General

  • Target

    BlackMart.apk

  • Size

    9.0MB

  • MD5

    5909be3db980803493a09350bf381fd2

  • SHA1

    f18c88bb6705a97f8878e5cd685bc06275c42c23

  • SHA256

    e7fe5cae5b5a5561e3aae30996e1c23bae6a16b8fce29865dc06aed1c1924c47

  • SHA512

    768df287ae6094f59e2eda2edaa2e5c30d687f4f379527f883d970e11aa3c72c71efb540385e4d1961de5aaad1b6ab23c370b260ce654be268c0defeeaa84ea7

  • SSDEEP

    196608:Lm+dMwZ+dMwT+dMwS8+dMwF+dMw6o18T4KUue9Jh8MG1ll:LmqMwZqMwTqMwS8qMwFqMw6Qo4Dtv25

Score
10/10

Malware Config

Extracted

Family

rafelrat

C2

https://your-direct-url/commands.php

Signatures

  • Rafelrat family
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 13 IoCs

Files

  • BlackMart.apk
    .apk android

    com.velociraptor.raptor

    com.velociraptor.raptor.MainActivity


Android Permissions

BlackMart.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS