dogerat | c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059[.]zip

General

Target

c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059.zip
Size

2.5MB
MD5

ced5cf434fabc5fe1819dab8ea54c1fa
SHA1

f770e6a01eaa2625357fc98a0c68a3a6ffd1de62
SHA256

c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059
SHA512

f33a3bf3360459a8c89e2f997e3a6d59c08256ea2ff995ca9d5f66bbe4b2f5d0c2ab40aebdf4ed64919afdefb23c2357012e79efcdb947f7e40bb3b1ba65783c
SSDEEP

49152:LoUIto/7VXjVy3WC1BfSV2KBJxy+WShToAuUQq70b/cN:sUIUTCTfSV2KDxyAhXrDN

Score

10^/10

dogerat

DogeRAT payload 1 IoCs

resource	yara_rule
static1/unpack001/6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk	family_dogerat2

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS

c885156d7497fae88b6b377b83d67bee47190cc7615f2062c8cbf4b126909059.zip
.zip

Password: infected
6323ac65167e8d48c3bd6c8b839eb600b5b9be9b942e582640147be8d98cedb6.apk
.apk android

com.baidu.searchbox

com.baidu.searchbox.pfd518d0f

Activities

com.baidu.searchbox.p8c3692c2

android.intent.action.MAIN

com.baidu.searchbox.pfd518d0f

android.intent.action.MAIN

com.baidu.searchbox.p47a46f35

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.INTERNET
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.READ_PHONE_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_SMS
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.REQUEST_DELETE_PACKAGES
android.permission.FOREGROUND_SERVICE
android.permission.READ_CONTACTS
android.permission.WAKE_LOCK
android.permission.QUERY_ALL_PACKAGES
android.permission.SEND_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_SMS

Receivers

com.baidu.searchbox.pa41a35f9

android.provider.Telephony.SMS_DELIVER

com.baidu.searchbox.pc03b379e

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.baidu.searchbox.p1b1c983f

android.service.notification.NotificationListenerService

com.baidu.searchbox.p4b7b21fc

android.intent.action.RESPOND_VIA_MESSAGE

com.baidu.searchbox.pf9e5e2f3

android.accessibilityservice.AccessibilityService