General

  • Target

    Wpsapp.apk

  • Size

    2.2MB

  • MD5

    3dc4fa7c8f5cb742e4b64ddee6cc85fc

  • SHA1

    5f5b2c029d67ecd01f6c8963d1dc1c301e5adc8c

  • SHA256

    5ee2b256eb1770931a9f2d0108bef9e0dd73d8284d924781ea88eef2f27d35a0

  • SHA512

    cb19793e6c8e00dee33f22f7cd9310554f8aa97ebd21e79aba66754aca6d68adb3a86a53781b94e80316bd8cac3c245994f47795647a9f7b4ae0bc403c817562

  • SSDEEP

    49152:xgvY4t85raRDJEkjxw13qgJtyLb0PkkXHP0R/T0Ui/ZoL8yY/FdXx:Bjkjxw1z3P7XQ/T0dZoL8nXx

Score
10/10

Malware Config

Extracted

Family

androrat

C2

3.128.107.74:12404

Signatures

  • Androrat family
  • Requests dangerous framework permissions 9 IoCs

Files

  • Wpsapp.apk
    .apk android

    com.example.reverseshell2

    com.example.reverseshell2.MainActivity


Android Permissions

Wpsapp.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE