Overview

overview

10

Static

static

10

1603409b5a...3b.apk

android-9-x86

8

1603409b5a...3b.apk

android-13-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    13/02/2024, 02:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    1603409b5a0725977e7129b6df72bb9049b3a32e2e923b03b46821ebc90c263b.apk
  • Size 3.4MB
  • Sample240213-ch22dagg8s
  • SHA256 1603409b5a0725977e7129b6df72bb9049b3a32e2e923b03b46821ebc90c263b
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
banker

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
    banker
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.drnull.v5
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4285

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
        • Size 12KB
        • SHA256 4e1313b40c676cdc9653aecd74da0f6212f5d84ef960e1e8bc249811bdeb5783
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 45a0782f368d2eefc34c5fd2169efae6219513c823a21f0e44c8302492636d2f
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 2a9f9894c7f00f2abe5ab346c05aebf2e643616453129bbcd51d66de395df1c0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 48066bf6a54dda5703a00d0d51545664ae5a219da5206172f3d8ddd0b90c0ddc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation8894806298657452308tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation8894806298657452308tmp
        • Size 568B
        • SHA256 6c63ce7fda3c0804d02292263e553c683dc278e0fc60a5fe129e2f3a6c19d1cf
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation9011660905801590955tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation9011660905801590955tmp
        • Size 90B
        • SHA256 37057c21881232858d211b7350a1f96848b4514da47d7bb55fdb0cd693c36d08
        • MD5 SHA1 SHA512
        Submit Download

        profileInstalled
        • Path /data/data/com.drnull.v5/files/profileInstalled
        • Size 24B
        • SHA256 24420571f9ee79e5124d3e7f818a126a9931eea2a238e8f9c077b96b162b4db6
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 73331f4888bcb9ce3d32f8a0ce7b6dc8c4a700dc0a4866ae15c4c149a218876e
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
        • Size 1KB
        • SHA256 0e987a595a78437968504f7cc3b5c9f8ab619322ea653a768afc40e06a9a5e84
        • MD5 SHA1 SHA512
        Submit Download