irata | 5a1c6c2a07a4748b6327b9eb97031d1a77d2ba701956166c3221b7fa0cc05bbf | Triage

Sharing

General

Target

5a1c6c2a07a4748b6327b9eb97031d1a77d2ba701956166c3221b7fa0cc05bbf.bin
Size

3.5MB
Sample

240411-1xlvpshg4z
MD5

c6306ae2dee43b0c00e2528838370d08
SHA1

7afbcce6c7f9867f1f0e0451175f2817aa61fe85
SHA256

5a1c6c2a07a4748b6327b9eb97031d1a77d2ba701956166c3221b7fa0cc05bbf
SHA512

50b131620fa119920483a3388923bd7462cd3900a5b93bd223540872594faa602b156da15c0e81f1aa4640016e5cbc142826fdbfe3e6dc7c6fea212e8279934e
SSDEEP

98304:kFgcJvDLkRCQDtToTwr5LvkCR8SdtYqoEDYO52Ik2k:kFdJbLkc68CSsDW

Score

10^/10

irata android discovery evasion

Malware Config

Targets

- Target
  
  5a1c6c2a07a4748b6327b9eb97031d1a77d2ba701956166c3221b7fa0cc05bbf.bin
- Size
  
  3.5MB
- MD5
  
  c6306ae2dee43b0c00e2528838370d08
- SHA1
  
  7afbcce6c7f9867f1f0e0451175f2817aa61fe85
- SHA256
  
  5a1c6c2a07a4748b6327b9eb97031d1a77d2ba701956166c3221b7fa0cc05bbf
- SHA512
  
  50b131620fa119920483a3388923bd7462cd3900a5b93bd223540872594faa602b156da15c0e81f1aa4640016e5cbc142826fdbfe3e6dc7c6fea212e8279934e
- SSDEEP
  
  98304:kFgcJvDLkRCQDtToTwr5LvkCR8SdtYqoEDYO52Ik2k:kFdJbLkc68CSsDW
Score

7^/10

discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Acquires the wake lock
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion