General

  • Target

    e640eb702de37deb80c0a763eb67dea6

  • Size

    254KB

  • MD5

    e640eb702de37deb80c0a763eb67dea6

  • SHA1

    3e58d4ecce983b4489d5f2f73fbb536283f707f6

  • SHA256

    ec2654fcdaa602671c65fcd7df97643ddc73732e6291b08c5d2db03f667d6a9e

  • SHA512

    a9fd31a8b39c845f8ffba5c882f626ac805df3675f75c9a03dfce498b9c07e695858eea75c096d5d2c838ec1fa2219d5fc43d786028bfc35ae3c23e171f04f6c

  • SSDEEP

    6144:Hyr+4R4H6/f5QEgmz0GxRYuQUt9jsJ1zgbyN4V9itG:SFRuqf5/gmzRzMAQzgbU46G

Score
10/10

Malware Config

Extracted

Family

sandrorat

C2

majdazar.ddns.net:1337

Signatures

  • Sandrorat family
  • Requests dangerous framework permissions 14 IoCs

Files

  • e640eb702de37deb80c0a763eb67dea6
    .apk android

    net.droidjack.server

    net.droidjack.server.MainActivity


Android Permissions

e640eb702de37deb80c0a763eb67dea6

Permissions

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET