ad3e12c568548b28c0856586a92460150175344403a00f4f023ad229f3c14b9a

Analysis

max time kernel
46s
max time network
150s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
11/03/2024, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
saham.apk
Size 3.4MB
Sample240311-1pfcysfd2x
SHA256 ad3e12c568548b28c0856586a92460150175344403a00f4f023ad229f3c14b9a
MD5 2e4bbafce56cce8563054c93f34c8f4e
SHA1 71f920d527af88bb1fa055ccf78199ed9bb47faf
SHA512 da64fffbcabaaf48a0d5ee407f381680e1ffa804f7d3e189cfa0bbc9ee6dd3e8c38f3ecd696780953da90eea4641ace842747c035bf8abd5d8d59d3dd2598c9d
SSDEEP 98304:l3ndmZBa7LLP15oTwr5q8O0AaeMPNv2xWkVSKd:l3dmZBanLP12dev+pd
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.drnull.v5

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.drnull.v5

com.drnull.v5
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:5099

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
Size 12KB
SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
MD5 163b0e3f017becbc89b9d7f330b78f09
SHA1 1ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA512 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
SSDEEP 6:l9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKG:TLiuWdwRmBEyPbZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 f9a5cb0c16fca32b109be61f358ae1469e21530de74ef8496b6603c500169362
MD5 c2294e0c62873c7447c219a7e7d9cbe1
SHA1 dd89bf8628416daf0bc7fdcb6f298ab981c1b7ef
SHA512 5e7357e85adb95931b175c3ba8f6da1ec9a43b4ad75994c6c17f654917f6bd889f24ea1df4f320dbbf2baa3730c7c1c238cadad3c51e4b76475d5b3836cbf3e4
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 19d454a7b6362cbe4b3fd37ce4dde9023b8007d851e3de436bf6d391f3e60b41
MD5 fd653612a2541dbab6984c7948644c06
SHA1 eed8e87d1cdca27b87fa02e65fe9f3c0e89c166e
SHA512 f1dc5ac0745906fd2f281cb19eeb15de4bb832d7e8441e8727f405bb2838cecbab4e0aa6c372abf8f3da3429294cc023664e8750b505d96ecdf773d3ff634cbc
SSDEEP 6:7+/l9gn1Hvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKAf:7+tsvqLiuWdwRmBEyPb/
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 5571f8df230bf831a9afd0c3a8a1c05be83b5b065924c67d55e362a7d0df5342
MD5 be4276b7b033b6feaf96261087c2c2ac
SHA1 372e1ea7d0b9902c38e5c2b98f5ffc79aa50be12
SHA512 5b23a61a5da7c1dc678d050f9a5b258177e355c2893225f4c4825fdcb99953bc8b5307829f573506e957e9383c9c49ac1d4beddb07dae36d970d34510f83f0ca
SSDEEP 6:7+/l90OPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKta/s:7+tZqLJdTRmBEyPbfs
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation2521797382363424615tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation2521797382363424615tmp
Size 90B
SHA256 0fd5f8c5cc53c1c67819180b0c930304674079bb60042e5250f5bead947810c5
MD5 890d13e8ec193d58e954c6d6dce32961
SHA1 a6251fdad84f5afb4ec45752b41932bbcc9dae66
SHA512 f0c27e7e75ae5afae706cee96bc1299bc74317b40bab7e441246a1e5edf6aed2e1f94104034e4eae64af94c83dee1911d117656be0f29837adf91637a9dbaa1f
MD5 SHA1 SHA512

Submit Download

PersistedInstallation269142659568722190tmp

Path /data/data/com.drnull.v5/files/PersistedInstallation269142659568722190tmp
Size 569B
SHA256 d07c79ef62bef221aa2bb16d18d4fb56171191ba9da6dca0cc39b812667d0322
MD5 da5dd9e42b3dad0c899b21d9b7f99b9a
SHA1 d2b47739dd7d212a3b09776b0f35619d4d40c0e8
SHA512 67b72a1ad71dbaf400425780d2ba016d99a85aa7864f137f335201203ee6bd21ecea4457a469143366e0e2e7bb842c8e590d1bd55b44177c1a9663adfdffc06d
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 950b1cb004a940bde18d136c255bf6443191b37e63714df794c3479283be4604
MD5 f0d433d10b56851f65ee9d6feb074334
SHA1 c3d6d192896589bb0019bd4d206fb8bb95010b33
SHA512 5d2cc50acc81f02d208fae6fefc297f3f02a9e7468a2a501552a9712fb70632f79090aa8d297d0cdb5e13a8be484588a3c9d0870c816d861f725bff6ccf9d0b1
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 9bbdfb6b204ac40721d83f726dc235cb83455685d6ae4067b358e8a4f7e9abd1
MD5 bca6deca9379ac9ae6a32000f46fbf5b
SHA1 ec677cce678fdfbe13b027a38606bc7a05e2dca9
SHA512 6b79e935c0753eedf11fa469a97d584cf1a39d55455fa357f5bed4d0080daa20c47daeda287c9c7df701ac3ad95a856e9b43f41d1f853976b634b87699c0b50c
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 102B
SHA256 6c7f405e5dd5fa72f890ee55a7f38156c0b2e7f57c304bcbcb43f99363a3136c
MD5 d1bd3cc4da1e3a8a12896e68a0ab05ef
SHA1 f5ceb16bad585e27dbcc345351efb7a25f22c2f6
SHA512 e097010dc42e1fc8637e3d3a25dbcda7d5db1da6cfda680a0b89075642d4dcde5f24d19ce5b07fab6f049034377de6b6c22a136c2551fddb0d33d7b65e7eeba3
MD5 SHA1 SHA512

Submit Download

database.db

Path /data/data/com.drnull.v5/files/database.db
Size 415B
SHA256 d63a55d6994cd47aab94a8e2423c6a4febdc1a360a49becd928c401d04f0144b
MD5 82fbc4f4a14d34147334aafeda6e7b5d
SHA1 3c6780cf8b107c942e09bd4bf900ffd3fbd1f606
SHA512 fa8a0a18cd0b3765bf3c78b1c14f4c45cbc90f9e4847e8d09a54f8ea3c63709c3090a118f8e04f0e7867f8e4a8b66c0a7f491b907b3a70c9353d86f3a94b00ac
MD5 SHA1 SHA512

Submit Download

profileInstalled

Path /data/data/com.drnull.v5/files/profileInstalled
Size 24B
SHA256 4c2f32140b0613928b7375669e2de31ec839c4a86149e585e8522970bcf957d5
MD5 78045cf21532c4f171848d195584d0a9
SHA1 ec30c57c51e29381054f83245fe607d5ce509876
SHA512 e890711451190f68f5e1220b0b8c3cb34795c0e194c5dd85c8b1ad94ead03c2ca7630b18752282309035584b64c37b4ed0836ce281333b7283addbd684588e7a
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 362a68f0bfa602802998edd8cc4820a2d02048759b2a99f880d9c799e382d91f
MD5 2f7a0574f53493056ba69714a05d1db3
SHA1 1d3215562b52d58b7f0adbc21ca0d36e702594da
SHA512 da342f718bbbbca0d074659b091272faf8524cecdc85be0adfbe63d0a7bb2ca09b9f758d50da11862b70bec9e34ec94c0be11d45058a991783b3038f2817a587
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 1KB
SHA256 a9e27277be6cd2059f1fc3a57f92449d56ed7f6464381c3bd402d5bf541aea94
MD5 71a2513c209c8239600dba4a08f44e11
SHA1 5bbecfe2ceff2e85bf7e6f0dd4b446fd706a7588
SHA512 d2d6e80c92f079312eb7e049736f93266a5506459b793937bbe191200ef01d1ab80949cd956147bf85c72523a9fc7e23bb1cdb0e1e843e41373d1a6483c013de
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
Size 2KB
SHA256 a44b4465a45bf27785e768c9e2e27c073ee98bca8eaa31586c1798fd618f4e26
MD5 2a1a7e8fa87952b3100df605d0b9dd65
SHA1 274fafef17b3553077ca4ce2c85187c1164d7d69
SHA512 dc3d030ae74390fc25d4e0a625e0a2ea039042853eb283ce4d5c20515090c383409b8257ecfef23e9819407319c049799a3dc4d962692ef0fbf494b56c1b3df0
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads