General

  • Target

    39d7bdc9751ffc013822809f86418d7e40f0ce6ca469516d9d0647665e374a7d_JC.apk

  • Size

    2.6MB

  • MD5

    50034508ea0fa366a4f25df39ca7ef45

  • SHA1

    9dc3e0af47e13e6c513625c548b3836c92a6d7d3

  • SHA256

    39d7bdc9751ffc013822809f86418d7e40f0ce6ca469516d9d0647665e374a7d

  • SHA512

    a1b450668629d5ab58bb39b21538ee9301abf328ee8870822fc5ec3e4d39892bcb147d807556f5588692cf6609341f16e8b51db40603796b500c91ad34ecda90

  • SSDEEP

    49152:KE7aJyrmt0js2UVvz7ve7fa1W+VNBQFgqHfXWMSJpMk3lOV34dNJ1vmAYJgQy310:KR3u5UVr7vebx+VNiy6SHsRANJIJY310

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • 39d7bdc9751ffc013822809f86418d7e40f0ce6ca469516d9d0647665e374a7d_JC.apk
    .apk android

    vip.app.com

    .main


  • layout.bal

Android Permissions

39d7bdc9751ffc013822809f86418d7e40f0ce6ca469516d9d0647665e374a7d_JC.apk

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.SEND_SMS