Overview

overview

10

Static

static

10

EvilRAT.apk

android-13-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EvilRAT.apk

  • Size

    4.7MB

  • Sample

    241013-nxgvjavcnb

  • MD5

    97f3286dcaecf39951d3b7a0e66d208f

  • SHA1

    2435be5eb810dd2f76757579b8c272511adb59b0

  • SHA256

    9dbe5b1a7dc239f17fb41e399e9137c675b2e4e3882974ef9397cee4d4bd91ff

  • SHA512

    81dfb13099ce13f63efa89d43a557c71e8e7ca0c6aa6bdeb06e4d1d58e08292b83f4d861ab91db4d76f901616511226a2e049f86482f1016201008f81fc40c6c

  • SSDEEP

    98304:G/xXWXStFaLWlUapHhDciMiSm4LqN8VNmzpyzBeTr0tqodTb:QxXWX+FlUUBDNMxmYAzpfUxF

Score
10/10
spynoteandroidcollectioncredential_accessevasionexecutionpersistence

Malware Config

Targets

    • Target

      EvilRAT.apk

    • Size

      4.7MB

    • MD5

      97f3286dcaecf39951d3b7a0e66d208f

    • SHA1

      2435be5eb810dd2f76757579b8c272511adb59b0

    • SHA256

      9dbe5b1a7dc239f17fb41e399e9137c675b2e4e3882974ef9397cee4d4bd91ff

    • SHA512

      81dfb13099ce13f63efa89d43a557c71e8e7ca0c6aa6bdeb06e4d1d58e08292b83f4d861ab91db4d76f901616511226a2e049f86482f1016201008f81fc40c6c

    • SSDEEP

      98304:G/xXWXStFaLWlUapHhDciMiSm4LqN8VNmzpyzBeTr0tqodTb:QxXWX+FlUUBDNMxmYAzpfUxF

    Score
    7/10
    collectioncredential_accessevasionexecutionpersistence

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasioncredential_access

    • Acquires the wake lock

    • Requests enabling of the accessibility settings.

    behavioral1

MITRE ATT&CK Mobile v15

Tasks