Resubmissions

25/10/2022, 23:12

221025-263p9aebhr 10

09/10/2022, 16:53

221009-vdyr9shce6 10

General

  • Target

    GameSexy.apk

  • Size

    3.5MB

  • MD5

    342d9ce78a60e455a57662da1a9f4c69

  • SHA1

    4ef27837a13860e13d56d167aa444e74d1fd5637

  • SHA256

    b92b6143f625f3a5dbd617fb471d152fa19aa16faae24a58859fdc0ad5c502bf

  • SHA512

    61dae38876c3b73b8579076a39e339a4ff0f03674842f41d5d53f1627ec5929d496c087d222ad2a59fdfd16604949dac9c56ca92ce438237c010f9d0ff2698e8

  • SSDEEP

    98304:4qU6efffnRcj7jGPJq5ZzsX5EOOzvf6IM:4TXcXgeZ2GlzQ

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://iuskmmdm.tk

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Irata_22 1 IoCs

    .

  • Requests dangerous framework permissions 4 IoCs

Files

  • GameSexy.apk
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

GameSexy.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS