com.example.reverseshell2.MainActivity
android.intent.action.MAIN
General
-
Target
cash 4 survey.apk
-
Size
2.2MB
-
MD5
46722f64fe4d1a6a94208beae025fcce
-
SHA1
847eed12346e9ade49575eb36fc8428b56e824a4
-
SHA256
11c10d7015744295561bb87857cc198bea2072c30289b2c961cee2a136370a5f
-
SHA512
8982ba065e67a2aa176a8727bdea6bd63dfa14ec17ca98d8631c0a5d9f032fbaed4369a44ceb80faa09f26d913dc6af0582cdcf26dc37d0ff8fa1e8db5a609e7
-
SSDEEP
49152:cKYjlfCOJgmrayzaQLmZ4POm71z7JKgjHCJwNE/DnegvYV4X:clfCcgU7miFhxKEHCJ9nMV4X
Score
10/10
Malware Config
Extracted
Family
androrat
C2
81.99.162.48:13349
Signatures
-
Androrat family
-
Requests dangerous framework permissions 10 IoCs
description ioc Required to be able to access the camera device. android.permission.CAMERA Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read SMS messages. android.permission.READ_SMS Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE
Files
-
cash 4 survey.apk.apk android
com.example.reverseshell2
com.example.reverseshell2.MainActivity
Activities
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.READ_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CALL_LOG
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
Receivers
com.example.reverseshell2.broadcastReciever
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_OFF
android.intent.action.SCREEN_ON
com.example.reverseshell2.keypadListner
android.provider.Telephony.SECRET_CODE
Services
Android Permissions
cash 4 survey.apk
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.READ_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CALL_LOG
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE