General

  • Target

    iRecorder - Screen Recorder_2.0_Apkpure.xapk

  • Size

    28.0MB

  • MD5

    c633d1828fb1d455febd32e2b1cb1961

  • SHA1

    ff558bc9d5f61ac611f1d81b73f46281a22e5213

  • SHA256

    8611b2e4bc12932b5b663ef92ee831d92ed00bb1a35fa8113184bd301b72e0fa

  • SHA512

    7af665ec036eaa3c263f52577d16f302787c100ddfb41ac5d96e6b37c945be9ebc52678c018c25f19af5cd6fab70996f351e64fb09d61c75281a9825d9390f01

  • SSDEEP

    786432:SF6OGP6/RD+6cRE/5DAipYTK61mzc5Jt7s+eOVfY2o6I2GJCNICtVJoVgmXqMC0+:C6xPsRDaEZAiiy+eSfYVY

Score
10/10

Malware Config

Extracted

Family

ahrat

C2

http://80876dd5.shop:22223

https://order.80876dd5.shop/

Signatures

  • Ahrat family
  • Requests dangerous framework permissions 7 IoCs

Files

  • iRecorder - Screen Recorder_2.0_Apkpure.xapk
    .zip

    Password: Tttt

  • com.tsoft.app.iscreenrecorder.apk
    .apk android

    Password: Tttt

    com.tsoft.app.iscreenrecorder

    com.tsoft.irecorder.activity.SplashActivity


  • SF-UI-Display-Thin.otf
  • baseline.prof
  • baseline.profm
  • f01.ttf
  • f02.ttf
  • f03.ttf
  • f04.ttf
  • f05.ttf
  • f06.ttf
  • f07.ttf
  • f08.ttf
    .ps1
  • f09.ttf
  • f10.ttf
  • f11.ttf
  • f12.ttf
  • f13.ttf
  • loading_new.json
  • rate-app.json
  • config.ar.apk
    .apk android

    Password: Tttt

    com.tsoft.app.iscreenrecorder


  • config.armeabi_v7a.apk
    .apk android arch:arm

    Password: Tttt

    com.tsoft.app.iscreenrecorder


  • config.de.apk
    .apk android

    Password: Tttt

    com.tsoft.app.iscreenrecorder


  • config.en.apk
    .apk android

    Password: Tttt

    com.tsoft.app.iscreenrecorder


  • config.es.apk
    .apk android

    Password: Tttt

    com.tsoft.app.iscreenrecorder


  • config.fr.apk
    .apk android

    Password: Tttt

    com.tsoft.app.iscreenrecorder


  • config.hi.apk
    .apk android

    Password: Tttt

    com.tsoft.app.iscreenrecorder


  • config.in.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.it.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.ja.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.ko.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.my.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.pt.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.ru.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.th.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.tr.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.vi.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.xxhdpi.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • config.zh.apk
    .apk android

    com.tsoft.app.iscreenrecorder


  • icon.png
    .png
  • manifest.json