dogerat | 59afdf53d97ae79c70d9ffa70e1b340560da935b3c5402e7c45e8b53281a8c9b[.]zip

General

Target

59afdf53d97ae79c70d9ffa70e1b340560da935b3c5402e7c45e8b53281a8c9b.zip
Size

4.0MB
MD5

4e62095a9e678f0470f27c11fcaf5a95
SHA1

a0882c83193665b9e8d67d2574f93e025e66bc1a
SHA256

59afdf53d97ae79c70d9ffa70e1b340560da935b3c5402e7c45e8b53281a8c9b
SHA512

bf07e9c4906137dd2a9da1e53e5c970144818e789933d4e2e1243cf6941acbafcaa2eff6cdb119f6f2ec4aac10bb7761346359cdbb462edec33239413b3a0a30
SSDEEP

98304:nA9BOf7yk/jCikPr1mweFV+2p3A8yPTOMgTgA5tGm:nA94zRjCikQ9V+2ZWUztGm

Score

10^/10

dogerat

DogeRAT payload 1 IoCs

resource	yara_rule
static1/unpack001/fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.apk	family_dogerat2

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

59afdf53d97ae79c70d9ffa70e1b340560da935b3c5402e7c45e8b53281a8c9b.zip
.zip

Password: infected
fe52bed001f28a4b218bcd0ad31b92fb59022778cf68a1445cf3e8c612a5e04c.apk
.apk android

com.tencent.mobileqq

com.tencent.mobileqq.p3089aee9

Activities

com.tencent.mobileqq.pa4998c1b

android.intent.action.SENDTO
android.intent.action.SEND

com.tencent.mobileqq.p6c3db1da

android.intent.action.MAIN

com.tencent.mobileqq.p3089aee9

android.intent.action.MAIN

Permissions

android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.WRITE_SMS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.CALL_PHONE
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.WAKE_LOCK

Receivers

com.tencent.mobileqq.p23103a1e

android.provider.Telephony.WAP_PUSH_DELIVER

com.tencent.mobileqq.pd92e13f7

android.provider.Telephony.SMS_DELIVER

Services

com.tencent.mobileqq.pfc70bc4f

android.accessibilityservice.AccessibilityService

com.tencent.mobileqq.p46dad517

android.intent.action.RESPOND_VIA_MESSAGE

com.tencent.mobileqq.p27a06467

android.service.notification.NotificationListenerService