463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a

Analysis

max time kernel
48s
max time network
157s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
13/02/2024, 02:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a.apk
Size 4.3MB
Sample240213-dbfegadh95
SHA256 463f9ed427c5d003dbe5d0c79ec0046f7f7b4b73d412588661bf86d3aca8088a
MD5 19d7d3ff409bf1b5ed9e8f73fbc7bda3
SHA1 ea7883aacb78245fbbbe0192635d94ffce7b73e2
SHA512 9a723550714b813d2b1a726e945d306ef3d7cb617fbfe802cd4b49ce403311fcb6b1f8f23c69b70d95343965d0650392ee9ea27293ff45bcb70da2b5cffde658
SSDEEP 98304:pA+u4Y1sNALlOUajvyoTwr5qTZ8s9EcRjJeA1kZ3:pAk8OdHlBJ83
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.drnull.v5

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.v5

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.drnull.v5

com.drnull.v5
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4983

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
Size 12KB
SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
MD5 ea628e04765adaf4238a5dcdff4bbd51
SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 1e1a7f4882c4c2ea6b7efd94835f07d13eb05bae0feca41be2a5ca0684b457f6
MD5 ac594ba905d9897bfc93df5fbdae58eb
SHA1 a97591802faa2b1d83b6469953a0d7ef68dcf33f
SHA512 d7f4167d77674ad86e05f07aacfdbc6217a6263964a1b92c6eb098907e993576d34726bd436a1dc78cb52f5638b0240dea28162b6a3f9bef6a72b2740ff388b5
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 899ee805b9d4b4fe4b31eae03f0a4e01ec53a9ec86fad933a403f2e94b499057
MD5 09ec446db87dfa4bd9c96d860c652cc4
SHA1 9ebce9223bc0af788e8316362a5b9026dc451907
SHA512 e4881cbe4147dbcb0978558c53e9a32066b2aad0c2ccdcd9a43f9e3f970527a43131e53837cbb9b7e7bc362ba38f354c2fcececdd73e8fac6c1fc805c115159c
SSDEEP 6:7+/l9WGn16lg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKn:7+t4RqLiuWdwRmBEyPbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 3b500b23d1b7ce63096981ac05d1e6466f10665bbc86485a58f00ce617cc2918
MD5 8d9d619971471c7a70f4b4851acfcdb7
SHA1 5a6e36ffb189a1716d977a1d4a08e22fc724e46b
SHA512 286e3ca2cde10530a30597d3640e6960bf7927d7648f339b1d69d845f464653e57526f06143efbb44ddb8b1b3d172288fd25a0fadde8a673ba0aca6f5985330a
SSDEEP 6:AOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKid//:AiqLJdTRmBEyPbT
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation2271905453515048470tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation2271905453515048470tmp
Size 90B
SHA256 338762c61f9a3288d91d5c660cbf64d995e0337057d772919488e510c14c18f9
MD5 d00045317a8e928b14337a9f4e8db3b8
SHA1 5fa6aa6dc17955dd6ec664d2f89156d64397d3f9
SHA512 6bf19c9bc2a9b448a4ed1d9f98cd783c3b3ad4f99d5ecad7850ef8318a8c70c66099582c64423ebbacb4103f9efb729267fb9894d324045dae2dab3feaee0957
MD5 SHA1 SHA512

Submit Download

PersistedInstallation71329321219921883tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation71329321219921883tmp
Size 569B
SHA256 f5788218e2a39a13475a680277d21027c17a9dd1e9f382e86f145dd29345ab2a
MD5 02486396f202ca5f84b6e1c7f185b2de
SHA1 8ebdc32408dddac7d97f3f4beaa1cd9041fdf9c3
SHA512 8d7d22130fc6c8350df8e239412c8ba6881e1d4c55facf461e96d75d985c092e5098d46f8f4ee45fd853fdce7d72edfb7ffcc466bc025b722e6041134987ed8c
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 d84b47e5e3d4ad65e8cd597f05886cc642e751148670c909a7aa8031ae95dc12
MD5 cbf4468ec3e4b435c5422554c75b72c7
SHA1 37cb84118c08dc73067b4ea7f83639fad3d8d2c9
SHA512 035ed94b8b45664c17248007ed4829afaf26e94f4bdd3bc7a782f477f07432d2bc5747d299adfbc1ee6ae596a3e4c169c2eb41500e2445b555fab179e0b58499
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 9527c06a797897709d3f761078196659ee12b79caedaa1a32a237fd780ff80bc
MD5 75139734863febe08d96fd641178d7b6
SHA1 f71893726730716676296a7ff5cf38169a2f656f
SHA512 e2178f9ad451911698c9d9da9cc30fa0020f787cf8973b450789b6623db1786067200293daad5d40a383eaa34bead94aac3b2754c0be2fca8b5807e2f58cedcf
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 403B
SHA256 2b6c085c6bf1d1445986f0edd769b051f040718faf5f5ce5763efbafa5752389
MD5 2e6c19937d2999762bcdfd4f25270b23
SHA1 8bd0c7c10e5e022650b0f8db92cdce982a575d4c
SHA512 8dea2e5d18579881bd75f52e8e646ed075e2669c1bdb2c9c50ab791f74df47d6037c0174990c673ee1f7b87c5ec5049200f19410cf655381777ff0ddb54403a8
MD5 SHA1 SHA512

Submit Download

profileInstalled

Path /data/data/com.drnull.v5/files/profileInstalled
Size 24B
SHA256 6b7a3584decbcd93ed84872ad445a377e63c14683e331aa05a91483bad2e28af
MD5 fb032f495e1a3089bebebd77cb0f9b3d
SHA1 e7bd95bfc84c78d7790a2f371a0e08977b5b8963
SHA512 98fb152a5a1cb3f05e590cb625fc577ef5553389674eea11be1969fca78515daeccd160921cd4cdeff2a9a5aadb5cfc4cd348c821ce03b4e7ca2fa1cb6c983bd
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 1ebdaf470d891659f9146cfeada128519f71ae5b9bdc5a98116c8f3810c04080
MD5 906f016b3eea0194405c6c13fdae988f
SHA1 0f326c9adafced8817fdc4362d5aa698b66d7d93
SHA512 a32f9a381aa4dc3e0662b6cd3cba67d504eae167f93cb2e2f9739eea12a56b7bc819f2b8c543a480c7a840cbce0b85440a47761f822b9a72c54a3ab9819f9160
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 1KB
SHA256 87964145ade7a79f223cadc1c48ed417d86ac1872b5f6d533814312da485e6ba
MD5 3bf4327df6b1fcec0de5399a885183ed
SHA1 4f2ceeb901b71d3f3c5d56ee9ac0430c94088308
SHA512 5c3c3416af07cfa265043ee24909c59ea99d482f8e77f18a33b02cb0dfee6e48587341ee575dbd687fca82d249a00130c047b754994cfff9f9a4275724de4043
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 4KB
SHA256 b1af1b8d761bb9ed23321e225113bdf12ce0422f9dc5cf1bf370e16378dbfd3d
MD5 2abcc08ef6760bc876f66d630783cc5e
SHA1 65346f9315e41373e6dc6f8c3fe9a707967bf12d
SHA512 6f1bb725e28afce1fb9470071ae82f5c86afc80ba6eedd9fe16e1c35cfa78f45637a1988b58b628ce3058a3551448c6244440b76c2c12551f3b71aae92b48f93
SSDEEP 96:4azqzqTxDkfA5YOaCh5n9AA5VJeejy8IHrssE7Ks/JXyyU84:Qzcj35nG0VEmlsrsb4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads