General

  • Target

    20ab2fd5eaf5c0a332e024373e30a2dd16819a6a1edc36953906c40dc9afdb6a_JC.apk

  • Size

    2.6MB

  • MD5

    5a7abcf4410f973e04c291a45490c1f9

  • SHA1

    d851ca4be9482e8ee538ac97579b18a06e0ddc17

  • SHA256

    20ab2fd5eaf5c0a332e024373e30a2dd16819a6a1edc36953906c40dc9afdb6a

  • SHA512

    6d43fbe9c7646ffcbed62e6e6a1bfefc13526575b085c6ab2c88b443f0d9b3784a545a0e46a9673c8d376054d55d0713440530f6fbe3a4abe778760aee560b42

  • SSDEEP

    49152:dtqqGYSPX6NO/ahrKMf0eXjX7s6O8TsLVvr7nfxRpp8NKRNTu6RiS:OqGfPX6NXE8jXTnTsLh7vppKKRNqBS

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 8 IoCs

Files

  • 20ab2fd5eaf5c0a332e024373e30a2dd16819a6a1edc36953906c40dc9afdb6a_JC.apk
    .apk android

    free.to.use

    .main


  • b4x_fontawesome.otf
  • first_sms.txt
  • main.txt
  • ph.bal
  • port.txt
  • you.bal
  • you2.bal

Android Permissions

20ab2fd5eaf5c0a332e024373e30a2dd16819a6a1edc36953906c40dc9afdb6a_JC.apk

Permissions

free.to.use.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

free.to.use.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_CONTACTS