com.example.reverseshell2.MainActivity
android.intent.action.MAIN
General
-
Target
karma.apk
-
Size
2.2MB
-
MD5
b25999e97aca96d786e1bb547fcade55
-
SHA1
39d020d2042706548609f39d52e9145b9ccec797
-
SHA256
df7e2d4b1dfd637f1c32d686e663e99ee6b3eca9d4c5529f3a4a8ed1a2b92d9f
-
SHA512
e2d7cabb8b24d3327052f78084a3f3999580385b2050a732e14f63e925ff0908a1b3db061506f32455029fdd51c77319ad3994c2002ad18b4b5bab6651ad885a
-
SSDEEP
49152:0gvY8CnRp3VR0GrpOL5rn/8GCyi4VplUT/0UiCYPZ7Dw3NoFg9XFs/Ten:G8CnRp8tL5T/8GfiwpllUiCYZ703emuc
Score
10/10
Malware Config
Extracted
Family
androrat
C2
3.129.187.220:10261
Signatures
-
Androrat family
-
Requests dangerous framework permissions 10 IoCs
description ioc Required to be able to access the camera device. android.permission.CAMERA Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read SMS messages. android.permission.READ_SMS Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE
Files
-
karma.apk.apk android
com.example.reverseshell2
com.example.reverseshell2.MainActivity
Activities
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.READ_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CALL_LOG
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
Receivers
com.example.reverseshell2.broadcastReciever
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_OFF
android.intent.action.SCREEN_ON
com.example.reverseshell2.keypadListner
android.provider.Telephony.SECRET_CODE
Services
Android Permissions
karma.apk
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.READ_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CALL_LOG
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE