Overview

overview

10

Static

static

10

ECU911.apk

android-9-x86

8

ECU911.apk

android-10-x64

8

ECU911.apk

android-11-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    ECU911.apk
  • Size 8.6MB
  • Sample240703-ae19kaxbke
  • SHA256 d2456dc268ba784839ab58049ee28b96b961bbfd64b7c830b5d5d3a4ba364ed3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
rafelrat

Malware Config

Extracted

Family

  • rafelrat

C2

  • https://0ffs3c.com/qm/commands.php

Signatures

  • Rafelrat family
    rafelrat
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 13 IoCs

File Explorer

  • ECU911.apk
    .apk 8.6MB

ECU911.apk

  • SHA256 d2456dc268ba784839ab58049ee28b96b961bbfd64b7c830b5d5d3a4ba364ed3
  • MD5 SHA1 SHA512 SSDEEP
android
com.velociraptor.raptor

Android Permissions

ECU911.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS