General
-
Target
7336d69db60d8b7a9113f3867c764e6b438afc7024b30610e465a7e9499ade68.apk
-
Size
3.2MB
-
Sample
250209-c16saatqbk
-
MD5
1b69285c1135ad439baf7da8a7dae91b
-
SHA1
1899663f322d01050e33f37c478c08bc09294f0c
-
SHA256
7336d69db60d8b7a9113f3867c764e6b438afc7024b30610e465a7e9499ade68
-
SHA512
495ec0623cfebc141d2d1d522938d3e46db896ee12e5a7f8f9246d6e525c32995c047d3ea0e86e002d7e2ffee9e963bd90e3c38cf641cf1140ee688c938223e3
-
SSDEEP
98304:q95TvYRIKePOg6JxjwEBISSddXCEYp7k3XEjp:QxvYRIPOSe4XCF9
Behavioral task
behavioral1
Sample
7336d69db60d8b7a9113f3867c764e6b438afc7024b30610e465a7e9499ade68.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
7336d69db60d8b7a9113f3867c764e6b438afc7024b30610e465a7e9499ade68.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
7336d69db60d8b7a9113f3867c764e6b438afc7024b30610e465a7e9499ade68.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
craxsrat
:
Targets
-
-
Target
7336d69db60d8b7a9113f3867c764e6b438afc7024b30610e465a7e9499ade68.apk
-
Size
3.2MB
-
MD5
1b69285c1135ad439baf7da8a7dae91b
-
SHA1
1899663f322d01050e33f37c478c08bc09294f0c
-
SHA256
7336d69db60d8b7a9113f3867c764e6b438afc7024b30610e465a7e9499ade68
-
SHA512
495ec0623cfebc141d2d1d522938d3e46db896ee12e5a7f8f9246d6e525c32995c047d3ea0e86e002d7e2ffee9e963bd90e3c38cf641cf1140ee688c938223e3
-
SSDEEP
98304:q95TvYRIKePOg6JxjwEBISSddXCEYp7k3XEjp:QxvYRIPOSe4XCF9
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1Discovery
System Information Discovery
2System Network Configuration Discovery
1System Network Connections Discovery
1