201224e9c42a85859010309c6d365050a31f4407ec99e2e77dba0be00270b681 | Triage

Submit
Reports

Overview

overview

Static

static

Apktool/SandroRat.apk

windows10-2004-x64

3

Apktool/Sa...ion.js

windows10-2004-x64

1

Apktool/Sa...r/w.js

windows10-2004-x64

1

aapt.exe

windows10-2004-x64

1

Apktool/apktool.jar

windows10-2004-x64

1

Apktool/efm.jar

windows10-2004-x64

1

Apktool/signapk.jar

windows10-2004-x64

1

DroidJack_....6.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_....1.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_...on.jar

windows10-2004-x64

1

DroidJack_...ll.jar

windows10-2004-x64

1

DroidJack_...ua.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_...10.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

Droidjack.jar

windows10-2004-x64

1

Visit orig...es.url

windows10-2004-x64

1

Analysis

max time kernel
61s
max time network
68s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
04/04/2023, 13:39

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Apktool/SandroRat.apk

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

60 seconds

Behavioral task

behavioral2

Sample

Apktool/SandroRat/smali/com/esotericsoftware/kryonet/Connection.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral3

Sample

Apktool/SandroRat/smali/net/droidjack/server/w.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral4

Sample

aapt.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral5

Sample

Apktool/apktool.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral6

Sample

Apktool/efm.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral7

Sample

Apktool/signapk.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral8

Sample

DroidJack_lib/commons-codec-1.6.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral9

Sample

DroidJack_lib/commons-io-2.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral10

Sample

DroidJack_lib/commons-lang3-3.3.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral11

Sample

DroidJack_lib/commons-logging-1.1.1.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral12

Sample

DroidJack_lib/fluent-hc-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral13

Sample

DroidJack_lib/httpclient-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral14

Sample

DroidJack_lib/httpclient-cache-4.2.5.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral15

Sample

DroidJack_lib/httpcore-4.2.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral16

Sample

DroidJack_lib/httpmime-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral17

Sample

DroidJack_lib/jaad-0.8.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral18

Sample

DroidJack_lib/json.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral19

Sample

DroidJack_lib/kryonet-2.21-all.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral20

Sample

DroidJack_lib/quaqua.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral21

Sample

DroidJack_lib/sqlite-jdbc-3.8.11.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral22

Sample

DroidJack_lib/sqljet-1.1.10.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral23

Sample

DroidJack_lib/zip4j_1.3.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral24

Sample

Droidjack.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral25

Sample

Visit original article link for more resources.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Report Analysis Logs

General

Target

DroidJack_lib/json.jar
Size

47KB
MD5

092f12bcf4e448262cebda81c032950b
SHA1

7ad48f520e9f94787fdbf2beb9916c76971bdcb0
SHA256

38c21b9c3d6d24919cd15d027d20afab0a019ac9205f7ed9083b32bdd42a2353
SHA512

1eaa00c3d42d54e70c31a4aa2030895915023dc38b2060bbf72271293103f44da2cc6e3abc597519849cf5dc80dfa93998c6bb0083215e6ccb707eca75197c75
SSDEEP

768:X5so9soPVNnL6a6/+0nfj0GzsPnR+rz1mSv3mwCl/zpMwWGwhwAr9buUkrku0vcM:XOv4ZLOfj0VRyzpv3roLpBWGGwAr97k8

Score

1^/10

Malware Config

Signatures

Processes

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\DroidJack_lib\json.jar
1⤵
PID:1412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1412-143-0x0000000000D50000-0x0000000000D51000-memory.dmp

Filesize
4KB

Download

© 2018-2025

Terms | Privacy