Resubmissions

07/05/2024, 20:50

240507-zmmtksfb7t 6

07/05/2024, 20:47

240507-zkvfmshg92 6

General

  • Target

    Android remote#2024.zip

  • Size

    27.3MB

  • MD5

    803243534246a1d28d4edb573ad50c86

  • SHA1

    c16176ade0a98f5321222f01ffb744277f698b1c

  • SHA256

    feed28bfa64ae85fa14309f19c86b2963d0f3b664694bf74111e5095a22e877a

  • SHA512

    5c8785aa4374021130df4a1ae07b962c1a773ff05469f02283ccac9b4f2c91b938ccd8adabd38396250ef02a20421934cc6dd32b5f1c535328ed52dace6c7338

  • SSDEEP

    786432:MjqtHO9S/HqJbVb1H6lyT6VPgfsdvKxaHWmLGGCnkB/E/OL:76SyJbV9Gym5GsdvWaZyhkqO

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • Android remote#2024.zip
    .zip

    Password: CraxsRAT2025

  • Android remote#2024/Android remote#2024/Apk editor.apk
    .apk android arch:arm64 arch:arm

    Password: CraxsRAT2025

    com.gmail.heagoo.apkeditor.pro

    com.rull.mod.SplashActivity


  • Android remote#2024/Android remote#2024/CraxsRAT.jpg
    .jpg

    Password: CraxsRAT2025

  • Android remote#2024/Android remote#2024/Victim_1.0.apk
    .apk android

    Password: CraxsRAT2025

    com.my.victim

    .MainActivity


  • Android remote#2024/Android remote#2024/iControl_1.0.apk
    .apk android

    Password: CraxsRAT2025

    com.iControl

    .MainActivity