General

  • Target

    gta5.apk

  • Size

    2.2MB

  • MD5

    e138740637794f749343398b1147af75

  • SHA1

    980c58b2d3522f805c04b253121e649188b50cbd

  • SHA256

    904d30accf7b10cd5dc1aca29f1868778a92373796f68cfc1dbeec8759a54d3f

  • SHA512

    fd1fa9ccb1a22c7ba8afaa53982637435c056c8c4a0680d646712844b9ebdbd7026428956b7ea36b6a98f20e2d97970ea08c38db09e8ec5cc4ec0272533438fd

  • SSDEEP

    49152:tJ0HIVL7DMQfF+Le3ihZrzDEd/W54itSJT/D1m/6KgvYAXU:taULRlShxDKsDSVe6wAXU

Score
10/10

Malware Config

Extracted

Family

androrat

C2

192.168.0.1:80

Signatures

  • Androrat family
  • Requests dangerous framework permissions 9 IoCs

Files

  • gta5.apk
    .apk android

    com.example.reverseshell2

    com.example.reverseshell2.MainActivity


Android Permissions

gta5.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE