General
-
Target
app.apk
-
Size
1.9MB
-
Sample
240422-1y6aqsha4v
-
MD5
946f4da12572cc7370be6ed6778f3854
-
SHA1
7f6f21471c160eda9af5dbb796a99b410b9bbee6
-
SHA256
52770b424a389e606b326221af03dbe770eac840d4f291f32df3deb6a4fc47db
-
SHA512
df753a7f17fb40b51de7e568857e68819c717c905982a17ade6e7d21a8453942daf6fd793c908adea318ebbdbe294198eb4150274bac6427106fd60d8998c807
-
SSDEEP
49152:k/EZL9zHbY+B0TXud1WB79IKrPWI5RAeuTvKC03T1dy15ltJv:yOL9DbY++Y1k75PFAeavl81dCJ
Behavioral task
behavioral1
Sample
app.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
app.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
app.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Extracted
irata
https://my-admin-sql.org/data/6977722252/rat/140Wa69Z/contact.php?result=ok&action=upload&androidid=
https://my-admin-sql.org/data/6977722252/rat/140Wa69Z/requests.php
https://my-admin-sql.org/data/6977722252/rat/140Wa69Z/sms.php?result=ok&action=upload&androidid=
Targets
-
-
Target
app.apk
-
Size
1.9MB
-
MD5
946f4da12572cc7370be6ed6778f3854
-
SHA1
7f6f21471c160eda9af5dbb796a99b410b9bbee6
-
SHA256
52770b424a389e606b326221af03dbe770eac840d4f291f32df3deb6a4fc47db
-
SHA512
df753a7f17fb40b51de7e568857e68819c717c905982a17ade6e7d21a8453942daf6fd793c908adea318ebbdbe294198eb4150274bac6427106fd60d8998c807
-
SSDEEP
49152:k/EZL9zHbY+B0TXud1WB79IKrPWI5RAeuTvKC03T1dy15ltJv:yOL9DbY++Y1k75PFAeavl81dCJ
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-