irata | c7e21f7ab64db2c913f0db63233d71380206bc7e2fec27c77f088add50e6db71 | Triage

Sharing

General

Target

fc0d4fe02de6b5f43663ada7c6de1794b9b1e4ef0b4a96e61b4f109164b82515.zip
Size

1.8MB
Sample

240402-qw8yqsbg7x
MD5

d16063aadfdd1391d545af8af019bcd4
SHA1

1471604c54992c7566673bc4903d4bec23ee7d60
SHA256

c7e21f7ab64db2c913f0db63233d71380206bc7e2fec27c77f088add50e6db71
SHA512

e6a918737593e225b834229ec299cd4e85216a84f18a24ade62e74b1c8c5c74c2de66455a2f28ceeb64b27d5829c9a89114b7327d19f2dc0b4348fb77311c4ad
SSDEEP

49152:ToakLbjdncJsr2Ug5wVTjFzGwPJwcScfebkAMj8HkNM+1:E3dcJsKz5wVlPScfNAHkiO

Score

10^/10

irata android discovery

Malware Config

Targets

- Target
  
  fc0d4fe02de6b5f43663ada7c6de1794b9b1e4ef0b4a96e61b4f109164b82515.apk
- Size
  
  2.0MB
- MD5
  
  27463359a17477a4710cf71990313549
- SHA1
  
  beae04865c63bbe61e8fb61fd2db3aae1c8170af
- SHA256
  
  fc0d4fe02de6b5f43663ada7c6de1794b9b1e4ef0b4a96e61b4f109164b82515
- SHA512
  
  6f7f8fb590bbc2d13bd3d2dc3d263adde3a5ceb738453d0cd24e3ef3c1f1f08ee5ab45bfaf5fb8dc679631cc45ad7a56a80639dac8b4104393ee66b4976fd8ef
- SSDEEP
  
  49152:9sKkkpeXXOCn3v+VpQ2HcjISMgIhkHJYnxg9pXIarTiIfcLp:fkkIXe+f+VpQ2H7hg1i+9pXIX9p
Score

6^/10

discovery
- Acquires the wake lock
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3