Stealthy Android Malware MMRat Carries Out Bank Fraud Via Fake App Stores ============================================================================================================================================== Indicators of Compromise ============================================================================================================================================== The following MMRat samples are detected as AndroidOS_MMRat.HRX SHA256 Label C&C server Possible Target Country/Region ============================================================================================================================================== f1a83ba21270e4a3280fd86b5f9003c4a863096deb808d99ca25441b614b76a9 RD Smart Tax 217.148.142.58 Thailand 18d04b773f1b001a2e3b7d716f0a742d33197c0ea7af4e171ab25f86b4297141 brwinbet 62.72.27.139 N/A 59318070952bfc876fd80683c71d5ec73b5595e5d316797b40ca32770ab97a5b RD Smart Tax 217.148.142.58 Thailand c9de0d4587022d426be5cb0c8943b105507550e07e1f6bc7cb2fbd6d1fad2bfd A Smart Kid 62.72.27.139 N/A ab6b9922f6030d100305d2a23b6fd9cc9176e7e63558465c3694376a7eb5feb4 RD Smart Tax 217.148.142.58 Thailand 7adfed014e7040bf04ff0900c9280fdda9e283da31a4f7517ec5012e6dcb974b PEA 27.124.20.29 Thailand 09957a21632c3f8aa49b5b1b148ffadcd7be1cabc4d242962e1ebac5123454a7 brwinbet 62.72.27.139 N/A 90e48c755a7e6be812a6641f5812cf6ff3c0fbd1792bda40cc9686dbbc2d7866 Twich 62.72.27.90 Vietnam 5051545fa6285b17709bd52b0c5a377d5c0dd11d497288fe61832e7dd8412470 YOU TESCO 27.124.47.53 N/A e3da659a82ad4c152844b26a30f68ca4ab449db43fc95e806d941101bbb04f1f RD Smart Tax 217.148.142.58 Thailand cdf9d50ad050ddabd7e4cb0855a35c82072e700439e12a5dc95ffb22860a0a1a Merry Forest 202.79.169.188 N/A 4164c4a08341f7652ee9180501bd414477d5eef35f6920058014d9327e638255 PEA 27.124.20.29 Thailand 9bd79e293231c56625402543a0cf7bec65bef11487a23fa061c19a6f15b674b3 HIJUP 27.124.44.230 Indonesia ac2f69c3b9400ee2eec035b54ce902be77a5b39dc2446a7f61bd087cde954982 Geylang 45.61.128.113 Singapore d06fc998c4aa6a7abd294aa3e5edb566ef2097f897c23c5fe0b34a2c2ea3bd46 Geylang 202.95.15.135 Singapore 56aa36234a5ccd00a9016ead38efbc794173e8ed1458142217daa5c963a1b4bb Merry forest 172.86.97.85 N/A b8f7775cae1626730f9ab2c1c84f080c8b8c7b7a123fae50b37456ebbd9c5e75 RD Smart Tax 172.86.96.152 Thailand cffbdbd3a99b1180aef85c715ca291fde246e885d929fbf7da0f8718e6c18e07 A Smart Kid 167.88.166.221 N/A 7d26ed9fea95ff44512fea26d930eed35af2637d89e61baf157ea1e4bd18f7e8 U-shop 27.124.47.53 N/A b56eaeb0a37fc4a8569e0bfea7076b526708e88a7ac78a3ff7b4d9eba6d5f3ab PinjamDuit 27.124.44.230 Indonesia 1d3f8e10302ec03ee9e87285f777251aed4a1bc0b918e802875ba216287863c3 Say Hi 202.79.169.188 N/A f00b9c6d9b68bdb6c28a85bdf91780b0da14cab3e6aa350e45650ffc7c886b0b Liên Kết Thông Minh 172.86.97.173 Vietnam 8d3658a73e88ca3c9950e224dfa2c1469e83d4f74ef27e15372edf3ea0de5341 YOU TESCO 27.124.47.53 N/A 124d3a55770da5f7eb24291010e89c991828147758550b1c9ec68ccab5335b0b Geylang 202.95.15.135 Singapore 9c8b20c48ca24786f930167976abf8c003697d0409f98c5072a83a613057e345 A Smart Kid 167.88.166.221 N/A 8a16b7e17dd71e196786d0a0eba51668ea65f9e49bbdd7f63bd63f5453003c53 Liên Kết Thông Minh 172.86.97.173 Vietnam b38566e10a47ac1586d6eee232569b746c6293746eee27968e62f70999ff2e36 Beony Int 27.124.47.53 N/A 393bf67911e494e78a5b12251081a43f459f13df88475a878bc2998f1fc8676a PinjamDuit 27.124.44.230 Indonesia 6409ce438e62caa320d1d8b897aeb875f512475415db07ed58f6f4133e5e9fe4 THUẾDO ANHNG HIỆP 27.124.19.133 Vietnam 51847406cf995ff0d6dabcfd15ba1303051ced3dbf68106a5758bbabc21942db Geylang 202.95.15.135 Singapore fe0416bace879b6c34ebbf71009bc253ff0c76c35b9a20a8b75e191ca3df5dce YOU TESCO 27.124.47.53 N/A 93e1d506fedd28fa3518b1c2ca7fb08046cc548b43752779a0c7e47866958dbf Say Hi 202.79.169.188 N/A ed872e13711191e419735583cb97d20df3a5d32844bed902c373d0900d94f646 Riot Blockchain 103.147.225.170 N/A 049a910bc8b20ffef01d28d6a83578fc1fd0fca1a87c550c60e8fab0a28a06c9 Liên Kết Thông Minh 172.86.97.173 Vietnam d69c3ee9b2ece1de766877ac3f7c53fc7946de44666ca73fc98fb7f9cfc8fe7c PinjamDuit 27.124.44.230 Indonesia b7b09ac6d975ba6119d8b4ffd3312b299be7cf1f52553547de2b7bab2d2d5fcd Benoy Int 27.124.47.53 N/A fc269ee98565abd4235ba9d3bf02176ae2542dbee84b61fa1395e3a4a64d52c8 Badoo Date 202.95.15.135 N/A 6241ec15f8eabf2d5a899126ff6e5189d965d65ab682bc0391fa5fb2f4dc83a2 PEA 27.124.20.29 Thailand 32672ae034db3d1722ecd85101b41e3e885f768119afcdf66aa24b216cbecdee PEA 27.124.20.29 Thailand a4844148bf3cb8251547bf62470a500d731e7c4b1e99745ce9c82a09a65c666d THUẾ DOANH NGHIỆP 27.124.19.133 Vietnam 28ab00912579a07520575cf8244c68e3ae0ecbb26ed9846fc3d11e5485a7f1f7 CreditNet Phils 104.234.10.8 Philippines f704fe8c336d33091a7deb0b7e241a542c2bf4a0da17e5fa350e3d21638c8fbf PEA 27.124.20.29 Thailand 7a28ce8aeba745a1a61ff40058a93dfe871df1c20f55d43c451747f44c390c59 vay liên bang 27.124.47.53 Vietnam 170bba04251f6195cf9b8a9e9d022ec0de67b804414b2ac0744df113bb330400 Badoo Date 202.95.15.135 Vietnam 02b466a68d1e20771bdca8a78ae119666df8d5e942e156beb6c47a30a21c99e1 Riot Blockchain 103.147.225.170 N/A 49c470e372400f05a4a8a18c688a4c2a6d8edceeb4444bc9bb80c5f49de074e5 Badoo Date 202.95.15.135 N/A 4ceaf45c60518645ce76c098f103dd03f65fbc84d4f0c83b1d4a3fd125c19cfe Hold Hands 27.124.41.223 N/A 01e4a71e8cc73fa9e4d30d4a7904b758d13c38b4bbb5fc9bb9ee29c151e54b98 Say Hi 27.124.41.223 N/A d2af5473f53b71bcd9efc60bff567ab36160c548ed2a646442c63ecbb936c751 Heartbeat 27.124.41.223 N/A fc47a9653b70fda8ef16c3d92cf189660ecd467e9bd97657a0d456d6b09d1d1d SMS 27.124.41.223 N/A 68abbf83f53fdcbd04e0d39dc2152b0c31ef663c0b042cc1e918836cf2b69f5e Heartbeat 27.124.41.223 N/A 42989f69fe6614b6252e73bf89551ac8a267d8038139c63e3b2f18756a30ea04 Hold Hands 27.124.41.223 N/A d151d66b47fad2fd3cf9f849c112bff55378c352b72596412a17b5f092ff8d64 Say Hi 27.124.41.223 N/A