Resubmissions

17/07/2023, 14:30

230717-rvcdtadc9w 10

11/07/2023, 17:49

230711-wdz6rsbd4x 10

General

  • Target

    EdalatHamrah7.2.apk

  • Size

    2.6MB

  • MD5

    57027254ee6f14417428bc1bc3d781bf

  • SHA1

    a253c047d5690f0b0647ea7c8f7c3bba4f04d9df

  • SHA256

    efc9d49d3bea48fd72d09d1588d69af7c0eb61a0eb72568986116d4a205e4711

  • SHA512

    cedcafe1287da06476b5581c62dd045c04f694df1af73b70f15851403f0bbc31af589c5d5b0afe82bd46516f5dfedd5fc123bb01f45a92def218b5eb05624a21

  • SSDEEP

    49152:mG5+/DoUOspB5I+X21MX5v1yh4sDFs4b9abHwlAOi9NGvshu03ttdqpk:d+boU1DFX2OuK34JL89SsHjqG

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • EdalatHamrah7.2.apk
    .apk android

    com.justapp.devs

    .main


  • layout.bal

Android Permissions

EdalatHamrah7.2.apk

Permissions

com.justapp.devs.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.justapp.devs.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CALL_LOG

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_BACKGROUND_LOCATION