Analysis
-
max time kernel
145s -
max time network
145s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
16-04-2024 09:49
Behavioral task
behavioral1
Sample
Mad-rat.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
Mad-rat.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
Mad-rat.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
Mad-rat.apk
-
Size
1.9MB
-
MD5
fc1717dcb2b85501d6af3f2c15f681fb
-
SHA1
5295f93df913e307bfe451bdf5c795bd5ef291b7
-
SHA256
8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80
-
SHA512
dadb9d60e58bc49a381b9f0eed999918ddb966da9f90ec33cc7a4f566dfa01422fa987add83b0d88bd54500fe15dcf02c6c18d99c4f7064100719e37d74357b1
-
SSDEEP
49152:r/TbgckgdPw3kv+GDCjoOXHO5NQEVhD0UYrjPt3Y:zHgckgVw3XG+EZ5NQEV90FY
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
Mad1sal.comdescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock Mad1sal.com -
Reads information about phone network operator. 1 TTPs
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
16KB
MD5841176fb7b0d8c0a23ef79815d2d6f63
SHA1db310cbe2d7580c1330ef5623bc6deb33cf32470
SHA2568d14e5285f901fe07b67640cbba256640c4e09442e7dd2ed076abab7d931f250
SHA51259d3a3207b0663835b286bfd914e62c9526ad1514b571c86b3a6cc3b5d30e93086dac305d82c4a030d77568014721bdfd4af0c20f0954f7758e3884023633e1b
-
Filesize
16KB
MD55d0c6f05fb3801a2d2d8c68505fe2a02
SHA1f4f55b4b951c2627df309b7068f2224912ea8a94
SHA2560988d511303d7ad9ae36cb60ded6379194368e82c1eb2171f6e7aaf43635fb88
SHA5126dfbcb0ff832dbb9bba4dccb77d51483e65f328a5f66554ce219ca2eb527104ee42c576eef6d619164960be37e0c16ec115fcc134694fbbd0d2ca84af6897a81
-
Filesize
16KB
MD54708eca476b3c89430b35b440d1e9c66
SHA1cbfe7cf41bd96658b4e588f8425a87d8c9d701e4
SHA256d637dc13765cf9a2b29f530e77be54d175e10a58ac9c267fa59ed10b87a16881
SHA512f4481171e61896619b901ea234ae51df74c74438b083c08bade76f452e766270f60a93f83ccf3316e82dca6c3e2a5cda03bdba1b02a153afb06dc948e67115f7
-
Filesize
16KB
MD5fb5499753ae4115256583ff305664fb0
SHA19aa6f37d6aef49584dffa19ba7d5ef78c86d0ee6
SHA25663d8cd89218efa13bc7fe329fb750fb0b340fd42fb9f565962ff1f701ef38772
SHA512d8bd59f1e6379b6531d3d75eb15f09aabd8c9927d7e7a37b5e3e06905700056b5c100e1b4346a2b8040421c1189f20c38e2b6c9a2e5e8c02a006a8a19608ec05
-
Filesize
16KB
MD5de82e2c94d2718988804b035a46d17b1
SHA1705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA25629110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA51268f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
8KB
MD59b9c3290837581d2aebacd810f05d190
SHA1047ea6e97292975ba5484aadcd4368369d4c5ce5
SHA256f84df6ccb0eff5bc908d1a5c3f3ff8cb8e6a6068e9bc8b92896d2e79a7365574
SHA5128595c93a4e816e1e559e75086541e4d991207d2cc44f484c0e37feab39e388516c469e616761cdb915bac726543c4931f2883edca154786c61cf6555542d0933
-
Filesize
8KB
MD56192fffc985d7f0a78b84b705c88cc88
SHA13d297a5b15e2ddaf650485d7869229a73f0b7a09
SHA256326afecae0e8fb100f6e99af09198b9c195a6db33c0ca9340c19387c9fb13728
SHA512717a0d2d24a55d6affec65507a4cf9a1ed6d12a995fb20631e7cc847dc5d2501f00187b8aa328ab7d5f84031d229184e7030975c0e0a694bcc61a85b82922598
-
Filesize
512B
MD5731e69faa6e4d28bf42a979536ec116c
SHA138a4cebaa165e85bb83169afbfbd733f806820bb
SHA256b5f09ab58b8e49780a51d6271b8fc887a8815a932c0f7700b5b1b8924c14c23e
SHA512b055c3ade015a30568d69d65377ee08e2bcfdbc3bbca828484e05ab90ba51e43bb8c4ad46a2109db081c08c3a518af09f5a448882f122f0ef34b6ba07fa195a6
-
Filesize
8KB
MD585c7ab3bd59a950c001ea53552a03157
SHA14e6abacfeb24d893e922abbdbe78a9bbccd07092
SHA256137d757774ecc999d12231a5cd216e937980cf97b4dcca816d1dbf15d8eb4d20
SHA5126c182973a80ac516bb9fe404ec683b344a96ba6f8737806af8c00a98887994c180583f02c251b26af926cb3308ef2afae4dc24c86758bc757b4213a4db76c3a4
-
Filesize
4KB
MD5116bfe3585d38f8e18b948aeaf085f3e
SHA1582a79384b2ef1998841c762679b760a0781d225
SHA256222cc19fdb343d6ce2438526e194ecc1a5104fe140931fa2bb0349e76969f314
SHA5120c2b6911a066b0a186f30e1ce416adc14906963f03d647f2ee5c772f649a33faba13debc26cf1fb1ae380e2756ba4215e6bdc11bf4b6ba850811a0dae3df58ec
-
Filesize
8KB
MD5cafc7b3e2428bfe92771065499543959
SHA169afad8eb37d38a34c2bd2d1e939c8ed7efae4f7
SHA2560458d4318ad0ab644ac4e36eb28819139907d09e9f3f64b54e58ce83749d4930
SHA512e4ac29c0e4ba83dcc1967660c911cd92ed62c38436b7cdef1985ab1c7ba11902abe10e2b78c57d45e566a7c10268d07b4a587b6acbda80aad193d29788c54db4
-
Filesize
568B
MD5ca95f29bba6ada8ebcf0be11f5a972e9
SHA127267325196c47fc9160da3d4e677e1463d7faf2
SHA256cb29c53cdbeb62bc41ee81e55d971605c8f507f92923f7d1fad368834dc1ef31
SHA512aeaf4824c63249e1a9c075d818f00042d013276eeaa75a1063c47ccc6efd48fa3b449ec69076d261d580c01c0603cebf3dad6e39cf0e9c53d58ae4fd76c6ce86
-
Filesize
90B
MD559543318089501cf705b187cfd3695e9
SHA16f6bcf0905ca327eab897edc3104278cdeb929ac
SHA2562ca8dc7a454cb5fd2ae88b8f0764c0f28c561cf83d8d74780dee7c7704dff759
SHA512b5919dd0bb092e125644dc60bbbeb8a895896aa37752200ca38aef150d7810c677f55d785f68d10e94b61921884c6c31417a5a1e1bb7ed8fd98243d067ee0ac0