irata | a3a764e9c97606af14d4847f6816167345bbc2c0f7157e9e4dea1a3db7eee7f9 | Triage

Sharing

General

Target

base.apk
Size

2.8MB
Sample

240709-lcczqsyhmh
MD5

c700a9f32dd2d42392572a3d827fdf36
SHA1

9728797ec1e93515da9c56215c30a6634f6521aa
SHA256

a3a764e9c97606af14d4847f6816167345bbc2c0f7157e9e4dea1a3db7eee7f9
SHA512

0ab84572d98ff8e3d0f04ffaf538352a89b35cf10f0f37167a84ad4053bf1411065423cdbebd5f5e09103556ba17d2cdc2bde9c650ea38b572fbc88bce0b4f74
SSDEEP

49152:z/YuZrOPQV2VEtUbCdNHcsan4xy1OpVRsm9iqhDc37njsgCWhqTco+Tcdwy0OPy3:bZVNUboNHcsUwDRf9iqhYLnAPWvo6swT

Score

10^/10

irata android discovery persistence

Malware Config

Targets

- Target
  
  base.apk
- Size
  
  2.8MB
- MD5
  
  c700a9f32dd2d42392572a3d827fdf36
- SHA1
  
  9728797ec1e93515da9c56215c30a6634f6521aa
- SHA256
  
  a3a764e9c97606af14d4847f6816167345bbc2c0f7157e9e4dea1a3db7eee7f9
- SHA512
  
  0ab84572d98ff8e3d0f04ffaf538352a89b35cf10f0f37167a84ad4053bf1411065423cdbebd5f5e09103556ba17d2cdc2bde9c650ea38b572fbc88bce0b4f74
- SSDEEP
  
  49152:z/YuZrOPQV2VEtUbCdNHcsan4xy1OpVRsm9iqhDc37njsgCWhqTco+Tcdwy0OPy3:bZVNUboNHcsUwDRf9iqhYLnAPWvo6swT
Score

6^/10

discovery persistence
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

behavioral3