aa73003df1a2d5e92ffe5bcf47535edc9752493de5d3169d77f5523315ce2810

Analysis

max time kernel
705328s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20231122-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20231122-enlocale:en-usos:android-13-x64system
submitted
02/12/2023, 10:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NEAS.latestapk.apk
Size 5.4MB
Sample231202-mcc56sbh76
SHA256 aa73003df1a2d5e92ffe5bcf47535edc9752493de5d3169d77f5523315ce2810
MD5 75c0e1e8d7fc82f8927c5ea820d95222
SHA1 246e51be0248613f798af7aeb85d18cee49fd4b4
SHA512 3e953725655074e681d6d71b4e290319810c5d9795c300797d45817e445b3ee5c6e4c8d87e38220ef9e8a374dad3da4ac163b13d3e36a4e2ae7ad6d330c5c8a6
SSDEEP 98304:zfs3sQN7mVk+EokoZg7HgLCr8J3274xoZ8Z1PP9KtQDFVPOygwODvn/lEAQo8g4k:zsV7rT7Og7wG74xoZa13oaVPOdwODv6M
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

ransomware

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.chrome:privileged_process0

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.android.chrome:privileged_process0

com.android.chrome:privileged_process0
1⤵
- Acquires the wake lock.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4250

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events
Size 56KB
SHA256 d8a63eb12a1eaa6a3c1c59e10b6566a19d4578d16447f91e7d29313d0e41c81a
MD5 992cc91ce79eda4499694d6e56554722
SHA1 c5f0479f518e9d8ad294fd16df35e58499af001b
SHA512 eabb1c14aaa7d3a8cfc917636e51e8af2982088ab2011e19a21381b098fdb58ae949fe37024ee7ffd9411b085d30ee6ce8d511ffa4fb6d1f674aec7b457b5bcf
SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSA:RMEX0wIyNjaA
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 90b572726d1d94eae7535e97cb921710b792f62ccfe606282800df8ab3b01734
MD5 5d794563eacc851e1c6754ec368a9483
SHA1 6c973f8020c722f2a847c958273cdcfa500c6c47
SHA512 2ebf3ad748432787ade09230b9b1c94204f1df02bf8be3a14c88d62d0ffb14e9626508d2bbf111f36adc6043f78ebe984b97d9c54963421c9b90e6e65e1fc675
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 be702c6d949d8952047d6e2580ae9ed5d70ec95a00ea4ab652d8abefda08e301
MD5 e0c352507743a2fd2f8e1e55d9c544bb
SHA1 24a3ef977f11cbb2f49c96718a043c47a6d2051f
SHA512 e580ffeefa1f60e1f728fe6561488f547903eded9da2c6ef8dcd667a0c165269150662076eeebd31a92c958a630e993d22779f90e57db867bc15200db7c7f6ee
SSDEEP 6:7+/l9cJHn1MWg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKk:7+tsZqLiuWd7RmBEyPb3
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 b94ed726cf9d61d812651cd947c9f77116252c9b0daa6b0e32e7c002f5414ffb
MD5 1d2240728958b495b543686d0799c0e3
SHA1 59707753937aba09321c3ca3492495e06c81b5a2
SHA512 9b27b190cc2aa25d54d6fdb625534ca6f23c1e9315eb226fff5d7dbd61ff5a021dcbdb9cf5391b69c223d80c84111da4c1029102ce8ddd37a7141bbb1dc02b2f
SSDEEP 6:7+/l9FfPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKe/ds:7+trqLJdKBRmBEyPb1ds
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db
Size 16KB
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db
Size 16KB
SHA256 7f723b399938277c7cc1860d0ee5c2b28e22fe6b3a9e2380e7e7e92e7117d664
MD5 c40fdf0cd03a9f313bd6722569cf4310
SHA1 58960e13d809883ed060706fc2101fa13c66540c
SHA512 3b9190bea6ae71bac82f5c28487ee07e2abeb5a55d99a77a271e1dd2d990a3389e8fc2df4ef4f89dcf2974e6d8784958a0c786a10e95d385f7fcc29507edc579
SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6gw:TLiEx9zmzrfRmBEyPbP/P+/0Fl6g3Zi7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db
Size 16KB
SHA256 0172c613907874b8f9810c9819b5975451a70dc4b195515e111eaef95305b73c
MD5 c0a3809ecc68a1da9a11b23d4b03f1f8
SHA1 577e31ae59136e8bd92a3a86e78499f293d7b0e1
SHA512 f3e7cd521517c2d9164519a3aef2563d5d0ff3bdae424d070eae1d4d18e0283fc642898d67743f072d91d8294236faf41c509290ff832d3b231203f133e8d2a5
SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFl11b+/0Fl6g3Zi7:TLvpmzr0GSP/h1499F1lFw
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db
Size 16KB
SHA256 69dc8e377ce77dd536f6a6785d68252b480abb8a76ffd1ed5109d68d45f69fa8
MD5 8fea4e9021c11894ea91f3b050168c98
SHA1 edd8857421fab60e12ad7606316d3a8bbc3de00f
SHA512 b1503024bbfc0466a88d2c133b47154c5318106e9aa1859418c9707c0f80b65358a45fc048a964b32f8a0b0aad5509c53d694fc1f1654ac0697f4f04517f2b46
SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/gwgW49blqYFl11b+/0Fl6g3Ziv:TL/pmzr0GSP/gW499F1lFQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db
Size 16KB
SHA256 451f5d3c2e58e4379eca1b119917508552cddc4aa78bdd20caf9173c17ad256d
MD5 20173a04844142e8530c143a5c61a12a
SHA1 9af8cd5d2e6c990bd20a0aa5036f1128fe1080ed
SHA512 5fbde62ab3199025bbeeb7097e249821dd79009ff6b13308bad1ed97f8e79b76052b0437021afa03472aad925f2ed030094f6d2bafd80b6f8eb89d59a70ab221
SSDEEP 6:l9bNFlsals1OlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Ws5:TL6uEO9zmzrfRmBEyPbP/Ws5
MD5 SHA1 SHA512 SSDEEP

Submit Download