irata | a549718fdd2441073a0158988b32b17f58ecf66cd15720618d9a75e786aa776c | Triage

Sharing

General

Target

a549718fdd2441073a0158988b32b17f58ecf66cd15720618d9a75e786aa776c.bin
Size

3.5MB
Sample

240411-1xfnpaed69
MD5

7c756b3b970e0e9101a0d27136c204ff
SHA1

fa625264cb6ca1d8737db2d89410370a249345ea
SHA256

a549718fdd2441073a0158988b32b17f58ecf66cd15720618d9a75e786aa776c
SHA512

3a99d86043751fedf717ee83c316d43549ea059cdc80554f80a8be9d07297120f9eaa6b6913a084342b2a68adbc5c38f904119e1820854d9a93ab1bac49250f7
SSDEEP

98304:w1+hKSo6QcUiaDToTwr5LNb83myQ8OL5w8Q4iJ3uby:w1WKSo6qigl82O8kCy

Score

10^/10

irata android discovery evasion

Malware Config

Targets

- Target
  
  a549718fdd2441073a0158988b32b17f58ecf66cd15720618d9a75e786aa776c.bin
- Size
  
  3.5MB
- MD5
  
  7c756b3b970e0e9101a0d27136c204ff
- SHA1
  
  fa625264cb6ca1d8737db2d89410370a249345ea
- SHA256
  
  a549718fdd2441073a0158988b32b17f58ecf66cd15720618d9a75e786aa776c
- SHA512
  
  3a99d86043751fedf717ee83c316d43549ea059cdc80554f80a8be9d07297120f9eaa6b6913a084342b2a68adbc5c38f904119e1820854d9a93ab1bac49250f7
- SSDEEP
  
  98304:w1+hKSo6QcUiaDToTwr5LNb83myQ8OL5w8Q4iJ3uby:w1WKSo6qigl82O8kCy
Score

7^/10

discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Acquires the wake lock
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion