gravityrat | 380df073825aca1e2fdbea379431c2f4571a8c7d9369e207a31d2479fbc7be88 | Triage

Sharing

General

Target

Cloudie.apk
Size

12.3MB
Sample

240226-ze5dnafe66
MD5

ec28788283207fa601777801450497f8
SHA1

84b337bdc96d540b1df8ed3772a75c6cc2095552
SHA256

380df073825aca1e2fdbea379431c2f4571a8c7d9369e207a31d2479fbc7be88
SHA512

2187a063dab6ff388265955fe3b6478780f832ced1ca7ae4981b79e3aaed01c76f293db64099bd5a7eb24c4041e9a9146c84791765695d242dd3a4a96e681cc4
SSDEEP

196608:vbqF11OSldaa+lUJxl448vDIg5Qe8g3ziNcnQE6MObB+5L9VTT18sGmtpfAs:vb4ca+SsLDIg5733ziMflOyT9GeAs

Score

10^/10

gravityrat android backdoor collection discovery

Malware Config

Targets

- Target
  
  Cloudie.apk
- Size
  
  12.3MB
- MD5
  
  ec28788283207fa601777801450497f8
- SHA1
  
  84b337bdc96d540b1df8ed3772a75c6cc2095552
- SHA256
  
  380df073825aca1e2fdbea379431c2f4571a8c7d9369e207a31d2479fbc7be88
- SHA512
  
  2187a063dab6ff388265955fe3b6478780f832ced1ca7ae4981b79e3aaed01c76f293db64099bd5a7eb24c4041e9a9146c84791765695d242dd3a4a96e681cc4
- SSDEEP
  
  196608:vbqF11OSldaa+lUJxl448vDIg5Qe8g3ziNcnQE6MObB+5L9VTT18sGmtpfAs:vb4ca+SsLDIg5733ziMflOyT9GeAs
Score

10^/10

gravityrat backdoor collection discovery
- GravityRAT
  GravityRAT family.
  backdoor gravityrat
- Reads the content of SMS inbox messages.
  collection
- Reads the content of the call log.
  collection
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Protected User Data

Call Log

SMS Messages

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gravityratbackdoorcollectiondiscovery

behavioral2

gravityratbackdoorcollectiondiscovery

behavioral3

gravityratbackdoorcollection