General

  • Target

    بازی صکسی.apk

  • Size

    3.5MB

  • MD5

    4bd6edfa8d6864f053f671188c4cc5aa

  • SHA1

    c8a6702035bc6a643b08dde33b7f15bdcebb035b

  • SHA256

    290cfbb66adbf41238bb837955c15b6a62bbf4811bd81f831195e95513b91f09

  • SHA512

    032aed31a82e834f5e392c485e358f66f614e4a1aaa4582fed5898423d727d8e9a5c55efbc2579a00b9f2f3b8d44867749b94ea588a34c1850f00677f83f929c

  • SSDEEP

    98304:Jqe6efffnRcj7jGPJqTLC5KVRrWY0YA/ZPaeEjHRzhcmR:JhXcXgMCgX0YvjxzhcmR

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://mmduskm4.cf

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • بازی صکسی.apk
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

بازی صکسی.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS