Analysis
- max time kernel
8s - max time network
150s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
- submitted
17/05/2024, 18:24
General
- Target 61dfaa65fb3e148edfae1fc9b99a2b34.apk
- Size 921KB
- Sample240517-w18rescf66
- SHA256 e19823a1ba4a0e40cf459f4a0489fc257720cc0d71ecfb7ad94b3ca86fbd85d1
Score
10/10
Malware Config
Extracted
Family
-
wolfrat
C2
-
https://ponethus.com
Signatures
- WolfRAT
WolfRAT is an Android spyware that targets messaging apps first seen in May 2020.
- Removes its main activity from the application launcher 1 TTPs 1 IoCs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.android.playup1⤵
- Removes its main activity from the application launcher
- Registers a broadcast receiver at runtime (usually for listening for system events)