General
-
Target
f797821068cf7951ac6177183fb3fd9db19a4b75efff1a915c7b67ed0a0e80ec.zip
-
Size
1.8MB
-
Sample
240402-mc9t5sef9v
-
MD5
41040ada81f055e30ee1df324e0b1816
-
SHA1
623fcf908ffed6113bbb0a7f97424f15807f26d1
-
SHA256
4d2d6cd18163f7625382fb07a7e692ae8c80ef3f88bdbcd2526da82aeb02dd49
-
SHA512
01e35e39d70adfdba2cc987fbb42f2f56dee85335860e77ac0a099cfa6a4b919166b56cb519060675ba99da6ab680e5e92c17ac81277a4e68b75408721c2472d
-
SSDEEP
49152:9RGDFnWj3GwZxScwxFSqGGeZnhI56rr07:inWj3Gw/rwtGGeRWYr47
Behavioral task
behavioral1
Sample
f797821068cf7951ac6177183fb3fd9db19a4b75efff1a915c7b67ed0a0e80ec.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
f797821068cf7951ac6177183fb3fd9db19a4b75efff1a915c7b67ed0a0e80ec.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
f797821068cf7951ac6177183fb3fd9db19a4b75efff1a915c7b67ed0a0e80ec.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
irata
https://rat-remote.online/data/5233708029/rat/W95Te16d/contact.php?result=ok&action=upload&androidid=
https://rat-remote.online/data/5233708029/rat/W95Te16d/requests.php
https://rat-remote.online/data/5233708029/rat/W95Te16d/sms.php?result=ok&action=upload&androidid=
Targets
-
-
Target
f797821068cf7951ac6177183fb3fd9db19a4b75efff1a915c7b67ed0a0e80ec.apk
-
Size
1.9MB
-
MD5
207b35953d60b5e637761a1daecb4081
-
SHA1
897bd5c21120212be00eb4a042954b0dc8e664bb
-
SHA256
f797821068cf7951ac6177183fb3fd9db19a4b75efff1a915c7b67ed0a0e80ec
-
SHA512
7c1ae768fcb8b9fb5cce6ab79f4e1bb4b63f35b2406fe42742c2f598270155bab4ced0bc1f799c2db10eaed4b59aef5a54e7cfd42d94033e28e99e7d8452de6f
-
SSDEEP
49152:v/80ZbtD3B4ufyGpQMsXTDd4Xxv6c1k1tw9cb8mLV:nDtDx4iyhMsF+xv6cC1tw9a8mJ
Score6/10-
Acquires the wake lock
-
Reads information about phone network operator.
-