General

  • Target

    GameHubs.apk

  • Size

    3.5MB

  • MD5

    1d1b16ad4f17509da0e12afadd7323f2

  • SHA1

    aea760d1bd0c8226291e4f5e8e912ade30d18797

  • SHA256

    2e892b726af9c7088abe86a2452fd5d29a1fdf8be722b1e8b1ccde601f8c34b6

  • SHA512

    9d7f1788d2a2a52850590d6869e800f63106f30f40706f219ef1affe04e19ae36af4d74b30ab93af7ae224330a74f1641fe49fa5714fb081de44bd7b52673a9b

  • SSDEEP

    98304:Jqm6efffnRcj7jGPJqo27nY9ItsLA62ME:JRXcXglEsR2ME

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://adlirans-usiran.ml

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • GameHubs.apk
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

GameHubs.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS