com.tencent.qqlivei18n.us.p10c1c3d6
android.intent.action.MAIN
com.tencent.qqlivei18n.us.p4566db05
android.intent.action.MAIN
com.tencent.qqlivei18n.us.p8fe297ab
android.intent.action.SENDTO
android.intent.action.SEND
General
-
Target
ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924
-
Size
3.8MB
-
MD5
10f8ddd80b1eb94540b5aace12b8824a
-
SHA1
5f6d13b57112441cd92a9cd2f9d115d9e492f158
-
SHA256
ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924
-
SHA512
66ed579fa60280488142c6fce852bb8751b7cab2f7e323ba05c62bc925b24e4da2cf8733a2ab5c63bbd5ef128108d23398d33d052fd574fc40ed368c75ffb5a0
-
SSDEEP
98304:YKV0yzGONs7GxuC/8Gnwspn5z2HI6SBJ8B1lqOM1tUeVyNIo87Z:YrOS6EC/8Gwsl5SHI7Y1lqXO4o87Z
Score
10/10
Malware Config
Signatures
-
DogeRAT payload 1 IoCs
Processes:
resource yara_rule sample family_dogerat2 -
Dogerat family
-
Declares services with permission to bind to the system 2 IoCs
Processes:
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE -
Requests dangerous framework permissions 6 IoCs
Processes:
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS
Files
-
ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924.apk android
com.tencent.qqlivei18n.us
com.tencent.qqlivei18n.us.p4566db05
Activities
Permissions
android.permission.WAKE_LOCK
android.permission.REQUEST_DELETE_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.VIBRATE
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.CALL_PHONE
android.permission.RECEIVE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SMS
Receivers
com.tencent.qqlivei18n.us.p28a756bd
android.provider.Telephony.WAP_PUSH_DELIVER
com.tencent.qqlivei18n.us.p78da6c4a
android.provider.Telephony.SMS_DELIVER
Services
com.tencent.qqlivei18n.us.pe7342100
android.intent.action.RESPOND_VIA_MESSAGE
com.tencent.qqlivei18n.us.p0e4b58a7
android.accessibilityservice.AccessibilityService
com.tencent.qqlivei18n.us.p50dda225
android.service.notification.NotificationListenerService
Android Permissions
ffaebdbc8c2ecd63f9b97781bb16edc62b2e91b5c69e56e675f6fbba2d792924
Permissions
android.permission.WAKE_LOCK
android.permission.REQUEST_DELETE_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.VIBRATE
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.CALL_PHONE
android.permission.RECEIVE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SMS