General

  • Target

    dex.apk

  • Size

    3.4MB

  • MD5

    98fa31b6bad3e925742469b2ac9ea949

  • SHA1

    211debe45b6d3c92f631fde1d2e37ae5d449a409

  • SHA256

    8a198276e504c169793b01a8ca42fd045670c64f670388076e773c8faa9f867a

  • SHA512

    d7e52bbe9391fa7fa5edec0af248db63cfd3e41c4f6ece09f3fb9215dd20d3bcf282469bd75a8c8abb8412c1babb16b0e87dc4c7e9c9a008eff47b7df88981f6

  • SSDEEP

    49152:UPSQWc/ktinEJkJLIET5HrIL/yFgLCrgDaj1WZCssQLL+Gt:sd/xEJkJLpTdgLCrgD018CYyO

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • dex.apk
    .apk android arch:arm arch:x86 arch:arm64 arch:x64

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

dex.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION