Overview

overview

10

Static

static

10

1603409b5a...3b.apk

android-9-x86

8

1603409b5a...3b.apk

android-13-x64

8

Analysis

  • max time kernel
    47s
  • max time network
    171s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    13/02/2024, 02:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    1603409b5a0725977e7129b6df72bb9049b3a32e2e923b03b46821ebc90c263b.apk
  • Size 3.4MB
  • Sample240213-clsbcahb2y
  • SHA256 1603409b5a0725977e7129b6df72bb9049b3a32e2e923b03b46821ebc90c263b
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
banker

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
    banker
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.drnull.v5
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4276

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 a26f9f5f89a55f29b0f0b19d17095f7d9af5c2b311733b5d3757d73ea94d305d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 e7c1c5a7d5c37491b48221eadabb9a2351edf6f73ecdccabc9f28fd711b65e6c
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 79173c62dd8e180a1ca92b41419de8c5a2965263724ac4f2372fe5b949e61866
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 bb0dde1d80630a125e13fc80104402844093a8a106513147b6d99cace49e0877
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation3890400124636610030tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation3890400124636610030tmp
        • Size 90B
        • SHA256 493be77c9f84910741fd8b262e1791e5b11f3926dccc3125e06c025a8d9b3ad0
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation9118886175643633640tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation9118886175643633640tmp
        • Size 569B
        • SHA256 cbee71d72c52bc128a1dfb276a4a23460234c23ac6dd3f08989c69f71cda6057
        • MD5 SHA1 SHA512
        Submit Download

        database.db
        • Path /data/data/com.drnull.v5/files/database.db
        • Size 102B
        • SHA256 cc55c190f418f4ab58326e1156e34deb813a654d66083a964ce27620f48939d2
        • MD5 SHA1 SHA512
        Submit Download

        profileInstalled
        • Path /data/data/com.drnull.v5/files/profileInstalled
        • Size 24B
        • SHA256 1c85fa23377209b884e6092eb77427362a6aa5fa85974979008e5585e8b91c43
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 ff4be45facf0506bc7581c9f994b891f46a6a5bc58059fc62e7cc2653d01014f
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
        • Size 1KB
        • SHA256 0e987a595a78437968504f7cc3b5c9f8ab619322ea653a768afc40e06a9a5e84
        • MD5 SHA1 SHA512
        Submit Download