Overview

overview

10

Static

static

10

NEAS.fa614...JC.apk

android-9-x86

7

NEAS.fa614...JC.apk

android-10-x64

6

NEAS.fa614...JC.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fa6147cd22aa43857617285a26bce57f36fb2c36f3e93d75155920761a476e7eapk_JC.zip

  • Size

    2.8MB

  • MD5

    c0044f26a24a126d939cc7dbef411944

  • SHA1

    05a87296da5c02ccdd4db2a0c6dbd582c12521bd

  • SHA256

    fa6147cd22aa43857617285a26bce57f36fb2c36f3e93d75155920761a476e7e

  • SHA512

    cf31b2a832d9cb829e689c4d59a32e9b33931dc10342046358fcb8c47e14f418830c4408ef2c9d8471a5ffac49ad9fefa3f07dc579135c2b3a1a6673e4784756

  • SSDEEP

    49152:INEPkk97X4D0ujvLyliAyFGLQ3n4mKY0vGqKW197jltH/YbXQZlep5grKJRUKPCE:WukkdXg0ALylkFGKnXV0vIW1dRB/Ybge

Score
10/10
irata

Malware Config

Signatures

  • Irata family
    irata
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • NEAS.fa6147cd22aa43857617285a26bce57f36fb2c36f3e93d75155920761a476e7eapk_JC.zip
    .apk android

    aidench.com

    .main


  • lmain.bal
  • port.txt
  • url.txt

Android Permissions

NEAS.fa6147cd22aa43857617285a26bce57f36fb2c36f3e93d75155920761a476e7eapk_JC.zip

Permissions

aidench.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

aidench.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS