Analysis
- max time kernel
1s - max time network
150s - platform
android-10_x64 - resource
android-x64-20250917-en - resource tags
arch:x64arch:x86image:android-x64-20250917-enlocale:en-usos:android-10-x64system - submitted
04/11/2025, 15:22
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
c1974fa53a6eb0dfcf3b9baacf08d27051e9b0691a984cef10586915578d617b.apk
Resource
android-x86-arm-20250917-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
c1974fa53a6eb0dfcf3b9baacf08d27051e9b0691a984cef10586915578d617b.apk
Resource
android-x64-20250917-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
c1974fa53a6eb0dfcf3b9baacf08d27051e9b0691a984cef10586915578d617b.apk
Resource
android-x64-arm64-20250917-en
4 signatures
150 seconds
General
- Target c1974fa53a6eb0dfcf3b9baacf08d27051e9b0691a984cef10586915578d617b.apk
- Size 14.6MB
- Sample251104-sr7afsdm3x
- SHA256 c1974fa53a6eb0dfcf3b9baacf08d27051e9b0691a984cef10586915578d617b
- MD5 a7e02737da7c60c67ac202eee5b2af65
- SHA1 62f4f3fd4152ba69acfed01f5f112d5f0929d882
- SHA512 cf51f8b6894f0ed3ddde69057e5de1854dbfaf651b883183f1e6492c0cb7b5fdc8788f64b23c44111f905e0d141eb74f634a2fc3572cefd81eb76f3995109ddc
- SSDEEP 196608:Acc2+sik5++aayPafDrel+wls/oNF4YxVB7kIMpcvVO:I2+fk5+ybrel+wlNTVJUcvc
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
playpraetor
C2
-
fsdlaowaa.top
-
mskisdakw.top
Signatures
- PlayPraetor
PlayPraetor is an Android RAT first seen in March 2025.
- PlayPraetor payload 1 IoCs
resource yara_rule behavioral2/files/fstream-1.dat family_playpraetor - Playpraetor family
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/nmffuoereh.pdtdnenpqw.epyk/cache/base 5029 nmffuoereh.pdtdnenpqw.epyk /data/user/0/nmffuoereh.pdtdnenpqw.epyk/cache/base 5029 nmffuoereh.pdtdnenpqw.epyk
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/nmffuoereh.pdtdnenpqw.epyk/cache/base
- Size 213KB
- SHA256 ab9fcf7b1af4d3c96161addd604f23d711be03cab68e84e1c366b1acc5aca3ae
- MD5 9b024961d8f4ae762f55fa4b3bd53924
- SHA1 7916a35b77f1d6093de063812eac8daddd2921d6
- SHA512 8e263b85c2869bf2b47a5fed5363fe59fa96d221c01cda57c926577fcd5ba3bca40b73a1eec43d29c4dcfd1c0f88ea160df6a303d6dce3815270cbcc6a2edebb
- SSDEEP 3072:8FWvk+MJ6Owm0clcj82QAK0NeTuEHC7epuy7nVUU9rd9csluVVRLt6P/ZkA1:8Q8L6O6NNKjRpugrd9A56HZ9
- MD5 SHA1 SHA512 SSDEEP