896da7572923e82ff152606eeb6491b2787eabc2886e7804f5b0794b65975fdf

Analysis

max time kernel
50s
max time network
156s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
02/02/2024, 15:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
latest.apk
Size 4.3MB
Sample240202-sl3p3sbcam
SHA256 896da7572923e82ff152606eeb6491b2787eabc2886e7804f5b0794b65975fdf
MD5 9df01f99ea591be16f35d9018dee4379
SHA1 cef8976e067639376ce33356d32e741e25ce33e7
SHA512 397e7e6c16426d553e4ba587889bb0bafae5fc9865f69573a60528a705cbbf11e8403e584ea99d28aec6b28d58c0d9971e7ff06a6f67e024b588257932b4fec7
SSDEEP 98304:hV17XpfdEt12BKoTwr5+F4mqUPAU8L96UXAQS1IecD33igHp46+:hb7Z1XpF5qUYU8p6mAQSa3hp4t
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.drnull.v5

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.v5

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.drnull.v5

com.drnull.v5
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
Size 56KB
SHA256 b447e9ebddd3abbfe8fa5cfa9a8f1ddedd4905f2cae1732cb8e3a7ab66376cba
MD5 37354ba41c885d0b5a0e190d9d8e9592
SHA1 63ac5a6186804a2f28b5de4c723525d5ec83775c
SHA512 455e803d7a5471185e428957a340650bcaf240adcb1ec1cbc14c08de12809e3682422b7d39c12ac80fa6639472c60693dce289baa4450e9bd1b7ea3dccc3d63c
SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOwGQwe7qpoA0W7oKSC:TLJdTRmBEyPbsOwGQweMSC
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 e03576e86557118d3e666b5c0bcf100d97f23b16bab4e02e277979d8a1fc45ad
MD5 cfb2e2401d9705104474335d73c5db6f
SHA1 2e9dfb36f20ebc00265c835a8ed756a6270f5bf5
SHA512 ecb79b664e923e5b2f0b02d5ab79b665f0145a9a72b489f381b79fa1dcffc622509fe6bcb8b19ff164456bc319184aa1ec86f3048999d353b53ad9639100f79a
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 95a9d3a14634564a883cfcb038b6077b9400f9da9e6e0d3e057677d8a546d8f9
MD5 eacc947ca92e41ecdb09ec3185277464
SHA1 3f26ad1e471ab224c50cae4ee0811678b3e44979
SHA512 627aadb008e8d2d33479a5b65a26d3da2473afadb58a5a1d72d1c36798c168ee42096c39b658e8825a04e5475d5eda1fbcba892d2934bb81b7c1a9a5e3ecef6c
SSDEEP 6:7+/l98vGn18g9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK2fi:7+tC/qLiuWdwRmBEyPbHK
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 3841e6760fdc2e25b622fa15fea657fe4aab29fc89a338f8e3a0bf69b89d0a68
MD5 b06e9d5260b5ee5686ddc1ddbf429daf
SHA1 e2b1770cc3711040c4ebc73102d434bcb5be5a9f
SHA512 92dc1fec00003599c3177534e4195952cdc485e2bb464505d82d02b3025165bc980b840716da8d6480e05c4ccb1977b0a714b67ee92725947f5f69110708c0e4
SSDEEP 6:7+/l9mY/gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKGns//+I:7+tDwqLJdTRmBEyPb7s+I
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation700914646133187574tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation700914646133187574tmp
Size 569B
SHA256 d007629aff5db56d9e1f943b5d831a29022c166ea5fcb3b7812ee5d42bb55997
MD5 14005ed8cc5d0ae9f90ccd419fa94608
SHA1 93b5ebacdc95850fe5dcff55f623e46b9ae21ca6
SHA512 d9a72534aebcfa65c79340797f18c74e604b696b93c08f06d1a25093340027a50dd1fb3920d7e9d4ab144e99d522a405d7f142c97c5061ea49da7695b3deaa35
MD5 SHA1 SHA512

Submit Download

PersistedInstallation8784223555772924022tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation8784223555772924022tmp
Size 90B
SHA256 5c5cbcf3a72d3ebd452c03a4e44a592ad2afa50c9b689cb69feedc3433df2f2a
MD5 4a850c603f9301e40fedf6d1a47140c5
SHA1 9f197f93c2cea3e3d475bca46bc5dcaf03a13707
SHA512 653317c7eb449d9446930bc28fa22b619452e60c31222291e592d4a0934873dd3b4bc44fa87247021f5963d4eabb9a1d6b8ff86600aaa330f5ad636ee3314e5c
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 64ad216c638abc2e49e43bd0d01903339b895134fd60d9d9dfa03e90e54642b8
MD5 5039715ab6014ec4c21a37592cc06916
SHA1 ab7a6ef2e41ba145f69b1066655f1da326bbef6d
SHA512 68ec098a900f3b4d5d907814dca99bdbcbc1d56316bc357c2259f18c0130c14a09d6b1455d326bb809c209bffdce52e94cc7bd8d94b0b8c16f0c08adb3c3fdd3
MD5 SHA1 SHA512

Submit Download

profileInstalled

Path /data/data/com.drnull.v5/files/profileInstalled
Size 24B
SHA256 f92444192b173bdc415731b987c031b457f561e71c2c412c05112e7ba7281039
MD5 e76a50f902f9012c7487897c1439e5de
SHA1 2a25250b31b5b4b9110ca490d3b0ee3917321655
SHA512 943818a863dcaacf47833325094fd4271cd1e97a2b6c2e9ca6d22ec61334459a8c328dff8b6e7c687bb6c80c54ff71ea30f772b416293a5ecbe52e5bca07c821
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 3KB
SHA256 42f7be563a183dce0b392ab8b2e1349425398d17afaa68435b2260dc94fcdd41
MD5 86d50a36e5c474cea7f386d4f78210ca
SHA1 203504388c675da644722ee419c72646b8f4e674
SHA512 66065daebc699a6a9a1b1b7673f0019e49653b9624e19ecd601b686671d1b952457366dd6981e26986b992e45ed38d8af553b0628f23da8dfde16a2c02d5ea2a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads