dogerat | 15328ea6d31bef8ddd15a81e0f5a549b[.]bin

Resubmissions

10/12/2023, 03:07

231210-dmancsdcf710

10/12/2023, 01:55

231210-cb476abdfr10

10/12/2023, 01:24

231210-bsmh1acgf710

10/12/2023, 01:17

231210-bnjasabbgp10

Sharing

Copy URL Twitter E-mail

General

Target
15328ea6d31bef8ddd15a81e0f5a549b.bin
Size 3.3MB
Sample231210-bnjasabbgp
SHA256 a778818cc08d213d1f66db5fa8b34aabc862569ecb99fd1aea37ff6ccab48400
MD5 15328ea6d31bef8ddd15a81e0f5a549b
SHA1 c52f12651d91a9bf0d625a879b34d194eba69ed4
SHA512 5939a527d289315ff6d354bbd6e834ae9b3f452aebc54114a0fb46cb5422e5537ff0592aa62fbd20d753162f6a3ae56cfd97c4320613d1377a9b5a7d6a525336
SSDEEP 49152:qLzu436uB6iejEyNRe1kqqGI18iNwDelhcTUr4T1S0NwBbGJ3H5+ELr42SKn2IQI:qHuKB6BzReWqqGWNN8g4ETBaJ7n2Izl
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

dogerat

Malware Config

Signatures

DogeRAT payload 1 IoCs

resource	yara_rule
sample	family_dogerat2

Dogerat family
dogerat

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

15328ea6d31bef8ddd15a81e0f5a549b.bin

.apk 3.3MB

15328ea6d31bef8ddd15a81e0f5a549b.bin

SHA256 a778818cc08d213d1f66db5fa8b34aabc862569ecb99fd1aea37ff6ccab48400
MD5 15328ea6d31bef8ddd15a81e0f5a549b
SHA1 c52f12651d91a9bf0d625a879b34d194eba69ed4
SHA512 5939a527d289315ff6d354bbd6e834ae9b3f452aebc54114a0fb46cb5422e5537ff0592aa62fbd20d753162f6a3ae56cfd97c4320613d1377a9b5a7d6a525336
SSDEEP 49152:qLzu436uB6iejEyNRe1kqqGI18iNwDelhcTUr4T1S0NwBbGJ3H5+ELr42SKn2IQI:qHuKB6BzReWqqGWNN8g4ETBaJ7n2Izl
MD5 SHA1 SHA512 SSDEEP

android

DogeRAT payload

Password

infected

com.sina.weibo

Android Permissions

15328ea6d31bef8ddd15a81e0f5a549b.bin

Permissions

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.VIBRATE

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.CALL_PHONE

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_SMS

15328ea6d31bef8ddd15a81e0f5a549b.bin

com.sina.weibo.pce8f9a3a

com.sina.weibo.p9c215b6d

com.sina.weibo.p06c94493

com.sina.weibo.p8ff4286d

com.sina.weibo.p9667335f

com.sina.weibo.p2587eb12

com.sina.weibo.p1e4804eb

com.sina.weibo.p1d2dbd8f

com.sina.weibo.pe3c0df12

com.sina.weibo.pa59641fc

com.sina.weibo.p5b61711d

com.sina.weibo.p09ef492b