brata | 3ee80340fa3dafb3d11a27ea9f325c81c1df9952b9344314ce240ed9a94318d0

Analysis

max time kernel
644s
max time network
130s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
22-10-2022 14:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3ee80340fa3dafb3d11a27ea9f325c81c1df9952b9344314ce240ed9a94318d0.apk
Size

3.1MB
MD5

f675e46a45404013d733b0d2368004dc
SHA1

29e659f1c8fe3ec887a19e60544eb4c9f8b9b9c5
SHA256

3ee80340fa3dafb3d11a27ea9f325c81c1df9952b9344314ce240ed9a94318d0
SHA512

b399da51eb428830ddb1b070a3a7b543dabb3c011b9ba5cc8ccca28bd139bb5b7c8e06bcd15da90985f3334659c351def8b4300fee0a872f9d3c9bd0cdea46cb
SSDEEP

98304:KcOQpis5P/Y8oTKK/tgB6YlwimaUv3RFAn:BfzHktgkGwBa833i

Score

10^/10

brata banker infostealer rat trojan

Malware Config

Signatures

Brata
Brata is a banking trojan malware first seen in 2019.
banker trojan infostealer rat brata

Brata payload 6 IoCs

Processes:

resource	yara_rule
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	family_brata2
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	family_brata3
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	family_brata2
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	family_brata3
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	family_brata2
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	family_brata3

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.rockstargames.bully

ioc	pid	process
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	4771	com.rockstargames.bully
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex	4771	com.rockstargames.bully

com.rockstargames.bully
1⤵
- Loads dropped Dex/Jar
PID:4771

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex
Filesize
3.8MB

MD5
878597371174666d0fed2ebaefe5f624

SHA1
a0516e09e14862798de4b7d4dbefb78265a7076a

SHA256
749aca21ea364578ec00db5c5aa1a98031598f881319b444539e59f875b2b551

SHA512
41eecfd7140f3b1127f3b897b4049cb74d4eef9c23abe1d2dcd70351f3d6530ba368ef42a5dc12ad916b588bee93fcb67769ea588f41dd884cb267895f4817dd

Download Submit
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex
Filesize
3.8MB

MD5
878597371174666d0fed2ebaefe5f624

SHA1
a0516e09e14862798de4b7d4dbefb78265a7076a

SHA256
749aca21ea364578ec00db5c5aa1a98031598f881319b444539e59f875b2b551

SHA512
41eecfd7140f3b1127f3b897b4049cb74d4eef9c23abe1d2dcd70351f3d6530ba368ef42a5dc12ad916b588bee93fcb67769ea588f41dd884cb267895f4817dd

Download Submit
/data/user/0/com.rockstargames.bully/app_ded/C3mo8Ml4ZZXa3lLyi64u02m6HKqX8oCJ.dex
Filesize
3.8MB

MD5
878597371174666d0fed2ebaefe5f624

SHA1
a0516e09e14862798de4b7d4dbefb78265a7076a

SHA256
749aca21ea364578ec00db5c5aa1a98031598f881319b444539e59f875b2b551

SHA512
41eecfd7140f3b1127f3b897b4049cb74d4eef9c23abe1d2dcd70351f3d6530ba368ef42a5dc12ad916b588bee93fcb67769ea588f41dd884cb267895f4817dd

Download Submit
/data/user/0/com.rockstargames.bully/files/a11y
Filesize
8B

MD5
2e5d8aa3dfa8ef34ca5131d20f9dad51

SHA1
3cc1d5a427a45820b04fe30f78a972b784952460

SHA256
cde0fb0dec1400c54a0f7e7eafa73624c53e4da258bbd34b3380a0defeba95c1

SHA512
a0527c1de9df8c529337f73be73cf98fcde155fcf00c7522f67a4a6298b52853d9767815d8811c2a7e5e829871a5dea9174b2b7e90fb7c98a62467240dd78434

Download Submit