General

  • Target

    0aeac137dc1c146c79a369ffa19f48870f0b0e7ed91aba9a088c6b9e514b0083_JC.apk

  • Size

    3.1MB

  • MD5

    4b737c8355a7330854fc7d0f7417b49b

  • SHA1

    b25e7c5b1ea931bed5719e7a24853e9649dd6628

  • SHA256

    0aeac137dc1c146c79a369ffa19f48870f0b0e7ed91aba9a088c6b9e514b0083

  • SHA512

    45d54971d9dee6d041dda549f33d979efc5473bbd3bb1b6bfc04c17589a309ca05af7fd0c08d6a6b599764c006e8140aec3c95c2ce1ef8891ef6b22ac42cdcdb

  • SSDEEP

    49152:/T336bJCTOgLCrgPYvS3jAsxfM7jMpE5IMuER:/T336lgLCrgPoS38LE0R

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • 0aeac137dc1c146c79a369ffa19f48870f0b0e7ed91aba9a088c6b9e514b0083_JC.apk
    .apk android arch:x64 arch:arm64 arch:arm arch:x86

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

0aeac137dc1c146c79a369ffa19f48870f0b0e7ed91aba9a088c6b9e514b0083_JC.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION