General
- Target 9845316fa32b13d04651a704201f705a
- Size 5.6MB
- Sample241228-pyvy8aymbk
- SHA256 139edb1bc033725539b117f50786f3d3362ed45845c57fe1f82e7ed72b044367
- MD5 9845316fa32b13d04651a704201f705a
- SHA1 16a3a796599ffc192cd998e38dbafd52d785368d
- SHA512 e462426f71c65b5241d2890ed25bbe94de70480e17b7204e332da2652681ef86d9fd8c4783a320badea6dccea3e5f373cef359237d7f6b59eb6f1c66bd163ac1
- SSDEEP 98304:XV3CDaOzQQf9xVGK3q98ZWzfj3d7npFLtIuWnOz8XQat+:XVfeQQf9xJ3qu0zfjNDpFhIuJIt+
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
9845316fa32b13d04651a704201f705a.apk
Resource
android-x64-arm64-20240910-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
wolfrat
C2
-
https://nampriknum.net
Extracted
Family
-
wolfrat
C2
-
https://nampriknum.net
Targets
-
- Target 9845316fa32b13d04651a704201f705a
- Size 5.6MB
- SHA256 139edb1bc033725539b117f50786f3d3362ed45845c57fe1f82e7ed72b044367
- MD5 9845316fa32b13d04651a704201f705a
- SHA1 16a3a796599ffc192cd998e38dbafd52d785368d
- SHA512 e462426f71c65b5241d2890ed25bbe94de70480e17b7204e332da2652681ef86d9fd8c4783a320badea6dccea3e5f373cef359237d7f6b59eb6f1c66bd163ac1
- SSDEEP 98304:XV3CDaOzQQf9xVGK3q98ZWzfj3d7npFLtIuWnOz8XQat+:XVfeQQf9xJ3qu0zfjNDpFhIuJIt+
- MD5 SHA1 SHA512 SSDEEP
-
WolfRAT
WolfRAT is an Android spyware that targets messaging apps first seen in May 2020.
-
Wolfrat family
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the contacts stored on the device.
-
Reads the content of SMS inbox messages.
-
Reads the content of outgoing SMS messages.
-
Reads the content of the call log.
-
Requests accessing notifications (often used to intercept notifications before users become aware).