irata | 52bd9870e87357e66a416b9a8a374138048077e7fc1121025cf3790bd5efd244 | Triage

Sharing

General

Target

Application.apk
Size

3.6MB
Sample

240824-q18hrsvbnm
MD5

08878d839c3106967e9e0472bbdad562
SHA1

c727e854536485b12e064a1d523de236a705d790
SHA256

52bd9870e87357e66a416b9a8a374138048077e7fc1121025cf3790bd5efd244
SHA512

19830fccd9f8568393f1b7c697f485e7a45e20cd01a01470788915b942ec6f62c4464f5eae6a5eafc8fa1d4f71c05df2e01d15c0d737227b3ae4514207e38abb
SSDEEP

98304:fu9WkQ/jMdVWxfAatYZNKlEmmP41aHpxvPe3TyTHQs9W1:fu9WkQAdoxIaOrRP41aHXGjNsk1

Score

10^/10

irata android collection credential_access discovery impact persistence

Malware Config

Targets

- Target
  
  Application.apk
- Size
  
  3.6MB
- MD5
  
  08878d839c3106967e9e0472bbdad562
- SHA1
  
  c727e854536485b12e064a1d523de236a705d790
- SHA256
  
  52bd9870e87357e66a416b9a8a374138048077e7fc1121025cf3790bd5efd244
- SHA512
  
  19830fccd9f8568393f1b7c697f485e7a45e20cd01a01470788915b942ec6f62c4464f5eae6a5eafc8fa1d4f71c05df2e01d15c0d737227b3ae4514207e38abb
- SSDEEP
  
  98304:fu9WkQ/jMdVWxfAatYZNKlEmmP41aHpxvPe3TyTHQs9W1:fu9WkQAdoxIaOrRP41aHXGjNsk1
Score

7^/10

discovery impact persistence collection credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoveryimpactpersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence

behavioral3

collectioncredential_accessdiscoveryimpact