Malwarehigh
Fully equipped Spying Android RAT from Brazil: BRATA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-3568 | Buffer Overflow RCE in WhatsApp VoIP Stack via Crafted RTCP Packets | 9.8 | 30% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 1d8cf2c9c12bf82bf3618becfec34ff7 | on with real-time protection enabled. Reference md5 hashes: 1d8cf2c9c12bf82bf3618becfec34ff7 4203e31024d009c55cb8b1d7a4e28064 4b99fb9de0e31004525f99c8a8 |
| md5 | 4203e31024d009c55cb8b1d7a4e28064 | led. Reference md5 hashes: 1d8cf2c9c12bf82bf3618becfec34ff7 4203e31024d009c55cb8b1d7a4e28064 4b99fb9de0e31004525f99c8a8ea6e46 To get a complete list of |
| md5 | 4b99fb9de0e31004525f99c8a8ea6e46 | c9c12bf82bf3618becfec34ff7 4203e31024d009c55cb8b1d7a4e28064 4b99fb9de0e31004525f99c8a8ea6e46 To get a complete list of IoCs along with YARA rules, pleas |
From the original article
2 min read at securelist.com
“BRATA” is a new Android remote access tool malware family. We used this code name based on its description – “Brazilian RAT Android”. It exclusively targets victims in Brazil: however, theoretically it could also be used to attack any other Android user if the cybercriminals behind it want to.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.