irata | e0d2f2aff69cafdaf1099e5d0a1bf3ad32413e7c971c0ffc113f6fb5b0819b5c | Triage

Sharing

General

Target

base.apk
Size

8.4MB
Sample

240912-hyyxjsxejh
MD5

d5cffe9867da6f30e270fb508c40ab8e
SHA1

4860eebd427379b8bf991b2110f9cd336b86fe7c
SHA256

e0d2f2aff69cafdaf1099e5d0a1bf3ad32413e7c971c0ffc113f6fb5b0819b5c
SHA512

6b653475b032ccf2b8944be4f68bcff4fc6f9eddeaef374650b211fe7b67101ecdab446df1bb6436aa42bb91dfc27342c2dce6bbfcd7c25d46d20b61115af8a9
SSDEEP

196608:BKBC9YVEYRq+2Bq9lIu6i4MvwTjIvPTBrOb6:BK3Emq+2GP6PMvlvPlr

Score

10^/10

irata android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  base.apk
- Size
  
  8.4MB
- MD5
  
  d5cffe9867da6f30e270fb508c40ab8e
- SHA1
  
  4860eebd427379b8bf991b2110f9cd336b86fe7c
- SHA256
  
  e0d2f2aff69cafdaf1099e5d0a1bf3ad32413e7c971c0ffc113f6fb5b0819b5c
- SHA512
  
  6b653475b032ccf2b8944be4f68bcff4fc6f9eddeaef374650b211fe7b67101ecdab446df1bb6436aa42bb91dfc27342c2dce6bbfcd7c25d46d20b61115af8a9
- SSDEEP
  
  196608:BKBC9YVEYRq+2Bq9lIu6i4MvwTjIvPTBrOb6:BK3Emq+2GP6PMvlvPlr
Score

7^/10

discovery evasion impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence