201224e9c42a85859010309c6d365050a31f4407ec99e2e77dba0be00270b681 | Triage

Submit
Reports

Overview

overview

Static

static

Apktool/SandroRat.apk

windows10-2004-x64

3

Apktool/Sa...ion.js

windows10-2004-x64

1

Apktool/Sa...r/w.js

windows10-2004-x64

1

aapt.exe

windows10-2004-x64

1

Apktool/apktool.jar

windows10-2004-x64

1

Apktool/efm.jar

windows10-2004-x64

1

Apktool/signapk.jar

windows10-2004-x64

1

DroidJack_....6.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_....1.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_...on.jar

windows10-2004-x64

1

DroidJack_...ll.jar

windows10-2004-x64

1

DroidJack_...ua.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_...10.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

Droidjack.jar

windows10-2004-x64

1

Visit orig...es.url

windows10-2004-x64

1

Analysis

max time kernel
48s
max time network
66s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
04/04/2023, 13:39

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Apktool/SandroRat.apk

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

60 seconds

Behavioral task

behavioral2

Sample

Apktool/SandroRat/smali/com/esotericsoftware/kryonet/Connection.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral3

Sample

Apktool/SandroRat/smali/net/droidjack/server/w.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral4

Sample

aapt.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral5

Sample

Apktool/apktool.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral6

Sample

Apktool/efm.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral7

Sample

Apktool/signapk.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral8

Sample

DroidJack_lib/commons-codec-1.6.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral9

Sample

DroidJack_lib/commons-io-2.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral10

Sample

DroidJack_lib/commons-lang3-3.3.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral11

Sample

DroidJack_lib/commons-logging-1.1.1.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral12

Sample

DroidJack_lib/fluent-hc-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral13

Sample

DroidJack_lib/httpclient-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral14

Sample

DroidJack_lib/httpclient-cache-4.2.5.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral15

Sample

DroidJack_lib/httpcore-4.2.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral16

Sample

DroidJack_lib/httpmime-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral17

Sample

DroidJack_lib/jaad-0.8.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral18

Sample

DroidJack_lib/json.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral19

Sample

DroidJack_lib/kryonet-2.21-all.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral20

Sample

DroidJack_lib/quaqua.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral21

Sample

DroidJack_lib/sqlite-jdbc-3.8.11.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral22

Sample

DroidJack_lib/sqljet-1.1.10.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral23

Sample

DroidJack_lib/zip4j_1.3.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral24

Sample

Droidjack.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral25

Sample

Visit original article link for more resources.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Report Analysis Logs

General

Target

DroidJack_lib/kryonet-2.21-all.jar
Size

329KB
MD5

3c05283c589306a23b8602c5bc474361
SHA1

d906a8f689f340b39a7f78bf9b4474aa819d7391
SHA256

eab8c51e0e3a11bb1411ace21d9876184d5084fde82ee298da03ca0627499151
SHA512

1aea27eb1b029ae1773e7b0ffebab51de79ee8746762ba153c4b20fd23b4c59f7c96804a08cc654b5ab9dc2135db14bccd69a6fe69e5677c3bd639f3176fc74c
SSDEEP

6144:TuCLxaF2a4FlrHUuOG8RhoSPPN9NO/G+yspLXbCjL:Hc25UVHVO/Hl3Cv

Score

1^/10

Malware Config

Signatures

Processes

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\DroidJack_lib\kryonet-2.21-all.jar
1⤵
PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2916-143-0x0000000001350000-0x0000000001351000-memory.dmp

Filesize
4KB

Download

© 2018-2025

Terms | Privacy