irata | 464c736df632c2aaabc3be139cee8784daf74d363752363061235585d985ff60 | Triage

Sharing

General

Target

app.apk
Size

2.8MB
Sample

240824-reb34svgnn
MD5

12a7837bc99946ce9d24dfffaffb3e16
SHA1

2684184514239d29ac2724a019f64f1a9ac81644
SHA256

464c736df632c2aaabc3be139cee8784daf74d363752363061235585d985ff60
SHA512

b1b8b11a06fcc8bc006c472a383e0727deb2b25c077b85269df78924c301c42bd63d679db2e26d41396b0894694c492fd78ed4abe3f01ec685f876b5d557c7ba
SSDEEP

49152:6Tbdsl35rnglmqdJy2WTx8Xt8VaamfvXV+1tda1Mt54OLkf2fbFfNTeMv+R/V:6Hy0mqTy2UU8ViQv+Mt54CjRFTeMv2V

Score

10^/10

irata android collection credential_access discovery impact persistence

Malware Config

Targets

- Target
  
  app.apk
- Size
  
  2.8MB
- MD5
  
  12a7837bc99946ce9d24dfffaffb3e16
- SHA1
  
  2684184514239d29ac2724a019f64f1a9ac81644
- SHA256
  
  464c736df632c2aaabc3be139cee8784daf74d363752363061235585d985ff60
- SHA512
  
  b1b8b11a06fcc8bc006c472a383e0727deb2b25c077b85269df78924c301c42bd63d679db2e26d41396b0894694c492fd78ed4abe3f01ec685f876b5d557c7ba
- SSDEEP
  
  49152:6Tbdsl35rnglmqdJy2WTx8Xt8VaamfvXV+1tda1Mt54OLkf2fbFfNTeMv+R/V:6Hy0mqTy2UU8ViQv+Mt54CjRFTeMv2V
Score

7^/10

discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoverypersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence

behavioral3

collectioncredential_accessdiscoveryimpact