Overview

overview

10

Static

static

10

3a91e5ace8...88.apk

android-9-x86

6

3a91e5ace8...88.apk

android-11-x64

6

Analysis

  • max time kernel
    20s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    02/04/2024, 10:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    3a91e5ace8cbd8a29968bd400c63f893d4300422a17db9d0df2162f49d1c0388.apk
  • Size 3.4MB
  • Sample240402-mb7ndsef6t
  • SHA256 3a91e5ace8cbd8a29968bd400c63f893d4300422a17db9d0df2162f49d1c0388
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.drnull.v5
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4437

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 7f02dea140f292215ebef1af8d9b7db24407780a8e4e47aaf643c8cf23c0ed9d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 adefa82913d952642994aa7a0da6a409c3c8229d6e3a20f1ecbf0d1f0bad4501
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 0981fb3d3a425c3bac15f34f7c53f893291991c4b5e9c19fa6381114161f38e8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.drnull.v5/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 451d7e2c155cf9ebdda5b38687286f6fd9e758eff23cfe225faf5aeb2f2d0b36
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation2583072934559388792tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation2583072934559388792tmp
        • Size 90B
        • SHA256 1da0d265593cffde8726924fac86da0662a2b4c134730bbd7635ef520f91b48b
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation5135560214534964442tmp
        • Path /data/data/com.drnull.v5/files/PersistedInstallation5135560214534964442tmp
        • Size 567B
        • SHA256 6f0b243eafc863ca4721fe7120de7816435dd0e94cfcf0d86a74ae98c023ee1c
        • MD5 SHA1 SHA512
        Submit Download

        database.db
        • Path /data/data/com.drnull.v5/files/database.db
        • Size 102B
        • SHA256 1f692c70f655985b3a00d7280a8b3531684980cbeffc0c30930e6b2d6eb07d74
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.drnull.v5/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 f46aa5b3aeeeaa9625d4a87b860a1e8b28ed96a57a2c1d9dab1612de0c384159
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.drnull.v5/primary.prof
        • Size 1KB
        • SHA256 a9e27277be6cd2059f1fc3a57f92449d56ed7f6464381c3bd402d5bf541aea94
        • MD5 SHA1 SHA512
        Submit Download