General

  • Target

    NEAS.81bb5d57f9df1959498b08f1fe4c0b1c0c7df686898f7a533e54566a4773bddcapk_JC.zip

  • Size

    3.4MB

  • MD5

    40b8f13852e8775b3e65ef501d5e5269

  • SHA1

    63803e1bd8b0c04dd60dbbab20aea43d079bdb78

  • SHA256

    81bb5d57f9df1959498b08f1fe4c0b1c0c7df686898f7a533e54566a4773bddc

  • SHA512

    3bd201f0ef1f9f1afa93a7665a5df6bb6f576e712b6ef4280eec84b5c71b9dfd1cc7954b5b629232fd7e85d7d720102fae8d05d7f5969e62a6e25831775ff1c8

  • SSDEEP

    98304:UL3tWG3gLCrgUeXS0oNoLcnUCBgHbvM4t:ULDeXS0Mb5BUt

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • NEAS.81bb5d57f9df1959498b08f1fe4c0b1c0c7df686898f7a533e54566a4773bddcapk_JC.zip
    .apk android arch:x64 arch:arm64 arch:arm arch:x86

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

NEAS.81bb5d57f9df1959498b08f1fe4c0b1c0c7df686898f7a533e54566a4773bddcapk_JC.zip

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION