General

  • Target

    saham.apk

  • Size

    4.7MB

  • MD5

    008e7dee3c3634d8da37d0d4dede3233

  • SHA1

    2536fe41abc37367b3924c613afd759c7967475a

  • SHA256

    8892dba951a4fc58053a62e18ba5143881599be7808376d9baf6dd5e12a842ca

  • SHA512

    1c32517e14ac827e127ebbe76d8e15eac88140c4755d68351c317a3c246ee14f0938172bd2c597b7acf25e3a0ab92f05da2da52da220cafa303e907f421c996a

  • SSDEEP

    98304:3a0a4+MNpgLCrgDeHEoRlhWQJxveu/JnvYMn:3a14+Y+eHHvF/JB

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • saham.apk
    .apk android arch:arm arch:x86 arch:arm64 arch:x64

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

saham.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION