Overview

overview

10

Static

static

10

app.apk

android-13-x64

6

Resubmissions

09/04/2026, 13:59

260409-ratscsav8q10

09/04/2026, 06:17

260409-g2eseacs6z10

Sharing

Copy URL Twitter E-mail

General

  • Target
    app.apk
  • Size 2.2MB
  • Sample260409-ratscsav8q
  • SHA256 ec969bc389b3914a460f120ccb90118789ea035aacf969b89b0b9ae866197b6e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
androratandroid

Malware Config

Extracted

Family

  • androrat

C2

  • 4.tcp.ngrok.io:13974

Targets

    • Target
      app.apk
    • Size 2.2MB
    • SHA256 ec969bc389b3914a460f120ccb90118789ea035aacf969b89b0b9ae866197b6e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks