General

  • Target

    NEAS.4e1196b694ec1391ed1874e10f30b2f909a05b9c76828089d2c2aeed5527b687apk_JC.zip

  • Size

    3.5MB

  • MD5

    5a736b914a1119389bd94142c013ff5c

  • SHA1

    1c97549e42ca224f86a51fe981fb154dea996f38

  • SHA256

    4e1196b694ec1391ed1874e10f30b2f909a05b9c76828089d2c2aeed5527b687

  • SHA512

    4d248cf25136c78ac367eb3314cd801a729fa12b8c55f0003faa25338c6b9b66a9e1fe46408a235add9f4e370c6980e5a3362dfa94edb87e4f68e02f06a4c192

  • SSDEEP

    49152:yY8Kaw8qBMCq3K+K/kd54gIg+zdZNjU9Apb3kxJMsdu0av9p+6FgLCrgs0dVY:WjwZQNK/aRIgsPNU9UkLMeu00gLCrgsV

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • NEAS.4e1196b694ec1391ed1874e10f30b2f909a05b9c76828089d2c2aeed5527b687apk_JC.zip
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

NEAS.4e1196b694ec1391ed1874e10f30b2f909a05b9c76828089d2c2aeed5527b687apk_JC.zip

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION