2f1c897d81393d550fc1f2a10aaef1af4625740d4eef4ccb007e6226e13fd209

Analysis

max time kernel
47s
max time network
158s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
06/02/2024, 10:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2f1c897d81393d550fc1f2a10aaef1af4625740d4eef4ccb007e6226e13fd209.apk
Size 3.4MB
Sample240206-mel6vsfgal
SHA256 2f1c897d81393d550fc1f2a10aaef1af4625740d4eef4ccb007e6226e13fd209
MD5 3aef50b03743c1f44f65a95b4d6d9fca
SHA1 707fa35bc4309ab6aefc9f63f55eb86e420fc684
SHA512 841d9c6c528152f7e200502f92839e1e3b87aa0844b4266deccb579e42cc1cf96d820e25f3324f8f59ce31d928bd22a58fd54fe195d836b1020a10f1f7e6e488
SSDEEP 49152:fRb/haI3V2Lo+4toAbrvQaoTwr5+nMjkzIiadHu8SxxYtqLLUymE:1hj3w541oTwr5+8kzILdHu8Sxxq+UyZ
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.drnull.v5

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.v5

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.drnull.v5

com.drnull.v5
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4986

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
Size 12KB
SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
MD5 163b0e3f017becbc89b9d7f330b78f09
SHA1 1ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA512 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
SSDEEP 6:l9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKG:TLiuWdwRmBEyPbZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 d8c586d67973357fc9264e7395aea0f418557d2fee0bbce517b1cfc2b027125a
MD5 dcc702196db474d3d098085bfa5cbf92
SHA1 90b6ed626b94621f39231c7cfebcc801196fc125
SHA512 069f44a0726bdfdbc8241ff0fb948eb0bf7fb18c06c173eaa97da97cc527b88951869dca2e93b4779fa9557e0d27c1c7685f5917be7841bb75dead2e6139927f
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 f7131cd1e51210f2f0e83356bff8fd900f544f6eaabcf9a547b5740072496554
MD5 2047017997ec590b3bd5181572774786
SHA1 e4cda0f20546d8f3de98ca86c90b314b331e6f26
SHA512 14d6e05a15adc55c6168cabd90b581e35da1849d5f8c8f4b3698f07af2ffc154437b9d5831dee1fc9d13180790be718b099ab49fd014d491af4c15f3e5177de9
SSDEEP 6:iOn1qRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKK:inRqLiuWdwRmBEyPbV
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 776B
SHA256 fa7bee46c4c18299202545c2af2fe1c7ef06dbe016c808345538514e9d92aba9
MD5 9e6ba823af0b05f1b1c3291ea1883ba3
SHA1 ff595269bb46ad66b0d8c7f1fe0b688d21bc8bd6
SHA512 1e0304c79410bd2263715ea032692821fe6eb186ee39deffa5c799ed47e77b2fdfd222825f246743e0886eb774119ee2ac1e3296e04cd522e6d88b82170c2163
MD5 SHA1 SHA512

Submit Download

PersistedInstallation1768298592452055516tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation1768298592452055516tmp
Size 90B
SHA256 2bf7a99a645b103150e05cb5d1f35eb2ffc7b01273240e272ec2998dcd5e120c
MD5 3f1de2ebdd5ac2af070d50d67aafc036
SHA1 a074659ca9b59ab1ac4f7782e7d21d7650dc2f79
SHA512 cd4243b39e8d84d35030eca5e52ee428486aac22cb0fa0d8d28e91da557ab056737912885a12d561869bf4d15dfec5305faa165d14a53ad072f41f26d1510fb8
MD5 SHA1 SHA512

Submit Download

PersistedInstallation2051100217070197503tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation2051100217070197503tmp
Size 569B
SHA256 994aa00da46f5cc4f4d7d27494ddcddc64dc59838deef0b61710f1fc3969fe11
MD5 17c4dbeb888faa2d63d8b03ae73f0937
SHA1 a816fb4ca7b9714e70b4b983162524dc94a74927
SHA512 7e8ba178a32a9442238b5ff81378e3ba8c6cced72301378f1968af844ae8df19b19a4398b83c2ca3e9d3604442118b8a9d79453525ac07f400b14a13fcd3ea3d
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 6ef6bb01775d5971fb6e4aa65d0d58a6a27ce71cf58aaf551853086a2752aad1
MD5 b8479901abe222bd628079c7ef5633c6
SHA1 56e911191f626df27113c5293a2114d32649d629
SHA512 b696fa6b326a017f76b261904256aa89ccf9deb50725eaf2afc5ee8823d29c7266c742cfcc6ff1582b38c37981be15c92d1fe443fc7c408782a8f0d0cdd606ed
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 91b7d6afaaa6e1e87e8d8696f316cab96ea5e6b326a231af8cdef33facee9271
MD5 4b7db2a244a0a22d7ca6f152d2fa8cb9
SHA1 8b621a41a375a50940ed73cee90eb01d464fc166
SHA512 7bc1693b093da118653534671ac9f17f6f56a1b8149e3de8a8c61998e385f6d9b9dbe8e702c41db7917a44c4f0dc927a619993503e4902fa5b66e50ac327d1ab
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 356B
SHA256 f29be1afed5f3b8da48a3d3329e45b2ad0011d68f9348b4ddcc2eb7bbcc03881
MD5 3ec08e756c6916d0b702226ada7b8488
SHA1 0652f33c70b0db6307672f4b9761271b2edbd31c
SHA512 70404329244ed9df4916f618bb91df8f8a26877e473f642b3c753c6c19395502d1a272762b585740e50546beb6a6f70a71cbb2b7933e36724bef291d02f1cfca
MD5 SHA1 SHA512

Submit Download

profileInstalled

Path /data/data/com.drnull.v5/files/profileInstalled
Size 24B
SHA256 5d0965c379eb4eff334554bda754a1afe98e8a090f73e8e39fc8f1b412ce8676
MD5 a394a59e2e41a0672c594181f0fa822f
SHA1 27b2a8ceb20684eba8967113bf078c72d5533276
SHA512 c511d7b667b3fb99f4a1ba868041195a3dda0e2205cb19bf494c74ee7ef838ed035be39238daf43d6de324f416a3d07317c3d983eaea7fe2eda037a644a03150
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 18b95d0a75aa0c15cfe0c2aac9bf600565bbe1918fd1d20850c00c59190144f4
MD5 852247077c2e4f1aa681498ea927b90b
SHA1 89ec6774588a82a3392b4df9e764215d987b96d5
SHA512 4ee1bf833b1d36b1bf20b96d13eda197dc5e9a72312a6ccf79ab7ad122b14dc9c92cf3d2004b73f6980fc0dbf8ec41d983bd8d9f395eb629c8fc943d0d731fcc
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 1KB
SHA256 97fc650fb20773f543f69e314f1200e5fabab27e605eea7713ce22a1b0c3d8e7
MD5 62a5ed63a0941e623d9f2843d51ac04d
SHA1 2c27c9f58f26c189fa74b7b9b8c1af05a773b269
SHA512 a067199a0cb461e81130c2ea4333e720b045d707583460dd3f84df75c7d47efdfe1ace7708ba93cc0a95ed0b3fb2d24b7ca1ebb54e710916879006fef8ce5ba2
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 4KB
SHA256 d61ec7e903908f1934081314d747585eb09041500d21c42f658ab6f9c887528f
MD5 f277d422098d13f9cd476161ceb88611
SHA1 a47d3a49839b474d77996098ab52949c12212a27
SHA512 1713d9e70c07bfc86c9ccabc5dfc87c70bc6551094d64cc9a25387b0767809ac340feeffe5126c3caaca3c37010cf61ee335b2b4b17d7d983f84a1823c33a631
SSDEEP 96:T1KfdJPurn7cA697El9rEQY/15D2ZOiIvXn0ZJ8jsNa8vxfcfUJC:TIfvurQks/1pUOiIvX0ZJ4YRJfcfUM
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads