irata | 62d69980bb71b9fbda4180641173c521c69728cd93cd7292ead7b3e753c04bf6 | Triage

Sharing

General

Target

62d69980bb71b9fbda4180641173c521c69728cd93cd7292ead7b3e753c04bf6.bin
Size

3.5MB
Sample

240413-1xr2qade8y
MD5

09665496aba5eaef8f311eb47d6db475
SHA1

9a2f37d2f9e2bc2567e20c94cee7ed6982f7de76
SHA256

62d69980bb71b9fbda4180641173c521c69728cd93cd7292ead7b3e753c04bf6
SHA512

2300105968c120fb28e5c49c577715124baba48431ebe8a493a2ea3a081f85179ec8531220888c5839567a86a704cddbcd870fc8aeafe651447b3c93924c2c89
SSDEEP

98304:K1+hKSo6QcUiaJToTwr5LXAelkCmdQGYw/cWKklO:K1WKSo6qi2QeS1/5O

Score

10^/10

irata android discovery evasion

Malware Config

Targets

- Target
  
  62d69980bb71b9fbda4180641173c521c69728cd93cd7292ead7b3e753c04bf6.bin
- Size
  
  3.5MB
- MD5
  
  09665496aba5eaef8f311eb47d6db475
- SHA1
  
  9a2f37d2f9e2bc2567e20c94cee7ed6982f7de76
- SHA256
  
  62d69980bb71b9fbda4180641173c521c69728cd93cd7292ead7b3e753c04bf6
- SHA512
  
  2300105968c120fb28e5c49c577715124baba48431ebe8a493a2ea3a081f85179ec8531220888c5839567a86a704cddbcd870fc8aeafe651447b3c93924c2c89
- SSDEEP
  
  98304:K1+hKSo6QcUiaJToTwr5LXAelkCmdQGYw/cWKklO:K1WKSo6qi2QeS1/5O
Score

7^/10

discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Acquires the wake lock
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion