irata | d793fe45400bcea8b3f7e0acb6a64eaf3a7ef3f45042bc787aee4469d63bb0b1 | Triage

Sharing

General

Target

Application.apk
Size

2.8MB
Sample

240824-qndsmatfkl
MD5

369c156b46407d1c995957540d919557
SHA1

7bebd8b3b5104d1fe2ed39ef60574b58c38f4eee
SHA256

d793fe45400bcea8b3f7e0acb6a64eaf3a7ef3f45042bc787aee4469d63bb0b1
SHA512

94ca26375baaf0fa75f9feec26c188ad410a3a1ac4d33421fff227d8f85be7a898c65346009e90ebfa3b3c96d1026ac7328555df3c1b8c075a5e611cb5c2f47f
SSDEEP

49152:CTbdsl35rnglmqdJy2WTx8Xt8VaamfvXV+1tda1Mt54OLkf2fbFfNTeMvP1fX:CHy0mqTy2UU8ViQv+Mt54CjRFTeMvtfX

Score

10^/10

irata android collection credential_access discovery impact persistence

Malware Config

Targets

- Target
  
  Application.apk
- Size
  
  2.8MB
- MD5
  
  369c156b46407d1c995957540d919557
- SHA1
  
  7bebd8b3b5104d1fe2ed39ef60574b58c38f4eee
- SHA256
  
  d793fe45400bcea8b3f7e0acb6a64eaf3a7ef3f45042bc787aee4469d63bb0b1
- SHA512
  
  94ca26375baaf0fa75f9feec26c188ad410a3a1ac4d33421fff227d8f85be7a898c65346009e90ebfa3b3c96d1026ac7328555df3c1b8c075a5e611cb5c2f47f
- SSDEEP
  
  49152:CTbdsl35rnglmqdJy2WTx8Xt8VaamfvXV+1tda1Mt54OLkf2fbFfNTeMvP1fX:CHy0mqTy2UU8ViQv+Mt54CjRFTeMvtfX
Score

7^/10

discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoverypersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence

behavioral3

collectioncredential_accessdiscoveryimpact