Overview

overview

10

Static

static

10

1603409b5a...3b.apk

android-9-x86

6

1603409b5a...3b.apk

android-13-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    13/02/2024, 02:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    1603409b5a0725977e7129b6df72bb9049b3a32e2e923b03b46821ebc90c263b.apk
  • Size 3.4MB
  • Sample240213-da5mzacf2y
  • SHA256 1603409b5a0725977e7129b6df72bb9049b3a32e2e923b03b46821ebc90c263b
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
banker

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
    banker
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.drnull.v5
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4280

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 690be624f0da0a260184148e94dafa88904786e321eb433fdda4bbd11fee30e4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 568db6a4f268f1d6ca08b37a7d11aeb05077cd5717d6b054caa9d42d1869377a
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 c4eb97aff178a43c73908ac59cf59c0dc2aece7b4f3deac1a11a4f8805c5a414
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ce72f527cb0e2ba471968c4d0ec762627784ddf808d83b8db818de636eee0bd3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation111984369540634977tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation111984369540634977tmp
        • Size 90B
        • SHA256 b7743a447eb9a85c494bbcbedb85882ef04248a5282e658a11acbaa07c532da8
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation7779621085444862207tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation7779621085444862207tmp
        • Size 569B
        • SHA256 225e57d41365c12077ce2a1487324dd148235d780145301ace99b3eb1e3f680a
        • MD5 SHA1 SHA512
        Submit Download

        database.db
        • Path /data/data/com.drnull.v5/files/database.db
        • Size 403B
        • SHA256 ddb5c8b6b2289b9c71551d71270007b9699979093b4eeccd67cc9e93efab3640
        • MD5 SHA1 SHA512
        Submit Download

        profileInstalled
        • Path /data/data/com.drnull.v5/files/profileInstalled
        • Size 24B
        • SHA256 156358dbb37e980a7e3b46bf985f50a0e5bf69a1977bd829f3cbc78b5d119780
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 41ba860dd93a3e77061efeaa1fa1995e9841329ca90870d06549a11ace2d2812
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
        • Size 1KB
        • SHA256 0e987a595a78437968504f7cc3b5c9f8ab619322ea653a768afc40e06a9a5e84
        • MD5 SHA1 SHA512
        Submit Download