dogerat | 1c913370a7b70088c933f90fcebb2077264b905fbb812a0b01aabc7e4990da61[.]zip

General

Target

1c913370a7b70088c933f90fcebb2077264b905fbb812a0b01aabc7e4990da61.zip
Size

3.8MB
MD5

856aa4cbffb8a0915be72a9ebd49dd27
SHA1

9e5ec1bccc6f76f67093902d231105119fff747a
SHA256

1c913370a7b70088c933f90fcebb2077264b905fbb812a0b01aabc7e4990da61
SHA512

e93e75a1c90ef67b9b51ca34511f38b7893c65212b18f3089d60022738a7867d44737f790110ceab188929f375bcbf77c8eeb1fed34a1ed9274ed55b9a6c44d6
SSDEEP

98304:rkJ+oTd/Nk+5OpZ60sONhlRvh4oCcuDz8Reqq:r6+y1q+50ZTpNbRWiu1qq

Score

10^/10

dogerat

DogeRAT payload 1 IoCs

resource	yara_rule
static1/unpack001/6a03efa4ffa38032edfb5b604672e8c9e01a324f8857b5848e8160593dfb325e.apk	family_dogerat2

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

1c913370a7b70088c933f90fcebb2077264b905fbb812a0b01aabc7e4990da61.zip
.zip

Password: infected
6a03efa4ffa38032edfb5b604672e8c9e01a324f8857b5848e8160593dfb325e.apk
.apk android

com.weico.international

com.weico.international.p5a0156f5

Activities

com.weico.international.p7032f8eb

android.intent.action.SENDTO
android.intent.action.SEND

com.weico.international.pd3d9a55d

android.intent.action.MAIN

com.weico.international.p5a0156f5

android.intent.action.MAIN

Permissions

android.permission.READ_CONTACTS
android.permission.REQUEST_DELETE_PACKAGES
android.permission.WRITE_SMS
android.permission.CALL_PHONE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.QUERY_ALL_PACKAGES
android.permission.SEND_SMS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_SMS
android.permission.READ_SMS

Receivers

com.weico.international.pf8380f14

android.provider.Telephony.WAP_PUSH_DELIVER

com.weico.international.pd2c57a92

android.provider.Telephony.SMS_DELIVER

Services

com.weico.international.p494ee8e0

android.service.notification.NotificationListenerService

com.weico.international.pe87b342f

android.intent.action.RESPOND_VIA_MESSAGE

com.weico.international.pfd1df03d

android.accessibilityservice.AccessibilityService