irata | e6a7dee5d1d9e6a5182ec0dec4b0ecba4f4bd7f87df5f06901d6da40ba2de68a | Triage

Sharing

General

Target

base.apk
Size

2.7MB
Sample

240826-dpa2xa1gre
MD5

efa0b8a9cbd8ccce8c9280e9ad6efa5a
SHA1

e458000efd9566888ca4a625c828bee0856b24fd
SHA256

e6a7dee5d1d9e6a5182ec0dec4b0ecba4f4bd7f87df5f06901d6da40ba2de68a
SHA512

2dc20efccab468d728bb5083f8e83af7a4e4068cbf80b0b13fbbbb30afd933779f77e7dc9ee52ceebc838a06345049ac6c72b2a500bb7a1e3043981fbf954dd9
SSDEEP

49152:E/24gOIbEPSShDkkQOjEahfwvlmKuSscn2SbqLjFFko79sCUXF3X2xTcxIKpU:S322SaDkJOjFyvlmKFsMbEFFphAXF3X2

Score

10^/10

irata android discovery persistence

Malware Config

Targets

- Target
  
  base.apk
- Size
  
  2.7MB
- MD5
  
  efa0b8a9cbd8ccce8c9280e9ad6efa5a
- SHA1
  
  e458000efd9566888ca4a625c828bee0856b24fd
- SHA256
  
  e6a7dee5d1d9e6a5182ec0dec4b0ecba4f4bd7f87df5f06901d6da40ba2de68a
- SHA512
  
  2dc20efccab468d728bb5083f8e83af7a4e4068cbf80b0b13fbbbb30afd933779f77e7dc9ee52ceebc838a06345049ac6c72b2a500bb7a1e3043981fbf954dd9
- SSDEEP
  
  49152:E/24gOIbEPSShDkkQOjEahfwvlmKuSscn2SbqLjFFko79sCUXF3X2xTcxIKpU:S322SaDkJOjFyvlmKFsMbEFFphAXF3X2
Score

6^/10

discovery persistence
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

behavioral3