888rat | 8fff451a8088ec7b89800fc743d43034a6531304429309beb073f888813ee16f

Analysis

max time kernel
3751921s
max time network
153s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
26-12-2023 14:07

Target

7462d3be5f649b52794ca5a1f1d201f1.apk
Size

4.7MB
MD5

7462d3be5f649b52794ca5a1f1d201f1
SHA1

2120f85722f2ad7ea1bec4d779ca738de28af9c6
SHA256

8fff451a8088ec7b89800fc743d43034a6531304429309beb073f888813ee16f
SHA512

77bdfdcd7db1617f94f1cfa041c895a19e1a4683b14252c2b4c22a60b87009a6aaf3c94e52f32f68d684c7b9608a4952418b14ce9b2b94db5a8e4d2e7e565f9e
SSDEEP

98304:DPDrwLnOoQqcwP91K8CTn2cil3MhlkGKfSJsg5CDX3po4dN4feL8I:fr6OoQ7c91Fw6lcbhJh5enpo4dN4feF

Score

10^/10

888RAT
888RAT is an Android remote administration tool.
trojan infostealer rat 888rat
Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

com.example.dat.a8andoserverx

pid process

4609 com.example.dat.a8andoserverx
Acquires the wake lock 1 IoCs

Processes:

com.example.dat.a8andoserverx

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.example.dat.a8andoserverx

pid	process
4609	com.example.dat.a8andoserverx

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.dat.a8andoserverx

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

com.example.dat.a8andoserverx
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
PID:4609

/storage/emulated/0/.app.apk
Filesize
18KB

MD5
7f85384e0b5814948a2fa98bbe94245a

SHA1
382f4ffc6d5321c332de6f1ee5c989b8468ed0ff

SHA256
4766d01fa2186df427e6e03ffd55139e33dfad7b8be73391095b267010391c33

SHA512
78a2deb141808376b1dc30a6143edd3932c0208f2ae836d9e745ef5e4e51943ad4ce2be2d28aad40928ebee3082190bf14a4ceeda32a3cd7d3c2657d7f469c3b

Download Submit