dogerat | 15328ea6d31bef8ddd15a81e0f5a549b[.]bin

Resubmissions

10-12-2023 03:07

231210-dmancsdcf7 10

10-12-2023 01:55

231210-cb476abdfr 10

10-12-2023 01:24

231210-bsmh1acgf7 10

10-12-2023 01:17

231210-bnjasabbgp 10

Sharing

Copy URL

Twitter E-mail

General

Target

15328ea6d31bef8ddd15a81e0f5a549b.bin
Size

3.3MB
MD5

15328ea6d31bef8ddd15a81e0f5a549b
SHA1

c52f12651d91a9bf0d625a879b34d194eba69ed4
SHA256

a778818cc08d213d1f66db5fa8b34aabc862569ecb99fd1aea37ff6ccab48400
SHA512

5939a527d289315ff6d354bbd6e834ae9b3f452aebc54114a0fb46cb5422e5537ff0592aa62fbd20d753162f6a3ae56cfd97c4320613d1377a9b5a7d6a525336
SSDEEP

49152:qLzu436uB6iejEyNRe1kqqGI18iNwDelhcTUr4T1S0NwBbGJ3H5+ELr42SKn2IQI:qHuKB6BzReWqqGWNN8g4ETBaJ7n2Izl

Score

10^/10

dogerat

Malware Config

Signatures

DogeRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_dogerat2
Dogerat family
dogerat

resource	yara_rule
sample	family_dogerat2

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

15328ea6d31bef8ddd15a81e0f5a549b.bin
.apk android

Password: infected

com.sina.weibo

com.sina.weibo.p9c215b6d

Activities

com.sina.weibo.pce8f9a3a

android.intent.action.MAIN

com.sina.weibo.p9c215b6d

android.intent.action.MAIN

com.sina.weibo.p9667335f

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.WAKE_LOCK
android.permission.REQUEST_DELETE_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.VIBRATE
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.CALL_PHONE
android.permission.RECEIVE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SMS

Receivers

com.sina.weibo.p5b61711d

android.provider.Telephony.WAP_PUSH_DELIVER

com.sina.weibo.p09ef492b

android.provider.Telephony.SMS_DELIVER

Services

com.sina.weibo.p1e4804eb

android.intent.action.RESPOND_VIA_MESSAGE

com.sina.weibo.p1d2dbd8f

android.accessibilityservice.AccessibilityService

com.sina.weibo.pe3c0df12

android.service.notification.NotificationListenerService

15328ea6d31bef8ddd15a81e0f5a549b.bin

Permissions

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.VIBRATE

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.CALL_PHONE

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_SMS

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.sina.weibo

com.sina.weibo.p9c215b6d

Activities

com.sina.weibo.pce8f9a3a

com.sina.weibo.p9c215b6d

com.sina.weibo.p9667335f

Permissions

Receivers

com.sina.weibo.p5b61711d

com.sina.weibo.p09ef492b

Services

com.sina.weibo.p1e4804eb

com.sina.weibo.p1d2dbd8f

com.sina.weibo.pe3c0df12

Android Permissions

15328ea6d31bef8ddd15a81e0f5a549b.bin