General

  • Target

    Games.apk

  • Size

    3.5MB

  • MD5

    9cf03f6f19ecd925f07dc7a72e665587

  • SHA1

    a038c93af63b046a0ef9fa200cc7889e96aef425

  • SHA256

    0b01e7e4e94909ffc4362c0d2a66a250434f1bc6e8e587682cbdeb5923c725ea

  • SHA512

    b4d9ab7554a847f4bb7978665b6429811115d1bfecc9ec27e43a66ad03ec532983bfb939adfcdc083c80f89e0a7178cfbdcb4b33866ed57495de832dc65eee9b

  • SSDEEP

    98304:mqo6efffnRcj7jGPJqekRfgey2gOAWkAV7iNmqxko+:mvXcXg9ktyVO7H+NmqA

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://adlirans-usiran.ml

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • Games.apk
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

Games.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS