General

  • Target

    7536ddd0a9cebf001c69ca554ee88d27.bin

  • Size

    3.0MB

  • MD5

    7536ddd0a9cebf001c69ca554ee88d27

  • SHA1

    b3cc57633e4e5377e8a6ca79392edcaf3d863340

  • SHA256

    5b381710d5bcd37384e309c88a22aead2f0947ec8ad4c748cde81ee861ed3860

  • SHA512

    e76c353a994b7ee41795a05db5362a32e3713b37653f2402b0c2d214a1e085105f1b6791953a340d3a531c7f268f501282ad0265981eaefebb679796024a857b

  • SSDEEP

    49152:rhJ8AHBTAYWrWvsnak+ZggDOZNjU9kgL3eY9p+ugLCrgpWtnb:rM4BMUsnJgDENU95L3JgLCrgpGb

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • 7536ddd0a9cebf001c69ca554ee88d27.bin
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

7536ddd0a9cebf001c69ca554ee88d27.bin

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION