201224e9c42a85859010309c6d365050a31f4407ec99e2e77dba0be00270b681 | Triage

Submit
Reports

Overview

overview

Static

static

Apktool/SandroRat.apk

windows10-2004-x64

3

Apktool/Sa...ion.js

windows10-2004-x64

1

Apktool/Sa...r/w.js

windows10-2004-x64

1

aapt.exe

windows10-2004-x64

1

Apktool/apktool.jar

windows10-2004-x64

1

Apktool/efm.jar

windows10-2004-x64

1

Apktool/signapk.jar

windows10-2004-x64

1

DroidJack_....6.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_....1.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_....5.jar

windows10-2004-x64

1

DroidJack_....4.jar

windows10-2004-x64

1

DroidJack_...on.jar

windows10-2004-x64

1

DroidJack_...ll.jar

windows10-2004-x64

1

DroidJack_...ua.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

DroidJack_...10.jar

windows10-2004-x64

1

DroidJack_....2.jar

windows10-2004-x64

1

Droidjack.jar

windows10-2004-x64

1

Visit orig...es.url

windows10-2004-x64

1

Analysis

max time kernel
76s
max time network
81s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
04/04/2023, 13:39

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Apktool/SandroRat.apk

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

60 seconds

Behavioral task

behavioral2

Sample

Apktool/SandroRat/smali/com/esotericsoftware/kryonet/Connection.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral3

Sample

Apktool/SandroRat/smali/net/droidjack/server/w.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral4

Sample

aapt.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral5

Sample

Apktool/apktool.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral6

Sample

Apktool/efm.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral7

Sample

Apktool/signapk.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral8

Sample

DroidJack_lib/commons-codec-1.6.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral9

Sample

DroidJack_lib/commons-io-2.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral10

Sample

DroidJack_lib/commons-lang3-3.3.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral11

Sample

DroidJack_lib/commons-logging-1.1.1.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral12

Sample

DroidJack_lib/fluent-hc-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral13

Sample

DroidJack_lib/httpclient-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral14

Sample

DroidJack_lib/httpclient-cache-4.2.5.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral15

Sample

DroidJack_lib/httpcore-4.2.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral16

Sample

DroidJack_lib/httpmime-4.2.5.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral17

Sample

DroidJack_lib/jaad-0.8.4.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral18

Sample

DroidJack_lib/json.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral19

Sample

DroidJack_lib/kryonet-2.21-all.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral20

Sample

DroidJack_lib/quaqua.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral21

Sample

DroidJack_lib/sqlite-jdbc-3.8.11.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral22

Sample

DroidJack_lib/sqljet-1.1.10.jar

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral23

Sample

DroidJack_lib/zip4j_1.3.2.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral24

Sample

Droidjack.jar

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral25

Sample

Visit original article link for more resources.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

60 seconds

Report Analysis Logs

General

Target

Apktool/signapk.jar
Size

7KB
MD5

aec6985fe2314e4d032ba6d192ac4163
SHA1

b16f006e7bf509add528f4b9a075ca373d531203
SHA256

b17534e89a5b58d5e343ba54a49da579cf9213988f4beeae24fe4582a0c226bb
SHA512

5347fb296f87fb71046e0fd261a495485254ed7bd6d68da3aebb346267e5bc14ad8a89aa5496b31b2bf0da35b8c7c4cbbf71ace977443f09ecdbe50e1288bcea
SSDEEP

192:20AfGZ6TJSM/+Lz2dBM8ZRSvdrGanQRSHFzJ:dj6tof2nMySvldT

Score

1^/10

Malware Config

Signatures

Processes

C:\ProgramData\Oracle\Java\javapath\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\Apktool\signapk.jar
1⤵
PID:2796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2796-143-0x0000000001140000-0x0000000001141000-memory.dmp

Filesize
4KB

Download

© 2018-2025

Terms | Privacy