a6867a70495f00da64d

      SHA256

      2ebff1ff44f34bc95d55d1118ebc9617c4a30506975794375acb3c5301f28ac5

      SHA512

      f7dca1087d8fdf2eb9d627bdeb8a0525a2682d5b28fc7a93efc78912657c920ad9670d9b735c0721de65bd533f4ba5bc90389036dce7424e53530ec3d5f791fb

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      3e29856b7c7434f7b5767fbf9af59c76

      SHA1

      e97b63bc1ff53e561a33c39d7db65c03a0796021

      SHA256

      8fbbb2bfc30854338ff239589aae79875c67d3508b2b71b2b460e6d30279b635

      SHA512

      3cf028363ad4e16e70437ae8446c91dfa18385b3d145bd8618fa8b0ce4e2d66607c8e8638492bd78f4905dd3c219556b2a5a5233bb0bc8266810ee187664b8af

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      b114c7fb97b018e4da32221af75807db

      SHA1

      f00b1a60dc27ab5d055978ea7e4b8b08fc10150a

      SHA256

      dfd2d46e645cd8695ed8fb2ce62d9115e1cfd62b53c8f05229906e0727f429ae

      SHA512

      5253eaa75bbd8e24710e52928ed0e78b406854f2731619432dc22447a386f6c5d1c1a3e7abe5f0d6f8083c9164f86609afe9fb7d1f395929489e5af705bab248

    • /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      48b5e6210efa5272d70ed5f1059c389d

      SHA1

      22def82432478d535294bd2eb1e1a521a3d4b501

      SHA256

      39ccac0c1540e5ac90666d70ec3860b15db907f991b5bc8d1ff715d779e541aa

      SHA512

      950f8daa7a19fdcb8f9f7521963d01cd5d760e576d0e5058d12ddb4f8787401997eeee682a2e98939e08dd8904cd3b2491f67b34d153490ac573caf78a24464f

    • /data/data/com.drnull.v3/files/PersistedInstallation2683702270914139340tmp

      Filesize

      567B

      MD5

      09479b02e8afd435bb50ad47dcd16397

      SHA1

      c195f2ab3df3644c6f602cd4e419262903400148

      SHA256

      a936040a26b87067aa6478abba5cbddec1e3856cc5e96209021b75d39bcf1864

      SHA512

      8483d5782b18732aadcf84af33ae3a6644aac24263b657f7b04e1e4a276934fd75ca94c34e754a05b58d2cb38810c14e753f58525f960a5d99242d0af8445649

    • /data/data/com.drnull.v3/files/PersistedInstallation7738346733093667163tmp

      Filesize

      90B

      MD5

      1de026612d85230e4a27ba49a507d43c

      SHA1

      f5dd8bda98ad13777de676260b715fa138d57bfe

      SHA256

      28de382c57432956bbeb90874a7006d975eac64c72e5c61090b5f78c896ae6d2

      SHA512

      6ad680a3792b94a24077df952b881f7f152355c68c04e14da9910c42f431b27603f3ac1af3c2201c0e8e733d4a7c4392bfb5d51c2fe0abed7de8d38e53681db1

    • /data/data/com.drnull.v3/files/addr

      Filesize

      60B

      MD5

      81bec6a77b1c4fbc401fb3f383f6f3c2

      SHA1

      7d9a5c49060de692a39c591a0fe1d6eab37afcda

      SHA256

      6ae4b2acfb1411e002a5921d43955203d7bd3e6d2544940b7247eac083220cc5

      SHA512

      0b7d30152fd43d7281350f5ae8369a11b4e3883442759376e746b75d9cd5bac567d80c1acccc62d18ba2f2f2743ffea329254fdc8d51cbc6405a3d1f441b4bea