irata | 330145c5ceefe7f2986df4ec470fb66ab890630f0893b548767f3bf36bb50ba6 | Triage

Sharing

General

Target

330145c5ceefe7f2986df4ec470fb66ab890630f0893b548767f3bf36bb50ba6.bin
Size

3.4MB
Sample

240411-1xt63shg5z
MD5

a7073c9f1920fe8695d7d77fe62f2def
SHA1

ea0f741f81bb541e826a29038ef89c3fecd5c912
SHA256

330145c5ceefe7f2986df4ec470fb66ab890630f0893b548767f3bf36bb50ba6
SHA512

1f893dc2f8c5bcebb5218c9eb7fc8449e32a0a0bfa8e8f82683840fd81f86126216949abd869ded9693323adf638b7766952baa5c07573ad29101119872307b4
SSDEEP

98304:CVmSwX4OToTwr5j/X5wzPceJSetDFbA/P:C8zxwBSQF0/P

Score

10^/10

irata android discovery evasion

Malware Config

Targets

- Target
  
  330145c5ceefe7f2986df4ec470fb66ab890630f0893b548767f3bf36bb50ba6.bin
- Size
  
  3.4MB
- MD5
  
  a7073c9f1920fe8695d7d77fe62f2def
- SHA1
  
  ea0f741f81bb541e826a29038ef89c3fecd5c912
- SHA256
  
  330145c5ceefe7f2986df4ec470fb66ab890630f0893b548767f3bf36bb50ba6
- SHA512
  
  1f893dc2f8c5bcebb5218c9eb7fc8449e32a0a0bfa8e8f82683840fd81f86126216949abd869ded9693323adf638b7766952baa5c07573ad29101119872307b4
- SSDEEP
  
  98304:CVmSwX4OToTwr5j/X5wzPceJSetDFbA/P:C8zxwBSQF0/P
Score

7^/10

discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Acquires the wake lock
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion