dendroid | 099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

General

Target
099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d
Size 920KB
Sample260604-stblkaas4p
SHA256 099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d
MD5 db01f96d5e66d82f7eb61b85eb96ef6e
SHA1 9c3844d7a798d913ea6310e5fd94c4a0f65387c6
SHA512 3f194bd6da8637a60b43ff4042b69eac640ccff082030a13363958f755cf9189de5e22bb25686fc95401690a14113a979c22f3a80667a06144e7a2bf56fe8404
SSDEEP 24576:ZJJwwjBVOiEgOeuboJRXV+ZOeZOdZO2ZO96x55:ZJVNM7gLuKPxH
TLSH
T1DA152324CE1EA178FB870C390A707D008959F81DFF68FE35BEADE0D667811D685538A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

rat dendroid

Malware Config

Signatures

Family: Dendroid
Dendroid is an Android RAT first seen in 2014.
rat dendroid

Android Dendroid payload 1 IoCs

resource	yara_rule
sample	family_dendroid

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

File Explorer

099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

.apk 920KB

099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

SHA256 099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d
MD5 db01f96d5e66d82f7eb61b85eb96ef6e
SHA1 9c3844d7a798d913ea6310e5fd94c4a0f65387c6
SHA512 3f194bd6da8637a60b43ff4042b69eac640ccff082030a13363958f755cf9189de5e22bb25686fc95401690a14113a979c22f3a80667a06144e7a2bf56fe8404
SSDEEP 24576:ZJJwwjBVOiEgOeuboJRXV+ZOeZOdZO2ZO96x55:ZJVNM7gLuKPxH
TLSH
T1DA152324CE1EA178FB870C390A707D008959F81DFF68FE35BEADE0D667811D685538A9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Android Dendroid payload
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

fe84afb454806d00502677daa5d27d77f08fc21d

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

C=US

Chains

Jan 1, 0001

com.parental.control.v4

Android Permissions

099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.GET_ACCOUNTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECEIVE_SMS

099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

File Signature issue

com.connect.Dendroid

com.connect.Dialog

com.connect.CaptureCameraImage

com.connect.CameraView

com.connect.VideoView

com.connect.MyService

com.connect.RecordService

com.connect.ServiceReceiver

Sharing

General

Malware Config

Signatures

File Explorer

099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d

File Signature issue

com.connect.Dendroid

com.connect.Dialog

com.connect.CaptureCameraImage

com.connect.CameraView

com.connect.VideoView

com.connect.MyService

com.connect.RecordService

com.connect.ServiceReceiver

Android Permissions

099a57328de9335c524f44514e225d50731c808145221affdd684d8b4dad5a1d