General

  • Target

    8dbf0e724607da43ce49de9627823e6b372d2d923c76f2df48295d704276eb95_JC.apk

  • Size

    2.8MB

  • MD5

    c5d8d4f06a57c930860d615743f3ec15

  • SHA1

    ea9ce9aee967feff36a96b5e44d8f1242c6d48cb

  • SHA256

    8dbf0e724607da43ce49de9627823e6b372d2d923c76f2df48295d704276eb95

  • SHA512

    24b94e851c31e564345fc22d6ad9431a4fdd8e72206c38df0f5ac3cf3bc4e9352d2fd71af8a98c5372810fd887f096d1b9c19f5b280a25799c1b173fd491c9cc

  • SSDEEP

    49152:BR/Fq0TmlfVQZgnwssVaeMFrKlh0C1YMsqY4u/1jH5CJLDvpnmGU/UWg1hNmbSfW:B5FLm1tn/sVZM58h0ZlqY4mDOHpnmG6P

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 8dbf0e724607da43ce49de9627823e6b372d2d923c76f2df48295d704276eb95_JC.apk
    .apk android

    com.itachi.uchiha

    .main


  • layout.bal
  • port.txt

Android Permissions

8dbf0e724607da43ce49de9627823e6b372d2d923c76f2df48295d704276eb95_JC.apk

Permissions

com.itachi.uchiha.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.itachi.uchiha.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.QUERY_ALL_PACKAGES