Overview

overview

10

Static

static

10

Apktool/SandroRat.apk

windows10-2004-x64

3

Apktool/Sa...ion.js

windows10-2004-x64

1

Apktool/Sa...r/w.js

windows10-2004-x64

1

aapt.exe

windows10-2004-x64

1

Apktool/apktool.jar

windows10-2004-x64

1

Apktool/efm.jar

windows10-2004-x64

1

Apktool/signapk.jar

windows10-2004-x64

1

DroidJack_....6.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_....1.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_...on.jar

windows10-2004-x64

1

DroidJack_...ll.jar

windows10-2004-x64

1

DroidJack_...ua.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_...10.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

Droidjack.jar

windows10-2004-x64

1

Visit orig...es.url

windows10-2004-x64

1

Analysis

  • max time kernel
    76s
  • max time network
    83s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/04/2023, 13:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Apktool/SandroRat/smali/com/esotericsoftware/kryonet/Connection.js

  • Size

    20KB

  • MD5

    7c17b2a188146572ae01e4eba51ac823

  • SHA1

    7870871c7412759914a531bbadadadd9b40cba0f

  • SHA256

    1062ed754de5cfe62154eee165ddaf239f0a18cdbee4969186c1722638c75b69

  • SHA512

    bbdc9e92fc44529344e951615b81359fa861c9d7296f98d3480b0472d13f9d6ffa7280db5ea0b0f519683a6ed0cd39e4f76e55e171884c1233486b0303590b9e

  • SSDEEP

    384:mkfeTkt87QiGEJRnzhn0QIayRfhT4hqGBix68vGiFLhonFxSw68WPAwaRIXp8Btd:7Eu6a0SzAn+kx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Apktool\SandroRat\smali\com\esotericsoftware\kryonet\Connection.js
    1⤵
      PID:824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads