General

  • Target

    GameHub.apk

  • Size

    3.5MB

  • MD5

    28c6e84587d6398d3161945c0ad7a51a

  • SHA1

    3ce29125a9ad914bf5b90e36fb1c180ff795cae7

  • SHA256

    c1247cb8f7edc03b2415d6e6409de22d687a6e58a49b6e8bfaf5f6e8b00773a3

  • SHA512

    c8c544a27ad067e6342c387040a02555c93182ee24d0ba79359b0232a69a240d54905d1561c3dadc1cff180071dec6945c93aa9485734955b3c14c407e64e73d

  • SSDEEP

    98304:mqJ6efffnRcj7jGPJq4LC5KVRrWY0YA/ZPaeEjHRzhcmr:mqXcXg/CgX0Yvjxzhcmr

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://mmduskm4.cf

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • GameHub.apk
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

GameHub.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS