General

  • Target

    Live_signed.apk

  • Size

    3.5MB

  • MD5

    b0126a827c1ac1a264baf701bbbca5d6

  • SHA1

    aab42562d7cd7eba8aebda88c070d2d7e27061d8

  • SHA256

    b86e932aee044d2472233a1c6482962e024e8ca5149da5f793bff7d37457ca3c

  • SHA512

    e4adae033f29aac138dfd5980378084061ac2407f07b68df7031a7ce5f6851c46a4798f78de18d1e2a30850003a4657a3df37c25712419a0b321a693b4f97afd

  • SSDEEP

    98304:NqO6efffnRcj7jGPJqRMVMZGZee6D4s1U4Rz0:NRXcXgwMs1U4Rz0

Score
10/10

Malware Config

Extracted

Family

irata

C2

https://iuskmmdm.ml

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • Live_signed.apk
    .apk android

    ir.shz.shzkisi

    .main


Android Permissions

Live_signed.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

ir.shz.shzkisi.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS