Overview

overview

10

Static

static

10

GPS (1).apk

android-9-x86

8

GPS (1).apk

android-10-x64

8

GPS (1).apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GPS (1).apk

  • Size

    2.2MB

  • MD5

    45356d4eb93e0e93f45bfd46edae52d3

  • SHA1

    3e38d2a4a9a0428477b221c83e7f7d4fbd06192c

  • SHA256

    ca5ef546eddbd982128a12e1684653cd2e0d35e4f0b33827765fcfacf83c5c23

  • SHA512

    8fce48aa2cbfb41a92dd9962a7b9f0946cda8512d8260783d9af97e6fd096e36dc195e6e5a7c1458da5fc15bd27bd1ce69dea190fbfc4dbe2aab53521cd719f2

  • SSDEEP

    49152:FJ/qLuUUgvYslxmM2in9uBDBSMLxpmK5M8ZfdOCLe:3fUmdS9unSMLxYK5M8hdOC6

Score
10/10
androrat

Malware Config

Extracted

Family

androrat

C2

132.184.128.123:25565

Signatures

  • Androrat family
    androrat
  • Requests dangerous framework permissions 9 IoCs

Files

  • GPS (1).apk
    .apk android

    Password: Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)Crazy Point - 444 (YEI808PROD)

    com.example.reverseshell2

    com.example.reverseshell2.MainActivity


Android Permissions

GPS (1).apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE