General

  • Target

    app1.apk

  • Size

    3.1MB

  • MD5

    c5f4520e805dcfe56767d96bbad23ff9

  • SHA1

    17b9d4a5fdc42416095b46ff6091aa15d45716eb

  • SHA256

    a4bffa57ce3acf47c56cf57925cc617e4537515535b3fe513f0a2c8a5ce530e9

  • SHA512

    b8502808cb1e5c2f62fe2594e32f2871ebdbe1cd14b82526c8e59187c30e95591030a2ff830f4d851f293f81bc4ff280d6c9a89234990445031dba3fbb38d2e0

  • SSDEEP

    49152:uCIBlTkK3mPGdBxuxtkN3fhIGFDTAKZNjU9U2Fjnyryd79p+MgLCrgnDrs:kh3mPG/xHfhI+HtNU9UUGrAgLCrgnE

Score
10/10

Malware Config

Signatures

  • Irata family
  • Requests dangerous framework permissions 7 IoCs

Files

  • app1.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.drnull.v3

    com.drnull.v3.MainActivity


  • baseline.prof
  • baseline.profm
  • chat_id.txt

Android Permissions

app1.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.drnull.v3.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION