Overview
overview
7Static
static
6DroidJack/...at.apk
android-9-x86
DroidJack/...at.apk
android-10-x64
DroidJack/...at.apk
android-11-x64
aapt
macos-10.15-amd64
1aapt.exe
windows7-x64
1aapt.exe
windows10-2004-x64
1DroidJack/...ol.jar
windows7-x64
1DroidJack/...ol.jar
windows10-2004-x64
7DroidJack/...pk.jar
windows7-x64
1DroidJack/...pk.jar
windows10-2004-x64
7DroidJack/...ck.jar
windows7-x64
7DroidJack/...ck.jar
windows10-2004-x64
7DroidJack/....6.jar
windows7-x64
1DroidJack/....6.jar
windows10-2004-x64
7DroidJack/....4.jar
windows7-x64
1DroidJack/....4.jar
windows10-2004-x64
7DroidJack/....1.jar
windows7-x64
1DroidJack/....1.jar
windows10-2004-x64
7DroidJack/....5.jar
windows7-x64
1DroidJack/....5.jar
windows10-2004-x64
7DroidJack/....5.jar
windows7-x64
1DroidJack/....5.jar
windows10-2004-x64
7DroidJack/....5.jar
windows7-x64
1DroidJack/....5.jar
windows10-2004-x64
7DroidJack/....4.jar
windows7-x64
1DroidJack/....4.jar
windows10-2004-x64
7DroidJack/....5.jar
windows7-x64
1DroidJack/....5.jar
windows10-2004-x64
7DroidJack/....4.jar
windows7-x64
1DroidJack/....4.jar
windows10-2004-x64
7DroidJack/...ll.jar
windows7-x64
1DroidJack/...ll.jar
windows10-2004-x64
7Analysis
- max time kernel
136s - max time network
138s - platform
macos-10.15_amd64 - resource
macos-20240410-en - resource tags
arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
02/06/2024, 16:01
Static task
static1
Behavioral task
behavioral1
Sample
DroidJack/Apktool/SandroRat.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
DroidJack/Apktool/SandroRat.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
DroidJack/Apktool/SandroRat.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
aapt
Resource
macos-20240410-en
Behavioral task
behavioral5
Sample
aapt.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
aapt.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
DroidJack/Apktool/apktool.jar
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
DroidJack/Apktool/apktool.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
DroidJack/Apktool/signapk.jar
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
DroidJack/Apktool/signapk.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
DroidJack/DroidJack.jar
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
DroidJack/DroidJack.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
DroidJack/DroidJack_lib/commons-codec-1.6.jar
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
DroidJack/DroidJack_lib/commons-codec-1.6.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
DroidJack/DroidJack_lib/commons-io-2.4.jar
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
DroidJack/DroidJack_lib/commons-io-2.4.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
DroidJack/DroidJack_lib/commons-logging-1.1.1.jar
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
DroidJack/DroidJack_lib/commons-logging-1.1.1.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
DroidJack/DroidJack_lib/fluent-hc-4.2.5.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
DroidJack/DroidJack_lib/httpclient-4.2.5.jar
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
DroidJack/DroidJack_lib/httpclient-4.2.5.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
DroidJack/DroidJack_lib/httpclient-cache-4.2.5.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
DroidJack/DroidJack_lib/httpcore-4.2.4.jar
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
DroidJack/DroidJack_lib/httpcore-4.2.4.jar
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
DroidJack/DroidJack_lib/httpmime-4.2.5.jar
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
DroidJack/DroidJack_lib/httpmime-4.2.5.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
DroidJack/DroidJack_lib/jaad-0.8.4.jar
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
DroidJack/DroidJack_lib/jaad-0.8.4.jar
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
DroidJack/DroidJack_lib/kryonet-2.21-all.jar
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
DroidJack/DroidJack_lib/kryonet-2.21-all.jar
Resource
win10v2004-20240426-en
General
- Target aapt
- Size 1.1MB
- Sample240602-tf86caha53
- SHA256 4b0b43987b479c242f40c91bca06a0e7b08dc0af3ce51490b3149cf6b0be9612
- MD5 908811c1fbcc200d01c885e0385dc79a
- SHA1 1911c290fb52d2fe821ebec5cec5450735fa58ec
- SHA512 76e56e543e7e0944f97f83f7b70368972f84cd732484b3ba1f9d67e61cba1a50b0775c49e34c0c9946ab81a828c6f24cd009e5b20d6d2add13dd07dd2edbeb62
- SSDEEP 24576:xHinq2NVyW/ZH+EbKZBKUq6HGnVgXEM9Vk13yqGV:xHiq2NVflEZIUq6HGnVOq3eV
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/aapt\""1⤵PID:485
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/aapt\""1⤵PID:485
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/aapt1⤵PID:485
-
/bin/zsh/bin/zsh -c /Users/run/aapt2⤵PID:486
-
-
/Users/run/aapt/Users/run/aapt2⤵PID:486
-
-
/usr/sbin/spctl/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app1⤵PID:525
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon1⤵PID:533
-
/bin/launchctl/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon1⤵PID:534
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:541
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:541