463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a

Analysis

max time kernel
133s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
12/02/2024, 14:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
latest.apk
Size 4.3MB
Sample240212-r4fslaaa69
SHA256 463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a
MD5 19d7d3ff409bf1b5ed9e8f73fbc7bda3
SHA1 ea7883aacb78245fbbbe0192635d94ffce7b73e2
SHA512 9a723550714b813d2b1a726e945d306ef3d7cb617fbfe802cd4b49ce403311fcb6b1f8f23c69b70d95343965d0650392ee9ea27293ff45bcb70da2b5cffde658
SSDEEP 98304:pA+u4Y1sNALlOUajvyoTwr5qTZ8s9EcRjJeA1kZ3:pAk8OdHlBJ83
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.drnull.v5

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.v5

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.drnull.v5

com.drnull.v5
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
Size 56KB
SHA256 a6bac78d2a5fda296d35846dc5fa01c30fd07399d197f346c701dfb345ca41fa
MD5 9065aa5c2efef3a27dcb7d97e40c51aa
SHA1 7e1a5bccd7a2fb0ea41512c37b2845aa169727b0
SHA512 d9a7149143952957f810d387879ba3a914b435bb61efa1bab47700a7dae8b891210a935dd2f0962088c4bb53b521b48d25c9a9befde59f8437c9e7a801edfd05
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSY:rAMEX0wIyNjaY
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 239fbda343bcc53add61bf1ddba0763c31353a52e4214e77f5308cdef36c1abe
MD5 b7bae9df83af6a1378df2aa68f0b2372
SHA1 32c1f3bc6442798baeabe1a80ba779076325d229
SHA512 22f4993c59c4568a2070ba54f9bd8937bfba3c04500c67c23032c39ee7c5927ab95115eaee1b5018699fc006e19eb35cc7c6734b4d17592890755b071a92368b
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 dcc5e53d6cfff0c0afcc83c8a2253ccd37eca9b5d5f9ec4b7d985b22dbb1c068
MD5 4de55d2b3657a359f00c5238c317dc5e
SHA1 fca76805a8bf7799da9dddc14e38445d04f06369
SHA512 711870ff57eeca6aa44ac7f1469af0d7ded1f7a21ba9a8a73fc55e426ffb5867d162c1afc2c933570f7eaee03173d1261dcc087171599365731033829f992f49
SSDEEP 6:7+/l9e4n1a1vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKn:7+tATqLiuWdYRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 57b71871ea88fd053263a2029c9d4e476d2fb1666cbb58facf09eb4ab2d2264f
MD5 c2871975a9dc248cb6678fac11236e12
SHA1 8c440476474bd48166f1e7b5e3484b38e35b599c
SHA512 049a34dd5f0d2e6580fd11611341c0f835a5d41ff2b8771328ec25664a785a260985aea5cc5310cd9e5bfcd1d0ccd42415d0f424988ffe6dfa30cdd9796c39af
SSDEEP 6:7+/l9zxuHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKT//v:7+tlxuvqLJdeWRmBEyPbwXv
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation428358915417591127tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation428358915417591127tmp
Size 90B
SHA256 56adcb71479a1c4e096c6f64307caa75d85a0116e5255722e37effa35ea1183c
MD5 0cc165202460ab822d780472421acc09
SHA1 0664c9c3a261d7800062b2f3003b72cf30772e0d
SHA512 52d25b8528d920fbc0690c81cee0c3d4a478e89344081226bf2080956f87d3dea6f8588fba5c11392bb32d4862e48a6c884cb34fa39db8f0ca75d9bc5aeaea64
MD5 SHA1 SHA512

Submit Download

PersistedInstallation8265193298802293501tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation8265193298802293501tmp
Size 569B
SHA256 8d2304c95f28ddf62e0069a77afb858cb0cc0b12b4c3adb612407bd81e1ab9e4
MD5 bcdfdc106a6c185bc1186deb98921b4f
SHA1 f6a34b18063d04f1c0c090185a1050fc604d3dc4
SHA512 daeef068de4c9db3d56ee4de85a924202073daf6c02061c856809822bae7ce25030ee62700ab5b15438d5e9fe41b76fa61cca573e54cdb0e5c0f006401fb8214
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 a7d0b450465338a61a9e85dab6a06b329ddecbf7e8637821aa0216894031928a
MD5 ba50db2812c6a6b26c29861821d7e83c
SHA1 4e29d823a1d53b8c5970f01bd2f301554b4f0378
SHA512 372c32e9b83eb40c61d26998c4d9ade03436de06b64354a107dc8764bb1590b7aa93183755e83c7c14db00c1f514bf938ee7474278099eb22887133e1a3c2621
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 dac2354afbab7c2ea4a953b97fb6c22192e08a43a34999b0c3ca2cd0c04fe305
MD5 93bbc0fc6167155363f14b1fe513283d
SHA1 5988266a4b7bcb049d3984bb60e106904bd15879
SHA512 9c5e792b77ebffb2dbf128da5b0d2dc771240c58a385cd8f3e8524a2b7806617a24af41889a76b978033ded45a916030f0839bfedc732cde6359598718d11760
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 1KB
SHA256 87964145ade7a79f223cadc1c48ed417d86ac1872b5f6d533814312da485e6ba
MD5 3bf4327df6b1fcec0de5399a885183ed
SHA1 4f2ceeb901b71d3f3c5d56ee9ac0430c94088308
SHA512 5c3c3416af07cfa265043ee24909c59ea99d482f8e77f18a33b02cb0dfee6e48587341ee575dbd687fca82d249a00130c047b754994cfff9f9a4275724de4043
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads