Resubmissions

25/10/2022, 23:02

221025-21kmgsebgm 10

25/10/2022, 23:00

221025-2zbm7aebb9 10

General

  • Target

    GameHub.apk.bak

  • Size

    3.5MB

  • MD5

    6ddae0bb705c150cfeea682d43710bf1

  • SHA1

    3610672b0e1d45030bb3267d3ffdda2122554cb0

  • SHA256

    8cb2a5f48784b95958a5dc8a6bb97a65916e7ad4ee43e874d50eabe7c5e88990

  • SHA512

    b9203a91abcb2859f3dc785190c86207f76c47c5cf39ce2fef429950473acba31a6b53b126e04ae87deb7eee3843c5aab9d5adf5cde3af60e0461abd8ea812e7

  • SSDEEP

    49152:4/NUzSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqqwVSvsEFP2R7QBub9e3g5zpH:mqU6efffnRcj7jGPJq8kVQI5Dhpdns3O

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://iuskmmdm.ml

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Irata 1 IoCs

    .

  • Requests dangerous framework permissions 4 IoCs

Files

  • GameHub.apk.bak
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

GameHub.apk.bak

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS