General
- Target 61dfaa65fb3e148edfae1fc9b99a2b34
- Size 921KB
- Sample240517-w18rescf66
- SHA256 e19823a1ba4a0e40cf459f4a0489fc257720cc0d71ecfb7ad94b3ca86fbd85d1
- MD5 61dfaa65fb3e148edfae1fc9b99a2b34
- SHA1 bedf953c50d79ba298c86a7deee107ea10d96484
- SHA512 5f3d21ffb8891e72022a20a6db204db6210009034dd5d7889a47a00f8ee49a5482d193257e1fafb49061b76e5f8156365b4c08d7e4f74202c3d568bdd11495c6
- SSDEEP 12288:79aQbj/HE3nwjTcRothXLG7QPKP1yUYa+X/Inux5MdKHHQMVmHtpU53Hg8Hx:ZLTk3G4RorGwKPUaIInuxOKHHsU53HFR
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
61dfaa65fb3e148edfae1fc9b99a2b34.apk
Resource
android-x86-arm-20240514-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
61dfaa65fb3e148edfae1fc9b99a2b34.apk
Resource
android-x64-20240514-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
wolfrat
C2
-
https://ponethus.com
Extracted
Family
-
wolfrat
C2
-
https://ponethus.com
Targets
-
- Target 61dfaa65fb3e148edfae1fc9b99a2b34
- Size 921KB
- SHA256 e19823a1ba4a0e40cf459f4a0489fc257720cc0d71ecfb7ad94b3ca86fbd85d1
- MD5 61dfaa65fb3e148edfae1fc9b99a2b34
- SHA1 bedf953c50d79ba298c86a7deee107ea10d96484
- SHA512 5f3d21ffb8891e72022a20a6db204db6210009034dd5d7889a47a00f8ee49a5482d193257e1fafb49061b76e5f8156365b4c08d7e4f74202c3d568bdd11495c6
- SSDEEP 12288:79aQbj/HE3nwjTcRothXLG7QPKP1yUYa+X/Inux5MdKHHQMVmHtpU53Hg8Hx:ZLTk3G4RorGwKPUaIInuxOKHHsU53HFR
- MD5 SHA1 SHA512 SSDEEP
-
WolfRAT
WolfRAT is an Android spyware that targets messaging apps first seen in May 2020.
-
Registers a broadcast receiver at runtime (usually for listening for system events)