brata | gen_signed[.]apk | Triage

Sharing

General

Target

gen_signed.apk
Size

935KB
MD5

39fc190f40468e2c713fcd2725356a3b
SHA1

19fd366428ca7bf56cedb6a55019f72b0314cd04
SHA256

c269977d96662d44470d8bb28c023efb00f02eaf1f06f0ad0bb3c5494136005f
SHA512

67bbace1d902479e4fdaed54881842903789819b896b8d194d368aef9a478c537574888f4d8414e71591d3584d31c42b1a41ceea8705570193827a1ad62ea788
SSDEEP

24576:vo0BrfTjg3Te4tFe+Fo2Xm7eqljNk42wM3plRZwGOn:vfBzTjg3TttFecO7eoxXZm7on

Score

10^/10

brata

Malware Config

Signatures

Brata family
brata
Brata payload 1 IoCs

Processes:

resource yara_rule

sample family_brata4

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

gen_signed.apk
.apk android

SIM.Toolkits

.main

Activities

.main

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

.starter$starter_BR

android.intent.action.BOOT_COMPLETED

Services

gen_signed.apk

Permissions

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED