Analysis

  • max time kernel
    900041s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231122-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231122-enlocale:en-usos:android-13-x64system
  • submitted
    04/12/2023, 16:19

General

  • Target
    NEAS.073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3apk.apk
  • Size 4.1MB
  • Sample231204-tshtxscf79
  • SHA256 073de9ade3a00c3c1624c7fac5696e7b8dcce402358458258513df31a8d9e1a3
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • com.android.chrome:privileged_process0
    1⤵
    • Acquires the wake lock.
    PID:4281

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 ae78bde455028adca569f7707d1979d85dbfb4752163c4ef77c7ded62069153d
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 25883dd208f7d7caa6f2faae283f36a92ad0b85ee14b3e99639935af9b2ee107
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 2b3c475339d66822985ac2a21cc622d776171d7855ce87a946da05aa4d4b4c56
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.drnull.v3/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 98de552edff4ba6ebe25783b7f1e6772782a2a03ace2c0e213a026970a9dc692
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7aada23446952116f12db5df94f610cea9249430c97477607c886aa6c1917a85
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 9094246f5090e57e2be084c473615e246050470f4b851986fe393107db95779b
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 70b072cb04f6142bfd1dac741edbc57f8a9436341c50d8d5512b83890023d367
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 c0a19ae105bdd5071f89b6e699b46ce5addb9654bb4f102039cca16e9edc8568
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4fd63ab03a36b2966d173bc3c323f61e72e46513029066cfd19818b03193e5d6
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 20c2e2c5a390b28aa576368bd2efd5e66151a628587b240b662a2c2ad7a46844
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.drnull.v3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 68cfb05d5bba791e757a21a83b593c4871da2b1d87cf1ee0ed771da96eaa2b15
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation2373330176583573476tmp

        • Path /data/data/com.drnull.v3/files/PersistedInstallation2373330176583573476tmp
        • Size 90B
        • SHA256 968027d1cd0ac69827f7b16a54a1dfdd9b7979bcc8950d871ab19a1ba0c315fe
        • MD5 SHA1 SHA512

        addr

        • Path /data/data/com.drnull.v3/files/addr
        • Size 113B
        • SHA256 bb45f2ee78f42cc45b5da3db7dc8286f99e98dde0798964f6700e03a23fb0261
        • MD5 SHA1 SHA512