General

  • Target

    PHP RAT.apk

  • Size

    8.5MB

  • MD5

    d76694378928ca7065d1c9cbe1a54dc7

  • SHA1

    3f8db0cc74926e75967f39b83906af5cf86fd0c0

  • SHA256

    036ffe051ec7b5d223c86cb330ef0069d590a96e312e666ae5b28cdae242bb10

  • SHA512

    3c432f53932a819075ad73169907870ca97ab3e8073cdaa2fedce13ba710b6b92ab2b022ffa5b9a03c58fd1032ef6d1a300f53906904fd9618a88e2eb7aa7d76

  • SSDEEP

    196608:TaGN8kal4ZdRtYxBo0TyZJe+DVQeVQUVQ2VQkVQUoS:T18kalKYxW04dDieiUi2ikiUoS

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 13 IoCs

Files

  • PHP RAT.apk
    .apk android

    com.velociraptor.raptor

    com.velociraptor.raptor.MainActivity


Android Permissions

PHP RAT.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS