418a4f1832bb257443f24395ffa33f7ab17c308cee40843fb08cf708181f2f34

Analysis

max time kernel
27s
max time network
155s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
01/03/2024, 16:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Application.apk
Size 3.7MB
Sample240301-tt7jnsab34
SHA256 418a4f1832bb257443f24395ffa33f7ab17c308cee40843fb08cf708181f2f34
MD5 d51b1a442498b0cb27be21f174fa534a
SHA1 7dec82f84efd643c6b9aa7a536d21f1ae1a0a96d
SHA512 ffe077b06c555794b96ebb5cd38e23b961e61845e5f0a08095bd9d0d71cc50c1c43da6d39ba983855fff6e8140f05cf3678c174f1aa72666b6090883ac9b47d5
SSDEEP 98304:du/c4rvTwEbl4RoTwr5qcY8ROfjfShYe4LhLuXZF1Iw9eGnLeVI:duU0blDHBL8
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs

banker discovery

Security Software Discovery

T1418.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.drnull.v5

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.v5

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.drnull.v5

com.drnull.v5
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4596

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
Size 56KB
SHA256 a805dce78c4f4b01b84dd410e2d4d3e18b5533f501eb4fffe412052a9a418b75
MD5 f2a9b9594e46561f3bff71f0505a8362
SHA1 848e058b3f0e3ea57638bbc31fa76ad99fd9a9f2
SHA512 87236045a75177e06454f2a32e55aba520a6302f58e791c7ddbf4b957a5cf62136aa3e901c87d390c18b72c5d9780afc8ebaf1cb912e297dca14239f7893b829
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSDc:rAMEX0wIyNjaDc
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 6b812dca8830a761268c2c5d39335eb608928b023f077be258ea3fe18eb10808
MD5 2794f1474411fcc7bf8bd01611d228b5
SHA1 ee902e70da989d50c9c6a878ed8bc5fe717d9751
SHA512 2fbad47dfe6b8cac225c3f866532eca3a1f2554abfca0e593033188e25c5344eb72960da446cfe21999abf9cac1b4cae9727c1eaa77fca8c18feba9138cd0f5e
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 5136a0889e55e858d57dfbbf5a6a4b938cf59ad9ba0db166d57da928704edce9
MD5 1ae422b85da7e1a048655fbe9f9de8b0
SHA1 e6e9935767aa9894cab7f88a1078743893f0318d
SHA512 7984b3604064f687a7b9628f49ea85dce5d0c6f27774bebb8f40c28e9eb508879c2bb28c602b37a3fa7f40da72f070c8a1f8877a2fd7bc28fc9c8899615b1f8f
SSDEEP 6:7+/l9qnOn1Sn/pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKJ:7+t4nR/pqLiuWdYRmBEyPbC
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 754648052fbdcaf1daf468414ca5109fd68cffa98af5f0b98db6ebf9cc61d6f8
MD5 762ed64d9da93d87ae129d5e6fb43d95
SHA1 b7a5e98138c36db02e0070e4dd14f2cb9da7f584
SHA512 ade978af9e4fdc561f2112cd7684fffdf739e270350bd9d2df46047454d59f3f268093fffe9127e23c626e9dd63c9cccc739f079d5f4ec165119572d2c78ab8d
SSDEEP 6:7+/l9agPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6klnM/G:7+tE4qLJdeWRmBEyPb5CnsG
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation4706457792924159285tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation4706457792924159285tmp
Size 568B
SHA256 dbe53c24d7ec7964b892c478d10a3769bdab1a0dcedb27b0a02d7545b85dc367
MD5 dbb911cad7f8871bc33365aae47011d7
SHA1 a35df702a813118fd34f7e161f5511d370ad5c72
SHA512 4e415b6f7e19ca3fe1b55cac27f9315182324a299224d4585ca5782b21de7981bac2655bd4501dd3954791febd61c2e5cdc5a15ecbdce94866d3df715cb09d0f
MD5 SHA1 SHA512

Submit Download

PersistedInstallation6095342467148355894tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation6095342467148355894tmp
Size 90B
SHA256 04f1a5261be893653f4cda4e7010ce8a61aeab9c8b11c335f841458e42f0103c
MD5 162d82b850cfb69b4c2d0607289ef6b3
SHA1 6cb62b8880a4ccee08a2d4fbe3e9d72207f98411
SHA512 dfca6eaa93debf8dafa06a06d3e8b3115192744a3db26cf28137cfa7a325687e4c55f790e546b9c93962d32b6482c4a1f25ee8d18a3a695fba1cda91302ad09c
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 98ec527d8299a08cf86c032386317cce34198eb05ebe08624de8f73357c5f76b
MD5 913908a7b0f225caacc75f2d92508eac
SHA1 fad245c6c24bef44cde13ac09090f63df8d1821f
SHA512 d0a9d033ea525569ba0af3965682c86e6c9a3dc783d6782fba05baa95087a8caf228c7db965611574ba9988febfdddadc3e58dc1faa98dfa632a91e54990f5b9
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 72963dde6e2d3d2e6565c29553df0860ff80d8dbaf13e933ef85dc937d33f5aa
MD5 8c95a42c4081e3de0b3e96851a1ed582
SHA1 e44996feb2243a114796109aca18d9f4737f7542
SHA512 c08b09c155e6381558b1569c5a447a28a251066098aba7dbf431b8da761bfd2cc56b25dea1483cca8a7ee9e5fd0d2b3337bd1c79b37005df697fb6b63082af4f
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 1KB
SHA256 44707b381268dc9c7cbcc33173cc5edb90e0b989e97e30b5ad94e1c95e541d26
MD5 f70519e5e968727485de5380d97031e0
SHA1 b8a382fb9299ae2204882f96623d3ede40f4cdc3
SHA512 88290f75c80871a5752aa3c593f27484c6ff5fff20123e19eb9104801f7f626a9246b43c86c34b6b88978f2d103584a5800b2d4ce5ccfa706ad5bb765eb62cd2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads