dogerat | d01cc355afca99e306df4c4093e7df9001a79c63bfa3f9047be7a15fc5ca07e6[.]zip

General

Target

d01cc355afca99e306df4c4093e7df9001a79c63bfa3f9047be7a15fc5ca07e6.zip
Size

4.3MB
MD5

9dc8925d666a6778ce97a9ba76e670a1
SHA1

f15718a62bcb7277aa063286a6fea242c1a2a0ce
SHA256

d01cc355afca99e306df4c4093e7df9001a79c63bfa3f9047be7a15fc5ca07e6
SHA512

dd1df8357d5f4def6382aba88e1efe51cc84a9607c09e98c500bdf3d064eb3170bda20e3caed0ad82972f9d37b7ff064667d79df7d2e576d9b627b6c5a952e36
SSDEEP

49152:MgH2g3X3qX47An76qDDNC6VoDCNwzYAjV1E3VrBeMR5D5UnaCA+QmQh8uofc9gDm:MMKvDfqCNTCuNFL4C+elz9gsjKvfG3i+

Score

10^/10

dogerat

DogeRAT payload 1 IoCs

resource	yara_rule
static1/unpack001/89025ff12018ed90a709f3c8bf47b803c5c5b2b533858bda398fca3e1d6140f1.zip	family_dogerat2

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

d01cc355afca99e306df4c4093e7df9001a79c63bfa3f9047be7a15fc5ca07e6.zip
.zip

Password: infected
89025ff12018ed90a709f3c8bf47b803c5c5b2b533858bda398fca3e1d6140f1.zip
.apk android

com.baidu.searchbox

com.baidu.searchbox.p2f67ff12

Activities

com.baidu.searchbox.p0fcd1ad9

android.intent.action.MAIN

com.baidu.searchbox.p2f67ff12

android.intent.action.MAIN

com.baidu.searchbox.pc62f7d46

android.intent.action.SENDTO
android.intent.action.SEND

Permissions

android.permission.WAKE_LOCK
android.permission.REQUEST_DELETE_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.QUERY_ALL_PACKAGES
android.permission.VIBRATE
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.CALL_PHONE
android.permission.RECEIVE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SMS

Receivers

com.baidu.searchbox.p799d2d37

android.provider.Telephony.WAP_PUSH_DELIVER

com.baidu.searchbox.p5a343004

android.provider.Telephony.SMS_DELIVER

Services

com.baidu.searchbox.p787da14d

android.intent.action.RESPOND_VIA_MESSAGE

com.baidu.searchbox.p64e3a134

android.accessibilityservice.AccessibilityService

com.baidu.searchbox.p70860378

android.service.notification.NotificationListenerService