General

  • Target

    Hub.apk

  • Size

    3.5MB

  • MD5

    5af5933416389e2120741fec2702c3e0

  • SHA1

    59538975a2bfe485c12d609eda997edfbcea95de

  • SHA256

    19b84a836f5dc9293a22341431dac73440d04565dae499d67306c1d65bbf9b60

  • SHA512

    41a543500f9b3d24b785a31a625f9901a7dbdbd7541dc383d587d5fb4a078eadb74c2fdb8b2dae309e636ca10e524b9fc77038897bf6f908103412ee30c0c33d

  • SSDEEP

    98304:1q06efffnRcj7jGPJqBmsU6KIj3lt9XMn8Vw6:1nXcXgEjT9XM8Vw6

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://adlirans-usiran.ga

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • Hub.apk
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

Hub.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS