Overview

overview

10

Static

static

10

9a0f72cdc9...f4.apk

android-11-x64

10

Resubmissions

26/05/2026, 13:34

260526-qvj8zsbs8n10

26/05/2026, 13:21

260526-ql3nzaaz2k10

Sharing

Copy URL Twitter E-mail

General

  • Target
    9a0f72cdc9a2846da937676e1efe8bf4.apk
  • Size 5.0MB
  • Sample260526-qvj8zsbs8n
  • SHA256 59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
888ratandroiddefense_evasiondiscoveryevasioninfostealerpersistenceratstealthtrojan

Malware Config

Targets

    • Target
      9a0f72cdc9a2846da937676e1efe8bf4.apk
    • Size 5.0MB
    • SHA256 59f29819d223e47099ca0f00fd6bc4335d7b95188d623bf0c78c8e594c0c69c7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryevasion888ratinfostealerpersistenceratstealthtrojan

    • Family: 888RAT

      888RAT is an Android remote administration tool.

      trojaninfostealerrat888rat

    • Removes its main activity from the application launcher

      stealthtrojanevasion

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence

    • Queries information about active data network

      discovery

    • Requests dangerous framework permissions

    behavioral1

MITRE ATT&CK Mobile v16

Tasks