General
- Target 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
- Size 945KB
- Sample260626-kjamhsax2k
- SHA256 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
Score
10/10
Malware Config
Targets
-
- Target 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
- Size 945KB
- SHA256 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
Score10/10Family: Viper RAT
Viper RAT is an Android RAT first seen in 2017.
Removes its main activity from the application launcher
Queries the phone number (MSISDN for GSM devices)
Reads the contacts stored on the device.
Reads the content of the SMS messages.
Reads the content of the browser bookmarks.
Reads the content of the call log.
Queries information about active data network
Queries the mobile country code (MCC)
Queries the unique device ID (IMEI, MEID, IMSI)
Reads device software version
Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).
Reads information about phone network operator.
Requests cell location
Uses Android APIs to to get current cell information.
MITRE ATT&CK Mobile v16
Discovery
Location Tracking
1System Information Discovery
1System Network Configuration Discovery
4System Network Connections Discovery
1