General

  • Target

    Shootranger.apk

  • Size

    2.2MB

  • MD5

    bed5469c8d2e1768083bdaefff9a0187

  • SHA1

    bcfbeadd4fdbdbb163080f6284430642d2406cae

  • SHA256

    9de76eb34fb7fb6853d1057ae64406f979869d88ffbd63d246bbd949cf91c3ab

  • SHA512

    a64f260e2347b41e1744d1c58b0b2c83d6d5a7ea709d51ee0b08f230754f3aba2915e9dae84d508cfc8a04aab4beee06b781aa73edb1ea2a03d516a65cf547b9

  • SSDEEP

    49152:Opb7P5zQSc1LwQj3yzN1yxNA7PAFsiaBEH5CuLcN3rsrk7gvYiH:QbhQxLwQgFL5VEH5C/EkXiH

Score
10/10

Malware Config

Extracted

Family

androrat

C2

3.68.171.119:11976

Signatures

  • Androrat family
  • Requests dangerous framework permissions 9 IoCs

Files

  • Shootranger.apk
    .apk android

    com.example.reverseshell2

    com.example.reverseshell2.MainActivity


Android Permissions

Shootranger.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE