dogerat | 189f3eb2f75106a7f9416b1a92800c9f

General

Target

189f3eb2f75106a7f9416b1a92800c9f
Size

3.0MB
MD5

189f3eb2f75106a7f9416b1a92800c9f
SHA1

82fbc3c640aee29b8dc0e6a9c88b0eb450b25556
SHA256

f1cd0e742102754233bf83ffbb718b3c4c830a603e41cd1090b9cba5331a1933
SHA512

3e1cb82b714ae058666453c45b899d4af5de33ee7e486f33c27ae716afcbaf5a657386969ad5a5053c6666e4504c26f8a2c7e88b000f5debcb97f91afed13920
SSDEEP

49152:KKXXByEPmieQpAkKKhMpMbKm1SzoNrxHauzZ6Fe5K+xmXzoJgNw9wn3aQQS:K+yE5eQpZh32zojHauF4eY+B9RBS

Score

10^/10

dogerat

Malware Config

Signatures

DogeRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_dogerat2
Dogerat family
dogerat

resource	yara_rule
sample	family_dogerat2

Declares services with permission to bind to the system 2 IoCs

Processes:

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

Processes:

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

189f3eb2f75106a7f9416b1a92800c9f
.apk android

com.sina.weibo

com.sina.weibo.pdd4f2ff0

Activities

com.sina.weibo.pe68837fe

android.intent.action.MAIN

com.sina.weibo.pdd4f2ff0

android.intent.action.MAIN

com.sina.weibo.p2e25ec69

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.REQUEST_DELETE_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.WAKE_LOCK
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SMS
android.permission.CALL_PHONE
android.permission.INTERNET
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_NETWORK_STATE

Receivers

com.sina.weibo.pec08273e

android.provider.Telephony.SMS_DELIVER

com.sina.weibo.pb601e383

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.sina.weibo.p5ac58bb5

android.intent.action.RESPOND_VIA_MESSAGE

com.sina.weibo.p2bc32733

android.service.notification.NotificationListenerService

com.sina.weibo.pa5234fd9

android.accessibilityservice.AccessibilityService

189f3eb2f75106a7f9416b1a92800c9f

Permissions

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_SMS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_NETWORK_STATE

Sharing

General

Malware Config

Signatures

Files

com.sina.weibo

com.sina.weibo.pdd4f2ff0

Activities

com.sina.weibo.pe68837fe

com.sina.weibo.pdd4f2ff0

com.sina.weibo.p2e25ec69

Permissions

Receivers

com.sina.weibo.pec08273e

com.sina.weibo.pb601e383

Services

com.sina.weibo.p5ac58bb5

com.sina.weibo.p2bc32733

com.sina.weibo.pa5234fd9

Android Permissions

189f3eb2f75106a7f9416b1a92800c9f