irata | c4da0509fbef795c266314381755225e50d537538d5be4530c0027875a84ad36 | Triage

Sharing

General

Target

c4da0509fbef795c266314381755225e50d537538d5be4530c0027875a84ad36.bin
Size

3.5MB
Sample

240404-1xcxssbc7y
MD5

7d14bf30f874b69d10026b07abcec26a
SHA1

18b4fc2555f1051bd28ac21a3bb7e32e996c00a1
SHA256

c4da0509fbef795c266314381755225e50d537538d5be4530c0027875a84ad36
SHA512

5e21972564c885e08977b4bee56e83a1979a92b766e08c73dd1dd826be7bb8e65ba4494ae301013fa83601d21e4963ea4656b0d59e485760319bc8e993eb3ca6
SSDEEP

98304:41+hKSo6QcUiaLToTwr5Lxy6VSAOH4i4AHI0uuv9b:41WKSo6qioU6kpH/l

Score

10^/10

irata android discovery evasion

Malware Config

Targets

- Target
  
  c4da0509fbef795c266314381755225e50d537538d5be4530c0027875a84ad36.bin
- Size
  
  3.5MB
- MD5
  
  7d14bf30f874b69d10026b07abcec26a
- SHA1
  
  18b4fc2555f1051bd28ac21a3bb7e32e996c00a1
- SHA256
  
  c4da0509fbef795c266314381755225e50d537538d5be4530c0027875a84ad36
- SHA512
  
  5e21972564c885e08977b4bee56e83a1979a92b766e08c73dd1dd826be7bb8e65ba4494ae301013fa83601d21e4963ea4656b0d59e485760319bc8e993eb3ca6
- SSDEEP
  
  98304:41+hKSo6QcUiaLToTwr5Lxy6VSAOH4i4AHI0uuv9b:41WKSo6qioU6kpH/l
Score

7^/10

discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Acquires the wake lock
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion