irata | f81b1cbac0fc3981660cf69031b4020a67ffaf0874391385c67e439c89b23a6d | Triage

Sharing

General

Target

app.apk
Size

3.9MB
Sample

241209-dqnpdstngr
MD5

37847a27b715877659f6157063a1f079
SHA1

657bbcac517147fe166139aa803578baa49b92f3
SHA256

f81b1cbac0fc3981660cf69031b4020a67ffaf0874391385c67e439c89b23a6d
SHA512

83f450794aa437dd61e3f92f9f0236f773b110cb8e99650f2aeb5f86ccf2b7496ee5f035c3c93d758b1f55b1e224a077e7e816147ebbb38a11051cbfe80f3ef6
SSDEEP

98304:7m9niXwVISnclTNS4zD1I4IQ8genjhaAMVf3LWO/:7Oni8ISn0TNv1I7ZapaO/

Score

10^/10

irata android collection credential_access discovery impact persistence

Malware Config

Targets

- Target
  
  app.apk
- Size
  
  3.9MB
- MD5
  
  37847a27b715877659f6157063a1f079
- SHA1
  
  657bbcac517147fe166139aa803578baa49b92f3
- SHA256
  
  f81b1cbac0fc3981660cf69031b4020a67ffaf0874391385c67e439c89b23a6d
- SHA512
  
  83f450794aa437dd61e3f92f9f0236f773b110cb8e99650f2aeb5f86ccf2b7496ee5f035c3c93d758b1f55b1e224a077e7e816147ebbb38a11051cbfe80f3ef6
- SSDEEP
  
  98304:7m9niXwVISnclTNS4zD1I4IQ8genjhaAMVf3LWO/:7Oni8ISn0TNv1I7ZapaO/
Score

7^/10

discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoverypersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence

behavioral3

collectioncredential_accessdiscoveryimpact