irata | fadb7686d81a1bfb3029f33fd08de4ce26402d93b3be30a1f661befac197b811 | Triage

Sharing

General

Target

83ae44741a62282a0133cbbda73cb65f.bin
Size

2.7MB
Sample

240517-dj7hxsed31
MD5

482e9bf74ad28e437b1a3e83b15ebaa9
SHA1

55c18cf081a454af1ec712bf7d766a8c6141df0e
SHA256

fadb7686d81a1bfb3029f33fd08de4ce26402d93b3be30a1f661befac197b811
SHA512

592366bb609870f5d8141ddffbb00b08e8dca20127620a134390438f3a549828cd2f4b6f4fc7cf6d0914929c653a36caa357c3121e6e0d13b20003486aeae4ba
SSDEEP

49152:A+rToGOekeA3i9R6IByivdDWs8XtSmLVTYe4FqMovUNmtQkTuM4:jjTi3i9AIByi1DcXtSSTYTFqFU02kCM4

Score

10^/10

irata android collection credential_access discovery evasion impact persistence

Malware Config

Targets

- Target
  
  1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2.apk
- Size
  
  2.8MB
- MD5
  
  83ae44741a62282a0133cbbda73cb65f
- SHA1
  
  d2ed103e8aa54981b02eba1bd20039dcc4c3d945
- SHA256
  
  1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2
- SHA512
  
  f54afbfd1bbd5001dcbb0fc2ed7b52f1da61f31c7938181f5a892a5ff6dd6685bf337f9696381b6625d30fa01335d880477f5c2f1b15dfc21d424b6ddb4936fa
- SSDEEP
  
  49152:f/QOZrOHIERZDYQEhuErSdlHdEcHDiwy326P4vUpOspgDAT4cfO0teaHrpyId6J+:3/uDbEhuecHJeiWOspuEl5UasN4
Score

7^/10

discovery collection credential_access evasion impact persistence
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

behavioral2

collectioncredential_accessdiscoveryevasionimpactpersistence

behavioral3