General

  • Target

    bc80b6983244855dc23257d3939165a249e4b18595d1650fb21a3dd3358920e2_JC.apk

  • Size

    2.6MB

  • MD5

    97b72f6f828b92e6ad3b5ccec2de29d1

  • SHA1

    b9463d1fb7506a4063aefe93dc85ffe68f0f98a7

  • SHA256

    bc80b6983244855dc23257d3939165a249e4b18595d1650fb21a3dd3358920e2

  • SHA512

    97ed14d7b0afa6b4d30b66a184fe22f2efb017915130e02ccdfdb85eecd328c0cf907441e065609d6ba0b67cb2d7413f5997ddb256ad8278a32e8ca6df99e2d6

  • SSDEEP

    49152:3Ey9vu+rtTTeHZ47TNW8Lz/jHzhm2oTYiYhfX1FKw93:3fHpTTEZ8Tc+oTYHhP/93

Score
10/10

Malware Config

Signatures

  • Irata family
  • Irata payload 2 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • bc80b6983244855dc23257d3939165a249e4b18595d1650fb21a3dd3358920e2_JC.apk
    .apk android

    com.justapp.devs

    .main


  • lmain.bal

Android Permissions

bc80b6983244855dc23257d3939165a249e4b18595d1650fb21a3dd3358920e2_JC.apk

Permissions

com.justapp.devs.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.justapp.devs.permission.C2D_MESSAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.ACCESS_WIFI_STATE