f0c07860af1fa4b500f1522a78d1915e1131cff61d43c35b4a0d81f8ab77b5fe

Analysis

max time kernel
12s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
06-11-2024 03:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f0c07860af1fa4b500f1522a78d1915e1131cff61d43c35b4a0d81f8ab77b5fe.apk
Size

14.6MB
MD5

31e2ad8a0e720ebfbf8ea0614ec2f847
SHA1

620caf2fcf7f6605be2890ca7acf03f19d341bb9
SHA256

f0c07860af1fa4b500f1522a78d1915e1131cff61d43c35b4a0d81f8ab77b5fe
SHA512

e998c558f3ee428f6a195f5b3fffb30d1107521c13c8dc9c852d1a7719d4248cdcaf5901e705af62298e317694c111edbf1e953b58406a7b33eb934871225837
SSDEEP

393216:+USo++UEBhPQT75d5Zb8RuI1rhMlIPDNQPa0hAcdylFPqC/Dwx7:TdUZ5dTKuMMlILMrjyHPE7

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.brata.rat

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.brata.rat

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.brata.rat

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.brata.rat

com.brata.rat
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4256

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads