TF-MAL-apk.androrat
📛 Threat Title
Malware family: AndroRAT
Description
ThreatFox malware family `apk.androrat`. Printable name: AndroRAT.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.androrat
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.androrat
IOC database
- Type
- domain
- Value
apk.androrat- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.androrat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.androrat
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybersecuritynews.com
Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities. In 2025 alone, security researchers detected ...
-
web:github.com
Android - Remote Access Trojan List. Contribute to wishihab/Android-RATList development by creating an account on GitHub.
-
web:malpedia.caad.fkie.fraunhofer.de
Androrat is a remote administration tool developed in Java Android for the client side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT (Remote Access Tool). It has been developed in a team of 4 for a university project. The goal of the application is to give the control of the android system remotely and retrieve informations from it.
-
web:medevel.com
AndroRAT is another remote administration tool (RAT) for Android devices. Similar to Ghost, it provides remote control and management capabilities for Android devices.
-
web:www.appdome.com
This Knowledge Base article describes how to use Appdome's AI in your CI/CD pipeline to continuously deliver plugins that Detect AndroRAT in Android apps. What is AndroRAT ? AndroRAT is a dangerous Android malware family , classified as a remote access Trojan (RAT) and used by attackers to gain unauthorized access and control over Android devices.
-
web:www.fortinet.com
FortiGuard Labs discovered new Symbiote and BPFDoor variants exploiting eBPF filters to enhance stealth through IPv6 support, UDP traffic, and dynamic port hopping for covert C2 communication.
-
web:www.linkedin.com
The analysis avoided exploring or storing content unrelated to the suspected malware activity to respect the user's privacy and adhere to legal boundaries.
-
web:www.microsoft.com
The Trojan:AndroidOS/ AndroRat malware family demonstrates how open-source administrative tools can be repurposed into significant mobile security threats. Originating as a publicly available proof-of-concept for Android device control, its code has been adapted and expanded by various threat actors and state-sponsored groups.
-
web:www.researchgate.net
This dissertation presents a model for detecting and preventing AndroRat , a notorious Remote Administration Tool (RAT), on android devices.
-
web:www.scribd.com
This paper presents a model for detecting and preventing AndroRat , a Remote Administration Tool, on Android devices using a robust detection framework based on the Outlier Technique and a preventive mechanism utilizing Recurrent Neural Networks (RNN). The proposed system achieved a high accuracy of 99.99% in identifying AndroRat applications, demonstrating the effectiveness of machine learning ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.