General

  • Target

    SarimS.apk

  • Size

    2.2MB

  • Sample

    240229-gz5aaagf8t

  • MD5

    35203bc8be54899d2b15f6971c0e40d4

  • SHA1

    93dc988e6d40c4a562dfbc71e37015bfc5f4d273

  • SHA256

    af9954702fa93ea6de2eef5a4e5e89bacfaf72e12dafd6d48c5a5daa720da80a

  • SHA512

    5c082836175622d7b604e85f4ac103fef536166ab3a03e33292c784956a390fbe550754a83d55cd0f52069e088d491751e910f6baf3e971457316a96e533dc5f

  • SSDEEP

    49152:3fm+m2u/gvY+aqKp/UfSKrqs0HVZ9YUyyW+XahWqOplQiwdCH:3OQYRq9TmRYAAbdCH

Malware Config

Extracted

Family

androrat

C2

10.0.2.15:4444

Targets

    • Target

      SarimS.apk

    • Size

      2.2MB

    • MD5

      35203bc8be54899d2b15f6971c0e40d4

    • SHA1

      93dc988e6d40c4a562dfbc71e37015bfc5f4d273

    • SHA256

      af9954702fa93ea6de2eef5a4e5e89bacfaf72e12dafd6d48c5a5daa720da80a

    • SHA512

      5c082836175622d7b604e85f4ac103fef536166ab3a03e33292c784956a390fbe550754a83d55cd0f52069e088d491751e910f6baf3e971457316a96e533dc5f

    • SSDEEP

      49152:3fm+m2u/gvY+aqKp/UfSKrqs0HVZ9YUyyW+XahWqOplQiwdCH:3OQYRq9TmRYAAbdCH

    Score
    8/10
    • Removes its main activity from the application launcher

MITRE ATT&CK Matrix

Tasks