irata | 5d600acccdcada3cbdac0943e5e8c2b04b9b73d62397c835c19938449c42cbff | Triage

Sharing

General

Target

app.apk
Size

3.9MB
Sample

241211-sqd8aaxrft
MD5

92fffe03c97a2492ae8f022eb6e91b36
SHA1

ff638b0c705d4fb5215b9f675475754e9bdc6e98
SHA256

5d600acccdcada3cbdac0943e5e8c2b04b9b73d62397c835c19938449c42cbff
SHA512

ac5eb6cc590a993243a3249704a5671eaddbbdb167e25a76b6998622ae95f6ceaf14f47602f58f79be00a257525100e1b0b0eae49571adaacd51e30cec0e818a
SSDEEP

98304:DcLH4eIOCNY6A2IzrOvm+AREDWQuV5T2cYc8:AjvI1NYZ2GOv+QuUc8

Score

10^/10

irata android collection credential_access discovery impact persistence

Malware Config

Targets

- Target
  
  app.apk
- Size
  
  3.9MB
- MD5
  
  92fffe03c97a2492ae8f022eb6e91b36
- SHA1
  
  ff638b0c705d4fb5215b9f675475754e9bdc6e98
- SHA256
  
  5d600acccdcada3cbdac0943e5e8c2b04b9b73d62397c835c19938449c42cbff
- SHA512
  
  ac5eb6cc590a993243a3249704a5671eaddbbdb167e25a76b6998622ae95f6ceaf14f47602f58f79be00a257525100e1b0b0eae49571adaacd51e30cec0e818a
- SSDEEP
  
  98304:DcLH4eIOCNY6A2IzrOvm+AREDWQuV5T2cYc8:AjvI1NYZ2GOv+QuUc8
Score

7^/10

discovery persistence collection credential_access impact
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoverypersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence

behavioral3

collectioncredential_accessdiscoveryimpact