androrat | 2a73b8e26d5665197066db7e5ffdf64b89657e6dfb91585b9971a400b6760253

Resubmissions

29/09/2024, 00:52

240929-a73m4awdrh10

29/09/2024, 00:50

240929-a669wswdpe10

16/07/2024, 00:04

240716-acnkpaycph10

Sharing

Copy URL Twitter E-mail

General

Target
karma.apk
Size 2.2MB
Sample240929-a73m4awdrh
SHA256 2a73b8e26d5665197066db7e5ffdf64b89657e6dfb91585b9971a400b6760253
MD5 2c9c318fa49a26f591ba3ae5ba9a43ac
SHA1 124fedf7341487007c4f78a8836f81a72acedfae
SHA512 b6d48c4ded2101cbc5960d52e242ebe5ada245ccfc3ee277efe64aefdc68b38ee57a2c5beb789c433a25481b16caa5bf98705528227ca9eb245d1cafe0783a21
SSDEEP 49152:d8sIATgHkmd602RcNWnHl0VLYZDEwrwJ1jEDnbIgvYRa:yNATgHkmd602iknHl0NlwrwinbS4
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

androrat

166.182.85.122:8080

Targets

- Target
  karma.apk
- Size 2.2MB
- SHA256 2a73b8e26d5665197066db7e5ffdf64b89657e6dfb91585b9971a400b6760253
- MD5 2c9c318fa49a26f591ba3ae5ba9a43ac
- SHA1 124fedf7341487007c4f78a8836f81a72acedfae
- SHA512 b6d48c4ded2101cbc5960d52e242ebe5ada245ccfc3ee277efe64aefdc68b38ee57a2c5beb789c433a25481b16caa5bf98705528227ca9eb245d1cafe0783a21
- SSDEEP 49152:d8sIATgHkmd602RcNWnHl0VLYZDEwrwJ1jEDnbIgvYRa:yNATgHkmd602iknHl0NlwrwinbS4
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

evasion stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Resource Forking

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v15