Resubmissions
11-02-2025 06:31
250211-g96k4aynar 1024-05-2023 00:25
230524-aqymtaaa94 722-05-2023 06:36
230522-hcxglahc8x 7Analysis
-
max time kernel
85s -
max time network
154s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
-
submitted
11-02-2025 06:31
General
-
Target
AndroRAt.apk
-
Size
293KB
-
MD5
3d3b2a66ae3a8a8cf21e2cde12f5387f
-
SHA1
a6c8e87367f8168ece54c8f27ba182df406a41c3
-
SHA256
9af5c084b7203741bc26debb6212bf138f3c7a41e04d96948a332be4a842882e
-
SHA512
81ee8d00eae3a3c3d4276b370e7d3f755be01a429dc16b144c7ffeba3c3b49957152392715eeaa19aa284574e49139b914e4d6cdc5a4171a7ccadc432c39436d
-
SSDEEP
6144:ZbkPe2DpLKXsb1ULz9Qg7KZdyuKI0mYkMdfO:QtDpbmLBSGuK2YJJO
Score
6/10
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Tries to add a device administrator. 2 TTPs 1 IoCs
Processes
-
ahmyth.mine.king.ahmyth1⤵
- Makes use of the framework's foreground persistence service
- Tries to add a device administrator.