.main
android.intent.action.MAIN
Resubmissions
02-10-2023 05:59
231002-gpqn5sfe9y 10General
-
Target
app.apk
-
Size
2.1MB
-
MD5
b4e81f83647d9bdfde8c3bed024de1f4
-
SHA1
ebb7a5bae95f7ea04198e95d01dba427106c7bf9
-
SHA256
7bc96cb82739ddadf27b1fea759b61aedabba949660d1b5c29034ef531568a36
-
SHA512
cc69472ef7dfd6d7eec032d73c8bc3762d14a8a382c2aea633ffe0cc92d5d9a99167f0ca01451e8d6f86d3f48de7327c6fdfd2bd287334a995d8b808a435a56f
-
SSDEEP
49152:ZEApvcCI5rSRAv2P/6aaKzmgxra2IenQbfyDZDCmn61ch6LD1F:ZJpvc7rSj4lgVa2kNmn61VP1F
Score
10/10
Malware Config
Signatures
-
Irata family
-
Irata payload 1 IoCs
resource yara_rule sample family_irata4 -
Requests dangerous framework permissions 4 IoCs
description ioc Allows an application to read SMS messages. android.permission.READ_SMS Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS
Files
-
app.apk.apk android
com.MrXnxVip.global
.main
Activities
Permissions
com.MrXnxVip.global.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.MrXnxVip.global.permission.C2D_MESSAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_WIFI_STATE
Receivers
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION
.starter$starter_BR
android.intent.action.BOOT_COMPLETED
.firebasemessaging$firebasemessaging_BR
android.intent.action.BOOT_COMPLETED
.newmessage1$newmessage1_BR
android.intent.action.BOOT_COMPLETED
android.provider.Telephony.SMS_RECEIVED
.pnservices$pnservices_BR
android.intent.action.BOOT_COMPLETED
Services
com.google.firebase.iid.FirebaseInstanceIdService
com.google.firebase.INSTANCE_ID_EVENT
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
anywheresoftware.b4a.objects.FirebaseNotificationsService
com.google.firebase.MESSAGING_EVENT
-
layout.bal
-
port.txt
Android Permissions
app.apk
Permissions
com.MrXnxVip.global.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.gms.permission.AD_ID
com.MrXnxVip.global.permission.C2D_MESSAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.ACCESS_WIFI_STATE