General

  • Target

    NEAS.98b47d5dce64e3454d1725401754b5631082169098a314971f575b77358fd414apk_JC.zip

  • Size

    2.6MB

  • MD5

    8e8b12fd916bd219af9cb51c632ce6a7

  • SHA1

    6a9002c5ca50bdd1e2c4ce55b42c3819c0b8cbec

  • SHA256

    98b47d5dce64e3454d1725401754b5631082169098a314971f575b77358fd414

  • SHA512

    0664b7ac540557dcb2baa4d0ac23291ff4c86c0c1bb95ac00465977e67a58a84f0f3bd3dc8fe6f766b4eb55f1ff224b8de247042d1d272bb517f233cb1ae268a

  • SSDEEP

    49152:KE73y9Q4ta3nQAhzP9PIwnjDb+G1Li+9Ub0DYRwNZOSAOxLc5kOO7v7p1vmAP6TB:Ksy9E3nQQPIwnfb+G1LTVDYSPjGkz7v8

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 3 IoCs

Files

  • NEAS.98b47d5dce64e3454d1725401754b5631082169098a314971f575b77358fd414apk_JC.zip
    .apk android

    vip.app.com

    .main


  • layout.bal

Android Permissions

NEAS.98b47d5dce64e3454d1725401754b5631082169098a314971f575b77358fd414apk_JC.zip

Permissions

vip.app.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

vip.app.com.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.SEND_SMS