General

  • Target

    a8b3bb8cd8e48cbad66a3fb77f9cbeaafa23c6881187aa46a7ddf11313cbcbcaapk_JC.zip

  • Size

    3.0MB

  • MD5

    265353259d76ca55a91ef55c9f75334c

  • SHA1

    02b2f6203983ba9eefd719b4b2a30c302e15c6a0

  • SHA256

    a8b3bb8cd8e48cbad66a3fb77f9cbeaafa23c6881187aa46a7ddf11313cbcbca

  • SHA512

    4abcc99435e085941cf566b384fb53bfc32c4c6afda832f761f9eadcbba0803962c1844c6b7af6fbe7e1a671541c8647c62fcdf93bdee1a772006d1203f915ea

  • SSDEEP

    49152:LoHqCAe55e3Fd3RP16lDdVP1RDuHdZGJqnfGNm2LTG6/9tBX8pvIHVayXfmZBC6v:3e5YVd3RP10DHP1tqGJqnOY2LTZ9X8vj

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • a8b3bb8cd8e48cbad66a3fb77f9cbeaafa23c6881187aa46a7ddf11313cbcbcaapk_JC.zip
    .apk android

    com.lydia.route

    .main


  • getewayport.txt

Android Permissions

a8b3bb8cd8e48cbad66a3fb77f9cbeaafa23c6881187aa46a7ddf11313cbcbcaapk_JC.zip

Permissions

com.lydia.route.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.lydia.route.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NOTIFICATION_POLICY