General

  • Target

    sahamedalat.apk

  • Size

    1.9MB

  • MD5

    c0f5182347c96db83cb4812417790b18

  • SHA1

    455ffacc4ab1ddf380b197b31a5a1e4bb03c62a2

  • SHA256

    ee5b4b78030610b8bca7f3956e28f09ec5a2a3f0198b23db1178befeb31b21ab

  • SHA512

    310fbc77a780a7aba40fcc65e687bd07c5cc2ba178cf8910a316d31bef7eb25dd8815e16c6e3286856c24858baefafc970c9d74a69686ec0c440d561e4b19e9e

  • SSDEEP

    49152:a/NSgtpbXLouSbVcX5XiZU4u/z6qzKUCc4Qoky:wkgtp3ouSO94UZzIUtfop

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • sahamedalat.apk
    .apk android

    kisi.com

    .main


  • lmain.bal

Android Permissions

sahamedalat.apk

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

kisi.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS