dogerat | c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059[.]zip

General

Target
c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059.zip
Size 2.5MB
Sample250327-jaedns1ls2
SHA256 c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059
MD5 ced5cf434fabc5fe1819dab8ea54c1fa
SHA1 f770e6a01eaa2625357fc98a0c68a3a6ffd1de62
SHA512 f33a3bf3360459a8c89e2f997e3a6d59c08256ea2ff995ca9d5f66bbe4b2f5d0c2ab40aebdf4ed64919afdefb23c2357012e79efcdb947f7e40bb3b1ba65783c
SSDEEP 49152:LoUIto/7VXjVy3WC1BfSV2KBJxy+WShToAuUQq70b/cN:sUIUTCTfSV2KDxyAhXrDN
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

dogerat

Malware Config

Signatures

DogeRAT payload 1 IoCs

resource	yara_rule
static1/unpack001/6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk	family_dogerat2

Dogerat family
dogerat

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

File Explorer

c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059.zip

.zip 2.5MB
6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk

.apk 2.6MB

c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059.zip

SHA256 c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059
MD5 ced5cf434fabc5fe1819dab8ea54c1fa
SHA1 f770e6a01eaa2625357fc98a0c68a3a6ffd1de62
SHA512 f33a3bf3360459a8c89e2f997e3a6d59c08256ea2ff995ca9d5f66bbe4b2f5d0c2ab40aebdf4ed64919afdefb23c2357012e79efcdb947f7e40bb3b1ba65783c
SSDEEP 49152:LoUIto/7VXjVy3WC1BfSV2KBJxy+WShToAuUQq70b/cN:sUIUTCTfSV2KDxyAhXrDN
MD5 SHA1 SHA512 SSDEEP

Password

infected

6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk

SHA256 6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6
MD5 b65b16fb181011fdaf1fa4bcc22edf5b
SHA1 93c3c66ede2d13c5ec2325ee0f774a6808c0d7af
SHA512 6ea8a8c5ca4875707ac338236f9f945787a793ee125a41f8a4423d3e5b6339ddd8bf59432f17da5c1c98026001f797d0520b51bc0d16bafe68d931b202a10d76
SSDEEP 49152:w2mWPAlycYeV11r5N1SlVF4VyNHBn9bsTaU6KbN39kpkOwdWp8fAV6uXhDL9Iqq:Mdlkeb1r5aPFIkHxFs+49PcfVXhvu
MD5 SHA1 SHA512 SSDEEP

android

DogeRAT payload

com.baidu.searchbox

c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059.zip

6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk

com.baidu.searchbox.p8c3692c2

com.baidu.searchbox.pfd518d0f

com.baidu.searchbox.p47a46f35

com.baidu.searchbox.p921735d0

com.baidu.searchbox.pa5c62414

com.baidu.searchbox.pde0d4bcf

com.baidu.searchbox.p1b1c983f

com.baidu.searchbox.p4b7b21fc

com.baidu.searchbox.pf9e5e2f3

com.baidu.searchbox.p6dd65856

com.baidu.searchbox.pa41a35f9

com.baidu.searchbox.pc03b379e

Sharing

General

Malware Config

Signatures

File Explorer

c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059.zip

6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk

com.baidu.searchbox.p8c3692c2

com.baidu.searchbox.pfd518d0f

com.baidu.searchbox.p47a46f35

com.baidu.searchbox.p921735d0

com.baidu.searchbox.pa5c62414

com.baidu.searchbox.pde0d4bcf

com.baidu.searchbox.p1b1c983f

com.baidu.searchbox.p4b7b21fc

com.baidu.searchbox.pf9e5e2f3

com.baidu.searchbox.p6dd65856

com.baidu.searchbox.pa41a35f9

com.baidu.searchbox.pc03b379e