General
- Target 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
- Size 945KB
- Sample260626-kjamhsax2k
- SHA256 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
Score
10/10
Malware Config
Targets
-
- Target 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
- Size 945KB
- SHA256 15e47dc5e3dbff650db31879bc7269da49c3a865a402cd826e234cf7fabc0325
Score10/10-
Family: Viper RAT
Viper RAT is an Android RAT first seen in 2017.
-
Removes its main activity from the application launcher
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the contacts stored on the device.
-
Reads the content of the SMS messages.
-
Reads the content of the browser bookmarks.
-
Reads the content of the call log.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads device software version
Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).
-
Reads information about phone network operator.
-
Requests cell location
Uses Android APIs to to get current cell information.
MITRE ATT&CK Mobile v16
Discovery
Location Tracking
1System Information Discovery
1System Network Configuration Discovery
4System Network Connections Discovery
1